[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 31.522195] random: sshd: uninitialized urandom read (32 bytes read) [ 31.754703] kauditd_printk_skb: 9 callbacks suppressed [ 31.754711] audit: type=1400 audit(1570798565.268:35): avc: denied { map } for pid=6852 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 31.796436] random: sshd: uninitialized urandom read (32 bytes read) [ 32.458333] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.80' (ECDSA) to the list of known hosts. [ 38.842090] random: sshd: uninitialized urandom read (32 bytes read) 2019/10/11 12:56:12 fuzzer started [ 39.038781] audit: type=1400 audit(1570798572.548:36): avc: denied { map } for pid=6863 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.490580] random: cc1: uninitialized urandom read (8 bytes read) 2019/10/11 12:56:13 dialing manager at 10.128.0.105:34941 2019/10/11 12:56:13 syscalls: 2500 2019/10/11 12:56:13 code coverage: enabled 2019/10/11 12:56:13 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/10/11 12:56:13 extra coverage: extra coverage is not supported by the kernel 2019/10/11 12:56:13 setuid sandbox: enabled 2019/10/11 12:56:13 namespace sandbox: enabled 2019/10/11 12:56:13 Android sandbox: /sys/fs/selinux/policy does not exist 2019/10/11 12:56:13 fault injection: enabled 2019/10/11 12:56:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/10/11 12:56:13 net packet injection: enabled 2019/10/11 12:56:13 net device setup: enabled 2019/10/11 12:56:13 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist [ 41.242357] random: crng init done 12:57:46 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000), 0x152) 12:57:46 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000140)="890704faf3", 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f00000002c0)) [ 133.367237] audit: type=1400 audit(1570798666.878:37): avc: denied { map } for pid=6863 comm="syz-fuzzer" path="/root/syzkaller-shm912856140" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 12:57:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12:57:46 executing program 5: lsetxattr(0x0, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4}}, 0x28) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x80280, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x2, 0x0, 0x9) dup3(r0, r2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)}], 0x9249249249249e1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_getaddr={0x98, 0x16, 0x400, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x40, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x8000, 0x0, 0x9}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x2, 0x0, 0x1187a62e}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0xf}}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4402) r5 = dup(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r5}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000600)='TRUE', 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xffffff5d) 12:57:46 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:57:46 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) read(r0, &(0x7f0000000040)=""/4096, 0x1000) [ 133.398975] audit: type=1400 audit(1570798666.878:38): avc: denied { map } for pid=6881 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=30 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 133.740876] IPVS: ftp: loaded support on port[0] = 21 [ 134.538503] chnl_net:caif_netlink_parms(): no params data found [ 134.551659] IPVS: ftp: loaded support on port[0] = 21 [ 134.576170] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.582909] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.589867] device bridge_slave_0 entered promiscuous mode [ 134.596795] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.603294] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.610169] device bridge_slave_1 entered promiscuous mode [ 134.628688] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 134.637305] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 134.653166] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 134.660399] team0: Port device team_slave_0 added [ 134.665720] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 134.673363] team0: Port device team_slave_1 added [ 134.680137] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 134.688925] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 134.762149] device hsr_slave_0 entered promiscuous mode [ 134.800343] device hsr_slave_1 entered promiscuous mode [ 134.852305] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 134.861536] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 134.918311] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.924893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.931844] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.932876] IPVS: ftp: loaded support on port[0] = 21 [ 134.938196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.975155] chnl_net:caif_netlink_parms(): no params data found [ 135.023557] IPVS: ftp: loaded support on port[0] = 21 [ 135.042138] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.048532] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.056485] device bridge_slave_0 entered promiscuous mode [ 135.065687] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.072089] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.078889] device bridge_slave_1 entered promiscuous mode [ 135.097241] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.106257] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.143247] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.150474] team0: Port device team_slave_0 added [ 135.156062] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.164123] team0: Port device team_slave_1 added [ 135.195267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.202778] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 135.223229] IPVS: ftp: loaded support on port[0] = 21 [ 135.241084] chnl_net:caif_netlink_parms(): no params data found [ 135.258798] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 135.265482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.274061] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 135.322886] device hsr_slave_0 entered promiscuous mode [ 135.361457] device hsr_slave_1 entered promiscuous mode [ 135.415744] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 135.428436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.447817] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.455005] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.478197] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 135.503097] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 135.509169] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.533653] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.540144] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.547066] device bridge_slave_0 entered promiscuous mode [ 135.556713] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.563133] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.569933] device bridge_slave_1 entered promiscuous mode [ 135.589849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 135.599697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 135.610634] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 135.617145] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 135.624735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.632510] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.638824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.648577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.656273] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.662637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.669654] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.677209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.684653] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 135.692196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 135.699544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.706458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 135.713185] chnl_net:caif_netlink_parms(): no params data found [ 135.749184] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 135.770973] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 135.782492] IPVS: ftp: loaded support on port[0] = 21 [ 135.796290] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 135.804466] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 135.838286] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 135.845856] team0: Port device team_slave_0 added [ 135.883860] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.890644] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.897429] device bridge_slave_0 entered promiscuous mode [ 135.904344] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.910927] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.917956] device bridge_slave_1 entered promiscuous mode [ 135.930294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.936788] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 135.944889] team0: Port device team_slave_1 added [ 135.968119] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 135.995733] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.012153] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.029240] chnl_net:caif_netlink_parms(): no params data found [ 136.042150] bond0: Enslaving bond_slave_1 as an active interface with an up link 12:57:49 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2) r1 = gettid() socket$can_bcm(0x1d, 0x2, 0x2) sched_setaffinity(r1, 0x8, &(0x7f0000001200)=0xd21) perf_event_open(&(0x7f0000000140)={0x1, 0xfffffffffffffefa, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x91a759965630d72c, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd, 0x5}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x8) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004b40)=[{{&(0x7f0000000400)={0xa, 0x4e22, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c, 0x0, 0xfffffffffffffebc}}, {{&(0x7f0000000480)={0xa, 0x1200, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=[@rthdrdstopts={{0x18}}], 0x18}}], 0x2, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x341000, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000001140)={0x18, 0x0, {0x0, @remote, 'ip_vti0\x00'}}) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') getdents64(r4, &(0x7f0000000140)=""/4096, 0x1000) r5 = gettid() syz_open_procfs(r5, &(0x7f0000000900)='map_files\x00') gettid() r6 = syz_open_procfs(0x0, &(0x7f0000000400)='autogroup\x00') r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000780)={&(0x7f0000000580), 0xc, &(0x7f0000000740)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r5, @ANYRES16=r7, @ANYBLOB], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$int_out(r0, 0xf3e86494319e3ace, &(0x7f00000011c0)) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000000300)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x48, r7, 0x0, 0x0, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x3bc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x0, 0x1, 0x6}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x6ec9d231b396ce99) write$binfmt_elf64(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="c9a749495fa8f97818392589ae64decee856b95a8dff86968bc7e3d5c0561306f5edeab9fa62c750f75a20de6340d468a606b5afbcb32d96dfb2f4cbbccd81216813688c893c00fab4fa2fddb46344c894528361db6c85d4611f1b73d55f0012acd9e1a504f1d54411ea13f86537d24e82a9607e08f22e3611263ccfe0c22ffaa94d8b12ba8de88693eaedda"], 0x64) creat(0x0, 0x0) statfs(0x0, 0x0) 12:57:49 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) ioctl(r0, 0x1000008915, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r3 = pkey_alloc(0x0, 0x7bd6845d86cbbdd5) pkey_mprotect(&(0x7f0000ff1000/0xd000)=nil, 0xd000, 0x1, r3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40000001}) [ 136.123493] device hsr_slave_0 entered promiscuous mode [ 136.180492] device hsr_slave_1 entered promiscuous mode [ 136.220883] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.242208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.256823] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.267057] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 136.275222] team0: Port device team_slave_0 added [ 136.282175] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready 12:57:49 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x22f) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f00000000c0)={0x7f, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x14}}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={[{@acl='acl'}]}) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 136.337927] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 136.345574] team0: Port device team_slave_1 added [ 136.357121] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 136.369020] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 136.388606] gfs2: not a GFS2 filesystem [ 136.416321] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.423733] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.432225] device bridge_slave_0 entered promiscuous mode [ 136.441845] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 136.448411] chnl_net:caif_netlink_parms(): no params data found [ 136.473286] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.479710] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.480565] gfs2: not a GFS2 filesystem [ 136.492001] device bridge_slave_1 entered promiscuous mode [ 136.500399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 136.507187] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 12:57:50 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000000007f000001000000000401907800c58ec100"/50], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0xa, 0x4000000000000327, 0x40000000000000ac}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) bind(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x8, 0x9}, @mss={0x2, 0xfff}, @sack_perm, @sack_perm], 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='Cpuacct.stE\xae\x00\xe7\xb5l4\x03U\xff\xf7\x02\xc0\x12\xce\xac\xbd\x04\x88cn\xb1\xa4\x81\xc0\x06\xfe\x1ct\x8e_\xd03\x90\x96\x01\x99YL\x1faq;\x1d-\x1b\a\x04\xe8`\xecv\xb9\xabW}e\x990\x9c@\x85\xba\xc8\xf0O\x8c\xff\x8b+O\'\x14\xe0\x1e4\xc0\bW8\x06\x1e\xc4\x8e\xb4>\xbf\xc8\x8a\xad\xf7}\xa2\x1a\xf8\x83\xc5\xe4\a\xc1\xcaK\'\xe4\xbb_\xfc\x1c\x11\x1f\x83?\x1dm\xbf\xbd\x80q7\xf0\xc1\x00\x90\xa3\xcb\rH\xefm\xa6\x8c\xc0q\xe6I\xe1]\xeb\xc6\xd3\xd9E\x04\xb7\xc3-F\xe6\xf7\x12\x1a63\x84\xc3\xa1w\x96\x9e\x8d\xb9\x96\x87\"O\x11x\xda', 0x275a, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket(0x0, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {}], {0x10, 0x6}}, 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getgroups(0x205, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x80000239) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0], &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000003a40)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x3f, 0x4, 0x8, 0x1f, r4}, 0x10) [ 136.518079] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 136.524491] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.573757] device hsr_slave_0 entered promiscuous mode [ 136.603379] hrtimer: interrupt took 25788 ns [ 136.620486] device hsr_slave_1 entered promiscuous mode [ 136.671573] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 136.687168] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.697450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 136.708415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 136.718459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 136.727444] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.733842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.745485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 136.764455] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 136.815467] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.824173] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.831710] device bridge_slave_0 entered promiscuous mode [ 136.842379] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 136.851173] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 136.873001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 136.881385] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 136.889073] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.895481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.912029] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.919682] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.931349] device bridge_slave_1 entered promiscuous mode [ 136.940005] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 136.949032] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 136.965332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.973638] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 136.981520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 136.998606] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.032155] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.046971] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.059321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.072648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.079679] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.099894] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.107802] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.115817] team0: Port device team_slave_0 added [ 137.123615] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.131373] team0: Port device team_slave_1 added [ 137.141909] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 137.147969] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.160769] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 137.210660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.219948] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.227675] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.241900] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.249602] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready 12:57:50 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000000007f000001000000000401907800c58ec100"/50], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0xa, 0x4000000000000327, 0x40000000000000ac}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) bind(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x8, 0x9}, @mss={0x2, 0xfff}, @sack_perm, @sack_perm], 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='Cpuacct.stE\xae\x00\xe7\xb5l4\x03U\xff\xf7\x02\xc0\x12\xce\xac\xbd\x04\x88cn\xb1\xa4\x81\xc0\x06\xfe\x1ct\x8e_\xd03\x90\x96\x01\x99YL\x1faq;\x1d-\x1b\a\x04\xe8`\xecv\xb9\xabW}e\x990\x9c@\x85\xba\xc8\xf0O\x8c\xff\x8b+O\'\x14\xe0\x1e4\xc0\bW8\x06\x1e\xc4\x8e\xb4>\xbf\xc8\x8a\xad\xf7}\xa2\x1a\xf8\x83\xc5\xe4\a\xc1\xcaK\'\xe4\xbb_\xfc\x1c\x11\x1f\x83?\x1dm\xbf\xbd\x80q7\xf0\xc1\x00\x90\xa3\xcb\rH\xefm\xa6\x8c\xc0q\xe6I\xe1]\xeb\xc6\xd3\xd9E\x04\xb7\xc3-F\xe6\xf7\x12\x1a63\x84\xc3\xa1w\x96\x9e\x8d\xb9\x96\x87\"O\x11x\xda', 0x275a, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket(0x0, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {}], {0x10, 0x6}}, 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getgroups(0x205, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x80000239) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0], &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000003a40)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x3f, 0x4, 0x8, 0x1f, r4}, 0x10) [ 137.261145] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 137.270448] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.290725] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.303397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.313824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.322634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.330537] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.336917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.346991] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.358209] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.379705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 137.388464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.399254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.414091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.431532] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.437900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.444901] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.452600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.461885] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 137.482234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.510956] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 137.525383] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.535965] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 137.546546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.564624] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 137.572260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.586538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 137.594833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 137.608797] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 137.617599] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 137.625376] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 137.632536] team0: Port device team_slave_0 added [ 137.646732] device hsr_slave_0 entered promiscuous mode [ 137.652532] device hsr_slave_1 entered promiscuous mode [ 137.658409] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.665997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.675492] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 137.683874] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 137.691140] team0: Port device team_slave_1 added [ 137.696643] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 137.704377] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 137.711838] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.719289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.729352] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.738284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.746885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 137.755550] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 137.761824] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.782221] device hsr_slave_0 entered promiscuous mode [ 137.787962] device hsr_slave_1 entered promiscuous mode [ 137.793711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.801177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.809388] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 137.819095] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 137.831029] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 137.838011] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.847135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.854883] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.862627] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.870502] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.876835] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.884230] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.892980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.900769] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 137.908909] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 137.921259] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 137.934631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 137.942379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 137.949742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.957677] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.965454] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.971832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.980802] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 137.988240] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.004350] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 138.011003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.018501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.028278] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 138.034478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.043314] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.064542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.085772] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 138.105637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.114832] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready 12:57:51 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000000007f000001000000000401907800c58ec100"/50], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0xa, 0x4000000000000327, 0x40000000000000ac}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) bind(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x8, 0x9}, @mss={0x2, 0xfff}, @sack_perm, @sack_perm], 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='Cpuacct.stE\xae\x00\xe7\xb5l4\x03U\xff\xf7\x02\xc0\x12\xce\xac\xbd\x04\x88cn\xb1\xa4\x81\xc0\x06\xfe\x1ct\x8e_\xd03\x90\x96\x01\x99YL\x1faq;\x1d-\x1b\a\x04\xe8`\xecv\xb9\xabW}e\x990\x9c@\x85\xba\xc8\xf0O\x8c\xff\x8b+O\'\x14\xe0\x1e4\xc0\bW8\x06\x1e\xc4\x8e\xb4>\xbf\xc8\x8a\xad\xf7}\xa2\x1a\xf8\x83\xc5\xe4\a\xc1\xcaK\'\xe4\xbb_\xfc\x1c\x11\x1f\x83?\x1dm\xbf\xbd\x80q7\xf0\xc1\x00\x90\xa3\xcb\rH\xefm\xa6\x8c\xc0q\xe6I\xe1]\xeb\xc6\xd3\xd9E\x04\xb7\xc3-F\xe6\xf7\x12\x1a63\x84\xc3\xa1w\x96\x9e\x8d\xb9\x96\x87\"O\x11x\xda', 0x275a, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket(0x0, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {}], {0x10, 0x6}}, 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getgroups(0x205, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x80000239) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0], &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000003a40)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x3f, 0x4, 0x8, 0x1f, r4}, 0x10) [ 138.131110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 138.141207] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.158317] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.217167] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 138.230831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 138.237841] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.246839] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.257609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.315265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.370171] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 138.378873] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 138.429878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.442299] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.448433] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.471535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.479063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.486745] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 138.496189] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 138.503314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.516297] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 138.524892] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 12:57:52 executing program 1: r0 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="ff"], 0x1) perf_event_open(&(0x7f0000000800)={0x1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000000), 0x8080fffffffe) 12:57:52 executing program 0: syz_emit_ethernet(0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000024000000007f000001000000000401907800c58ec100"/50], 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0xa, 0x4000000000000327, 0x40000000000000ac}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fchdir(r0) bind(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@id, 0x80) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x8, 0x9}, @mss={0x2, 0xfff}, @sack_perm, @sack_perm], 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='Cpuacct.stE\xae\x00\xe7\xb5l4\x03U\xff\xf7\x02\xc0\x12\xce\xac\xbd\x04\x88cn\xb1\xa4\x81\xc0\x06\xfe\x1ct\x8e_\xd03\x90\x96\x01\x99YL\x1faq;\x1d-\x1b\a\x04\xe8`\xecv\xb9\xabW}e\x990\x9c@\x85\xba\xc8\xf0O\x8c\xff\x8b+O\'\x14\xe0\x1e4\xc0\bW8\x06\x1e\xc4\x8e\xb4>\xbf\xc8\x8a\xad\xf7}\xa2\x1a\xf8\x83\xc5\xe4\a\xc1\xcaK\'\xe4\xbb_\xfc\x1c\x11\x1f\x83?\x1dm\xbf\xbd\x80q7\xf0\xc1\x00\x90\xa3\xcb\rH\xefm\xa6\x8c\xc0q\xe6I\xe1]\xeb\xc6\xd3\xd9E\x04\xb7\xc3-F\xe6\xf7\x12\x1a63\x84\xc3\xa1w\x96\x9e\x8d\xb9\x96\x87\"O\x11x\xda', 0x275a, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) socket(0x0, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {}, [], {}, [{}, {}], {0x10, 0x6}}, 0x34, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) getgroups(0x205, &(0x7f0000000100)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x80000239) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\x03\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0], &(0x7f0000003800)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000003a40)={r4, @in={{0x2, 0x4e22, @broadcast}}, 0xfffffffffffffffd, 0x0, 0x1, 0xea6b, 0x401}, &(0x7f0000003840)=0x98) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000340)={0x3f, 0x4, 0x8, 0x1f, r4}, 0x10) [ 138.555170] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.564264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.582615] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 138.595452] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 138.625829] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 138.638849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 138.654144] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.660877] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.668607] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 138.676257] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.693949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.724713] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.749143] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 138.764339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.802390] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.808753] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.820696] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 138.829742] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 138.845024] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 138.867180] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.879388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.906455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.925943] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.932355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.966135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.992217] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 139.001102] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 139.009810] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.016285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.035031] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 139.045796] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 139.058494] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 139.065695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.074548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 139.083300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 139.091969] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.098398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.107724] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.118203] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 139.126131] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.136931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.149457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 139.162196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.178941] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.199210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.207469] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 139.208265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.235821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.257325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.269022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.288422] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready 12:57:52 executing program 4: syz_emit_ethernet(0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080046000034000000000000907800000000e0000001070200000b0090780000000045000000000000e0000002ffffffff0643812a6ae1a126601306bd84b0ee1a746e2e1c0ca4b7eec6d0aacd11946f9f96f4f3813d183e1a19282b623f7937e2cceb0cb88f63ef4c1f083c845b3f89c180d32c13a39c337680263e10870d65a8e74d492c13e5d5ee2c88a148a3b4668293064f359f25636cceeebd23dda584e7b2e924d4b9caac626681634bc00dc6adf6d1c99d4748c043f3cd210a859993a6c4f548bd"], 0x0) 12:57:52 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_NMI(r1, 0xae9a) syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1aa1, 0x200080) r2 = syz_open_dev$mice(0x0, 0x0, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x8, 0x2, 0x12, r3, 0x0) [ 139.305502] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.336539] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.349038] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 139.359868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.381435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.388938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 139.404186] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 139.413473] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.425536] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.432126] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.443343] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 139.453640] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 139.463286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 139.474398] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 139.484703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.492419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.506367] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.517469] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 139.524833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.532906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.540308] protocol 88fb is buggy, dev hsr_slave_0 [ 139.545497] protocol 88fb is buggy, dev hsr_slave_1 [ 139.554919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.563422] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 139.569437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.587749] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 139.599101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.660146] protocol 88fb is buggy, dev hsr_slave_0 [ 139.665233] protocol 88fb is buggy, dev hsr_slave_1 [ 139.680151] protocol 88fb is buggy, dev hsr_slave_0 [ 139.685209] protocol 88fb is buggy, dev hsr_slave_1 [ 139.780562] protocol 88fb is buggy, dev hsr_slave_0 [ 139.785633] protocol 88fb is buggy, dev hsr_slave_1 [ 139.800147] protocol 88fb is buggy, dev hsr_slave_0 [ 139.805214] protocol 88fb is buggy, dev hsr_slave_1 12:57:54 executing program 2: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socket$inet(0x2, 0x3, 0x29) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socketpair(0x1, 0x6, 0x81, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x80000000, 0x0) [ 140.643160] block nbd2: Receive control failed (result -22) [ 140.652984] block nbd2: shutting down sockets 12:57:54 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f00000024c0)={0x0, 0x0, 0x20, 0x0, 0x18, 0x3, 0x81, 0x0, 0xed1a}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x9) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xffffffffffffffff, 0x10000000002) 12:57:54 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text16={0x10, &(0x7f0000000080)="2e0f38f126098866dfa8a1c00f07baf80c66b851f8608666efbafc0cb00dee6467660f3810cf6766c7442400440000006766c74424022ad16bc46766c744240600000000670f011c24f30fc7752266b80000c0fe0f23d0b89b008ee866353000000f0f23f8b83b008ed866b9800000c00f326635010000000f30", 0x7a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f0000000200)=0x78, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000100)=0x20, 0x8) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) write$binfmt_elf32(r4, &(0x7f0000000140)=ANY=[@ANYPTR64=&(0x7f0000000900)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYBLOB="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", @ANYRESHEX, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES64]], 0x8) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x2d000, 0x0) ioctl$TIOCLINUX3(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) 12:57:54 executing program 5: lsetxattr(0x0, &(0x7f0000000180)=@known='trusted.overlay.opaque\x00', 0x0, 0x0, 0x2) write$char_usb(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x2, 0x0, {0x4}}, 0x28) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptmx\x00', 0x80280, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x2, 0x0, 0x9) dup3(r0, r2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)}], 0x9249249249249e1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_getaddr={0x98, 0x16, 0x400, 0x0, 0x25dfdbfb, {0xa, 0x40, 0x40, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @empty}, @IFA_FLAGS={0x8, 0x8, 0x200}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x8000, 0x0, 0x9}}, @IFA_CACHEINFO={0x14, 0x6, {0x7, 0x2, 0x0, 0x1187a62e}}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, [], 0xf}}, @IFA_LOCAL={0x14, 0x2, @mcast1}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x4402) r5 = dup(0xffffffffffffffff) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r5}, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) bind$packet(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_smack_transmute(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000600)='TRUE', 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0xffffff5d) 12:57:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26b, &(0x7f0000000f80), 0x1fa}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x6}, 0x8000, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='memory.stat\x00', 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x8001, 0x5, 0x5, 0x7f, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x101, 0x1f, 0x1f, 0x0, 0xfffffffffffffffa, 0x5, 0x8, 0xff, 0x0, 0x7, 0x1, 0x5, 0x7, 0xffffffff, 0x0, 0x3, 0x1, @perf_bp, 0x8000, 0x9, 0x1, 0x0, 0x100000001, 0x1f}, 0xffffffffffffffff, 0x0, r3, 0x9) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) recvmsg(r3, &(0x7f0000001580)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000380)=0x7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 12:57:54 executing program 1: openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x12000, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='mem\x00\x00\x00\x00\x00\x00\a\x13', 0x275a, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/58, 0x7fffeff4}], 0x2, 0x0) write$P9_RSTATFS(r0, &(0x7f00000002c0)={0x43, 0x9, 0x2, {0x400, 0x4, 0x8, 0x8000, 0x4, 0xa75, 0x10001, 0x4, 0x101}}, 0x43) [ 140.795590] mmap: syz-executor.3 (7049) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt. 12:57:54 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'i\x00\x02\x00', 0x2038e1d3a9168c7}) close(r0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000000, 0x10010, r0, 0x0) 12:57:54 executing program 1: perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) sendfile(r1, r0, 0x0, 0x1000001ffffffff) 12:57:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26b, &(0x7f0000000f80), 0x1fa}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, 0x0) r2 = perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, @perf_config_ext={0x0, 0x6}, 0x8000, 0x8, 0x0, 0x0, 0x7fffffff}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000015c0)='memory.stat\x00', 0x0, 0x0) write$cgroup_int(r3, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x8001, 0x5, 0x5, 0x7f, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x101, 0x1f, 0x1f, 0x0, 0xfffffffffffffffa, 0x5, 0x8, 0xff, 0x0, 0x7, 0x1, 0x5, 0x7, 0xffffffff, 0x0, 0x3, 0x1, @perf_bp, 0x8000, 0x9, 0x1, 0x0, 0x100000001, 0x1f}, 0xffffffffffffffff, 0x0, r3, 0x9) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000200)=r3, 0x4) recvmsg(r3, &(0x7f0000001580)={&(0x7f00000003c0)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x80, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000580)=""/4096, 0x1000}, 0x40000000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000380)=0x7) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 141.162567] audit: type=1400 audit(1570798674.678:39): avc: denied { map } for pid=7059 comm="syz-executor.5" path="/dev/net/tun" dev="devtmpfs" ino=14557 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tun_tap_device_t:s0 tclass=chr_file permissive=1 12:57:54 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0xed, &(0x7f00000007c0)=[{&(0x7f0000000640)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) lremovexattr(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000590b1a92b3fe492ca473ae465f2d28ed8858f88e04ff2e016342fc747b85481ddcd90aff0f0000000000001be71153c656922e9790344e5c93b05baa4c561a8293b65c8ceee8e84e1f6dbf4f38d4360c39a0e051627a76170c711ca89341d5796afa9f61e3767f58e3bb0ddb1e0a8994dcebd7e7a05efce81d850001a0a6b46c6547d9fd47de43c8ad0773c415f7e4"]) sched_setparam(0x0, &(0x7f0000000440)=0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaae53, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000b00000040000080000000000000006d5ebe5a0000ffff53ef", 0x5cf, 0x400}], 0x1, 0x0) 12:57:54 executing program 5: r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_LOCK(r0, 0xb) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x13b}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f00000000c0), 0x4000676, 0x0) pipe(&(0x7f0000000200)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xf17) unshare(0x40040400) r2 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) splice(r2, &(0x7f0000000000), 0xffffffffffffffff, &(0x7f0000000040), 0x400, 0x1) 12:57:55 executing program 4: fcntl$getown(0xffffffffffffffff, 0x9) unshare(0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0108445a381e6f3f0000000000007b18fa8fd11c1b7d7a2c21d5c75b93496dcf15429c87f059fc285d01d6f97e03331ebc4f283f379c50ada29162163c57dcdee95cb50aaa7824716cb7eda16b89a8dff38f3a0251408f3d6d5aa67656a7fc33cd834237f53b6638a31cc583c822e61458e9b607bc1cf4b71681e12296db7cf0cfd91d4981d1596a5bd3", @ANYRES32=0x0, @ANYBLOB="400000000000000008001b000000"], 0x30}}, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @dev}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@empty}}, &(0x7f0000000680)=0x2b1) mount$9p_rdma(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x20008, &(0x7f0000000400)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x7}}, {@sq={'sq', 0x3d, 0x7fffffff}}, {@timeout={'timeout', 0x3d, 0x7ff}}, {@sq={'sq'}}], [{@pcr={'pcr', 0x3d, 0x17}}, {@fsuuid={'fsuuid', 0x3d, {[0x5822796966880e1a, 0x64, 0x31, 0x37, 0x32, 0x33, 0x39, 0x34], 0x2d, [0x1f, 0x34, 0x0, 0x84c4c9352a7390ad], 0x2d, [0x32, 0x31, 0x37, 0xa1f1490622f96f0e], 0x2d, [0x30, 0x63, 0x62, 0x30], 0x2d, [0x62, 0x39, 0x37, 0x38, 0x3, 0x95, 0x32, 0x34]}}}, {@fsname={'fsname', 0x3d, 'wlan0'}}, {@euid_eq={'euid', 0x3d, r2}}, {@hash='hash'}, {@fsmagic={'fsmagic', 0x3d, 0x101}}, {@uid_lt={'uid<', r3}}, {@obj_user={'obj_user'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'mime_type-}cgrouprð0md5sum.!wlan1/'}}]}}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f00000006c0)={'erspan0\x00', 0x1, 0x80}) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000580)='/selinux/status\x00', 0x0, 0x0) accept4$bt_l2cap(r7, &(0x7f00000005c0), &(0x7f0000000600)=0xe, 0xf281e06a4b1868c9) [ 141.527051] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 12:57:55 executing program 3: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) unshare(0x40400) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) write$FUSE_ENTRY(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = geteuid() getresuid(&(0x7f0000000200), &(0x7f0000000280)=0x0, &(0x7f00000002c0)) r10 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r11, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = dup(r12) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000000300)={{{@in6=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000000400)=0xe8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = dup(r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) r18 = geteuid() getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) r20 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r21, 0xee00) r22 = getegid() r23 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r24, 0xee00) r25 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r26, 0xee00) r27 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r28, 0xee00) getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) fsetxattr$system_posix_acl(r1, &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000740)={{}, {0x1, 0x5}, [{0x2, 0x3, r4}, {0x2, 0xa, r6}, {0x2, 0x4, r7}, {0x2, 0x3, r8}, {0x2, 0x6, r9}, {0x2, 0x1, r11}, {0x2, 0xa, r14}, {0x2, 0x5, r17}, {0x2, 0x2, r18}], {0x4, 0x4}, [{0x8, 0x1, r19}, {0x8, 0x2, r21}, {0x8, 0x4, r22}, {0x8, 0x5, r24}, {0x8, 0x5, r26}, {0x8, 0x4, r28}, {0x8, 0x4, r29}, {0x8, 0x2, 0xffffffffffffffff}], {0x10, 0x6}, {0x20, 0x2}}, 0xac, 0x2) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, 0x0, 0x0) r30 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) setsockopt$inet6_mtu(r30, 0x29, 0x17, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) semctl$SEM_INFO(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000480)=""/19) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) [ 141.570945] EXT4-fs (loop1): bad geometry: block count 880124114180768824 exceeds size of device (41984 blocks) [ 141.584716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7736 sclass=netlink_route_socket pig=7094 comm=syz-executor.4 [ 141.607139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7736 sclass=netlink_route_socket pig=7094 comm=syz-executor.4 12:57:55 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=.!file0,lowerdir=.:file0,workdir=./file1']) open(&(0x7f0000000040)='./file0/file1/file0\x00', 0x4200, 0x0) [ 141.635122] IPVS: ftp: loaded support on port[0] = 21 [ 141.676542] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.697033] audit: type=1400 audit(1570798675.208:40): avc: denied { create } for pid=7096 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 141.699960] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 141.745966] overlayfs: failed to resolve '.!file0': -2 [ 141.753591] overlayfs: failed to resolve '.!file0': -2 12:57:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30}, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') rt_sigreturn() r1 = getpid() sched_getattr(r1, &(0x7f00000000c0)={0x30}, 0x30, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x0, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='stack\x00') preadv(r2, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f00000002c0)={0x40, 0x0, 0x1, 0x5, 0x3, 0x560}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000180)=@sco, &(0x7f0000000000)=0x80) perf_event_open(&(0x7f000001d000)={0xcf4240385c55d968, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x3}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) keyctl$set_reqkey_keyring(0xe, 0x1) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000340)={0xf80, 0x6}) 12:57:55 executing program 2: setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@int=0x3, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000340)) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x1, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0a092dbd7000fddbdf250c00000008000600ff010000080005004bd40000861fe022a6d563af1c9baff9662b93fa9282fb1a9bae497f2a9a26b65ff7a9e58a87d0eb799f196eab08925fba2ee7c41b25dce1ece2cd081da26266e4665b22a8cb7ee47bf0eee04b49fee12b044c786a8272092ed0e07fb9a7228999a5e14fa2fee984c3bd3827221216390f4066dce1ed0b7f5158bc"], 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) accept$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@remote, @netrom, @netrom, @default, @netrom, @bcast, @remote, @bcast]}, &(0x7f00000001c0)=0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000500)=""/177) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) epoll_pwait(r5, &(0x7f0000000440)=[{}], 0x1, 0x1, &(0x7f0000000480)={0x100000001}, 0x8) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, &(0x7f0000000040)) 12:57:55 executing program 4: socket$netlink(0x10, 0x3, 0x10) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, &(0x7f0000001000)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000005d40), 0x0) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27) getpid() 12:57:55 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x000Y\b/\xe5I\xdd\xdd/fu7\xc6{\x06\xa2\bW]\x05\x7f\xfa\xc3\xed\xbdA~\xb1\xb0+\x1dw{\x12\xd8p\xf9\xd0s\xc2jP\xdd\xca\x9e\x1f\xe8\xe3\xce\xc7\x05\xf7s\xd6\x19\xadj\x90N\\\xf3\x86\xbb\xa9}\x9feIM\xbb\xb7b\vc\xe1c\xf6~}\x0f\xa9\x92x&T\xe7\xc8o\xaa\x86\xfa\xee\xda`H\x87\v\x04b\xc5\x9f%\xd6N\vR^\x13\x84\xddE\xe9', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x200600) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100068, 0x500001c) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r1 = inotify_init() ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x3, 0x5}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = dup(0xffffffffffffffff) mmap$perf(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x10010, r2, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) accept4$nfc_llcp(r4, &(0x7f00000003c0), &(0x7f0000000080)=0x60, 0x800) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0x9c, &(0x7f0000000000), &(0x7f0000000440)=""/156, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000280)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 141.901143] audit: type=1400 audit(1570798675.418:41): avc: denied { create } for pid=7107 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:57:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = getuid() r2 = getegid() openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, r1, r2}, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000002200290800000000000000002400000014000000fe8000000000000000000000000000aa66529caa5e06d34f6d3c918bc339058b52dd138dde1fd5e182e572a9b044e61bab10163f2e23dc1433a070c467c96e731428d8e570b44685f044acff782c15cccf1457b0d5af935bc6200e51d8c8685a485429084640a96c3b272c580c81215e5cbdda55ae978edc056b112a1429db97095b5d26b30869da8f9ded6d36882cd401a2acbd4a0700000000000000cbf44b7890056bdd13cd0a021d55403c0b5edd5b43a25541b949f26076ba0f662f2dc5fc517ddeb10fd15bb0694c31b5f702fd4ad7703ba502228bbb9582045c"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0) r4 = getpid() ptrace(0xffffffffffffffff, r4) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) pipe(&(0x7f0000000300)) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x2}) socket$caif_seqpacket(0x25, 0x5, 0x4) r6 = gettid() ptrace$setopts(0x4206, r6, 0x0, 0x0) tkill(r6, 0x3c) ptrace$cont(0x18, r6, 0x0, 0x0) ptrace$setregs(0xd, r6, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r6, 0x0, 0x0) getpgrp(r6) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 12:57:55 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0xb56e, 0x80000) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0xffffd8ef, @host}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071") r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454da, 0x400014) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'veth0\xcato_bridge\x00', 0x1f}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'bcsf0\x00', 0x2}) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xb5e, 0x153003) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000240)={0x0, 0x450, 0x3f, [], &(0x7f0000000200)=0x4}) [ 141.970793] audit: type=1804 audit(1570798675.478:42): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir830851743/syzkaller.UY12bR/6/memory.events" dev="sda1" ino=16563 res=1 [ 142.299795] audit: type=1400 audit(1570798675.618:43): avc: denied { write } for pid=7120 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:57:56 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'i\x00\x02\x00', 0x2038e1d3a9168c7}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x80, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 12:57:56 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000000)=0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x210, 0x2, 0x0) 12:57:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x6000000, 0x100000001, 0x6000000, 0x1}, 0x1c) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) pipe2(&(0x7f00000001c0), 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x300, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x8040) 12:57:56 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) sync() setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) seccomp(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x44e5692a98dcda62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000080), 0x0, 0x1c0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) 12:57:56 executing program 5: gettid() mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="5b643a3a5d2c303a2d1ae54000000000000000ff7fc60000"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8801, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000100)={0x2, 0x0, &(0x7f0000000080)=""/40, &(0x7f0000000180)=""/107, &(0x7f0000000200)=""/187, 0x100002}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fsetxattr$security_evm(r1, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000300)=@md5={0x1, "ec2b773d4bb8478143aa6390284bb9ae"}, 0x11, 0x2) 12:57:56 executing program 2: syz_mount_image$minix(&(0x7f0000000080)='\x00\x00\x00\x00\xe9\x00', &(0x7f0000000100)='./file0\x00', 0x10000, 0x1, &(0x7f0000000000)=[{&(0x7f0000000280)="600b42e006000a0090040300001af5c98f13", 0x12, 0x400}], 0x20000, 0x0) [ 142.739552] audit: type=1400 audit(1570798676.248:44): avc: denied { read } for pid=7139 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:57:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0xf, 0x81) r3 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) ioctl$sock_proto_private(r3, 0x89e0, &(0x7f0000000680)="dc120ac806a4ad92dc09a9fcc6c457755a69e54596e9cc480acf98ace11d62cfb0226623bca05b4466151b422ce5e4065c49e72548204d43b68ecde564e6773ae0") sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x8000) ioctl$SG_GET_RESERVED_SIZE(r4, 0x2272, &(0x7f0000000700)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x3ee) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010400"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x34}}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x101060, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e23, 0x4, @mcast1, 0x400}}, 0x0, 0x0, 0x0, "06f4045e049f97be91b3e8defd78013d472c5a9aeb5d5bcb59238d0964aa0248cf3927239844ce951aadcda896c68285836c025ec34bd104b7056990e3c9a91df9ae8b1b7bb562e74d12814d0978385c"}, 0xd8) ioctl$KDGKBMODE(r6, 0x4b44, &(0x7f0000000080)) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="240040001000010400000000000000000000000066ba39a9a6920babfec338dfd18d53cad9c7443ce4959fd56fc034b134228cb7b2aa0af564bb8882087f5cd9d8075421a4ecbf8bffe777d3bdbeeb533ce6b9fb3401e1e88a8c6b6b3d6af4e854b16e75cb4bb97e661af089e19a0bcc11879974d21e9d6dad4fd3fc93a737ad426988af402c51c02e43d5981c7a03deef84981e8125393c50e80a09d0b1d02c73a21adb113ea16815203f0f773b92105c7a51493f5c21734ad5f1dee7cf484c8bb86e2a5afc3852d98b36e29551fb4be5f697edd48b694bdfebe27cfd7b8fbd01aa9e21a9eaa3079510ce2611d1eefe9067c742de3210e252218d88e8d7256572ad1506c02891e11f9062191f", @ANYRES32=r5, @ANYBLOB="000000000000000004001900"], 0x24}}, 0x0) [ 142.791009] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000006d data 0x4d00000000f 12:57:56 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xedV\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370) lseek(r1, 0x203ffffd, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0xf, 0x1f, 0x1fe}, 0x20000357) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f0000000100)={0x8, 0x3, 0x9, 0x8caa6ee, 0xffffffff, 0x8}) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) [ 142.839819] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x4000003b data 0x4d00000000f [ 142.878650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.894119] audit: type=1804 audit(1570798676.398:45): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.1" name="/root/syzkaller-testdir830851743/syzkaller.UY12bR/6/memory.events" dev="sda1" ino=16563 res=1 [ 142.932012] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f 12:57:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0), 0x4) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, 0x0) socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) [ 142.966690] Dev loop4: unable to read RDB block 1 [ 142.982979] loop4: unable to read partition table [ 143.017243] loop4: partition table beyond EOD, truncated [ 143.026782] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 143.048403] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 143.064522] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 143.075271] audit: type=1804 audit(1570798676.438:46): pid=7118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.1" name="/root/syzkaller-testdir830851743/syzkaller.UY12bR/6/memory.events" dev="sda1" ino=16563 res=1 12:57:56 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000180), 0xf0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$alg(0x26, 0x5, 0x0) r5 = dup2(r0, r4) r6 = semget(0x3, 0x1, 0x8) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000180)) semctl$GETVAL(r6, 0x90517fff6514af86, 0xc, &(0x7f00000001c0)=""/223) write$cgroup_type(r5, &(0x7f0000000140)='threaded\x00', 0xfffffebd) 12:57:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000680)='/dev/snd/seq\x00', 0x0, 0x20a81) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RREADDIR(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x103) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup2(r4, r3) bind$isdn_base(r5, &(0x7f0000000000)={0x22, 0x1, 0x9, 0x8, 0x5}, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = dup2(r0, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y;\x84\xf0\x00'}) write$P9_RLINK(r6, &(0x7f0000000280)={0x7}, 0x269) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f00000002c0)={0x2}) [ 143.119189] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 143.135172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 12:57:56 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) connect$packet(r2, &(0x7f0000000080)={0x11, 0x7, r3, 0x1, 0x80, 0x6, @broadcast}, 0x14) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffc000/0x2000)=nil) ioctl$KVM_X86_SET_MCE(0xffffffffffffffff, 0x4040ae9e, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) fadvise64(r4, 0x0, 0x9, 0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x7, &(0x7f0000000100)={r5, r6+30000000}) 12:57:56 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1b, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x100000002) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0, 0x0], 0x2}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) dup2(r2, r0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r5 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) fchmod(r5, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x48280) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) getpeername$llc(r8, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x10) [ 143.201110] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 143.239913] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f 12:57:56 executing program 0: syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) write$P9_RCREATE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x73, 0x1, {{0x4, 0x2, 0x7}, 0xdb}}, 0x18) syz_open_dev$evdev(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x0, 0x2) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x3c) ptrace$cont(0x18, r1, 0x0, 0x0) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x9, r1, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x100) clock_gettime(0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300), 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, 0x0) [ 143.299028] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 143.362276] kvm [7142]: vcpu0, guest rIP: 0x8a Hyper-V uhandled wrmsr: 0x40000009 data 0x4d00000000f [ 143.375511] audit: type=1400 audit(1570798676.888:47): avc: denied { map } for pid=7194 comm="syz-executor.1" path="/dev/ashmem" dev="devtmpfs" ino=15048 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 143.507737] Dev loop4: unable to read RDB block 1 [ 143.538019] loop4: unable to read partition table [ 143.569615] loop4: partition table beyond EOD, truncated [ 143.595201] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) 12:57:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x600}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x40}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) mkdirat(r1, &(0x7f00000000c0)='./file0\x00', 0x8) 12:57:57 executing program 1: r0 = perf_event_open(&(0x7f0000000580)={0x1, 0x226, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x1ec) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=r1, @ANYBLOB, @ANYRESHEX=r2]) request_key(0x0, &(0x7f0000000440)={'syz', 0x3}, &(0x7f0000000480)='\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') fcntl$notify(r0, 0x402, 0x4) umount2(&(0x7f00000000c0)='./control\x00', 0x1) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r4, r3, 0x0, 0x100000000000002) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=0x0) getrusage(0xffffffffffffffff, &(0x7f0000000900)) lstat(&(0x7f0000000080)='./control\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(0x0, 0x0, r6) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) sendmsg$nl_route(r3, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8100120}, 0xc, &(0x7f0000000400)={&(0x7f00000009c0)=@ipmr_delroute={0x24, 0x19, 0xacfafce6ce5f9f81, 0x70bd2a, 0x25dfdbfe, {0x80, 0x14, 0x80, 0x0, 0xfd, 0x1, 0xfd, 0x1, 0x100}, [@RTA_PREFSRC={0x8, 0x7, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) getresgid(&(0x7f00000002c0), 0x0, &(0x7f0000000340)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) getgroups(0x0, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&') r9 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendfile(r9, 0xffffffffffffffff, 0x0, 0x100000000000002) fchownat(r8, &(0x7f0000000680)='./file0/file0\x00', r5, r7, 0x1000) openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x2000, 0x0) close(0xffffffffffffffff) 12:57:57 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) dup(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_getscheduler(0x0) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="500258f6e98a6e86e7e3000000fe000036dcd86c68e6a751c9eee1e1d8b5db0700000068000a0000000027db6ea8945d97f9e5cd3d606bd67c91e86603e305952d8ab4f765a38e961f60ea5f9cd208580fddec4dc2775d5f3e803f31000ec3cd0279f4b9094960f1e4d6b96ce70f941c29710069dcc1995ebb52619a3aa0659eaf39c21a5d128e677972998da735cdce7c5af47b3aa742eb655819f0acdb1b18847ffd00"], 0x4a) clone(0x1000000, &(0x7f00000004c0)="dd3f437c15aa1272c7a94a44b434c42cf145d72cef96e2a7e14ec45509d78da722c70ee109e6340ec71fd69ac4f8829dc8057c964eaa11cc4f396a3aaba6e5e168102b56c542330b134ef9b03f3a9611c9dce72a48bab38718abe70df5257ae6f62da9b206ce7066320de379cbce109aa07015082b932ab50a0531eeaffcedcc0ae40411a519a28ee118c86eb853ae81ea125c90f1029296cadd44104f360230a0b6c0d95deba5050d5146dfdf81cd8627579b8e5546db08945bb45991c5ad", &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)="5466a4bd2f9a60ed56293fcdfa61aa00a6f38242310ccbc9b68246013808c4f932014c2873430ae9472c364d67b7078abd3c6ecff30c") readv(r4, &(0x7f0000000280)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/31, 0x1f}], 0x2) syz_mount_image$ext4(&(0x7f0000000fc0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c12, 0x0, 0x0, 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB='noquota,usrquota,barrier,grpquota,nobh,nojournal_checksum,journal_async_commit,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c9ba280378d", @ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYBLOB="df03fbe3e32c85f52e8dd4d0a3789c0050f06c9b092cf19cecd7f5db58dc1624f9885c43cec5334825260a0322eeec8bc75f84e4d5d33537970c0ef5eaedac02ad6b067e250b33cceb657e5f768a259ea4b24ae94afc7d19d946a06672585b52efefde3c2efc37ba9c28149e40e90e8422ca79425a", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1]]]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5, 0x7000}, 0x4) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000000)=0x4) 12:57:57 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) r2 = inotify_init() syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2a) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="01a8b5f81dded2fd1d756969be7ef29fe761435ed81ba6fa11e0276b678d6811acbb9abb29cbff0667f0544a82225cbab7a6c51f33e7ac750210ebed8fa37f5460b4449c65d7507566da395b0c06bd68a95f07bda52b7f4891452fac2eab2ed3909dbb5c16a076d39a88a13764db26fab80c4e18fef502f80000000000"], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 12:57:57 executing program 4: r0 = socket(0x22, 0x2, 0x2) r1 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x0, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x382}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x200) r5 = socket$kcm(0xa, 0x122000000003, 0x11) ioctl$KVM_KVMCLOCK_CTRL(r3, 0xaead) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) r6 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r6, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r7 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r11, r11, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r11, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_PKTINFO(r10, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r12}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', r12}) bind$bt_rfcomm(r9, 0x0, 0xfffffe83) 12:57:57 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000100)={{0x6, 0xff}, {0x4}, 0x3, 0x0, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000), 0x8) 12:57:57 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'eql\x00', 0x10000803}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$USBDEVFS_REAPURB(r5, 0x4008550c, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4001fd) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) r6 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8, 0x80000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r8, r8, &(0x7f00000002c0)=0x202, 0xdd) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_PKTINFO(r7, 0x29, 0x32, &(0x7f0000000080)={@mcast2, r9}, 0x14) ioctl$sock_ifreq(r6, 0x8914, &(0x7f0000000080)={'eql\x00`\x00\xa9[,\x00^\x01\x03\x03\xf0\n', @ifru_addrs=@hci={0x1f, r9, 0x1}}) 12:57:57 executing program 2: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0xa64481, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioperm(0x0, 0x2, 0x0) r2 = socket$kcm(0xa, 0x3931a685efa2aa92, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000001480), 0x4) r3 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000140)) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) ioctl$sock_netdev_private(r2, 0x89f7, &(0x7f0000000080)="018bc57956f81fef918bf96ed7cf9aefd6683bae732f406c4f9c89e4869abafc608feea0d800bae04a9deb7a967d9b5ae289dfecbde7830f1ea0ccc352751330a9c6f5d3de4edc4095d8af82e72163") ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 144.365034] audit: type=1400 audit(1570798677.878:48): avc: denied { map } for pid=7242 comm="modprobe" path="/etc/ld.so.cache" dev="sda1" ino=2251 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 12:57:57 executing program 0: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) r2 = inotify_init() syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x2a) write$binfmt_script(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="01a8b5f81dded2fd1d756969be7ef29fe761435ed81ba6fa11e0276b678d6811acbb9abb29cbff0667f0544a82225cbab7a6c51f33e7ac750210ebed8fa37f5460b4449c65d7507566da395b0c06bd68a95f07bda52b7f4891452fac2eab2ed3909dbb5c16a076d39a88a13764db26fab80c4e18fef502f80000000000"], 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f00000002c0), &(0x7f0000000300), 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 144.465805] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 12:57:58 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x4, &(0x7f00000001c0)=""/48) r1 = open(0x0, 0x141042, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4141, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x11138}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) chdir(&(0x7f00000005c0)='./file0\x00') ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000380)) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x8a) 12:57:58 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0xfb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket(0x1000000010, 0x400000400080803, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0x207) r9 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r9, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x0, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@remote, 0x7e}) r10 = socket(0x1000000010, 0x400000400080803, 0x0) dup(0xffffffffffffffff) write(r10, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000003c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x42}) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 12:57:58 executing program 5: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xff}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r1 = getpid() tkill(r1, 0x9) dup(0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @ipv4={[], [], @multicast1}}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_getscheduler(0x0) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="500258f6e98a6e86e7e3000000fe000036dcd86c68e6a751c9eee1e1d8b5db0700000068000a0000000027db6ea8945d97f9e5cd3d606bd67c91e86603e305952d8ab4f765a38e961f60ea5f9cd208580fddec4dc2775d5f3e803f31000ec3cd0279f4b9094960f1e4d6b96ce70f941c29710069dcc1995ebb52619a3aa0659eaf39c21a5d128e677972998da735cdce7c5af47b3aa742eb655819f0acdb1b18847ffd00"], 0x4a) clone(0x1000000, &(0x7f00000004c0)="dd3f437c15aa1272c7a94a44b434c42cf145d72cef96e2a7e14ec45509d78da722c70ee109e6340ec71fd69ac4f8829dc8057c964eaa11cc4f396a3aaba6e5e168102b56c542330b134ef9b03f3a9611c9dce72a48bab38718abe70df5257ae6f62da9b206ce7066320de379cbce109aa07015082b932ab50a0531eeaffcedcc0ae40411a519a28ee118c86eb853ae81ea125c90f1029296cadd44104f360230a0b6c0d95deba5050d5146dfdf81cd8627579b8e5546db08945bb45991c5ad", &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000340)="5466a4bd2f9a60ed56293fcdfa61aa00a6f38242310ccbc9b68246013808c4f932014c2873430ae9472c364d67b7078abd3c6ecff30c") readv(r4, &(0x7f0000000280)=[{&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000000080)=""/31, 0x1f}], 0x2) syz_mount_image$ext4(&(0x7f0000000fc0)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1a8e7c12, 0x0, 0x0, 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB='noquota,usrquota,barrier,grpquota,nobh,nojournal_checksum,journal_async_commit,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c9ba280378d", @ANYRES32=r0, @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESHEX=r3, @ANYBLOB="df03fbe3e32c85f52e8dd4d0a3789c0050f06c9b092cf19cecd7f5db58dc1624f9885c43cec5334825260a0322eeec8bc75f84e4d5d33537970c0ef5eaedac02ad6b067e250b33cceb657e5f768a259ea4b24ae94afc7d19d946a06672585b52efefde3c2efc37ba9c28149e40e90e8422ca79425a", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRESOCT=r1]]]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x4, 0x5, 0x7000}, 0x4) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$SG_SET_KEEP_ORPHAN(r6, 0x2287, &(0x7f0000000000)=0x4) 12:57:58 executing program 3: syz_read_part_table(0x0, 0x1, &(0x7f00000016c0)=[{&(0x7f0000000540)="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", 0x1c1, 0x3f}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r5, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r7, 0xee00) fchownat(r3, &(0x7f0000000000)='./file0\x00', r5, r7, 0x0) r8 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) 12:57:58 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000200)={0x8, 0x2, 0x4f1b48c2, 0x800, 0x8, 0x1, 0x2}) write$P9_RLCREATE(r0, &(0x7f0000000040)={0x18, 0xf, 0x2, {{0x8740a2a51be57658, 0x1, 0x6}, 0x80000001}}, 0x18) r2 = socket(0x2000000000000021, 0x2, 0x1000000000000a) connect$rxrpc(r2, &(0x7f00000001c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xffff, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0x24) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) 12:57:58 executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) close(r1) sendmmsg$inet(r0, &(0x7f0000000180)=[{{&(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0xce24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xffffffffffffff15, 0x0, 0x0, &(0x7f0000000040)=ANY=[]}}], 0x2, 0x0) [ 144.720377] net_ratelimit: 35 callbacks suppressed [ 144.720394] protocol 88fb is buggy, dev hsr_slave_0 [ 144.731090] protocol 88fb is buggy, dev hsr_slave_1 12:57:58 executing program 1: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'bcsf0\x00', 0x75ba10da34b12584}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r3, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e24, 0x8001, @empty, 0x7}, {0xa, 0x4e20, 0x800, @local}, 0x0, [0xff, 0x0, 0x2, 0x800, 0xffffffc1, 0x9, 0xffff, 0xfffffff7]}, 0x5c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000007c0)={'vcan0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x1f, @rand_addr="5154bbe7e7dcff7decc782d4a4517398", 0x8}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000140)="77f933a956d8e79b1dea6bc4f2f83f001f9237eca02e4c04f3be5d400392842aabf9c86d28b3e0e0f584d9150e8e152aa1db175173b9d82c997c62e840038a4d7e34e85396f8289c4975a1443ae10d1df637e840f906627ceac35e121ca9b07bdf14b3cfe2256b71c722e7a0fc65961d415f1b5a424eb844000a9c9f68df0be15a", 0x81}, {&(0x7f0000000200)="f84d4f6f06947d5134b35598c01bf94db82a1e0d46d0c8c1313431adab40c4b190357db514ac6e50c5e449b30e434b6919e37068c22ddfb75b7f29d1b98b572c406f3c3a84f8de42c7a2d05203ad8bba3a50def76bff31b6788093608ba60df941593bcb0097de4dbffe090a3c54b5490f39aa2cdd173eaf789a8def27ee54373bc2ba6cb02a01f0164a352e019c39d753031b62e276d67fc057d1a0f936a34927e965f5878540e0a2c46c2139f2885b93904780a1fa0bdf943b508f72368823da06c7ae8daf3dab6442837f56d4400015a8dc425a430e9c47f429c550d4c2af6b3a88319e9e2306669a47fca8122343c0c0e5b9a099fb73a7f0ac8fe1", 0xfd}, {&(0x7f0000000300)="7546d224ba81a3fcdf44e0fbb5b3b6f03267bddfbc4413a73fafa30516ba77c9f2221d37d269e87d7bc60ae374bcae20d7c091ba7311797952e1b2d8b683fbce8bb0b85f98256541c54a63a6b7a4857a4a44a9d46e2832f10c9a8d90201e04386bbd5453eb3abeadfff1869f272f0067a04b7da57af51e2969dcecb5c5bbf3479814f10a227eeabab7200357a86da69cd128841ec95b046da5915e068c504e29259a3b961aa23738bccc388b541845497df7784d479fd51f10d63129224cdc981dfce19c3b89e1e7df1128181146dbd9967311aa4d110b5548b5c4fb78897d97d8fd44f9", 0xe4}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="495887c062deb83f7cf0fbde2799ebc5f3f6707f4cf7a1a1da3d7aaf0a02bc1a4e6af8955c9e4e736ba11c6ae4006a925e2f9d064ce85a0407555d884d884ccd9a3dfefb71cf549f08fb307c04272c41eaf7278b9045433159dc5bb175dfe8fff338d1dd3e1d43f5b96934c4cd21d02bbdce34a17dc89ab4b068ec7a67a561324dab196cbc6389cb9b23b3fcefe2309e31e0ece0909c1d019252e945e40eb390faf811240d2a087cb43701354539e1f2bce3009ae60b0e630816a89dcb0f75e461b3180a887a0492a6954c58afb8502cc431621186a2b9c279e525ec951d19e06e7ed895ecd1c829beb37a3859826c014f06667e", 0xf4}, {&(0x7f0000000540)="dfc2d54f0122a07ee4c697b161d19af35f26700345c8586627ee7ffbd1e84c43adc70131db80ec050dfee57ecc13dc3f2243d5485a4346524c8d84f31b706266fc001adec8ce2784e9e832709d1cf5c59d", 0x51}, {&(0x7f00000005c0)="facf41b2111d6fffae67ac58853da61f37e29f6e29eafc1b6a4c512bfcd2f2d8cf59668b78e03721b65285f068b03b0d31a41201cbe0718524d4e5857970f47b94b9164967480823e25edf80c19d050c3178b5ec1313ed8e0cb8512ed774a3cb6398c5", 0x63}, {&(0x7f0000000640)="7ef4dfb0bee36814d99d43fa909d87a961687be42bb5e2d231499aaa659d060480b8507646cf577de153fa58a13eef54f331c9b1d2205f3d6e034f567209cfa529721f2d00c3", 0x46}], 0x4, &(0x7f0000000800)=[@pktinfo={{0x24, 0x29, 0x32, {@rand_addr="c4a9bdac02503f1f6fa91dd9bca7b3ff", r6}}}, @rthdr={{0x18, 0x29, 0x39, {0x2e, 0x0, 0x1, 0x2}}}, @dontfrag={{0x14, 0x29, 0x3e, 0xaafb}}, @dstopts={{0x20, 0x29, 0x37, {0x2e, 0x0, [], [@jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts_2292={{0xa8, 0x29, 0x4, {0x2c, 0x11, [], [@pad1, @pad1, @calipso={0x7, 0x28, {0x81, 0x8, 0x4, 0x4, [0x1ff, 0x2, 0x1, 0xe9]}}, @hao={0xc9, 0x10, @rand_addr="22a4f10f5fd10dd48ddd0c236d474edd"}, @calipso={0x7, 0x18, {0x5, 0x4, 0x1, 0xfffe, [0xe980, 0x7f]}}, @hao={0xc9, 0x10, @local}, @pad1, @pad1, @hao={0xc9, 0x10, @rand_addr="72ea4fa8a0a6375f4dde9c8bf49d86bf"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}], 0x138}}, {{&(0x7f0000000940)={0xa, 0x4e20, 0x3, @ipv4={[], [], @loopback}, 0x87bc}, 0x1c, &(0x7f0000001a00)=[{&(0x7f0000000980)="9066fa913c0e3fa52495d18315ca98b7d3a04c2c91dddb47887f9fcb7e69c0a76bd06038eba94b4fe3f2231520a3f558a6d918f109753c72203ac9ccf9aa2a04915763fd363943932964c1492b69a9881138c55cce5b50b6674f790fc0f58e5ac8e234b4d0e1b010ef6e735f8c3ff0a8666b3a09a775fefb9bfe9eb819444a3986657d6c8fa5a94afd019269f5b37552f078e2dae9f1ad5e16950707241639cdd78653f72b9b7d53e2efe2b9ac58f3cf55357a7cc90c8011bcae775f9dff4c0ac9d1f30372f69addfc0b294e663c923d9a54149c4f66325d239c7b67b631294354cac13e8a2a24ed42db7340df899f78232cd00ced733472c286a7ddc506aa70ce1025e6f40eb830b390777419a227f7c5158650d6cb2b2f3cc629436e99961d45f73d1e11bb3de00d323f731b7b5e878cf6da7593b79df25599c7ff69a4d17289687dc9b084d0f4f1616a314d85185e37f0c5e1643c36054ac71d36ef1ab77e82a075decc614e1c4eef0a650099bbbfe2bb3c1d5159b05908c620691b6d1915a56f9c36fa1d2c645b843288086699821f1cca7ba92585654e7c4d8bed312d305072790ac73fd069d12d2b9a1f9206a65d76ca103b90f2ed5e6e217301a4830207d672a175fb96d6061215828942cc050361b51f672804cbfd81d982a1d1d3c611ccbcafeea96f48b74b2761671ed87b66f9bbd19d5c38f97b1fe897ae26d87d66b8d623db5b04743fb06553ceca0109e02e2118a5e5ace02376391142d4bf8df38766f85ffad9c289afb079eb0f40ce7d93d6daa90558c3a0380efccfc9f5ddfdc960a09bbf07978fb1a8578368f80bca751b4579e99af1d0ee477f3ca8efa9c5328102f0a4e15b9a1c4a330088d18b1ececc06bca8a9d79beebb89cec141269042f428c69ca9934c2cdb410d10c6bfeebd61a6ac368f4d9f25502b33336a2bd9831901b4edb9aec910c679f597ba3e6815ce486617f638b94b3ceb90aeeccf89912b9bf1eba0e25cd1ceaeb3f14cea6e41df191773f731d5a5ca2fc6d37b526a81cd44c4107202cd8febce351724c43ef4a6a5a19c0886debe524c77a1ecaf01baf0e66d1bb01ae85dd894efa2f52db3e035a0305b6cc023b60f02521bd5cbdbd331930f40c3a8ec4dc4a04dd5115ae10823b65e9258fd5f051767aa155394983fd16005cef39a9f1378ed856f41180acdd54d14cf31ca1d378f6d5e2dd9c61bef5b0f53321a4d8247636122649fb5be4b8357ce1bd31e21c35fb9cc97a517825cedddc1f988b609db61d6042d49cd1d6ab788e0648ffe2d132c45e6de824f276c87122a7d2a81ae09579eb14b91a11b9f657d3debf30375e746b594ac153ddeddf49ba9b4344528c3b03d854b6ecf8bc5af7cf5a245a9a87d3be91bcc07f2590a77da3744d752b6072dd39560569b6f35fc77694a75c17e1b1ad80062477436b8fe6ee57105dab40a5972df7e474925ccca2b7760090e880ad1da3973a4fc042582aa9bc63273d3383998441f20d82c90f398bc140bc02ac5cf6672219b22279db81260cedb0f4887667f868290b98e53106fbd3dc76eb988ab26145deca7d1e0f1b1a81944717a828a5e385f37b9f43d0801f500133dc4bb59a536e2f1933d2544e252a8de5dcdd13c4bc80c6522aa583696e31abd28ee18d7319ff90b46977d0b5348e7fc1eb0d56bafaddeea4dc442b101fbc56efb70f5899447a1f556d49da255211f468d1fc01a473e6637330caae4b044528cd033e34c7fffc672fe127fee76189e3691d584be48fae18cf5b0bbb02410c691767806336106ff8b301e8837b16522f83fd24594106fbaa1af8a05006485dba9be25f1f6e921cb4ed1db5168bc17174265e056b984cc865d123ee43f9a1d92f807189e68ff6cbf728a5afad4b8a92f16d8501594057d96e6da16ce4359ae6955b9ce9bd3de20723292747f3a7d8b6d57b0cb921d9bc9098aa0880681220c15da67288985dc790d2a128d25d11841b8a8ff8b885ba77a473dd39b61dba274aba53d62e538e7601ba1fd627cb93b65d6b45d3c66065ca1e11115146ccb202379b11a554043c9dd86a4063d1f5205331612f143d457abf8e657b3a257f57070f53d67517f7ae6dee37dba8ff988a6aacd0895ab95ba51ac48938f69ca08cedaa79d63a402c9a5277d31b36237cddba13b484080cfa5e4ad98a1a6cf8306749c58266e2618fb29bc85f77f8c7fa1a919ba20d182d52f7b348f9bd9978bcd5d5f5cc1ebe31c40d451d378b71db6be76dff5e5ae0f4671fd5fc25be1c056723e021ff095f36aed9468c40b1d92153c28cab3430ac4270db25d68bc585e3fabb1dd947bdfbb9d6c560e6d068fc60ab01de93f89ada06122c9fc9ae657a280be8d2c4d79d2c55befcec9166a647153733c714fbaedc5c964bf6af0d52f5172eb76782d446ee6e88d1aba8e89e3f6051e743967eb2c9ddf9f7b2814409843462148054753d7ad9c798d8de97994d9e73947184f520b398ecb42f344062712c6906bc167f5f6ae83c7594bb78f2a0d751d50b5d7c64e3810b2768311caf5f61339c9a11037b9350963ec85a2ef754372d82794e3e5452f405f398ff4b8032a7130e5fca58a54b5ce542e41a68ead588501e6fc95ed976fa2653ab6ddc92873cedacf3d716c5eb542a878fdebf3796af708d760fb5fc2da887b5d4e09739622927ac204747168fbba102f7eab3997a9c7fbc2c920fa5c36742238dc6c80447306a5ceb0e246a24b08608f896e254051763967bc4325c9e759606c64aff08132b4ac21a5c609898998a884319c8349af8cf077e3d0de100103835624452e11e977282a8a13cf13b522bc18885326cdbe145f6200ae47de600944f4d5cbbc14f6b58aaef3bd8db5f072752b5e944268a4cc01f54276c5325db4e0683b5dcca397d99541ca67f11b8e7cda8ffd2717081548186ddfb4017a8d8db55bd2dc5692cd39e2491dd14b37c5a9273e1d0cae48fdb318dab2053b35e96f200177d436f7776053db8e99f8929938478db7e7902b6040aa7c0b86b1ec2e5a2755109e91c3fc706ca52f866a85dbd6b137e246890015c33c937c2546f33d2a3545be1985d02276245b1e8a0bdd797649730b55249efa327c84c3969055e8bd06c052e450e597c4b43b87add91934d5edc93070cc82976fdd77d5e8d0cdb0964b06ededf4e1885a3ecd0b5fb099ae6d5a92c42ad4f41c9995116a13c07074d8ecb9b26faac94e7da18caf79800c3a4fd70d0a402f2d6869f1fbfdaeab527f5531e01c33c493db8f427a2386e4ab1bebce9af6c440c3a9b54dcea9b5948efb2df803a43dc05b4f36901eb4338baf17071a43454c712f790780fb9970dd84c590ec1a822434c10e8d1ed942a8fce9b9b1c86bb806ff436c95b109b354e731a24bafca9f82dd873e990a4b8c423fe7f69247adf70014d535d598008815cc99c63b0f412c9b4ab37245a939390779fbc2925976ec4cc7dd55245d21f00b217a7fdeb10051d47d976dd502baf530f44698903503ac455ebadc9f9b1537e670b3a2af333cd2a406ef151132e1ec4750cc87c1c5c9b226859ea9841c07ed05bce60ed0a636fe456f48fac16845f3b0b50b78d5677627d7affc4087e45ecfd54368669abb3bbdfac262e2158b96c2063734eb27d9637c9f7d7320cb07264a0196e6ae9e42f2df25d6293ad1e0d7e178c849b1b8468156cb0b7f6fae9991ccfb12ebb85bfbef0e026167e403b574b82625cef73bbc4aafc48dd88e1083604f07db5a9d991904c885aa961c01d67b71a46f76ae7cdbadf2b78bf3d05706e9ff8ebccc74acee1a8a4d92e10e171fb5d2d34d9142ee792c4edbe447668a205b3e753d636ae393d14b22443e3ea800ebbae99dbbb3c66b68e8e1ffddd817510d41a61d22a1bfe645a23d085b2a4944cb9ca16c4b8954e715835ba51bb252a5af06323b8ef7bc0784e337f7a815cedf3a92f9e3355d5844b28b22e46a7a77462bdb84069ec97e96b95b78bd47c1f5c26c0ba8ef773e5363ecab897d59d1bf8c607f93d3e8cb362ec751718105ce5e991285fb9b44540831071db41af3c3d0e24aeba2e83d219e71f9f0019459fc113a490b4d084c3a8f6906303d2fc9d1d6feb2226479a523281bd97d74586868d08ba6e734b3f6456c3310c90849534c6ad07f3005336ba3a68080eab212da296175bb1d8a3dd3d48eef3366fb7c0be98f12b825af5812222e09fc50829cf3d5856362033a5ff614334e4cd84a66b1d4f0b2b33fa21b400762910beac6693e77e263dd4f808d13b4e86cdd45b6133d31c249cde1693a3286999513b1cd0f17615b8bdfb6802dfd215033f4d1ab154ccc72efd046b47363130e59958609b9513f7c323c5bcfcb9e2ffe8242feb9329ae65c0afa527b5c912671903690b278926b04a179a8d05f5baa9100e0edd70f2a8aeb66871841e1aa15fa3f2f4d8cfc14b52b15d6fba0ae6113881499d19ffed5e0e16f0a1f4eb56ee7f5cb2601f2a012de5d6dc1b95a9964ccfd8c9878fae879346ff6d6a87e1a6295885e12369f3184242c42b1f8f94ee523ea27d64cf5328289c3f341b62f76f52fd07efd35c763610e9e03cbdf4b7e4f4dde78b8c1de5b2a0358e6b36adf94fc8f2e3717d282e083b3aa6b2357af18c9bce30f83c275b939957ecc636b0c4d01bfa202f62bd898225550781ba02efb7d2100c6e3ee951576a181b7ca54f3e398e1b5227e1615ea53f5cc5da9bae36f262a7f77427786e79269918a73e279f26c5e1544248007145de32b28a79bbec6e6e50d87139135ce2be411b3a8abe35f5618b116e417e47f24f96926f880fc763f0259accb5231f7778cfb56f05b013e77e0aa426f118ee6bfcaa24d7ab30ec6f4c14ae177af7e4b72d16bbeec548d42659afac4dd09fa00b6d7cd827cd143c26e6ac68f7bc65093f45407772d53e037708394e317d8e14e2e93c30cfe8ebf7bb08598d6ae3b659135380d50263058f0a27869b7f62d1a46c4fb8fffcde71dd5da68c23e011f1bd52ded832a9c288b1abb703d63fa36d450e39a0a39e9eea9e02190afd669f2a8e381b168099ecbf8411dac2afd17668b88eafb05e4bb05b3eaf7cb2f01fac87dc6be43a77f9d4bd5237789bb8a6208e0c45f74cd6ed9f4708ca755cbf38ada944445202df90910d6f14d7f7b2139e1a14c2f8770f06928d9e180a74ba5e78f2c314c97e83a6cadf35f8a4d5cee33d40c8236f3be37b2c027a06e7562ec41294428cd1cd59c9ff50fa0ec66528172292811b77673e566bcb4e8ecf79bdab2b419258aa13d549bbeb2edd869aaf6dc08c365481f69de72ce02424af9982db4b7d6b62e0f03ce2c4d442d62a650bed8a0db787093a5ce0980cabcbd9f040130f115937a34f265a74b017f6a62c7d575a0519ffa593035229677703da69713aff06856d9a68e4bf018649e0ff20ead0c31560af21fb533e9e94a488efc25e3bef5c2b68c43e2b84e9a9ab079250347d47ca9007969afcad74d649fe05a993f4dd8c11a5add4030dae541724c4a58c21e6273b69a96994899370b53124d455e0fcef617eeb13e3a455d0c71c235c9c9bcfd79802719f591f4501d1a890ac49e65babc9eecc77d321a2bb294ff83b9866d483da10cf9447c385ebcf586faee6513a7f754f6c8291b90491b0b009e0d7ff297343e1ef4c736d49735f1f0311676490dff3af14476593a740c7922f53b083e429e9680d15c7d813a1338efad87c76e56ec4e49dc51912397c32f57b864e20a2bf2cb6b48b76f36eb0e70ea31f2429cc53446f3", 0x1000}, {&(0x7f0000001980)="8903cde7f4d289afec903f97ea9db38cdab0941423a8c8bde872c28b420070dc6441daecc0f8b31c10d93b87b11b43b0a06c6f74193c640467f052d6eefd934bf3636820101dbe93752128a4b56417291e83c56303fc20c2b4c645f568", 0x5d}], 0x2}}], 0x3, 0x4000000) [ 144.862303] Dev loop3: unable to read RDB block 1 [ 144.868146] loop3: unable to read partition table [ 144.881252] loop3: partition table beyond EOD, truncated [ 144.896077] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 12:57:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSSERIAL(r0, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2ab, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f0000000180)) [ 144.956140] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 145.004300] Dev loop3: unable to read RDB block 1 [ 145.014796] loop3: unable to read partition table 12:57:58 executing program 5: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000000040)='./file0/bus\x00', 0x6857b21ff1155d90) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f0000000280)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f00000002c0)='./file0\x00', 0x551800, 0x1) ioctl$DRM_IOCTL_SET_VERSION(r4, 0xc0106407, &(0x7f0000000180)={0x8000, 0x7, 0x5e, 0x3}) r5 = dup(r2) faccessat(r1, &(0x7f00000001c0)='./file0\x00', 0x4, 0x1000) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000200)={{0x2, 0x4e23, @multicast2}, {0x306, @broadcast}, 0x24, {0x2, 0x4e20, @loopback}, 'batadv0\x00'}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$P9_RRENAMEAT(r0, &(0x7f0000000000)={0x72}, 0x2) truncate(&(0x7f0000000100)='./bus\x00', 0xf412) [ 145.046859] loop3: partition table beyond EOD, truncated [ 145.064486] tty_warn_deprecated_flags: 'syz-executor.2' is using deprecated serial flags (with no effect): 00000200 [ 145.073563] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 145.102409] tty_warn_deprecated_flags: 'syz-executor.2' is using deprecated serial flags (with no effect): 00000200 [ 145.120128] protocol 88fb is buggy, dev hsr_slave_0 [ 145.125243] protocol 88fb is buggy, dev hsr_slave_1 12:57:58 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x7fffffff}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0xfffffffffffffe98) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040)=0x6, 0x4) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f0000b67000), &(0x7f00000001c0)=0x6a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000b67000), &(0x7f00000001c0)=0x4) close(0xffffffffffffffff) r4 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000000)='/$ev)c\x19c#\x00', 0x0, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f0000000080)=@v3, 0x18, 0x0) r5 = syz_open_dev$cec(0x0, 0x0, 0x2) fsetxattr$security_capability(r5, &(0x7f0000000040)='security.capability\x00', 0x0, 0x0, 0x0) r6 = creat(0x0, 0x0) close(0xffffffffffffffff) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, 0x0, 0x0) dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r8, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r9, 0x0, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}}}}, 0x90) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000480)=ANY=[@ANYPTR, @ANYRES32=r6, @ANYRES32], 0x3) r10 = memfd_create(0x0, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r10) sendfile(r0, r4, 0x0, 0x102000002) 12:57:58 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = syz_open_dev$admmidi(0x0, 0xff, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) sched_setattr(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) readlink(0x0, &(0x7f00000002c0)=""/47, 0x2f) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x5, @mcast2}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r2, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) r3 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) r4 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000180)=[0x80000001, 0xff]) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 146.080137] protocol 88fb is buggy, dev hsr_slave_0 [ 146.085215] protocol 88fb is buggy, dev hsr_slave_1 [ 146.240126] protocol 88fb is buggy, dev hsr_slave_0 [ 146.245241] protocol 88fb is buggy, dev hsr_slave_1 [ 146.250402] protocol 88fb is buggy, dev hsr_slave_0 [ 146.255439] protocol 88fb is buggy, dev hsr_slave_1 12:58:01 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, &(0x7f0000000300)) r4 = dup(r1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$inet6(r4, &(0x7f0000000100)="3a7c7a988f4db2023b479ee0ecf07d0d141e91206c2bf2fa51067f54195f79801ef8fed316861d1e6d29f4fef5343072c760e5a67f0fcd7e42b6509621c0bbc11c8b274e5bffd667377b56c01a83e49830c31001457b02a29b586484b8a3836bb63b0f9c187ba314f0cd8eded6331f23bc1217125e33d7ea13b2c95072cf9ceb3f477bab846d5531fdc1e617d9c0ddcde8001e0d3b391d3dd42cc5ec952459db0421e459a0fb549b077e640a74108df82317d69812bb2562a72da57b25ebb3d4aba4c36996e53a1a6460b3", 0xcb, 0x4c008, &(0x7f0000000000)={0xa, 0x4e24, 0x7ff, @dev={0xfe, 0x80, [], 0x22}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000740)=""/56, &(0x7f0000000780)=0x38) r6 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x30000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0xc6}, &(0x7f0000000400)=0x8) r9 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) fanotify_mark(r9, 0x10, 0x1, 0xffffffffffffffff, &(0x7f0000000340)='./file0\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000480)={0x0, @in6={{0x2, 0x0, 0x0, @empty}}, 0x8, 0x0, 0x0, 0x8, 0x8000000055}, 0x98) r10 = shmget(0x0, 0x1000, 0x0, &(0x7f0000000000/0x1000)=nil) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000600)=0x0, &(0x7f0000000640), &(0x7f0000000680)) r14 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r14, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r14, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) r15 = dup3(r14, r6, 0x100000) ioctl$KDGETKEYCODE(r15, 0x4b4c, &(0x7f00000007c0)={0xaabf, 0x3896}) r16 = getegid() shmctl$IPC_SET(r10, 0x1, &(0x7f00000006c0)={{0x1, r11, r12, r13, r16, 0x40, 0x3}, 0xff, 0x2, 0x2, 0x5, 0xffffffffffffffff, r5, 0x6}) 12:58:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7fffffff, 0x40000) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xfffffffffffffffa) sendmsg$nl_crypto(r5, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@upd={0x120, 0x12, 0x80, 0x70bd2c, 0x25dfdbff, {{'cbc(des3_ede)\x00'}, [], [], 0x2400, 0x3200}, [{0x8, 0x1, 0x8}, {0x8, 0x1, 0x3b5}, {0x8, 0x1, 0x800}, {0x8, 0x1, 0xdbd}, {0x8, 0x1, 0xfff}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x848) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4cb]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) ioctl$TUNGETDEVNETNS(r11, 0x54e3, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 12:58:01 executing program 1: socket$packet(0x11, 0x0, 0x300) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x0) ioctl$VIDIOC_G_EDID(0xffffffffffffffff, 0xc0285628, &(0x7f0000000140)={0x0, 0x0, 0x0, [], 0x0}) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') recvfrom$netrom(r0, &(0x7f0000000000)=""/211, 0xd3, 0x21, &(0x7f0000000180)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000100)={0x5, 0x2, 0x6}) sendfile(r1, r2, 0x0, 0x320f) 12:58:01 executing program 5: socket$netlink(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, 0x0) unshare(0x40400) perf_event_open(&(0x7f00000000c0)={0x1, 0xffffffffffffff94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xbbed2272475aa061) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x0, &(0x7f0000000000), 0x3c) setsockopt$inet_int(0xffffffffffffffff, 0x1f00000000000000, 0x0, &(0x7f0000000000), 0x3c) stat(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16@\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) 12:58:01 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x6, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'memory'}, {0x2b, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'rdma'}]}, 0x19) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x0, '\x03\x8a\xa1t\x03n\xd7\xe0\x8f\x93\xdd\x86\xdd'}]}, 0x140) 12:58:01 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x0, 0x0, @empty}, 0x0, 0x80000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x100, 0x2) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) rmdir(&(0x7f0000000140)='./bus\x00') sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffd}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0xfb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$inet6(0xa, 0x3, 0x2) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r8, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) socket(0x1000000010, 0x400000400080803, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000001880)={{{@in=@remote, @in=@empty}}, {{@in=@empty}, 0x0, @in=@broadcast}}, &(0x7f0000001700)=0x207) r9 = open(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r9, 0x0) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0x0, 0x0, 0x0, 0x4123b79bef9aec01, 0x0, 0x20000}) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f00000002c0)={@remote, 0x7e}) r10 = socket(0x1000000010, 0x400000400080803, 0x0) dup(0xffffffffffffffff) write(r10, &(0x7f0000000240)="240000001a0025f07e9451f68f2e9c920a0b49ffed000019806028000800100001000000", 0x24) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) ioctl$sock_inet6_SIOCADDRT(r6, 0x89a0, &(0x7f00000003c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @remote, @remote, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffffbfffffff, 0x42}) syslog(0x0, &(0x7f0000000300)=""/120, 0x78) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) [ 147.512585] kauditd_printk_skb: 3 callbacks suppressed [ 147.512593] audit: type=1400 audit(1570798681.018:52): avc: denied { ioctl } for pid=7341 comm="syz-executor.5" path="socket:[27261]" dev="sockfs" ino=27261 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 147.553185] bond0: Releasing backup interface bond_slave_1 12:58:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0x80000000) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x8}}, 0x1, 0x0, 0x9, 0x0, 0x5c85e22ae8f61123}, 0xffffffffffffff71) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8000000000000004, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) accept(r3, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xfffffffffffffe63) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b65d000002000000ff0f000000000000341780ec9245aabb18bd00000000000008000000000000000000000000000000000000000000000000000000000000000300000007000000d500000000000000ffffff7f000000003f000000000000007fffffffffffffff00"/320]) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000080)=""/33) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x7) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000140)=0x101, 0x4) unlink(&(0x7f0000000180)='./file0\x00') 12:58:01 executing program 5: clock_adjtime(0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x680, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xff9f) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000200)}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b050900020000004042020358", 0x1f}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$rtc(&(0x7f00000000c0)='/dev/rtc#\x00', 0x0, 0x0) readahead(0xffffffffffffffff, 0x0, 0x0) inotify_init() [ 147.672066] device nr0 entered promiscuous mode 12:58:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffff1f, 0x4}, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000001c0)=0x6, 0x4) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0xc280) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x65, "301c5e69c920651b6389411f6e7ef681a400ed709f730d20ff9a93c90eb2e68e28e15cb28282a2302f92c2e2f7a80bcef98395089f3ef45ba63bd35e8949f3a140b594002531addef847a4ba2219243dd74547f613e574bed7d6971b0a0c791d80c368b600"}, &(0x7f0000000100)=0x6d) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={r4, 0xe15, 0x5, 0x9, 0x9e, 0x9}, &(0x7f0000000180)=0x14) 12:58:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000840), 0x40, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xae9d808f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) semget(0x0, 0x0, 0x202) ioctl$TCSBRK(r2, 0x5409, 0x9) 12:58:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) openat$capi20(0xffffffffffffff9c, &(0x7f0000000140)='/dev/capi20\x00', 0x181000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = add_key(&(0x7f0000000180)='id_legacy\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)='o', 0x1, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000000380)={0x0, r3}, 0x0, 0x0, 0x0) keyctl$restrict_keyring(0x1d, r3, &(0x7f0000000300)='id_legacy\x00', &(0x7f0000000340)=']ppp1@\x00') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0xf0, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}]}, @TIPC_NLA_MEDIA={0xbc, 0x5, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff3f8}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc0ec}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8}]}, 0x30}}, 0x0) 12:58:01 executing program 4: getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xa79c7c0b49eea3e8, &(0x7f0000000080)=""/135, &(0x7f0000000180)=0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x10881, &(0x7f0000000540)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) clone(0x80000000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(&(0x7f0000000000)='./file0/file0\x00', 0x200c4, 0x0) [ 147.918814] device nr0 entered promiscuous mode [ 148.010305] audit: type=1400 audit(1570798681.518:53): avc: denied { create } for pid=7375 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 148.098957] audit: type=1400 audit(1570798681.518:54): avc: denied { write } for pid=7375 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:58:01 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x8001}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000001}, 0xc, &(0x7f0000000180)}, 0x0) write$P9_RREMOVE(0xffffffffffffffff, 0x0, 0x0) faccessat(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x20000001, &(0x7f0000000140)={0xa, 0x2}, 0x1c) socket(0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x1000000000000003, 0x0) inotify_init1(0x0) alarm(0xffffffff) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) sendto$packet(r5, &(0x7f00000000c0), 0xfffffffffffffd4d, 0x1, 0x0, 0x44) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) 12:58:01 executing program 1: socket$inet(0x10, 0x800000003, 0x10000000000000c) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x40000) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000040)) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080), 0x1, 0x0, 0xfffffffffffffe58}, 0x895) 12:58:01 executing program 4: setsockopt$inet6_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180)=@gcm_128={{}, "463a92342d73f68f", "e8ca4c858b16eda5c8a30fb9e980c03c", "d565ab1b", "3bd5a4956999b1f6"}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x3, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80') madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_GET_FPU(r4, 0x81a0ae8c, &(0x7f00000004c0)) 12:58:01 executing program 5: r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r3 = open(&(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) symlinkat(&(0x7f00000002c0)='./file0/file0\x00', r3, &(0x7f0000000180)='./file0/file0\x00') renameat2(r3, &(0x7f0000000100)='./file0/file0\x00', r3, &(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) renameat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, &(0x7f0000000000)='./file0/file0\x00') 12:58:01 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x47, 0xd, 0x0, 0xffffffde, "495ff708000000000100378ac263b901f8fff7ffffffff00"}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r3 = geteuid() keyctl$chown(0x4, 0x0, r3, 0x0) fchdir(r2) r4 = dup3(r0, r1, 0x80000) prctl$PR_GET_DUMPABLE(0x3) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10102, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='\x00\x00\xb8\x00', &(0x7f00000004c0)='./file0\x00', 0x2000e000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x20, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x4) r5 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) dup3(r2, r5, 0xffe89c0d3da231b1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000001c0)={0x8, 0x0, 'client0\x00', 0x4, "7619ed22394ae29c", "59e7e36a2ec778c553433c7cad0357d5c9d549ce4043115dc0c3a64d211f54bd", 0x0, 0x5}) getgid() write$uinput_user_dev(r2, &(0x7f0000000500)={'syz1\x00', {0x2, 0x9, 0xffff, 0x1}, 0x55, [0x1, 0xfffffff9, 0x1, 0x0, 0x2, 0x8, 0x4, 0x6, 0x0, 0x89a, 0x1, 0x5, 0x1, 0x401, 0xfffff000, 0x5f, 0xfff, 0x8000, 0x1000, 0x607c, 0x1f, 0x1, 0x44, 0x611daa00, 0x919, 0x0, 0x2, 0x8000, 0x80000000, 0x7, 0x6, 0x5, 0xcc17, 0x3, 0x2, 0x2, 0xaa0, 0x7ff, 0x400, 0x6, 0x83, 0x7fff, 0x7, 0x3, 0x20, 0x1, 0x100, 0x1, 0x6, 0x874b, 0x5, 0x2, 0x3, 0xcb1a, 0x2, 0x1000000, 0x5, 0x4fdf, 0x0, 0x6, 0x1, 0xb97, 0x10001, 0x2], [0x5, 0x2, 0xf3a9, 0x400, 0xfff, 0x4, 0x8001, 0x7, 0x9, 0x9, 0x1, 0x0, 0xffffffff, 0x4, 0x401, 0x12, 0x9, 0x7fff, 0x1f, 0x4, 0xe000, 0x9, 0x5, 0x5f8, 0x4, 0xf7, 0x8000, 0x5, 0x3, 0x8, 0x6, 0xff, 0x1f, 0x6, 0x80000001, 0xf9, 0x3, 0xffff, 0x1000, 0x1, 0x1f, 0x4, 0x6, 0x3ff, 0x10200, 0x8, 0x4, 0x1, 0x0, 0x81, 0x81, 0x4, 0x88d4, 0x9f6, 0x6, 0x80, 0x8000, 0x401, 0x1ff00000, 0xff, 0x8, 0x3, 0x1, 0x3], [0x5e69641, 0x6, 0x1, 0x5, 0x9, 0x1, 0x0, 0x8001, 0x6, 0x296b, 0x7fffffff, 0x21, 0x1, 0x5, 0xc6, 0xeef2, 0x9, 0x3, 0x1, 0x7, 0x7, 0x81, 0x7, 0x9, 0x69, 0x401, 0xff, 0x5, 0xc089, 0x4, 0x7c, 0x4, 0x9, 0xbe7d, 0x46cba80c, 0x3, 0x0, 0x4, 0x5, 0xb2, 0x1ff, 0x7, 0x2, 0x6, 0x1011, 0x1, 0x1, 0x8, 0x101, 0x3f, 0x4, 0x6, 0x4, 0x800, 0x1ff, 0x200, 0x9, 0xff, 0x7c2e9a25, 0x6a, 0xd6a, 0x6, 0x2, 0x7fffffff], [0x800, 0x10001, 0x5, 0xda, 0x5, 0x9, 0x101, 0x4, 0x80000000, 0x80000001, 0x1ff, 0x7fff, 0x4, 0xd14, 0x2, 0x79988, 0xd87, 0x3ff, 0xffffff29, 0x0, 0x5, 0x5, 0x4, 0x5, 0x3, 0x6, 0xfffffff7, 0x9ae, 0xfff, 0x9, 0x10000, 0x1, 0x7, 0xe8dc, 0x815, 0xbf, 0x5696bd6c, 0x238e, 0x4, 0x8000, 0x5, 0x8, 0x4, 0xda, 0x8001, 0x8, 0x8001, 0x1, 0x1f, 0x9, 0x400, 0x6, 0x8, 0x6, 0x81, 0x49, 0x7f, 0x3, 0xd7b, 0x80000000, 0xffff, 0xe34d, 0x4, 0x8000000]}, 0x45c) 12:58:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0x80000000) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x8}}, 0x1, 0x0, 0x9, 0x0, 0x5c85e22ae8f61123}, 0xffffffffffffff71) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8000000000000004, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) accept(r3, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xfffffffffffffe63) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b65d000002000000ff0f000000000000341780ec9245aabb18bd00000000000008000000000000000000000000000000000000000000000000000000000000000300000007000000d500000000000000ffffff7f000000003f000000000000007fffffffffffffff00"/320]) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000080)=""/33) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x7) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000140)=0x101, 0x4) unlink(&(0x7f0000000180)='./file0\x00') [ 148.158188] audit: type=1400 audit(1570798681.518:55): avc: denied { read } for pid=7375 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 12:58:01 executing program 1: perf_event_open(&(0x7f0000000440)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x97a0c, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="240000001a0025f0001b000400edfc0e1c0b0020090000", 0x17) accept4$unix(r0, &(0x7f0000000380), &(0x7f0000000100)=0x6e, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r2, &(0x7f00000009c0)=ANY=[], 0x378) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000005c0)=0xe8) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="a8000000280002002bbd7000fbdbdf2500000000", @ANYRES32=r5, @ANYBLOB="0c000300ffff00000b000e0008000100716671004c00020008000200030000000800020003000000040002007fffffff08000100000000004800010001000080080002007acaf84008000100ff0000000800010003000000080001000000000083ff0500f7b40000080005003f0200000800010068746200100002000c00060009000000000000000800050006350000"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x20000810) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000180)=""/226, 0xe2}], 0x1) sendto$inet(r2, &(0x7f0000000300)="0b268a927f1f6588b967481241ba786003e5a9f0c618ded89748958beaf4b4834ff922b3f1e0b02bd6a7e7df6a299af17aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba736633a61982f9f049f20ae11f4a574f0916a81ef583e1a647a5f4", 0x6f, 0x11, 0x0, 0x0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000200)) socketpair(0xa, 0xa, 0x80, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000080), 0x4) [ 148.252141] audit: type=1400 audit(1570798681.768:56): avc: denied { associate } for pid=7398 comm="syz-executor.5" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 12:58:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x200000000d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000200)=0x80000000) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x401}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e22, 0x1, @loopback, 0x8}}, 0x1, 0x0, 0x9, 0x0, 0x5c85e22ae8f61123}, 0xffffffffffffff71) r3 = socket$inet6(0xa, 0x400000000001, 0x0) dup(r3) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x8000000000000004, 0x0, 0x0) setsockopt$inet6_opts(r3, 0x29, 0x0, &(0x7f0000000080)=@fragment, 0x8) accept(r3, &(0x7f0000000240)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000002c0)=0xfffffffffffffe63) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b65d000002000000ff0f000000000000341780ec9245aabb18bd00000000000008000000000000000000000000000000000000000000000000000000000000000300000007000000d500000000000000ffffff7f000000003f000000000000007fffffffffffffff00"/320]) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000080)=""/33) ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000100)=0x7) write$FUSE_POLL(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000140)=0x101, 0x4) unlink(&(0x7f0000000180)='./file0\x00') 12:58:01 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000000c0)={0x47, 0xd, 0x0, 0xffffffde, "495ff708000000000100378ac263b901f8fff7ffffffff00"}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0xf7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffc}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r3 = geteuid() keyctl$chown(0x4, 0x0, r3, 0x0) fchdir(r2) r4 = dup3(r0, r1, 0x80000) prctl$PR_GET_DUMPABLE(0x3) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10102, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='\x00\x00\xb8\x00', &(0x7f00000004c0)='./file0\x00', 0x2000e000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x20, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x4) r5 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f0000001480), 0x4) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0x0, 0x80fe}, 0x80, 0x0}, 0x0) dup3(r2, r5, 0xffe89c0d3da231b1) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f00000001c0)={0x8, 0x0, 'client0\x00', 0x4, "7619ed22394ae29c", "59e7e36a2ec778c553433c7cad0357d5c9d549ce4043115dc0c3a64d211f54bd", 0x0, 0x5}) getgid() write$uinput_user_dev(r2, &(0x7f0000000500)={'syz1\x00', {0x2, 0x9, 0xffff, 0x1}, 0x55, [0x1, 0xfffffff9, 0x1, 0x0, 0x2, 0x8, 0x4, 0x6, 0x0, 0x89a, 0x1, 0x5, 0x1, 0x401, 0xfffff000, 0x5f, 0xfff, 0x8000, 0x1000, 0x607c, 0x1f, 0x1, 0x44, 0x611daa00, 0x919, 0x0, 0x2, 0x8000, 0x80000000, 0x7, 0x6, 0x5, 0xcc17, 0x3, 0x2, 0x2, 0xaa0, 0x7ff, 0x400, 0x6, 0x83, 0x7fff, 0x7, 0x3, 0x20, 0x1, 0x100, 0x1, 0x6, 0x874b, 0x5, 0x2, 0x3, 0xcb1a, 0x2, 0x1000000, 0x5, 0x4fdf, 0x0, 0x6, 0x1, 0xb97, 0x10001, 0x2], [0x5, 0x2, 0xf3a9, 0x400, 0xfff, 0x4, 0x8001, 0x7, 0x9, 0x9, 0x1, 0x0, 0xffffffff, 0x4, 0x401, 0x12, 0x9, 0x7fff, 0x1f, 0x4, 0xe000, 0x9, 0x5, 0x5f8, 0x4, 0xf7, 0x8000, 0x5, 0x3, 0x8, 0x6, 0xff, 0x1f, 0x6, 0x80000001, 0xf9, 0x3, 0xffff, 0x1000, 0x1, 0x1f, 0x4, 0x6, 0x3ff, 0x10200, 0x8, 0x4, 0x1, 0x0, 0x81, 0x81, 0x4, 0x88d4, 0x9f6, 0x6, 0x80, 0x8000, 0x401, 0x1ff00000, 0xff, 0x8, 0x3, 0x1, 0x3], [0x5e69641, 0x6, 0x1, 0x5, 0x9, 0x1, 0x0, 0x8001, 0x6, 0x296b, 0x7fffffff, 0x21, 0x1, 0x5, 0xc6, 0xeef2, 0x9, 0x3, 0x1, 0x7, 0x7, 0x81, 0x7, 0x9, 0x69, 0x401, 0xff, 0x5, 0xc089, 0x4, 0x7c, 0x4, 0x9, 0xbe7d, 0x46cba80c, 0x3, 0x0, 0x4, 0x5, 0xb2, 0x1ff, 0x7, 0x2, 0x6, 0x1011, 0x1, 0x1, 0x8, 0x101, 0x3f, 0x4, 0x6, 0x4, 0x800, 0x1ff, 0x200, 0x9, 0xff, 0x7c2e9a25, 0x6a, 0xd6a, 0x6, 0x2, 0x7fffffff], [0x800, 0x10001, 0x5, 0xda, 0x5, 0x9, 0x101, 0x4, 0x80000000, 0x80000001, 0x1ff, 0x7fff, 0x4, 0xd14, 0x2, 0x79988, 0xd87, 0x3ff, 0xffffff29, 0x0, 0x5, 0x5, 0x4, 0x5, 0x3, 0x6, 0xfffffff7, 0x9ae, 0xfff, 0x9, 0x10000, 0x1, 0x7, 0xe8dc, 0x815, 0xbf, 0x5696bd6c, 0x238e, 0x4, 0x8000, 0x5, 0x8, 0x4, 0xda, 0x8001, 0x8, 0x8001, 0x1, 0x1f, 0x9, 0x400, 0x6, 0x8, 0x6, 0x81, 0x49, 0x7f, 0x3, 0xd7b, 0x80000000, 0xffff, 0xe34d, 0x4, 0x8000000]}, 0x45c) [ 148.344262] overlayfs: filesystem on './file0' not supported as upperdir 12:58:01 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000440)='./file0\x00') [ 148.427534] audit: type=1400 audit(1570798681.808:57): avc: denied { map } for pid=7396 comm="syz-executor.2" path="pipe:[27960]" dev="pipefs" ino=27960 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 12:58:02 executing program 5: r0 = perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x800000000000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/\x8c\x00', 0x6b5ae3fe2d495fa6, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) unshare(0x73bc832d515f4001) lsetxattr$trusted_overlay_origin(0x0, &(0x7f0000000480)='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socket(0x1, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x100082) poll(&(0x7f0000000100)=[{r1}, {r2, 0x188}, {}, {r1}, {r3}, {r3, 0x4604}], 0x6, 0x1) r4 = memfd_create(&(0x7f0000000380)='/dev/loop#\x00', 0x1) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4) socket$inet(0x2, 0x4000000000000002, 0x0) sendfile(r3, r4, 0x0, 0x20000102000007) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000140)=""/113) 12:58:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="6303ea7eaf69e313b8237aa125e3c98e", 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x0, 0x600}, 0xfe58) 12:58:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:02 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) tee(r0, r0, 0x10000, 0x0) 12:58:02 executing program 3: ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) open(0x0, 0x141042, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000280)={0xc}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x101001, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, &(0x7f0000000280)) getresuid(0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) 12:58:02 executing program 2: timer_create(0x2, &(0x7f0000000000)={0x0, 0xd, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r0) 12:58:02 executing program 1: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) 12:58:02 executing program 4: fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_open_procfs(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000553000/0x1000)=nil, 0x1000, 0x0, 0x32110, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') sendfile(r0, r1, 0x0, 0x320f) socket$inet6(0xa, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) creat(0x0, 0x10) creat(&(0x7f00000000c0)='./file1\x00', 0x0) [ 148.781151] block nbd0: Receive control failed (result -22) [ 148.797961] block nbd0: Receive control failed (result -22) [ 148.811073] block nbd0: shutting down sockets [ 148.839583] block nbd0: shutting down sockets [ 148.847933] print_req_error: I/O error, dev loop0, sector 0 [ 148.854060] Buffer I/O error on dev loop0, logical block 0, lost async page write 12:58:02 executing program 2: socket(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet(0x10, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffc000/0x3000)=nil) dup2(0xffffffffffffffff, 0xffffffffffffffff) 12:58:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:02 executing program 1: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x2000000050000}]}) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$netlink(r0, 0x0, 0x0) [ 149.053756] block nbd0: Receive control failed (result -22) [ 149.064592] block nbd0: Receive control failed (result -22) [ 149.075141] block nbd0: shutting down sockets 12:58:02 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f00000004c0)=0x54) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, r2}, 0xc) 12:58:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:02 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = perf_event_open(&(0x7f0000000200)={0x7, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 12:58:02 executing program 4: connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) syz_genetlink_get_family_id$tipc2(0x0) pipe2(0x0, 0x800) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001bfa963ecf4ff000000030093a1605b0000"], 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x0, "502f91e1c34f70ba956b756e0c7867a5004d6fbeb7b732b04ca99a7e43f0ed67ec70e153b9b88473b3f3d8db75b0fc"}, 0x0) wait4(0x0, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$inet6(0xa, 0x0, 0x0) 12:58:02 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x80247008) [ 149.231600] block nbd0: Receive control failed (result -22) [ 149.237908] block nbd0: Receive control failed (result -22) [ 149.256010] block nbd0: shutting down sockets 12:58:02 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:02 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote, 0x80000000000003}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8040, &(0x7f0000000040)={0xa, 0x200000004e21, 0x200000, @ipv4={[], [], @initdev}}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, 0x1c) sendmmsg(r0, &(0x7f0000000240), 0x5c3, 0x0) 12:58:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001bfa963ecf4ff000000030093a1605b0000"], 0x14}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, 0x0) open_by_handle_at(r1, 0x0, 0x200000) wait4(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 12:58:02 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:02 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x0, 0x6004}, {0xa7a, 0x3}]}, 0x14, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 149.398305] block nbd0: Receive control failed (result -22) [ 149.410727] block nbd0: Receive control failed (result -22) [ 149.411218] block nbd5: Receive control failed (result -22) [ 149.429976] block nbd5: shutting down sockets 12:58:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="2e0000001900d927e65de087185082cf1624b0eba06ec4a86e8f32e00586f9835b3e00009148790000f8de84c5e2", 0x2e}], 0x1, 0x0, 0x0, 0x4}, 0x0) 12:58:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 149.455137] block nbd0: shutting down sockets 12:58:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 149.514060] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.544224] block nbd5: Receive control failed (result -22) [ 149.546713] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.1'. 12:58:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:03 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x10}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 149.560683] block nbd5: shutting down sockets [ 149.565917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.578897] block nbd0: server does not support multiple connections per device. [ 149.613747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.626426] ptrace attach of "/root/syz-executor.4"[7548] was attempted by "/root/syz-executor.4"[7551] [ 149.636605] block nbd0: shutting down sockets 12:58:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x2, 0x0, &(0x7f0000000080)) 12:58:03 executing program 4: clock_adjtime(0x1, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0xb2) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="1f00000002031900000000000100018100023b0509000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1f0000000203193b000007000000068100023b050900020000004042020358", 0x1f}], 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380), &(0x7f00000001c0)=0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r3, r3) fcntl$getownex(r0, 0x10, &(0x7f0000000440)) keyctl$read(0xb, 0x0, 0x0, 0x0) r4 = syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x8, 0x14000) timerfd_create(0x0, 0x0) timerfd_gettime(0xffffffffffffffff, &(0x7f0000eb8000)) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000), 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000340), 0x4) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0xfffffffffffffd8f, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000080), 0x2) readahead(r5, 0x8000000, 0x0) [ 149.662563] block nbd5: Receive control failed (result -22) 12:58:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:03 executing program 1: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 149.689313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.697366] block nbd5: shutting down sockets 12:58:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) [ 149.779547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.814498] block nbd0: server does not support multiple connections per device. [ 149.824693] net_ratelimit: 20 callbacks suppressed [ 149.824705] openvswitch: netlink: Message has -3 unknown bytes. [ 149.825627] block nbd0: shutting down sockets [ 149.840204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.861931] block nbd1: Receive control failed (result -22) [ 149.865871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.869038] block nbd1: Receive control failed (result -22) [ 149.888269] block nbd1: shutting down sockets [ 149.888580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.909921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.922495] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 [ 149.934945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7552 comm=syz-executor.3 12:58:03 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:03 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:03 executing program 1: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 150.234501] openvswitch: netlink: Message has -3 unknown bytes. [ 150.237446] block nbd1: Receive control failed (result -22) [ 150.241567] protocol 88fb is buggy, dev hsr_slave_0 [ 150.241615] protocol 88fb is buggy, dev hsr_slave_1 [ 150.243995] block nbd5: Receive control failed (result -22) [ 150.252737] block nbd1: Receive control failed (result -22) [ 150.265440] block nbd0: server does not support multiple connections per device. 12:58:03 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 150.289378] block nbd5: shutting down sockets [ 150.295264] block nbd0: shutting down sockets [ 150.310257] block nbd1: shutting down sockets 12:58:03 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r0, 0x7001) [ 150.346012] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.362410] block nbd5: Receive control failed (result -22) [ 150.371776] block nbd5: shutting down sockets [ 150.380426] block nbd0: shutting down sockets [ 150.385217] openvswitch: netlink: Message has -3 unknown bytes. 12:58:03 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:03 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$NBD_DO_IT(r2, 0xab03) [ 150.400116] protocol 88fb is buggy, dev hsr_slave_0 [ 150.405264] protocol 88fb is buggy, dev hsr_slave_1 [ 150.410408] protocol 88fb is buggy, dev hsr_slave_0 [ 150.415461] protocol 88fb is buggy, dev hsr_slave_1 [ 150.454180] block nbd5: Receive control failed (result -22) [ 150.466090] block nbd5: shutting down sockets [ 150.479526] block nbd0: shutting down sockets [ 150.640112] protocol 88fb is buggy, dev hsr_slave_0 12:58:04 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:04 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:04 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:04 executing program 1: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) syz_open_dev$vcsa(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) fcntl$getown(0xffffffffffffffff, 0x9) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@caif=@rfm, &(0x7f0000000100)=0x80) 12:58:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r1, 0x11, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 151.086961] block nbd5: Receive control failed (result -22) [ 151.099112] block nbd5: shutting down sockets [ 151.107225] block nbd0: shutting down sockets 12:58:04 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:04 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:04 executing program 4: sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) [ 151.181525] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.244832] block nbd5: Receive control failed (result -22) [ 151.267673] block nbd0: Receive control failed (result -22) [ 151.275725] block nbd0: shutting down sockets [ 151.276761] block nbd5: shutting down sockets 12:58:05 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:05 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@rand_addr="6303ea7eaf69e313b8237aa125e3c98e", 0x800, 0x0, 0xff, 0x100000000000001}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x2, 0x0, 0x0, 0x600}, 0xfe58) 12:58:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:05 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:05 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:05 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x40600) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000080), &(0x7f00000000c0)=0x4) [ 151.928902] block nbd5: Receive control failed (result -22) [ 151.938933] block nbd5: shutting down sockets [ 151.939895] block nbd0: Receive control failed (result -22) [ 151.959988] block nbd0: shutting down sockets 12:58:05 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:05 executing program 4: r0 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:05 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 152.017252] block nbd5: Receive control failed (result -22) [ 152.028586] block nbd5: shutting down sockets [ 152.044591] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.077540] block nbd0: Receive control failed (result -22) [ 152.086160] block nbd0: shutting down sockets [ 152.135496] block nbd5: Receive control failed (result -22) [ 152.142305] block nbd5: shutting down sockets 12:58:06 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:06 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:06 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:06 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:06 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:06 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 152.788500] block nbd0: Receive control failed (result -22) [ 152.789473] block nbd5: Receive control failed (result -22) [ 152.807474] block nbd5: shutting down sockets [ 152.815103] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. 12:58:06 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:06 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 152.848513] block nbd0: shutting down sockets 12:58:06 executing program 4: socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1bd", 0x2e}], 0x1}, 0x0) 12:58:06 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 152.908507] block nbd5: Receive control failed (result -22) [ 152.921794] block nbd0: Receive control failed (result -22) [ 152.935481] block nbd5: shutting down sockets [ 152.941014] block nbd0: shutting down sockets 12:58:07 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:07 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 12:58:07 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 153.612659] block nbd0: Receive control failed (result -22) [ 153.623045] block nbd0: shutting down sockets [ 153.628769] block nbd5: shutting down sockets 12:58:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 12:58:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 153.653414] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. 12:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x0) [ 153.729796] block nbd5: shutting down sockets [ 153.739766] block nbd0: Receive control failed (result -22) [ 153.751558] block nbd0: shutting down sockets 12:58:07 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r5, 0x0, r4) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:07 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:07 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:07 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 12:58:07 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:07 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:07 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) [ 154.414048] block nbd0: Receive control failed (result -22) [ 154.422193] block nbd0: shutting down sockets [ 154.432582] block nbd5: shutting down sockets 12:58:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 12:58:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_DO_IT(r0, 0xab03) 12:58:08 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 154.490635] block nbd0: Receive control failed (result -22) [ 154.508209] block nbd0: shutting down sockets [ 154.518627] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.572060] selinux_nlmsg_perm: 479 callbacks suppressed [ 154.576371] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.602173] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.619154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.631970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.638980] block nbd0: Receive control failed (result -22) [ 154.644751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.663348] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.666741] block nbd0: shutting down sockets [ 154.676239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.692615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.706041] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 154.719673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7826 comm=syz-executor.3 [ 155.120118] net_ratelimit: 26 callbacks suppressed [ 155.120123] protocol 88fb is buggy, dev hsr_slave_0 [ 155.130196] protocol 88fb is buggy, dev hsr_slave_1 12:58:08 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:08 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_DO_IT(r0, 0xab03) 12:58:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 12:58:08 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040), 0x0) 12:58:08 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_DO_IT(r0, 0xab03) 12:58:08 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:08 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:08 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) r0 = socket(0x1, 0x1, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) [ 155.255574] block nbd0: Receive control failed (result -22) [ 155.279928] block nbd0: shutting down sockets 12:58:08 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040), 0x0) 12:58:08 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 155.358061] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.379460] block nbd0: Receive control failed (result -22) [ 155.411326] block nbd0: shutting down sockets [ 155.520107] protocol 88fb is buggy, dev hsr_slave_0 [ 155.525171] protocol 88fb is buggy, dev hsr_slave_1 12:58:09 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:09 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040), 0x0) 12:58:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:09 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:09 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 156.083778] block nbd0: Receive control failed (result -22) [ 156.091259] block nbd0: shutting down sockets 12:58:09 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) write$cgroup_int(r1, &(0x7f0000000080), 0x12) write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 12:58:09 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:09 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:09 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) [ 156.166790] block nbd0: Receive control failed (result -22) [ 156.192529] block nbd0: shutting down sockets [ 156.205975] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.480122] protocol 88fb is buggy, dev hsr_slave_0 [ 156.485270] protocol 88fb is buggy, dev hsr_slave_1 [ 156.640158] protocol 88fb is buggy, dev hsr_slave_0 [ 156.645273] protocol 88fb is buggy, dev hsr_slave_1 [ 156.650380] protocol 88fb is buggy, dev hsr_slave_0 [ 156.655411] protocol 88fb is buggy, dev hsr_slave_1 12:58:10 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:10 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:10 executing program 5: r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:10 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) 12:58:10 executing program 5: r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) [ 156.922610] block nbd0: Receive control failed (result -22) [ 156.938618] block nbd0: shutting down sockets 12:58:10 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:10 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() fchdir(0xffffffffffffffff) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:10 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:10 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 12:58:10 executing program 5: r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 156.989607] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. 12:58:11 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)}], 0x1}, 0x0) 12:58:11 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:11 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() fchdir(0xffffffffffffffff) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:11 executing program 0: r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 157.808893] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. 12:58:11 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:11 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000", 0x17}], 0x1}, 0x0) 12:58:11 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() fchdir(0xffffffffffffffff) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:11 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:11 executing program 5: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:12 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000", 0x17}], 0x1}, 0x0) 12:58:12 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:12 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) tkill(0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:12 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) tkill(0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000", 0x17}], 0x1}, 0x0) 12:58:12 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:12 executing program 0: r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:12 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) tkill(0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea", 0x23}], 0x1}, 0x0) [ 158.652295] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. 12:58:12 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:12 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:12 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea", 0x23}], 0x1}, 0x0) 12:58:12 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:12 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:12 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 159.469072] block nbd0: Receive control failed (result -22) [ 159.480443] block nbd0: shutting down sockets [ 159.482264] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. 12:58:13 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea", 0x23}], 0x1}, 0x0) 12:58:13 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) [ 159.596646] block nbd0: Receive control failed (result -22) [ 159.605896] block nbd0: shutting down sockets 12:58:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005", 0x29}], 0x1}, 0x0) 12:58:13 executing program 1: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x0, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:13 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:13 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:13 executing program 1: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 160.275083] block nbd0: Receive control failed (result -22) [ 160.283582] block nbd0: shutting down sockets 12:58:13 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:13 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005", 0x29}], 0x1}, 0x0) 12:58:13 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:13 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:13 executing program 1: wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:13 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:14 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005", 0x29}], 0x1}, 0x0) 12:58:14 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:14 executing program 5: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) [ 160.460203] block nbd0: Receive control failed (result -22) [ 160.470437] block nbd0: shutting down sockets 12:58:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:14 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) [ 160.575098] block nbd0: Receive control failed (result -22) [ 160.587313] block nbd0: shutting down sockets [ 160.640133] net_ratelimit: 18 callbacks suppressed [ 160.640138] protocol 88fb is buggy, dev hsr_slave_0 [ 160.650158] protocol 88fb is buggy, dev hsr_slave_1 [ 160.810103] protocol 88fb is buggy, dev hsr_slave_0 [ 160.815220] protocol 88fb is buggy, dev hsr_slave_1 [ 160.820321] protocol 88fb is buggy, dev hsr_slave_0 [ 160.825359] protocol 88fb is buggy, dev hsr_slave_1 [ 161.040101] protocol 88fb is buggy, dev hsr_slave_0 [ 161.045260] protocol 88fb is buggy, dev hsr_slave_1 12:58:14 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet_udp(0x2, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r4, 0x0, 0x8000008100003, 0x0) 12:58:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000", 0x2c}], 0x1}, 0x0) 12:58:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:14 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:14 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000", 0x2c}], 0x1}, 0x0) 12:58:14 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000", 0x2c}], 0x1}, 0x0) [ 161.272053] block nbd0: Receive control failed (result -22) [ 161.283545] block nbd0: shutting down sockets 12:58:14 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1", 0x2d}], 0x1}, 0x0) 12:58:14 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 161.342934] block nbd0: Receive control failed (result -22) [ 161.358704] block nbd0: shutting down sockets [ 161.363388] protocol 88fb is buggy, dev hsr_slave_0 [ 161.363456] protocol 88fb is buggy, dev hsr_slave_1 12:58:14 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:15 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000008100003, 0x0) 12:58:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r1, 0xab03) 12:58:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1", 0x2d}], 0x1}, 0x0) 12:58:15 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:15 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:15 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:15 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10424fc00120000000a000a00053582c1b0acea8b0900018005001000d1", 0x2d}], 0x1}, 0x0) 12:58:15 executing program 0: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r0 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:15 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 162.152605] block nbd0: Receive control failed (result -22) [ 162.170615] block nbd0: shutting down sockets 12:58:15 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:15 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 162.227034] block nbd0: Receive control failed (result -22) [ 162.234560] block nbd5: Receive control failed (result -22) [ 162.235182] block nbd0: shutting down sockets [ 162.258004] block nbd5: shutting down sockets [ 162.345297] block nbd0: Receive control failed (result -22) [ 162.354728] block nbd0: shutting down sockets 12:58:16 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000008100003, 0x0) 12:58:16 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:16 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) shmctl$SHM_STAT(0x0, 0xf, &(0x7f0000000000)=""/152) 12:58:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:16 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f00000004c0)=0x54) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, r2}, 0xc) 12:58:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) r1 = socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:16 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 162.950553] block nbd0: Receive control failed (result -22) [ 162.960391] block nbd0: shutting down sockets [ 162.965058] block nbd5: Receive control failed (result -22) [ 162.975279] block nbd5: shutting down sockets 12:58:16 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:16 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0'}, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)='security.capability\x00', &(0x7f0000000380)=@v2={0x2000000, [{0x0, 0x6004}, {0xa7a}]}, 0x14, 0x1) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 163.047261] block nbd0: Receive control failed (result -22) [ 163.054526] block nbd0: shutting down sockets [ 163.071891] block nbd5: Receive control failed (result -22) [ 163.078636] block nbd5: shutting down sockets 12:58:16 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:16 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x0, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) [ 163.147285] ptrace attach of "/root/syz-executor.4"[8262] was attempted by "/root/syz-executor.4"[8263] [ 163.190677] block nbd0: Receive control failed (result -22) [ 163.197413] block nbd0: shutting down sockets 12:58:17 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8000008100003, 0x0) 12:58:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:17 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x0, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:17 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) close(r0) syz_genetlink_get_family_id$tipc2(0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000100001bfa963ecf4ff000000030093a1605b0000"], 0x14}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x200000) gettid() wait4(0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) 12:58:17 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(0xffffffffffffffff) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 163.799583] block nbd5: Receive control failed (result -22) [ 163.813523] block nbd5: shutting down sockets 12:58:17 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x0, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:17 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(0xffffffffffffffff) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 163.855792] block nbd0: Receive control failed (result -22) [ 163.863203] block nbd0: shutting down sockets 12:58:17 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = open(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x0, @broadcast}, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}}) [ 163.909105] block nbd5: Receive control failed (result -22) [ 163.919871] block nbd5: shutting down sockets 12:58:17 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:17 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) [ 163.997658] block nbd0: Receive control failed (result -22) [ 164.009049] block nbd0: shutting down sockets [ 164.039419] block nbd5: Receive control failed (result -22) [ 164.059367] block nbd5: shutting down sockets 12:58:18 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r3, 0x0, 0x8000008100003, 0x0) 12:58:18 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(0xffffffffffffffff) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100), 0x8) 12:58:18 executing program 4: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x2, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 12:58:18 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) tkill(0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) [ 164.646841] block nbd0: Receive control failed (result -22) [ 164.657697] block nbd0: shutting down sockets [ 164.671177] block nbd5: Receive control failed (result -22) [ 164.681151] block nbd5: shutting down sockets 12:58:18 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) tkill(0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 164.711874] block nbd0: Receive control failed (result -22) [ 164.729202] EXT4-fs (loop4): bad geometry: block count 1080 exceeds size of device (1 blocks) [ 164.748815] block nbd0: shutting down sockets 12:58:18 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0) 12:58:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) [ 164.782761] block nbd5: Receive control failed (result -22) [ 164.794872] block nbd5: shutting down sockets [ 164.898152] block nbd0: Receive control failed (result -22) [ 164.905122] block nbd0: shutting down sockets 12:58:18 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r3, 0x0, 0x8000008100003, 0x0) 12:58:18 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000000)={0x77359400}, 0x10) 12:58:18 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) tkill(0x0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:18 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x0) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:18 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:19 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:19 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 165.475999] block nbd0: Receive control failed (result -22) [ 165.477458] block nbd5: Receive control failed (result -22) [ 165.497394] block nbd0: shutting down sockets [ 165.503372] block nbd5: shutting down sockets 12:58:19 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071") unshare(0x2000400) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, 0x0, 0x0, 0x0) 12:58:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 165.578793] block nbd0: Receive control failed (result -22) [ 165.588475] block nbd0: shutting down sockets [ 165.613893] block nbd5: shutting down sockets 12:58:19 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 12:58:19 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 165.920152] net_ratelimit: 24 callbacks suppressed [ 165.920158] protocol 88fb is buggy, dev hsr_slave_0 [ 165.930211] protocol 88fb is buggy, dev hsr_slave_1 12:58:19 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r3, 0x0, 0x8000008100003, 0x0) 12:58:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r2) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:19 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:19 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:19 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:19 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:19 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 166.323663] block nbd5: shutting down sockets [ 166.330730] block nbd0: Receive control failed (result -22) [ 166.343712] block nbd0: shutting down sockets [ 166.353002] block nbd4: Receive control failed (result -22) [ 166.367636] block nbd4: shutting down sockets 12:58:19 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:19 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 166.426419] block nbd0: Receive control failed (result -22) [ 166.436173] block nbd0: shutting down sockets [ 166.456474] block nbd5: shutting down sockets 12:58:20 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) [ 166.563569] block nbd0: Receive control failed (result -22) [ 166.572990] block nbd0: shutting down sockets [ 166.881494] protocol 88fb is buggy, dev hsr_slave_0 [ 166.886569] protocol 88fb is buggy, dev hsr_slave_1 [ 167.040108] protocol 88fb is buggy, dev hsr_slave_0 [ 167.045205] protocol 88fb is buggy, dev hsr_slave_1 [ 167.050302] protocol 88fb is buggy, dev hsr_slave_0 [ 167.055368] protocol 88fb is buggy, dev hsr_slave_1 12:58:20 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 12:58:20 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:20 executing program 5: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:20 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:20 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r2, 0x0, 0x8000008100003, 0x0) 12:58:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) socket(0x1, 0x1, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r3, 0xab03) 12:58:20 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:20 executing program 5 (fault-call:7 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:20 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 167.165087] block nbd5: Receive control failed (result -22) [ 167.177365] block nbd5: shutting down sockets 12:58:20 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:20 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 167.216417] block nbd0: Receive control failed (result -22) [ 167.224810] block nbd0: shutting down sockets 12:58:20 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 167.280112] protocol 88fb is buggy, dev hsr_slave_0 [ 167.285246] protocol 88fb is buggy, dev hsr_slave_1 [ 167.285948] FAULT_INJECTION: forcing a failure. [ 167.285948] name failslab, interval 1, probability 0, space 0, times 1 [ 167.308639] block nbd0: server does not support multiple connections per device. [ 167.313210] CPU: 0 PID: 8502 Comm: syz-executor.5 Not tainted 4.14.148 #0 [ 167.321394] block nbd0: shutting down sockets [ 167.323123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 167.323128] Call Trace: [ 167.323146] dump_stack+0x138/0x197 [ 167.323165] should_fail.cold+0x10f/0x159 [ 167.347315] should_failslab+0xdb/0x130 [ 167.351299] kmem_cache_alloc_trace+0x2e9/0x790 [ 167.355972] ? find_held_lock+0x35/0x130 [ 167.360037] ? devm_device_remove_groups+0x50/0x50 [ 167.364960] kobject_uevent_env+0x378/0xc23 [ 167.369266] set_disk_ro+0x1d3/0x220 [ 167.372969] ? disk_part_iter_next+0x5a0/0x5a0 [ 167.377547] ? vclkdev_alloc+0x130/0x160 [ 167.381596] ? mutex_unlock+0xd/0x10 [ 167.385292] ? blk_mq_update_nr_hw_queues+0x2e0/0x3a0 [ 167.390472] nbd_start_device+0x1d0/0xb00 [ 167.394644] nbd_ioctl+0x43d/0xae0 [ 167.398177] ? nbd_add_socket+0x5e0/0x5e0 [ 167.402307] ? lock_downgrade+0x740/0x740 [ 167.406438] ? nbd_add_socket+0x5e0/0x5e0 [ 167.410575] blkdev_ioctl+0x96b/0x1860 [ 167.414460] ? blkpg_ioctl+0x980/0x980 [ 167.418338] ? __might_sleep+0x93/0xb0 [ 167.422203] ? __fget+0x210/0x370 [ 167.425636] block_ioctl+0xde/0x120 [ 167.429241] ? blkdev_fallocate+0x3b0/0x3b0 [ 167.433541] do_vfs_ioctl+0x7ae/0x1060 [ 167.437439] ? selinux_file_mprotect+0x5d0/0x5d0 [ 167.442177] ? lock_downgrade+0x740/0x740 [ 167.446307] ? ioctl_preallocate+0x1c0/0x1c0 [ 167.450703] ? __fget+0x237/0x370 [ 167.454150] ? security_file_ioctl+0x89/0xb0 [ 167.458551] SyS_ioctl+0x8f/0xc0 [ 167.461908] ? do_vfs_ioctl+0x1060/0x1060 [ 167.466051] do_syscall_64+0x1e8/0x640 [ 167.469915] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 167.474780] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 167.479951] RIP: 0033:0x459a59 [ 167.483118] RSP: 002b:00007f75d00b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.490984] RAX: ffffffffffffffda RBX: 00007f75d00b0c90 RCX: 0000000000459a59 [ 167.498243] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 167.505577] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 167.512847] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75d00b16d4 [ 167.520109] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 [ 167.535677] block nbd5: Receive control failed (result -22) [ 167.544700] block nbd5: shutting down sockets 12:58:21 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x0) 12:58:21 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:21 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:21 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r2, 0x0, 0x8000008100003, 0x0) 12:58:21 executing program 5 (fault-call:7 fault-nth:1): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:21 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 167.981060] block nbd0: server does not support multiple connections per device. [ 167.993905] block nbd0: shutting down sockets [ 168.039350] FAULT_INJECTION: forcing a failure. [ 168.039350] name failslab, interval 1, probability 0, space 0, times 0 [ 168.051065] CPU: 0 PID: 8533 Comm: syz-executor.5 Not tainted 4.14.148 #0 [ 168.057991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.067334] Call Trace: [ 168.067425] dump_stack+0x138/0x197 [ 168.067443] should_fail.cold+0x10f/0x159 [ 168.067459] should_failslab+0xdb/0x130 [ 168.067472] kmem_cache_alloc+0x47/0x780 [ 168.067482] ? save_stack_trace+0x16/0x20 12:58:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) [ 168.067489] ? save_stack+0x45/0xd0 [ 168.067496] ? kasan_kmalloc+0xce/0xf0 [ 168.067503] ? kasan_slab_alloc+0xf/0x20 [ 168.067511] ? kmem_cache_alloc+0x12e/0x780 [ 168.067521] ? __kernfs_new_node+0x70/0x420 [ 168.067529] ? kernfs_new_node+0x80/0xf0 [ 168.067536] ? __kernfs_create_file+0x46/0x323 [ 168.067549] radix_tree_node_alloc.constprop.0+0x1c7/0x310 [ 168.114211] idr_get_free_cmn+0x563/0x8d0 [ 168.114232] idr_alloc_cmn+0x10e/0x210 [ 168.114244] ? __fprop_inc_percpu_max+0x1e0/0x1e0 12:58:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) [ 168.124426] ? __lock_is_held+0xb6/0x140 [ 168.124440] ? check_preemption_disabled+0x3c/0x250 [ 168.124455] idr_alloc_cyclic+0xd0/0x1e2 [ 168.124469] ? ida_simple_remove+0x60/0x60 [ 168.124485] __kernfs_new_node+0xe4/0x420 [ 168.124498] kernfs_new_node+0x80/0xf0 [ 168.124509] __kernfs_create_file+0x46/0x323 [ 168.124520] sysfs_add_file_mode_ns+0x1e4/0x450 [ 168.124533] sysfs_create_file_ns+0x8e/0xb0 [ 168.124547] device_create_file+0xd7/0x110 [ 168.124559] nbd_start_device+0x33c/0xb00 [ 168.124572] nbd_ioctl+0x43d/0xae0 12:58:21 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, 0x0, 0x0, 0x0) [ 168.124585] ? nbd_add_socket+0x5e0/0x5e0 [ 168.124593] ? lock_downgrade+0x740/0x740 [ 168.124606] ? nbd_add_socket+0x5e0/0x5e0 [ 168.167173] blkdev_ioctl+0x96b/0x1860 [ 168.177169] ? blkpg_ioctl+0x980/0x980 [ 168.177188] ? __might_sleep+0x93/0xb0 [ 168.177198] ? __fget+0x210/0x370 [ 168.177212] block_ioctl+0xde/0x120 [ 168.177224] ? blkdev_fallocate+0x3b0/0x3b0 [ 168.216547] do_vfs_ioctl+0x7ae/0x1060 [ 168.216561] ? selinux_file_mprotect+0x5d0/0x5d0 [ 168.216573] ? lock_downgrade+0x740/0x740 [ 168.224501] ? ioctl_preallocate+0x1c0/0x1c0 [ 168.224516] ? __fget+0x237/0x370 [ 168.224535] ? security_file_ioctl+0x89/0xb0 [ 168.224547] SyS_ioctl+0x8f/0xc0 [ 168.224558] ? do_vfs_ioctl+0x1060/0x1060 [ 168.257013] do_syscall_64+0x1e8/0x640 [ 168.260905] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.265747] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.265755] RIP: 0033:0x459a59 [ 168.265762] RSP: 002b:00007f75d00b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.281821] RAX: ffffffffffffffda RBX: 00007f75d00b0c90 RCX: 0000000000459a59 [ 168.289190] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 168.296469] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 168.303728] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75d00b16d4 [ 168.303733] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 [ 168.312394] block nbd5: Receive control failed (result -22) [ 168.337061] block nbd5: shutting down sockets 12:58:22 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:58:22 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 12:58:22 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:22 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r2, 0x0, 0x8000008100003, 0x0) 12:58:22 executing program 5 (fault-call:7 fault-nth:2): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:22 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() syz_open_procfs(0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:22 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) [ 168.797720] block nbd0: server does not support multiple connections per device. [ 168.815006] block nbd0: shutting down sockets 12:58:22 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 168.863813] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.892826] selinux_nlmsg_perm: 541 callbacks suppressed [ 168.892840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.895681] FAULT_INJECTION: forcing a failure. [ 168.895681] name failslab, interval 1, probability 0, space 0, times 0 [ 168.906273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.914195] block nbd0: server does not support multiple connections per device. [ 168.926282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.934747] CPU: 1 PID: 8586 Comm: syz-executor.5 Not tainted 4.14.148 #0 12:58:22 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 168.943225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.953563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 168.953569] Call Trace: [ 168.953587] dump_stack+0x138/0x197 [ 168.953604] should_fail.cold+0x10f/0x159 [ 168.953618] should_failslab+0xdb/0x130 [ 168.953630] kmem_cache_alloc+0x2d7/0x780 [ 168.953640] ? __d_lookup+0x3a2/0x670 [ 168.953651] ? mark_held_locks+0xb1/0x100 [ 168.953660] ? d_lookup+0xe5/0x240 12:58:22 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}], 0x1, 0x0) 12:58:22 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 168.953672] __d_alloc+0x2d/0x9f0 [ 168.953685] d_alloc+0x4d/0x270 [ 168.953699] __lookup_hash+0x58/0x180 [ 168.953711] lookup_one_len+0x27b/0x3a0 [ 168.953724] ? __lookup_hash+0x180/0x180 [ 168.953741] start_creating+0xa6/0x1b0 [ 168.953752] debugfs_create_dir+0x23/0x3b0 [ 168.953765] nbd_start_device+0x3b8/0xb00 [ 168.953780] nbd_ioctl+0x43d/0xae0 [ 168.953793] ? nbd_add_socket+0x5e0/0x5e0 [ 168.953801] ? lock_downgrade+0x740/0x740 [ 168.953815] ? nbd_add_socket+0x5e0/0x5e0 [ 168.953826] blkdev_ioctl+0x96b/0x1860 [ 168.953836] ? blkpg_ioctl+0x980/0x980 [ 168.961351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.972703] ? __might_sleep+0x93/0xb0 [ 168.972713] ? __fget+0x210/0x370 [ 168.972727] block_ioctl+0xde/0x120 [ 168.972737] ? blkdev_fallocate+0x3b0/0x3b0 [ 168.972745] do_vfs_ioctl+0x7ae/0x1060 [ 168.972757] ? selinux_file_mprotect+0x5d0/0x5d0 [ 168.972769] ? lock_downgrade+0x740/0x740 [ 168.982458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.984694] ? ioctl_preallocate+0x1c0/0x1c0 [ 168.984707] ? __fget+0x237/0x370 [ 168.984726] ? security_file_ioctl+0x89/0xb0 [ 168.984737] SyS_ioctl+0x8f/0xc0 [ 168.984747] ? do_vfs_ioctl+0x1060/0x1060 [ 168.988646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 168.992478] do_syscall_64+0x1e8/0x640 [ 168.992488] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 168.992507] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 168.992514] RIP: 0033:0x459a59 [ 168.992519] RSP: 002b:00007f75d00b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.992529] RAX: ffffffffffffffda RBX: 00007f75d00b0c90 RCX: 0000000000459a59 [ 168.992537] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 168.997808] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 169.000612] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 169.000618] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75d00b16d4 [ 169.000624] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 [ 169.012422] block nbd0: shutting down sockets [ 169.075599] block nbd5: Failed to create debugfs dir for 'nbd5' [ 169.089829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 169.099161] block nbd5: Receive control failed (result -22) [ 169.106390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8574 comm=syz-executor.3 [ 169.145784] block nbd5: shutting down sockets 12:58:23 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:58:23 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:23 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) getpid() fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 169.613767] block nbd0: server does not support multiple connections per device. [ 169.633242] block nbd0: shutting down sockets 12:58:23 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r3, 0x0, 0x8000008100003, 0x0) 12:58:23 executing program 5 (fault-call:7 fault-nth:3): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:23 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:23 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) [ 169.705004] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.723199] FAULT_INJECTION: forcing a failure. [ 169.723199] name failslab, interval 1, probability 0, space 0, times 0 [ 169.731055] block nbd0: server does not support multiple connections per device. [ 169.746409] CPU: 1 PID: 8629 Comm: syz-executor.5 Not tainted 4.14.148 #0 [ 169.747341] block nbd0: shutting down sockets [ 169.753445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 169.753450] Call Trace: [ 169.753499] dump_stack+0x138/0x197 [ 169.753520] should_fail.cold+0x10f/0x159 [ 169.753535] should_failslab+0xdb/0x130 [ 169.753547] kmem_cache_alloc+0x2d7/0x780 [ 169.753563] ? lookup_one_len+0x283/0x3a0 [ 169.753576] alloc_inode+0xa9/0x180 [ 169.753585] new_inode_pseudo+0x19/0xf0 [ 169.753595] new_inode+0x1f/0x40 [ 169.753605] debugfs_get_inode+0x1a/0x130 12:58:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 169.753616] debugfs_create_dir+0x67/0x3b0 [ 169.753629] nbd_start_device+0x3b8/0xb00 [ 169.753644] nbd_ioctl+0x43d/0xae0 [ 169.753658] ? nbd_add_socket+0x5e0/0x5e0 [ 169.777846] ? lock_downgrade+0x740/0x740 [ 169.790068] ? nbd_add_socket+0x5e0/0x5e0 [ 169.790087] blkdev_ioctl+0x96b/0x1860 [ 169.790097] ? blkpg_ioctl+0x980/0x980 [ 169.790114] ? __might_sleep+0x93/0xb0 [ 169.816241] block nbd0: shutting down sockets [ 169.817030] ? __fget+0x210/0x370 [ 169.817046] block_ioctl+0xde/0x120 12:58:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 12:58:23 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 169.817056] ? blkdev_fallocate+0x3b0/0x3b0 [ 169.817067] do_vfs_ioctl+0x7ae/0x1060 [ 169.852626] ? selinux_file_mprotect+0x5d0/0x5d0 [ 169.852637] ? lock_downgrade+0x740/0x740 [ 169.852649] ? ioctl_preallocate+0x1c0/0x1c0 [ 169.852661] ? __fget+0x237/0x370 [ 169.852678] ? security_file_ioctl+0x89/0xb0 [ 169.852690] SyS_ioctl+0x8f/0xc0 [ 169.860867] ? do_vfs_ioctl+0x1060/0x1060 [ 169.860882] do_syscall_64+0x1e8/0x640 [ 169.860890] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 169.860907] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 169.860915] RIP: 0033:0x459a59 [ 169.860920] RSP: 002b:00007f75d00b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 169.860931] RAX: ffffffffffffffda RBX: 00007f75d00b0c90 RCX: 0000000000459a59 [ 169.860936] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 169.860941] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 169.860947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75d00b16d4 [ 169.860952] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 [ 169.872300] block nbd5: Failed to create debugfs dir for 'nbd5' [ 169.935327] block nbd0: shutting down sockets [ 169.960844] block nbd5: Receive control failed (result -22) [ 169.971433] block nbd5: shutting down sockets 12:58:23 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:58:23 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{0x0, 0x0, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:23 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:23 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 170.457681] block nbd0: shutting down sockets 12:58:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r3, 0x0, 0x8000008100003, 0x0) 12:58:24 executing program 5 (fault-call:7 fault-nth:4): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:24 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:24 executing program 0 (fault-call:8 fault-nth:0): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = socket(0x1, 0x1, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r3, 0xab00, r2) r4 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_FLAGS(r4, 0xab0a, 0x1ffffffff) ioctl$NBD_DO_IT(r4, 0xab03) 12:58:24 executing program 4: getpid() r0 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 170.552427] netlink: 34 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.589281] FAULT_INJECTION: forcing a failure. [ 170.589281] name failslab, interval 1, probability 0, space 0, times 0 [ 170.610887] FAULT_INJECTION: forcing a failure. [ 170.610887] name failslab, interval 1, probability 0, space 0, times 0 [ 170.616243] CPU: 0 PID: 8668 Comm: syz-executor.5 Not tainted 4.14.148 #0 [ 170.629267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.638626] Call Trace: [ 170.641219] dump_stack+0x138/0x197 [ 170.644874] should_fail.cold+0x10f/0x159 [ 170.649156] should_failslab+0xdb/0x130 [ 170.653136] kmem_cache_alloc+0x2d7/0x780 [ 170.657284] ? check_preemption_disabled+0x3c/0x250 [ 170.662302] ? alloc_inode+0xa9/0x180 [ 170.666109] selinux_inode_alloc_security+0xb6/0x2a0 [ 170.671224] security_inode_alloc+0x94/0xd0 [ 170.675568] inode_init_always+0x552/0xaf0 [ 170.679799] alloc_inode+0x81/0x180 [ 170.683430] new_inode_pseudo+0x19/0xf0 [ 170.687401] new_inode+0x1f/0x40 [ 170.690761] debugfs_get_inode+0x1a/0x130 [ 170.694903] debugfs_create_dir+0x67/0x3b0 [ 170.699148] nbd_start_device+0x3b8/0xb00 [ 170.703306] nbd_ioctl+0x43d/0xae0 [ 170.706847] ? nbd_add_socket+0x5e0/0x5e0 [ 170.710995] ? lock_downgrade+0x740/0x740 [ 170.715149] ? nbd_add_socket+0x5e0/0x5e0 [ 170.719303] blkdev_ioctl+0x96b/0x1860 [ 170.723196] ? blkpg_ioctl+0x980/0x980 [ 170.727089] ? __might_sleep+0x93/0xb0 [ 170.730974] ? __fget+0x210/0x370 [ 170.734422] block_ioctl+0xde/0x120 [ 170.738039] ? blkdev_fallocate+0x3b0/0x3b0 [ 170.742362] do_vfs_ioctl+0x7ae/0x1060 [ 170.746259] ? selinux_file_mprotect+0x5d0/0x5d0 [ 170.751011] ? lock_downgrade+0x740/0x740 [ 170.755171] ? ioctl_preallocate+0x1c0/0x1c0 [ 170.760008] ? __fget+0x237/0x370 [ 170.763467] ? security_file_ioctl+0x89/0xb0 [ 170.767878] SyS_ioctl+0x8f/0xc0 [ 170.771239] ? do_vfs_ioctl+0x1060/0x1060 [ 170.775379] do_syscall_64+0x1e8/0x640 [ 170.779265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.784106] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.789287] RIP: 0033:0x459a59 [ 170.792470] RSP: 002b:00007f75d00b0c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.800176] RAX: ffffffffffffffda RBX: 00007f75d00b0c90 RCX: 0000000000459a59 12:58:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x0, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 170.807436] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 170.814693] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 170.821950] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f75d00b16d4 [ 170.829224] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 [ 170.836524] CPU: 1 PID: 8677 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 170.843454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 170.852806] Call Trace: [ 170.854408] block nbd5: Failed to create debugfs dir for 'nbd5' [ 170.855393] dump_stack+0x138/0x197 [ 170.855412] should_fail.cold+0x10f/0x159 [ 170.855426] should_failslab+0xdb/0x130 [ 170.864135] block nbd5: Receive control failed (result -22) [ 170.865079] kmem_cache_alloc_node_trace+0x280/0x770 [ 170.873176] ? find_next_bit+0x28/0x30 [ 170.873194] __kmalloc_node+0x3d/0x80 [ 170.873210] blk_mq_realloc_hw_ctxs+0x1bf/0xe80 [ 170.873231] blk_mq_update_nr_hw_queues+0x1c9/0x3a0 [ 170.873245] nbd_start_device+0x12c/0xb00 [ 170.873261] nbd_ioctl+0x43d/0xae0 [ 170.873275] ? nbd_add_socket+0x5e0/0x5e0 [ 170.884057] ? lock_downgrade+0x740/0x740 [ 170.884073] ? nbd_add_socket+0x5e0/0x5e0 [ 170.884085] blkdev_ioctl+0x96b/0x1860 [ 170.894696] block nbd5: shutting down sockets [ 170.896402] ? blkpg_ioctl+0x980/0x980 [ 170.933808] ? __might_sleep+0x93/0xb0 [ 170.937683] ? __fget+0x210/0x370 [ 170.941129] block_ioctl+0xde/0x120 [ 170.944761] ? blkdev_fallocate+0x3b0/0x3b0 [ 170.949507] do_vfs_ioctl+0x7ae/0x1060 [ 170.953378] ? selinux_file_mprotect+0x5d0/0x5d0 [ 170.958116] ? lock_downgrade+0x740/0x740 [ 170.962260] ? ioctl_preallocate+0x1c0/0x1c0 [ 170.966667] ? __fget+0x237/0x370 [ 170.970118] ? security_file_ioctl+0x89/0xb0 [ 170.974517] SyS_ioctl+0x8f/0xc0 [ 170.977865] ? do_vfs_ioctl+0x1060/0x1060 [ 170.982003] do_syscall_64+0x1e8/0x640 [ 170.985880] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 170.990730] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 170.995908] RIP: 0033:0x459a59 [ 170.999082] RSP: 002b:00007ff3ae7fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.006784] RAX: ffffffffffffffda RBX: 00007ff3ae7fdc90 RCX: 0000000000459a59 [ 171.014039] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 171.021296] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 171.028553] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3ae7fe6d4 [ 171.035829] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 [ 171.043848] net_ratelimit: 16 callbacks suppressed [ 171.043854] protocol 88fb is buggy, dev hsr_slave_0 [ 171.053882] protocol 88fb is buggy, dev hsr_slave_1 [ 171.065782] BUG: unable to handle kernel NULL pointer dereference at 0000000000000120 [ 171.067461] kobject: 'loop4' (ffff8880a4ada220): kobject_uevent_env [ 171.073784] IP: blk_mq_map_swqueue+0x25e/0x9c0 [ 171.073788] PGD 95085067 P4D 95085067 PUD 82b69067 PMD 0 [ 171.073805] Oops: 0002 [#1] PREEMPT SMP KASAN [ 171.073810] Modules linked in: [ 171.073821] CPU: 1 PID: 8677 Comm: syz-executor.0 Not tainted 4.14.148 #0 [ 171.073826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 171.073831] task: ffff888088ed4240 task.stack: ffff88805cde0000 [ 171.073840] RIP: 0010:blk_mq_map_swqueue+0x25e/0x9c0 [ 171.073844] RSP: 0018:ffff88805cde7a50 EFLAGS: 00010246 [ 171.073851] RAX: 0000000000040000 RBX: 0000000000000001 RCX: ffffc90005e2d000 [ 171.073857] RDX: 0000000000000000 RSI: ffffffff82ca277a RDI: ffff8880a4966b48 [ 171.073861] RBP: ffff88805cde7ac8 R08: 0000000000000000 R09: 0000000000000000 [ 171.073866] R10: 0000000000000000 R11: ffff88805cde78e8 R12: 0000000000000001 [ 171.073871] R13: ffff88821913e080 R14: dffffc0000000000 R15: ffff8880a4008fb0 [ 171.073877] FS: 00007ff3ae7fe700(0000) GS:ffff8880aef00000(0000) knlGS:0000000000000000 [ 171.073882] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.073887] CR2: 0000000000000120 CR3: 00000000991d5000 CR4: 00000000001406e0 [ 171.073895] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.082158] kobject: 'loop4' (ffff8880a4ada220): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 171.084849] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.084852] Call Trace: [ 171.084865] ? __mutex_unlock_slowpath+0x7b7/0x800 [ 171.084878] blk_mq_update_nr_hw_queues+0x21c/0x3a0 [ 171.229869] nbd_start_device+0x12c/0xb00 [ 171.234005] nbd_ioctl+0x43d/0xae0 [ 171.237524] ? nbd_add_socket+0x5e0/0x5e0 [ 171.241656] ? lock_downgrade+0x740/0x740 [ 171.245784] ? nbd_add_socket+0x5e0/0x5e0 [ 171.249922] blkdev_ioctl+0x96b/0x1860 [ 171.253803] ? blkpg_ioctl+0x980/0x980 [ 171.257671] ? __might_sleep+0x93/0xb0 [ 171.261539] ? __fget+0x210/0x370 [ 171.264973] block_ioctl+0xde/0x120 [ 171.268583] ? blkdev_fallocate+0x3b0/0x3b0 [ 171.272884] do_vfs_ioctl+0x7ae/0x1060 [ 171.276752] ? selinux_file_mprotect+0x5d0/0x5d0 [ 171.281496] ? lock_downgrade+0x740/0x740 [ 171.285632] ? ioctl_preallocate+0x1c0/0x1c0 [ 171.290035] ? __fget+0x237/0x370 [ 171.293469] ? security_file_ioctl+0x89/0xb0 [ 171.297854] SyS_ioctl+0x8f/0xc0 [ 171.301633] ? do_vfs_ioctl+0x1060/0x1060 [ 171.305764] do_syscall_64+0x1e8/0x640 [ 171.309629] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 171.314451] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 171.319619] RIP: 0033:0x459a59 [ 171.322788] RSP: 002b:00007ff3ae7fdc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.330471] RAX: ffffffffffffffda RBX: 00007ff3ae7fdc90 RCX: 0000000000459a59 [ 171.337733] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000007 [ 171.344981] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 171.352329] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff3ae7fe6d4 [ 171.359583] R13: 00000000004c33ab R14: 00000000004d6fc0 R15: 0000000000000008 12:58:24 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340)="460000002800070f3200000800367700fbff020002000000", 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 12:58:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x0) 12:58:24 executing program 5 (fault-call:7 fault-nth:5): r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x1, 0x1, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$NBD_DO_IT(r2, 0xab03) 12:58:24 executing program 4: getpid() r0 = syz_open_procfs(0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r1, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 171.366842] Code: ea 03 42 80 3c 32 00 0f 85 94 06 00 00 41 83 fc 3f 48 8b 17 0f 87 4b 04 00 00 48 89 55 c8 48 89 45 d0 e8 c6 cd 92 fe 48 8b 55 c8 48 0f ab 9a 20 01 00 00 48 8d ba 78 01 00 00 48 8b 45 d0 48 [ 171.385953] RIP: blk_mq_map_swqueue+0x25e/0x9c0 RSP: ffff88805cde7a50 [ 171.392506] CR2: 0000000000000120 [ 171.396085] protocol 88fb is buggy, dev hsr_slave_0 [ 171.401159] protocol 88fb is buggy, dev hsr_slave_1 [ 171.406228] protocol 88fb is buggy, dev hsr_slave_0 [ 171.407397] kobject: 'loop3' (ffff8880a4a641a0): kobject_uevent_env 12:58:24 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$cgroup_int(r1, &(0x7f0000000080), 0x12) syz_open_procfs(0x0, &(0x7f00000000c0)='coredump_filter\x00') write$binfmt_misc(r1, &(0x7f0000000780)=ANY=[@ANYRESHEX, @ANYRESDEC, @ANYRES64, @ANYRES16, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES64], @ANYPTR64=&(0x7f0000000400)=ANY=[], @ANYPTR64=&(0x7f0000000d80)=ANY=[@ANYBLOB="872ca3282ccad619dfb9105d2939774ff3913c5e645a4955ca0f5d2c31954824aa6304a9f8eabddee0680de6f31387e532aa2d984d834e482348b2d45c868ec1b1a28d3dbb38ecc29537a537bb599792d2b459853f06647d66649a90d744dfae177064cef20fcaa30b823eead38d11ce13cd30b0a105e0c6a80d0d4eb7024eedaf9ae66abc59cab7ef180da521b1735c942af98943d82a24a8d47d06e520f07f3f25864e161e127424536799aa3414af786ddb23cb3f4ece5f30199f7cf356aa73861b6a68fa020127", @ANYBLOB="99f0000000000000053b2ca2d916cb8d00753dca4f8c2557689329e834ea088a7be99e535b3d1562d0ea65b84de9e31bddfc64f6ced157ef20e660df0d3ec9713c164b09d1134b4a5757e286fd0a152bbd6c6a23fda80d429785aa3717ce35749f801dbbf32ee69fcbb3995dc688588391047da7692ed3cbf89fc2", @ANYRESHEX, @ANYBLOB="b04b23bc3b96b60252f04f4acb173060c73bde38bfb93c238d6bfc92e6930b629ef27f6466966097fd51a84e0868ac81332c5abf77550337816e0a47d24f9f18d40c9eb08ed32c9254f4f3bc3b9cdd398ea71b857d8e679d6b756a7293bc099178f3b6fba1a0cb9b7b16d372f2590653e715a8fc95daeaaa38c5e994b65cabc0f7a2c8b0f2e1c65d7508061661eb0a6c61e6ca581b2704", @ANYRESDEC, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESDEC=0x0, @ANYRES16], @ANYBLOB="4c46005643c83d08c57ddecc7fa4913e81ac66fbd7086eeff35217245f2c62f5ba1633bae897037bda372a3ad9ff6afe391336ca9d2ade34a219f6ee832538ed35e3cc49bb8fe80f4cf8456181a736c8cab1e6d55d18cb3f310000e50a2c233ecc7b85ddd349e4871bca1e3b17cbae04abef204613a6d8783d3e0181a71db9cc2490b3e7a19102a68de4cabcc28507ebbc40622757f46a298ed29a4b30b152d2bbb62f054108f459551944fdc5a5c42f02f2d9fd0aef1519d04c10c3912517f69fbd7f933caa18ebb19ca9b6043eb8c88bed1d28ef16644ba0b6c7489e15ca67bdd0484eb500322f88ff22fa"]], 0xfffffe46) splice(r0, 0x0, r3, 0x0, 0x8000008100003, 0x0) [ 171.411288] protocol 88fb is buggy, dev hsr_slave_1 [ 171.423444] kobject: 'loop3' (ffff8880a4a641a0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 171.440091] protocol 88fb is buggy, dev hsr_slave_0 [ 171.445183] protocol 88fb is buggy, dev hsr_slave_1 [ 171.445524] FAULT_INJECTION: forcing a failure. [ 171.445524] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 171.457153] ---[ end trace 8e590f6bad354526 ]--- 12:58:24 executing program 1: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)) fchdir(r1) tkill(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0x0, 0x0}) sendmmsg(r2, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000600)}}], 0x2, 0x0) [ 171.469541] kobject: 'loop2' (ffff8880a4a22120): kobject_uevent_env [ 171.474667] Kernel panic - not syncing: Fatal exception [ 171.482547] Kernel Offset: disabled [ 171.486164] Rebooting in 86400 seconds..