[?25l[?1c7[1[ 33.174959] audit: type=1800 audit(1555816182.509:33): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rc.local" dev="sda1" ino=2465 res=0 G[ ok [39;[ 33.203795] audit: type=1800 audit(1555816182.509:34): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op="collect_data" cause="failed(directio)" comm="startpar" name="rmnologin" dev="sda1" ino=2456 res=0 49m8[?25h[?0c. [ 34.319760] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 34.585189] audit: type=1400 audit(1555816183.919:35): avc: denied { map } for pid=7102 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 34.636206] random: sshd: uninitialized urandom read (32 bytes read) [ 35.367735] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.0.131' (ECDSA) to the list of known hosts. [ 40.884628] random: sshd: uninitialized urandom read (32 bytes read) 2019/04/21 03:09:50 fuzzer started [ 41.079247] audit: type=1400 audit(1555816190.409:36): avc: denied { map } for pid=7112 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 42.524432] random: cc1: uninitialized urandom read (8 bytes read) 2019/04/21 03:09:52 dialing manager at 10.128.0.105:43303 2019/04/21 03:09:52 syscalls: 2434 2019/04/21 03:09:52 code coverage: enabled 2019/04/21 03:09:52 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/04/21 03:09:52 extra coverage: extra coverage is not supported by the kernel 2019/04/21 03:09:52 setuid sandbox: enabled 2019/04/21 03:09:52 namespace sandbox: enabled 2019/04/21 03:09:52 Android sandbox: /sys/fs/selinux/policy does not exist 2019/04/21 03:09:52 fault injection: enabled 2019/04/21 03:09:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/04/21 03:09:52 net packet injection: enabled 2019/04/21 03:09:52 net device setup: enabled [ 44.388722] random: crng init done 03:12:02 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000040)={0xf89, 0x100000000, 0x100, 0x0, 0x40}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f00000000c0)={0x0, 'syz1\x00'}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000100)) write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, 0x7, {0xfff}}, 0x18) write$binfmt_misc(r0, &(0x7f0000000180)={'syz1', "adb2e18ae75fc871d8a331f5400777a68380f544f28ded760c28df7a4fb93467cf4437806d8da66f0d0143793eda89bfbb51a91b9941f3ad67283e768b89106e619ae5dbdd723ce7466bb2e687a4e300daf7c2278c350034b37d66bdda5f8d0e6927e48ce3d5daec2c9ec717d44499d447a007ebd5698e0a8b4a9b0d16af92bc33b665ae8cef031996eb68d664aced0d793cb74480a726bb33f2823b60af6935b74a8d"}, 0xa7) ioctl$PPPIOCDISCONN(r0, 0x7439) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e21, 0x8, @mcast2, 0x5}}}, &(0x7f0000000380)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000003c0)={r1, @in6={{0xa, 0x4e20, 0x7, @local, 0x400000000000}}, 0x3ff, 0x3, 0x2, 0x100000000, 0x10}, &(0x7f0000000480)=0x98) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000004c0)=0x5, 0x4, 0x2) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, &(0x7f0000000500)=0x2, 0xfffffffffffffffa, 0x2) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000600)=0x1) fstatfs(r0, &(0x7f0000000640)=""/252) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000740)) syz_mount_image$jfs(&(0x7f0000000780)='jfs\x00', &(0x7f00000007c0)='./file0\x00', 0x8fc9, 0x2, &(0x7f0000000980)=[{&(0x7f0000000800)="49b6bf3a84cea2773bf919ad54d900c79e3236649aaabbf097f4a67452d01bd4fe3746ab35313e3db82bab489e9a83b3e8acc043d4d2341d75c4bd4be8eefac1c30ce1c23efc0e6a50cd7bc989ab39fbbf603c990ccdee0b82af033262bd56597769b5074b18cca17facf2eaf105d3aac97db20a4a70e5108f6d28458a5d5d36044dbfdfa35354f6b3890f37ab4b203774bff75ff2e6b8be56bd5d51ea417987b2", 0xa1, 0x15}, {&(0x7f00000008c0)="67c356ac33b79baac2f14acc011cd51b3144bd57ab4e7efdf6743e403b3caedc22203666b4d0df369dbab1314fd4d2958607e8c6a7657ac62a3ae98d6fbbd56c41ddf1914da6eb3867abdba47dc8984c3db0e32fc917373597afb3bdd174251765e9529d4daa5c9b60dad3c6c24fde64378f38ddea6e29381811410ce6a33702a78cfbf7b41caff6f96e386b3272f136916923fd27921d10914d27a9ad204a148bd41f2c88ce086314cd98a78a19f69a6989e0383df62e76c5", 0xb9, 0x3ff}], 0x8, &(0x7f00000009c0)={[{@integrity='integrity'}, {@gid={'gid', 0x3d, r4}}, {@discard='discard'}, {@discard='discard'}, {@uid={'uid', 0x3d, r3}}, {@discard_size={'discard'}}, {@discard='discard'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='trusted.overlay.opaque\x00', &(0x7f0000000ac0)='y\x00', 0x2, 0x0) r5 = accept4$inet6(r0, &(0x7f0000000b00)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000b40)=0x1c, 0x800) setfsgid(r4) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000b80)='/dev/dlm-monitor\x00', 0x24000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000bc0)={0x8001, 0x8000, 0xc17e, 0x10000, r2}, &(0x7f0000000c00)=0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000c40)='./file0\x00', 0x119000, 0x10) setsockopt$inet6_dccp_int(r5, 0x21, 0x1e, &(0x7f0000000c80)=0x6, 0x4) read$alg(r0, &(0x7f0000000cc0)=""/138, 0x8a) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000d80)) connect$netlink(r0, &(0x7f0000000dc0)=@kern={0x10, 0x0, 0x0, 0x1000}, 0xc) fcntl$setflags(r6, 0x2, 0x1) syz_mount_image$jfs(&(0x7f0000000e00)='jfs\x00', &(0x7f0000000e40)='./file0\x00', 0x0, 0x1, &(0x7f0000000f40)=[{&(0x7f0000000e80)="999b3a1ec6121047bd62e000db2964db5f96e0ec68fc47e269aab2e3aa9b185f562bc630f7b380bacdc8ce5457b52257dff8b8eb03c3d9680e26256316e6d5038d58f21639e8056a97bfef17b96df6b98c2aa1026250a9ba63448883cf96f71c92ae2b6c9b21576175c3550c7cf794d12eb1f713320d17f8d2460c7bb23a314a4b574df7932a597f54c7f04179966339c8246b4c7d17e9325c5e87dd40", 0x9d, 0x5d1449e2}], 0x10, &(0x7f0000000f80)={[{@gid={'gid', 0x3d, r4}}, {@discard='discard'}, {@errors_remount='errors=remount-ro'}, {@grpquota='grpquota'}, {@quota='quota'}, {@discard_size={'discard', 0x3d, 0xffffffffffffff06}}, {@umask={'umask', 0x3d, 0x7}}, {@resize='resize'}], [{@uid_eq={'uid', 0x3d, r3}}, {@hash='hash'}]}) 03:12:02 executing program 5: pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x2}, 0x2) open$dir(&(0x7f0000000100)='./file0/file0\x00', 0x400082, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000180)={0x6, 0x4, 0x1, r1}) getpeername$netrom(r2, &(0x7f00000001c0)={{0x3, @rose}, [@null, @default, @null, @rose, @default, @remote, @remote, @null]}, &(0x7f0000000240)=0x48) r4 = accept$ax25(r1, &(0x7f0000000280)={{0x3, @rose}, [@rose, @remote, @bcast, @netrom, @null, @null, @netrom, @rose]}, &(0x7f0000000300)=0x48) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000340)={0x0, 0xee}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r5, 0xfffffffffffffff7, 0x6}, 0xc) write(r1, &(0x7f0000000400)="ed065a9f0ca5dddc2de058d7c9b706c3e946562b2cd23f", 0x17) pread64(r1, &(0x7f0000000440)=""/73, 0x49, 0x5a) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f00000004c0)=""/75, &(0x7f0000000540)=0x4b) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000580)='trusted.overlay.upper\x00', &(0x7f00000005c0)={0x0, 0xfb, 0x1015, 0x2, 0x9, "4a8f76a2dbab40ea9245c269d88592c6", "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"}, 0x1015, 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001600)='/dev/loop-control\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001640)={r5, 0xfffffffffffff4bd}, 0x8) fcntl$setsig(r2, 0xa, 0x3b) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000001680)={0x3, r1}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000016c0)={0x3, r2}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x9) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000001700), &(0x7f0000001740)=0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000001780)={0x1, 0x6f3a, 0xfffffffffffffe00, 0x8}) close(r4) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000017c0)=""/226, &(0x7f00000018c0)=0xe2) ioctl$RTC_WIE_ON(r2, 0x700f) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001900)='/selinux/enforce\x00', 0x8081, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000001940)=""/84, &(0x7f00000019c0)=0x54) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001a00)={'team0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000001a40)={r5, 0xb, "53b768588bfcd3ce72768a"}, &(0x7f0000001a80)=0x13) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001ac0)={0x0}, &(0x7f0000001b00)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000001b80)={{0xa, 0x0, 0x7, 0x484}, 0x5, 0x20000004, 0x7fff, r7, 0x5, 0x7, 'syz0\x00', &(0x7f0000001b40)=['\x00', 'team0\x00', '/selinux/commit_pending_bools\x00', 'team0\x00', '/dev/loop-control\x00'], 0x3d, [], [0x9, 0x9, 0x5, 0x6]}) 03:12:02 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x100, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x80000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0x80000001, 0x7}, 'port0\x00', 0x1, 0x80000, 0x6, 0xffffffff, 0x7, 0x9, 0x56cb, 0x0, 0x4, 0x5}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) mknod(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x206) ioctl$CAPI_NCCI_GETUNIT(r1, 0x80044327, &(0x7f0000000200)=0x9) r2 = accept4$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x28, 0x26, 0x4de359b74e767f8e, 0x70bd2c, 0x25dfdbfe, {0x0, r3, {0xfffb, 0x2}, {0xb, 0x1}, {0xf, 0xffff}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24004051}, 0x20000800) ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f00000003c0)="bd865b6c9f040ed8debd4b75999ad07887730ae18bdb412a290474bf912a8cc5a2a316d0623e225b6749f0fe4ca52eca03ac520a9c59ca30edfd54d23e6827d85f6c931e5d1fec4fbe7aeaf3c1dd870f408677c945b0879501a8424e514e0de7b1d97876b5b01fe95196d3357d1b0032e439a39327f8987822f7b251ae041c08e73141a262a6bd6deaeb32e1fe804fb69d39cc85") ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x4f) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000480)={0x3, 0xe3, 0x400}) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000004c0)={0x2, 0x3, 0x4}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000980}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x64, r4, 0x631, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x20}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x46}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x40000) r5 = request_key(&(0x7f0000000680)='encrypted\x00', &(0x7f00000006c0)={'syz', 0x1}, &(0x7f0000000700)='/dev/dlm-control\x00', 0xfffffffffffffffe) keyctl$set_timeout(0xf, r5, 0x1) write$binfmt_aout(r0, &(0x7f0000000740)={{0x10b, 0x20, 0x3ff, 0xb7, 0x25d, 0x3, 0x2af, 0x7ff}, "3cc0ad6e67ab2f06821eb246988590521eb02f3b7eb5559705b2cd27c8a712c95d646a8d96a49aa6b1b499365bae601d192b685a10ac56d1be881580ab40e10e3809c58200073aee00652e7d1aaa45562844e35abcd91b650033cdae43f96b70d93d81b8ade12ae29f00d60217b1562e6801fd21b008497424008348238635d4c038837b5537e3147e839ac7854c54a5a624947921a64681231689584d8870da48", [[], [], [], [], [], []]}, 0x6c1) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000e40)={0x3, 0x0, [{0x3, 0x7, 0x0, 0x0, @irqchip={0xb0d1, 0x1000}}, {0x1f, 0x4, 0x0, 0x0, @irqchip={0x7ff, 0x3}}, {0x7, 0x1, 0x0, 0x0, @irqchip={0x64ef}}]}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r1, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x60, r6, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/context\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000010c0)=0x8, 0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000001100)) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000001140)) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f00000011c0)={0x5, &(0x7f0000001180)=[0x1ff, 0x3, 0xfff, 0x10001, 0x100000000]}) recvfrom(r2, &(0x7f0000001200)=""/107, 0x6b, 0x10040, &(0x7f0000001280)=@x25={0x9, @null=' \x00'}, 0x80) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000001300)={{0x1, 0x6}, {0xfffffffffffffff8, 0x7}, 0x5, 0x4, 0x1f}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000001380)=""/8, &(0x7f00000013c0)=0x8) 03:12:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000040)) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x40, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/user\x00', 0x2, 0x0) r2 = getpid() sched_getaffinity(r2, 0x8, &(0x7f0000000100)) ioctl$RTC_UIE_OFF(r0, 0x7004) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000180)={0x10, 0xfff, {0x57, 0x80000000, 0x3, {0x202c, 0xb8c}, {0x3, 0xffffffffffff76eb}, @rumble={0x83, 0x1}}, {0x53, 0x750, 0x7, {0x80000001, 0x2}, {0x3}, @period={0x5b, 0x5, 0x2, 0xf338, 0x100, {0x3, 0x6e, 0x7, 0xbf2}, 0x7, &(0x7f0000000140)=[0x80000000, 0x400, 0x4, 0x4, 0x2, 0x80000001, 0xd20000000000000]}}}) ioctl$RTC_VL_READ(r0, 0x80047013, &(0x7f0000000200)) fchmod(r1, 0x190) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000002c0)={r0, r0, 0x100000001, 0x74, &(0x7f0000000240)="ba2ed46e44426ae357ebe66be85260894bd7d31905666342664c858be92440dda5e163f73244477594415ce65ae264ef70b19739d1fa24af1861d44d4721ad303a5a22a17ccd6672fd292a139b46db26c9f31701b0123446378c571f0efdfbd1b9792147de0439306956a8fdb5ce46a546ee87cc", 0xfffffffeffffffff, 0x9, 0x3, 0x3, 0x80000001, 0x2, 0xffffffff, 'syz1\x00'}) sendmsg$nl_netfilter(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xe8, 0x9, 0x9, 0x200, 0x70bd27, 0x25dfdbfc, {0xa, 0x0, 0xa}, [@nested={0xd4, 0x6a, [@generic="54ce3b0653b468e1539800928df38e45b92c915c04c399c0233b16e93564cb501b48eee3c451b1197245d4c0dfb25f01a8542e127c25624d340ab3646d55e54d4d29e6ed8fb416d7c9ce8266792915b56f55ed520da2d2276ee5486ba2f65445869e88771cf42ecc84c8f38456fefe76b8c17def1f9d8e437b9238cb2f122c5eebb58913125a73ddcf1bee8a129200273bb32eee180e7358cc4f89fffc3f28366f6bc989498350917462a4de9afcb571cdb688d0af034fed7cc6cc9098f394b2ee82c1569c522e3fcea1107f491737"]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000804}, 0x800) fcntl$addseals(r1, 0x409, 0x2) r3 = geteuid() getgroups(0x7, &(0x7f00000005c0)=[0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0x0]) mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='fuse\x00', 0x3010014, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xa00}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x7fff}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@smackfshat={'smackfshat', 0x3d, '+*+\\**#mime_typemd5sumuser!\rcgroup#%em0GPL/'}}, {@dont_measure='dont_measure'}, {@obj_type={'obj_type'}}, {@appraise='appraise'}, {@fsname={'fsname', 0x3d, 'syz1\x00'}}]}}) open_by_handle_at(r1, &(0x7f0000000740)={0xa9, 0xffffffffffff8000, "04cff25c338a489f67485eff6691db18955c9c7779f732e6a3c1917d5d6e0332b6358088e5251f5267e395643a9d5c803964e07277eb0da7a7f826b1ebc622cd035712d7ddb9c5d28ff09c216ba47ed98041b56bd507c87fc6807a91abb09f2ea7229c18ea2b5255e07145453b3dcab993b1549ec6558acecf85ffd04216dd471f50fd138029832f248b9f22c325322457f617df14a4f12d8a3c95535f9667cb39"}, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000800)={0x80000000, 0x100, "84d1554d68ed4ce12f1503311c7136e3123b09d5458511c6c325dc9be32f4652", 0x9, 0x3, 0x9, 0x3, 0x0, 0x1f, 0x7, 0x2d, [0xbc, 0x5, 0x9, 0x4]}) ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000900)={0x0, 0x3, @raw_data=[0x8001, 0x100000000, 0x0, 0x101, 0x80000000, 0x81, 0x8, 0xfbc, 0x1, 0xfffffffffffffffb, 0x7, 0x0, 0x9, 0x0, 0x0, 0x5]}) ioctl$KVM_DEASSIGN_PCI_DEVICE(r0, 0x4040ae72, &(0x7f0000000980)={0x1ff, 0x44, 0x8001, 0x0, 0x7fff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x1d, r5}, 0x10, &(0x7f0000000a80)={&(0x7f0000000a40)=@can={{0x0, 0x47, 0x0, 0x3f}, 0x2, 0x3, 0x0, 0x0, "5833f682fe148b77"}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x24004014) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000b00)={0x7, {0x8, 0x3, 0x8, 0x4}}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000b40)=0x1000) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000b80)={@rand_addr, @dev, @remote}, &(0x7f0000000bc0)=0xc) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000c00)) setpriority(0x3, r2, 0x1000) getsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000d00), &(0x7f0000000d40)=0x4) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000d80)) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000dc0), &(0x7f0000000e00)=0x14) 03:12:02 executing program 3: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x103200, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@initdev}}, &(0x7f0000000140)=0xe8) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, @buffer={0x0, 0x18, &(0x7f0000000180)=""/24}, &(0x7f00000001c0), &(0x7f0000000200), 0x200, 0x2, 0x1, &(0x7f0000000240)}) fsetxattr$security_evm(r0, &(0x7f0000000300)='security.evm\x00', &(0x7f0000000340)=@md5={0x1, "088e8d89ceeefcb40e554274209cee21"}, 0x11, 0x3) r2 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x2, 0x200) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='scalable\x00', 0x9) mknodat(r2, &(0x7f0000000400)='./file0\x00', 0x8845, 0x8) ppoll(&(0x7f0000000440)=[{r2}, {r2}], 0x2, &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000004c0)={0x40}, 0x8) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000500)) mkdir(&(0x7f0000000540)='./file0\x00', 0x1) setxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'os2.', '.!GPLeth0--\x00'}, &(0x7f0000000600)='scalable\x00', 0x9, 0x2) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000640)={0x0, 0x0, [0x2, 0x6, 0xfffffffffffff000, 0x8000]}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000006c0)=0x0) r4 = syz_open_procfs(r3, &(0x7f0000000700)='net/icmp6\x00') setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000740)={0x2, 0x4e20, @remote}, 0x10) ioctl$RTC_AIE_OFF(r2, 0x7002) socket$isdn(0x22, 0x3, 0x0) readlink(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)=""/192, 0xc0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) ioctl$TIOCGSERIAL(r4, 0x541e, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/255}) r5 = perf_event_open(&(0x7f0000000a00)={0x3, 0x70, 0x5, 0x1, 0xffff, 0x1b, 0x0, 0xffffffffffffffc1, 0x2, 0x8, 0x9, 0x9, 0x3f, 0x0, 0x148c, 0x9, 0x7d74, 0x7, 0x7f, 0xfffffffffffffffe, 0x5, 0x80, 0x2, 0x8, 0x1ff, 0x8000000000000, 0x7, 0x8, 0x7ff, 0x7, 0x101, 0x7fffffff, 0x2, 0x6, 0x6, 0x0, 0x64, 0xf8, 0x0, 0x68, 0x4, @perf_config_ext={0xffffffffffffff1e, 0x6}, 0x30208, 0x6, 0x7, 0x3, 0x9, 0xffffffffffff0001}, r3, 0x2, r2, 0x1) mount$9p_fd(0x0, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)='9p\x00', 0x40000, &(0x7f0000000b00)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap='nodevmap'}, {@noextend='noextend'}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@uid_eq={'uid', 0x3d, r1}}, {@euid_gt={'euid>', r1}}, {@subj_type={'subj_type', 0x3d, '#]@@-@vboxnet1@'}}, {@subj_type={'subj_type', 0x3d, '%&posix_acl_access-lo+'}}]}}) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000c00)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000c40)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000c80)=0x18) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000cc0)={r6, 0x123}, &(0x7f0000000d00)=0x8) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000d40)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4010641c, &(0x7f0000000e00)={r7, &(0x7f0000000d80)=""/118}) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000e40), &(0x7f0000000e80)=0x10) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000ec0)='/selinux/status\x00', 0x0, 0x0) 03:12:02 executing program 4: [ 173.527080] audit: type=1400 audit(1555816322.859:37): avc: denied { map } for pid=7112 comm="syz-fuzzer" path="/root/syzkaller-shm317349620" dev="sda1" ino=16489 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 173.580150] audit: type=1400 audit(1555816322.899:38): avc: denied { map } for pid=7128 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=69 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 173.743935] IPVS: ftp: loaded support on port[0] = 21 [ 173.934488] IPVS: ftp: loaded support on port[0] = 21 [ 173.943898] chnl_net:caif_netlink_parms(): no params data found [ 174.002878] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.009406] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.016970] device bridge_slave_0 entered promiscuous mode [ 174.026375] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.032824] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.040001] device bridge_slave_1 entered promiscuous mode [ 174.069118] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.078642] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.092706] IPVS: ftp: loaded support on port[0] = 21 [ 174.127952] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.135357] team0: Port device team_slave_0 added [ 174.141230] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.148714] team0: Port device team_slave_1 added [ 174.158999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.171732] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.184932] chnl_net:caif_netlink_parms(): no params data found [ 174.252144] device hsr_slave_0 entered promiscuous mode [ 174.290317] device hsr_slave_1 entered promiscuous mode [ 174.365464] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.374947] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.416851] IPVS: ftp: loaded support on port[0] = 21 [ 174.426651] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.434211] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.442036] device bridge_slave_0 entered promiscuous mode [ 174.456177] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.462675] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.469597] device bridge_slave_1 entered promiscuous mode [ 174.488131] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.494655] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.501685] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.508557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.526050] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 174.546092] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 174.587671] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 174.595419] team0: Port device team_slave_0 added [ 174.644940] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 174.652150] team0: Port device team_slave_1 added [ 174.660231] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 174.675717] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 174.689292] chnl_net:caif_netlink_parms(): no params data found [ 174.715497] IPVS: ftp: loaded support on port[0] = 21 [ 174.773263] device hsr_slave_0 entered promiscuous mode [ 174.850541] device hsr_slave_1 entered promiscuous mode [ 174.895700] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 174.923097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 174.987920] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.005967] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.028983] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.035526] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.042657] device bridge_slave_0 entered promiscuous mode [ 175.061760] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.068195] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.075587] device bridge_slave_1 entered promiscuous mode [ 175.082339] chnl_net:caif_netlink_parms(): no params data found [ 175.099740] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 175.142851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.165762] IPVS: ftp: loaded support on port[0] = 21 [ 175.202691] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.216123] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.227719] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.242868] chnl_net:caif_netlink_parms(): no params data found [ 175.279422] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.285966] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.293415] device bridge_slave_0 entered promiscuous mode [ 175.303642] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.309993] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.317045] device bridge_slave_1 entered promiscuous mode [ 175.323444] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.331134] team0: Port device team_slave_0 added [ 175.337288] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.365543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.373640] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.381221] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.388304] team0: Port device team_slave_1 added [ 175.394037] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.403920] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.409997] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.428396] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 175.441931] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.460417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.472004] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.480574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.488522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.496375] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.502765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.532639] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.539059] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.546588] device bridge_slave_0 entered promiscuous mode [ 175.554303] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 175.562981] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.612169] device hsr_slave_0 entered promiscuous mode [ 175.650454] device hsr_slave_1 entered promiscuous mode [ 175.691979] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.699220] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 175.708195] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.714587] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.723185] device bridge_slave_1 entered promiscuous mode [ 175.731944] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 175.741083] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 175.747176] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.765013] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.773161] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.780885] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.787224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.794195] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.801359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.808357] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 175.817353] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 175.837509] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 175.852299] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 175.859791] team0: Port device team_slave_0 added [ 175.866540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.876326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.884141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.892212] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.898563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.905517] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.916235] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 175.932468] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 175.939652] team0: Port device team_slave_1 added [ 175.945418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 175.964411] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 175.973790] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 175.983358] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 175.992159] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 175.999671] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.014133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.022794] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.030516] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.036848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.058926] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 176.067588] team0: Port device team_slave_0 added [ 176.073711] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.102999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 176.110294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 176.117484] team0: Port device team_slave_1 added [ 176.123010] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 176.131015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.139636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.147487] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.156611] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.223723] device hsr_slave_0 entered promiscuous mode [ 176.260490] device hsr_slave_1 entered promiscuous mode [ 176.312569] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 176.319659] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.327068] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.334055] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 176.341175] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.348378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.359100] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.366737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.375667] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.384160] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.399322] chnl_net:caif_netlink_parms(): no params data found [ 176.430982] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.439954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.452276] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 176.459506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.467478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.476368] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.545081] device hsr_slave_0 entered promiscuous mode [ 176.590404] device hsr_slave_1 entered promiscuous mode [ 176.641537] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.648543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 176.663136] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 176.677874] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.687180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.694666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.702737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.712450] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.718944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.728097] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 176.736870] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 176.757850] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.765999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.774074] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.785447] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 176.803987] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.810656] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.817825] device bridge_slave_0 entered promiscuous mode [ 176.828669] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.836299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.844209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.853934] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 176.860718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.868756] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.876077] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.883063] device bridge_slave_1 entered promiscuous mode [ 176.907987] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 176.934492] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 176.943788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.957544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.965606] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 176.976945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.995235] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.007714] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.046323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.059532] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.069431] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.075765] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.085597] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.102597] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 177.109815] team0: Port device team_slave_0 added [ 177.119994] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.127320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.137150] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.146493] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.155111] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 177.163163] team0: Port device team_slave_1 added [ 177.169330] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 177.178870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.186815] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.195556] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.202072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.210363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.217745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.225154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.237766] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.244963] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.254235] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready 03:12:06 executing program 5: 03:12:06 executing program 5: 03:12:06 executing program 5: 03:12:06 executing program 0: [ 177.324153] device hsr_slave_0 entered promiscuous mode [ 177.356182] device hsr_slave_1 entered promiscuous mode 03:12:06 executing program 0: 03:12:06 executing program 5: [ 177.405073] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.422179] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 03:12:06 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000580)=""/101, 0x360}], 0x1) recvmmsg(r0, &(0x7f0000000180), 0x800000000000286, 0x0, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) lsetxattr$security_smack_entry(0x0, &(0x7f00000001c0)='security.SMACK64EXEC\x00', 0x0, 0x0, 0x0) 03:12:06 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYBLOB="0f00000081ea790c138c731c32851fb7ac2d78fbdcb3dc62af888d46a705ec544c37486834cae2edc1d3e2d0e03ae37a6d78801ba195725449034a77d89c1e1e8ea92b74e5e6817bba45932a7dee98ad672374"], 0x0) [ 177.464440] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 177.472213] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 177.482598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 177.496576] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 177.510071] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.516437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.517681] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.545697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.559647] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.566075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.580234] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 177.589687] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.603743] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 177.614688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 177.622009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 177.629690] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 177.639839] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.647039] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.655473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.663496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 177.675058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.690675] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 177.697134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.707425] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.725429] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 177.733337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.743889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.755475] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.763479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 177.773020] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 177.783021] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 177.790408] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.798817] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 177.806128] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 177.817966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 177.829760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.838531] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.846273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 177.854501] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 177.862708] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.869720] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 177.878399] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 177.885738] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.896574] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.910964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 177.919364] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.927212] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.935602] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 177.943228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.952958] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 177.962326] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 177.975455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 177.982504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 177.991053] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 177.998578] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.006699] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.014617] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.021038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.027978] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.035809] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.043883] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.052432] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.060427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.068146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.078629] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.084987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.099675] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.118450] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.127897] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.138600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.150559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.158466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.166640] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.176491] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.188479] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.197067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.210468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.217944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.227751] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.238200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.246274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.254483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.264443] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.272156] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.278174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.291389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.299043] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.310420] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.319157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.326877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.337882] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.348787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.357573] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.365103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.374817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.384195] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.390757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.401661] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 178.410683] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 178.421920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.428604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 178.436746] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.448826] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 178.455813] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.466764] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.487962] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 178.496014] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.515185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.533737] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.540179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.552417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.562558] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 178.569624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 178.577504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.593862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.610784] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.617204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.630916] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 178.639117] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.657159] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 178.665008] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.678466] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 178.685929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.694177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.702562] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.714019] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 178.721774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.729598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 03:12:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000a40)={"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"}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000140)={[], 0x0, 0x300200}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 178.741140] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 178.753591] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 178.775315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.783903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.785061] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. [ 178.795974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.814795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.825120] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 178.832028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.873668] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 178.908153] 8021q: adding VLAN 0 to HW filter on device batadv0 03:12:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286407, &(0x7f0000000040)={&(0x7f0000000000/0x1000)=nil, 0x0, 0x0, 0x0, &(0x7f0000000000/0x3000)=nil}) 03:12:09 executing program 5: madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0x0) mlockall(0x3) 03:12:09 executing program 0: ioctl(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000640)='\x06\x00\x00\xb6\xafTJ\xa24\xbe\x02\xff\x8b\x90\x8a\xd3\xb3\x8cm\n\x94E\xcb\xec\xfcMpG\x1f\xdc\xb2\bK\x90\xbc\x9e\x04MP)\xb0~*#b\xa1F\x99\xe0\x0eD\xc60\xde?\xcc\xaa\\Y\xe2\x8f\x1b\x01\xe9\xa6\xb1$U\x94\xea#\xd3\xb7\xf1\x8b\xda\xba||\xeeZ+\xed^6\xd1.\xc0\x029\xd8\xb4]\xea\x88\x95\xc0Km\x10\xebP9\xb5\xe6I,tx\xaa]\xfeH\xff\b4\x8fHmj\x91@\xc6y\xd9\x12\xbe\xe1 S\xda~\x89\xf5u*\x92\x05$Hvo\xfa}\x15\xec\x85\x85\x19\x18\xcd\xb4\x8fyR\xeec!\xa9&\xad\xbd\xdd\xa6\x19j\x04\v\x80a\r\x9b(*\xafS\xd7 \xd2D\x06nIQ\x0e\xb1\xf3)\xbd\xaa\xa1\xf2\xadh\v\xd3l\xa7\x9c\x9f\xde(5\x9c_\xc3M\xbf(\xb4\xb8\x89e5q\xf4oI\xfd>\x8d\x19V?#\x95\xf3l\xd3\"?/t\x1aR9\xce\xc1\xaf/\xae\xd7\xd6a\xa01>', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)}], 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0xc00000) 03:12:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005}) r1 = socket$kcm(0x29, 0x805, 0x0) syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80%\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') 03:12:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1800008912, &(0x7f00000001c0)="1098ce66000000007be070") sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) 03:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x7400000000000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:12:09 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6076ca95006c0000fe800000000000000000000000000000000000000000000000000000000000000003000000000000070800000000ddffffffc810ff020000000000000000000000000001000000000420880b0000000000000800000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000"], 0x0) 03:12:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0x80087601, 0x0) [ 180.123317] hrtimer: interrupt took 34087 ns [ 180.123334] device nr0 entered promiscuous mode 03:12:09 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="baa000edf26df20f080347640f0058d5640f320f381dec0f221b8d4e9c66b80500000066b94a7b00000f01c1", 0x2c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000004c0)={"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"}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f0000000100)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4cb], 0x1f000}) ioctl$KVM_RUN(r2, 0xae80, 0x7400000000000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:12:09 executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) mount$9p_tcp(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x2002004, &(0x7f0000000000)=ANY=[]) 03:12:09 executing program 0: 03:12:09 executing program 2: 03:12:09 executing program 4: 03:12:09 executing program 5: 03:12:09 executing program 2: 03:12:09 executing program 1: 03:12:09 executing program 0: 03:12:09 executing program 4: 03:12:09 executing program 3: 03:12:09 executing program 3: 03:12:09 executing program 2: 03:12:09 executing program 0: 03:12:10 executing program 1: 03:12:10 executing program 4: 03:12:10 executing program 5: 03:12:10 executing program 0: 03:12:10 executing program 3: 03:12:10 executing program 2: 03:12:10 executing program 4: 03:12:10 executing program 1: 03:12:10 executing program 5: 03:12:10 executing program 3: 03:12:10 executing program 0: 03:12:10 executing program 2: 03:12:10 executing program 1: 03:12:10 executing program 4: 03:12:10 executing program 5: 03:12:10 executing program 3: 03:12:10 executing program 3: 03:12:10 executing program 2: 03:12:10 executing program 1: 03:12:10 executing program 4: 03:12:10 executing program 5: 03:12:10 executing program 0: 03:12:10 executing program 4: 03:12:10 executing program 3: 03:12:10 executing program 1: 03:12:10 executing program 0: 03:12:10 executing program 5: 03:12:10 executing program 2: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="0ad401003c123f319bd070") r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x2, @remote, 'veth0_to_team\x00'}}, 0x1e) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040)) ioctl$PPPIOCGMRU(r1, 0x40047452, &(0x7f0000000140)) 03:12:10 executing program 4: r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) close(r0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80024321, 0x0) 03:12:10 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e24, 0xf15, @mcast2, 0x1}, {0xa, 0x4e21, 0x1, @empty, 0x10001}, 0x80, [0xffffffff80000001, 0xdc24, 0x40, 0x2, 0x200, 0x7, 0x7, 0x4]}, 0x5c) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) syz_emit_ethernet(0x21a, &(0x7f000070aef1)={@local, @empty=[0x3, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}, @broadcast}, @udp={0x0, 0x4e20, 0x8}}}}}, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8200, 0x0) r2 = getpid() fcntl$lock(r0, 0x27, &(0x7f00000000c0)={0x3, 0x0, 0x1f, 0x2, r2}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00002bbd7000ffdbdf25030000000400020008000400fd0000000800060001e4ffffb1ea8a5ef9f551306ec6a653e1edd57b6a6767b7ff81907c9ed2b75e51eb88f13e288e03d30cf12180fd15e7be37f73c837022131474c187ca654719f31a2bce965aaece7418fd1b44e3e868ce37c2af"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 03:12:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioprio_get$pid(0x3, r3) 03:12:10 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x7, 0x400) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r2 = socket$inet6(0xa, 0x2, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x1ff}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback, 0x40000000001, 0x0, 0xff, 0x1, 0x3f316862}, 0x20) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000240)) r4 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x1, 0x2) bind$alg(r4, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x0, 0x0, 0x3, 0x41}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x800, 0x2}, 0x20) 03:12:10 executing program 3: mmap(&(0x7f0000000000/0xfda000)=nil, 0xfda000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc7) accept4$ax25(r1, &(0x7f0000000080)={{0x3, @null}, [@netrom, @null, @bcast, @default, @rose, @remote, @rose, @default]}, &(0x7f0000000000)=0x48, 0x800) 03:12:10 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x100, 0x0) sendto$ax25(r1, &(0x7f0000000100), 0x0, 0x4, &(0x7f0000000140)={{0x3, @bcast, 0x2}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @default]}, 0x48) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) mount$9p_fd(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 03:12:10 executing program 4: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) open(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0xe) write(r1, &(0x7f0000000600)="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", 0x1e3) sendfile(r1, r2, 0x0, 0x10000) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./bus\x00') [ 181.269272] audit: type=1400 audit(1555816330.599:39): avc: denied { create } for pid=7356 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:12:10 executing program 0: seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x407ffffffa}]}) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x100000000406, r0) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x10001, 0x8, 0x400, 0xfffffffffffffff8, 0x0, 0x1, 0x40, 0x8, 0x9, 0x2000000000, 0xfffffffffffffffe, 0x10001, 0x1, 0x100, 0x0, 0x3, 0x9, 0x400, 0x6b, 0x5, 0x2, 0x800, 0x5, 0xfffffffffffffff7, 0x8000, 0x3, 0xfea, 0x9, 0x0, 0x10001, 0x6000000, 0xb5, 0xd08, 0x1f, 0x6, 0x1f, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0xc600, 0x6, 0x1, 0x7, 0x9, 0x3}, 0xffffffffffffffff, 0x6, 0xffffffffffffff9c, 0x3) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x64, r3, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xac}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4ea}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x4001) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10c1200}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x12c, r4, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x48, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x86ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0xa4, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd55a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffeffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x32ef4090000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$SIOCRSACCEPT(r1, 0x89e3) write$P9_RLOCK(r1, &(0x7f0000000480)={0x8, 0x35, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x6fb, @remote, 0xfffffffffffffffa}}}, &(0x7f0000000440)=0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="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"], 0x1a) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x6) 03:12:10 executing program 5: gettid() capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) keyctl$negate(0xd, 0x0, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) 03:12:10 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300"/35, 0x23}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001340)='/dev/midi#\x00', 0x7, 0x40801) ioctl$TIOCMSET(r1, 0x5418, &(0x7f00000001c0)=0x6) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x201, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000140)={0x19, 0x4, 0x14, 0x13, 0x6, 0x6, 0x4, 0x4b, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000240)) fstat(r1, &(0x7f0000001380)) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000180)={0x2, 0x5}) write$sndseq(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) socket$isdn_base(0x22, 0x3, 0x0) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) 03:12:10 executing program 3: r0 = socket$unix(0x1, 0x2, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/115, 0x33e}, 0x0) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000000)=0xfdff, 0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x2, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000001c0)={0xf, @pix_mp={0x4, 0xff, 0x4c47504a, 0x4, 0x1, [{0x1, 0x2}, {0x3, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x9c9, 0x1000}, {0x4, 0x6}, {0x9}, {0xfffffffffffff801, 0x52e9}], 0x9, 0x8001, 0x3, 0x2, 0x7}}) ioctl$VIDIOC_G_STD(0xffffffffffffff9c, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r1, 0x40085618, &(0x7f0000000180)=r2) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r0, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1) 03:12:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioprio_get$pid(0x3, r3) [ 181.397482] audit: type=1400 audit(1555816330.599:40): avc: denied { write } for pid=7356 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:12:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioprio_get$pid(0x3, r3) 03:12:10 executing program 0: syz_emit_ethernet(0x146, &(0x7f0000000440)={@local, @local, [], {@ipv6={0x86dd, {0x0, 0x6, "f74b99", 0x110, 0x0, 0x0, @initdev, @empty, {[@hopopts={0x0, 0x2, [], [@calipso={0x7, 0x10, {0x0, 0x2, 0x0, 0x7fffffff, [0x0]}}, @pad1]}], @dccp={{0x4e22, 0x4e23, 0x4, 0x1, 0xf4ea, 0x0, 0x0, 0xf, 0x8, "e2be28", 0x6, "7e798e"}, "6ce2eefef6ecf445a5a598be7aa42cd63abc9e69ed26d0c841b7c130273f03268ddab930ab7fe79f47453dc245cf95fecafb2a368cfd627aabc31db354e3f60c172de01ceb6d26faf7ef4bdf0505cc9d598ce269ab279de919e44cd7935ee074be06c8e8a995529a877105e969b7f0b4f30f07d259f592ff153e238669a20d58b65ae6080211e0ebe084967f93e9c6acd2f4a96d4ecc9849251aca553ec9e491a74e82c41694c66a08f45c5a268a7de9354b234f57d6e656cf40cfc310dab60316f8d6f665168f574b0efed1238a917c5de52443ebe52d131a2ac89956d6f5c0"}}}}}}, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x10000) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000040)) [ 181.473193] audit: type=1400 audit(1555816330.599:41): avc: denied { read } for pid=7356 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:12:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x9, 0x20000) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000080)={0x2, 0x0, 0x94e, 0x3}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000200)='vxcan1\x00', 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r2, &(0x7f00000000c0)="ee7c0d28746e9a754903c0915047dd6db2b30cedb366b4", 0x17, 0x0, 0x0, 0x24c) 03:12:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup2(r2, r1) ppoll(&(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f00000000c0)={0xffffffffffffffff, 0x7, 0x1, 0x10, 0x1, 0x4, 0x4}) 03:12:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x101}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) prctl$PR_GET_NO_NEW_PRIVS(0x27) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) sendto$packet(r1, &(0x7f0000000340), 0xffffff55, 0x57, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000100)='{\x00', 0x2, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) [ 181.686097] mkiss: ax0: crc mode is auto. [ 181.689196] device lo entered promiscuous mode 03:12:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) ioprio_get$pid(0x3, r3) 03:12:11 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e23, 0x1e7, @dev={0xfe, 0x80, [], 0x28}, 0x57cc2ef8}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={r1, 0xd2, "ab1d53dbf0668c7d757ad2e11f3387e24c729d217e8b93d6d544b8ce2e942016ac38d6497dbe1a763e94c7f55c70fa5e6dea0bd23bb496e652377806a56f239898448561eeceeb605229fd1d55e2e5ded4db83078d61b860ab3ab7ac6d3f3d92d3b53e7dce831ace9642b58582150aca56a07720965d0464c6712c8675653ba713319b6bc3ddc3e1a4091cb002434b9a65557c5873452ceba3a8da7934c3a88c09eeda420989f6b4667ff323baac16ad2fc3f82df3fcb990cd722b12d83518c46cd765f03ffdb57287a138439c5e1d1722a0"}, &(0x7f0000000240)=0xda) r2 = socket(0x2000000000000021, 0x2, 0x2) sendmmsg(r2, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x2}], 0x10}}], 0x1, 0x0) 03:12:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) [ 181.827112] mkiss: ax0: crc mode is auto. [ 181.841867] device lo left promiscuous mode [ 181.856917] device lo entered promiscuous mode 03:12:11 executing program 5: gettid() capset(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x5) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil) keyctl$negate(0xd, 0x0, 0x0, 0x0) connect$caif(0xffffffffffffffff, 0x0, 0x0) timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x0, 0x4) 03:12:11 executing program 4: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x401}], 0x1, &(0x7f00000000c0)={0x77359400}, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000200)) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) fchmod(r0, 0x7) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, &(0x7f0000000000)) mount$9p_rdma(&(0x7f00000003c0)='127.0.0.1\t', &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"]) ppoll(0x0, 0x0, &(0x7f0000000580), 0x0, 0x0) setrlimit(0xd, &(0x7f0000000040)={0x2, 0xfd}) 03:12:11 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x3) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x2}}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) r1 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfc, 0x24000000}, 0xc) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x315882, 0x0) connect$netrom(r2, 0x0, 0xffffffffffffff7b) 03:12:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x0, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f319bd070") openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x7, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0xd, &(0x7f0000000040)=""/204, &(0x7f0000000140)=0xcc) close(r2) close(r1) [ 182.059859] audit: type=1400 audit(1555816331.389:42): avc: denied { create } for pid=7452 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 03:12:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:11 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) prctl$PR_GET_ENDIAN(0x13, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) [ 182.240270] audit: type=1400 audit(1555816331.399:43): avc: denied { bind } for pid=7452 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 182.271139] mkiss: ax0: crc mode is auto. 03:12:11 executing program 3: mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x1f47311a) r0 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) read(r0, &(0x7f0000000180)=""/19, 0xfffffe47) r1 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = open(&(0x7f0000000340)='./bus\x00', 0x2, 0x0) splice(r2, 0x0, r3, 0x0, 0x100, 0x0) 03:12:11 executing program 2: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x100000a) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000011000/0x1000)=nil, 0x2302}}) 03:12:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(0x0) shmget(0x0, 0x1000, 0x141, &(0x7f0000ffe000/0x1000)=nil) shmat(0x0, &(0x7f0000ffb000/0x2000)=nil, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}, [0x7, 0x50bd, 0x5bbe, 0x7, 0x280000000000, 0x3, 0x400, 0x100000000, 0x4, 0x6, 0x100, 0xfffffffffffffffc, 0x0, 0x29, 0x6]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000240)={r3, @in6={{0xa, 0x4e23, 0xd191, @remote, 0x251e}}}, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) fsetxattr$trusted_overlay_nlink(r4, &(0x7f0000000300)='trusted.overlay.nlink\x00', &(0x7f0000000340)={'U-', 0xff}, 0x28, 0x1) accept(r0, &(0x7f0000000040)=@ethernet={0x0, @dev}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 03:12:11 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clone(0x80210a001ff4, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x4000000000400004, 0x9036) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x8, 0x301000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0x5, @ipv4={[], [], @rand_addr=0x401}, 0xffffffffffff8001}}}, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x40011, @local, 0x0, 0x0, '\xfa\x94\x00'}, 0x2c) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0x0) 03:12:12 executing program 5: ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) clock_gettime(0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0xfffffffffffffdb8) ptrace$getregs(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_KEEPCAPS(0x7) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(0xffffffffffffffff, 0x4040ae70, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000003540)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) connect$inet(r0, &(0x7f0000606ff0)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg(r0, &(0x7f00000010c0)=[{{&(0x7f0000000bc0)=@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffff000]}}, 0x80, &(0x7f0000000d40), 0x116, &(0x7f0000000d80)}}], 0x6d7, 0x40400d4) 03:12:12 executing program 4: r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000580)={0x0, 0x20001800, 0x4000, 0x0, 0xffff, 0x1, 0x0, 0x2, 0x843, 0x3}) r1 = socket(0xa, 0x3, 0x2) fsync(r0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'bridge_slave_0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x21}}, @in6=@dev={0xfe, 0x80, [], 0x14}, 0x4e21, 0x0, 0x4e20, 0x2, 0xa, 0x80, 0x20, 0x6, r3, r4}, {0x9, 0x8, 0x7, 0xa8, 0x4, 0x7f, 0x223, 0x3}, {0x0, 0x7fff, 0xa607, 0x7}, 0x7, 0x6e6bb5, 0x2, 0x1, 0x1, 0x3}, {{@in6=@mcast1, 0x4d2, 0x3c}, 0xa, @in=@loopback, 0x3506, 0x7, 0x0, 0x8, 0x0, 0x4, 0x2}}, 0xe8) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') ioctl$TIOCGETD(r5, 0x5424, &(0x7f0000000680)) set_thread_area(&(0x7f0000000580)={0x7a, 0x20001800, 0x4000, 0x200, 0xffff, 0x1, 0x101, 0x2, 0x843, 0x3}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000640)=ANY=[@ANYBLOB="539b9105ab1072c24e2b98df1388f1adc93f6cb6cd00"/35], 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') 03:12:12 executing program 2: fcntl$lock(0xffffffffffffffff, 0x0, 0x0) ptrace$setregset(0x4205, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x2000) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) r2 = syz_genetlink_get_family_id$tipc2(0x0) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x108, r2, 0x10, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}]}, @TIPC_NLA_SOCK={0x44, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffffffffff81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x100}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) 03:12:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:12 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x400, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f000040e000/0x2000)=nil, 0x2000}, &(0x7f0000000140)=0x10) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x200, 0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000d4b000/0x4000)=nil, 0x4000}, &(0x7f0000000080)=0x10) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000e6b000), &(0x7f0000a83000)=0xb) 03:12:12 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) prctl$PR_GET_ENDIAN(0x13, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a) 03:12:12 executing program 5: add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000140)="0100000000a01ec319256d7604dee4010000001c9245655c", 0x18, 0xfffffffffffffffe) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4) 03:12:12 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:12 executing program 3: mknod(&(0x7f0000000200)='./file0\x00', 0x1120, 0x0) r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x27e, 0x0) r1 = fcntl$getown(r0, 0x9) ptrace$setregs(0xf, r1, 0x334e, &(0x7f0000001380)="0999b2910e515fe21bc0101908f12b31cd21518e56b5a734bebb4f") write$binfmt_script(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="337e202e25404280c95706000000e78b03001c2e60e3d53d03e399b8b647074d385208422ec995f586bc2e6189eb1ecaf1ac50311ce2cdf5a384d04610cc036460c0034357907d886f99f3df61cd73dd3a4e5b9925f8f50d0c91adb9328b5a9ccdb2e1"], 0xb) clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000001300)) ptrace$setopts(0x4206, r2, 0x0, 0x0) clone(0x10000, &(0x7f0000000240)="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", &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000001240)="8196cf44d65354ff4d8aa73914b432a204efcfe76de629da677946576b556be10a277fb8f119f702827e45f910ca0e0fdbfef98dc210c620a42e1d182b8dcacd2b1e2125082b6cda871e27f521a31d705ffa74bc5ede3e156d9e2d293b92bb01c8a7072ff923cd2eeb0f15d16feb6034508604930a8e4dcddb2752b26c3e21f9aa615c469177e06901cbf3f2ead43f0e97177eae63fba594e28c7410f1e97243479d11b0ea93595f9806f7e24c354e29769b5e21cd") tkill(r2, 0x3d) ioctl$EVIOCGABS20(r3, 0x80184560, &(0x7f0000001340)=""/10) ptrace$cont(0x18, r2, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x242d, 0x0, 0x0, 0x3, 0x1}) ptrace$cont(0x1f, r2, 0x0, 0x0) 03:12:12 executing program 5: r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @empty}, {0x306, @link_local}, 0x8, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond0\x00'}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x0, 0x0) close(r1) 03:12:12 executing program 4: socket$inet(0x2, 0x4000000000000001, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101200, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000d40)={0x0, @in={{0x2, 0x0, @local}}}, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) setpriority(0x0, r0, 0x10000) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x8) open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000c40)=@v3={0x3000000, [{}, {0x90c, 0x3f5d}]}, 0x18, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0, &(0x7f00000003c0)='system.posix_acl_default\x00', &(0x7f0000000440)='z@\x00']) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e4466696c65302c776f726be469723d2e"]) 03:12:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:12 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x3, &(0x7f0000000180)="0adc1e123c123f319bd070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="85000000180000006c000000000095000000000000001d3074ac14d9759e09c01db997513bf580e5ab9dc24890e1f6ee4d85332d1d52aecb03e3bbd12a91c5a2542ec7216672584190a57c882441c3e89b20f6f69056e630895f5c81b996fc917037c8e5607c0834e421a74c9d460628726e75c62c8c911f4ad210662d45edb0a165b2150d4306ebbb371ac2363e400970cbd1c14226"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) r2 = syz_open_dev$dspn(&(0x7f0000000400)='/dev/dsp#\x00', 0x4, 0x400400) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r3, 0x420, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x64, 0x5, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6f5d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="ce494278b6bf11ae642bd2cfeeb2", 0x0, 0xffff}, 0x28) 03:12:12 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000002640)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001400)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000480)='/dev/snd/pcmC#D#c\x00', 0x8000, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f00000004c0)='-vmnet1eth0#\'\x00', 0xe) sendmsg$alg(r1, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000008e80)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001540)=""/165, 0xa5}], 0x1}}], 0x1, 0x0, 0x0) [ 183.305995] audit: type=1400 audit(1555816332.639:44): avc: denied { ioctl } for pid=7519 comm="syz-executor.2" path="socket:[28787]" dev="sockfs" ino=28787 ioctlcmd=0x1267 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 03:12:12 executing program 2: pipe(0x0) r0 = syz_open_dev$vbi(0x0, 0xffffffffffffffff, 0x2) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000a40)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100082) r5 = memfd_create(&(0x7f0000000040)='\\eth0mime_type$%\x00', 0x0) pwritev(r5, &(0x7f00000000c0)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1, 0x81806) shmget(0x2, 0x1000, 0x80, &(0x7f0000fff000/0x1000)=nil) write$P9_RREADDIR(r0, &(0x7f00000006c0)=ANY=[], 0x0) r6 = add_key(&(0x7f0000000400)='ceph\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)="447433e87dc0138287d8adeb46b989449e0142a722f7fcd6a4b27f3de53c69b314d1af0dc22d1898609125c68dcc6af1d8a5a4de254f6e56da21f63f16f64e30d2702d460e1cd44e32a6a978a52d70bc91e8e3ffdf559103ee9fe5230aad2e920d8fac84af3e135c70cae096bb386883ba8aa266b0e38c81d34a4b4452f628e5040a4e81501de85926854c2766b12db3ef74f00079c17ce25515919cdea21db77d07d4b18a10a53a548734e565662cb51caedb6f57c651954fb469e105281fae9847c21cc97ecd88c2fac782ef28d6208951ae4835e8f06cd9dcc42c77e8", 0xde, 0xfffffffffffffffb) r7 = request_key(&(0x7f0000000600)='.request_key_auth\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000680)='\x00', 0x0) request_key(&(0x7f00000006c0)='logon\x00', &(0x7f0000000700)={'syz', 0x3}, &(0x7f0000000740)='.request_key_auth\x00', r6) keyctl$instantiate(0xc, r6, &(0x7f0000000580)=@encrypted_new={'new ', 'ecryptfs', 0x20, 'trusted:', 'TIPCv2\x00', 0x20, 0x8001}, 0x32, r7) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000100)={r4, 0x0, 0x50ee, 0x3, 0x7}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6b2, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default]}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r5) r8 = getpid() perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x8, 0x101, 0x2, 0x1, 0x0, 0x100000001, 0x200, 0x8, 0x418, 0x0, 0x0, 0x1, 0x1, 0x1, 0xff, 0x7f, 0x4, 0x174, 0x1, 0x4, 0x7ff, 0x0, 0x1, 0xd27, 0x2, 0x7, 0xffffffff, 0xffffffff, 0x5, 0x36, 0xdd, 0x0, 0xedb, 0x0, 0x5a15aa2a, 0x8, 0x0, 0x100000001, 0x5, @perf_config_ext={0xf1, 0x5}, 0x640, 0xffffffffffffe9d8, 0x4, 0x6, 0x80000001, 0x5, 0x8}, r8, 0x5, r3, 0x8) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000080)) ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f00000008c0)=ANY=[@ANYRESDEC]) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e23, 0x69378ec7, @mcast1, 0x8}, 0x1c) sendfile(r4, r5, 0x0, 0x20000102000007) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) 03:12:12 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.cpu\x00\x97\xebH\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9b~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\xf2\xcf`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87\xcf\x02!\xae\xf4\x85Ao\x82\xcf\xcc\xe2)ql\xe9\x10\xf0X\x17\xf8Q\xf0\xd6\x88\x0f\xb9\xf7]y3?X\xbc\xba(\x1f=\xd3\x0f\xa3\x02\xc4\xaa\xcda\x92i\xf3\xe0\xb2y\xbb\xdc\xff2\xe2f\xadi\xd9\xd8]7\x94ZH\xba\x895\x9e\xd9,Q\xf9\xda-o\xe8\xdf\xdd\x9e\xd4 \xc2%s\x8bZ\xc0\xa0D\xdbD\x13x\xc7A\xe9\xfaf\x10\xa5S\xd2\x83\x9d\x8a\xe6\xc9ODL|\xe3Xh\a\xfd\xa2\x9e\xb3\xbb\xb8\x9b\x82N+j\xd3\x8c\xec\xd3\xd0W\x96\xbc\xdf\xf9\xe5\xab+\x0f\"\x17U2\xa8\xcf\xa5\xd2\xe5\xef\xbbbz\xd2\x80\xb2\x9f\x15\xab\a\xe9\xa2\xe6H\f~\xad\x0f\x91\xe5\xbc\xb4DT`\x94\xca4\n\x18\xf9\xcd\xc2\xcb\x95Vj(\xc7\xc0oN7\xce\xff#\xb3\xca\x10\x96\x89\x1b\x81+\xef\xd6Ib\xd4f\x9bM\x02\'-(\b\xca\x85j\xf7\xfewb\xd0', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x400000010) 03:12:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:12 executing program 0: r0 = socket$inet(0x2, 0x80001, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={r1, 0x3, 0x8156}, &(0x7f0000000100)=0xc) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r0, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 03:12:12 executing program 3: socket$netlink(0x10, 0x3, 0x400000000000004) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) connect$nfc_llcp(r0, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x5, 0x127, 0xb9d, "d7b37fba03c8dc0d081ea01c57e8ebb3073ebc8c1503421627cbd430484dfa2f4f1d59a87663faddeccc1aa94ad10e1f80e86214fb109475221427b2c5c06b", 0xc}, 0x60) 03:12:12 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$setstatus(r0, 0x4, 0x40400) socket$inet(0x2, 0xb, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 03:12:13 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000080)=0x7fffffff) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000280)=[{{0x77359400}, 0x17, 0x7ff, 0x8}, {{}, 0x0, 0x1, 0x4}, {{0x0, 0x7530}, 0x15, 0x0, 0x7477}, {{0x77359400}, 0x2, 0x9c, 0x40}, {{0x77359400}, 0x16, 0x3, 0x3f}, {{0x0, 0x7530}, 0x15, 0x8f, 0x2}, {{0x77359400}, 0x15, 0x0, 0x20000000}, {{r1, r2/1000+10000}, 0x1f, 0x5, 0x3ff}], 0xc0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000180)=""/223) [ 183.706620] print_req_error: I/O error, dev loop0, sector 0 [ 183.713348] Buffer I/O error on dev loop0, logical block 0, lost async page write 03:12:13 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000002a00)=[{0x0}], 0x1}}], 0x1, 0x0, 0x0) r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0x0, 0x0) dup2(r0, r1) writev(r1, &(0x7f00000023c0), 0x1000000000000252) 03:12:13 executing program 5: lookup_dcookie(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xffffffff) r2 = socket(0x100000000000011, 0x2, 0x0) bind(r2, &(0x7f0000000000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x88005) sendfile(r1, r3, 0x0, 0x800000000024) 03:12:13 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:13 executing program 0: r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket$key(0xf, 0x3, 0x2) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) ioperm(0x0, 0x0, 0x0) r5 = dup(r4) fsetxattr$trusted_overlay_nlink(r2, &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'L-', 0x4}, 0x28, 0x1) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000080)) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f00000001c0)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) write$capi20_data(r5, &(0x7f0000000300)={{0x10, 0x1, 0xb, 0x83, 0x40, 0x1}, 0xf5, "31b89a6b2402366b8941c3c5a45f53e694ffd8099987f31630cffd82e33958101bcb9f943ef17ab2701591b3cd1770db3836a6ba7e5536be30f186d486dfe9776a12a4aa48808ef3402a1644fc11f310f0dce721b63bf818994ec5072541108c28077d8cc49a2fa4cccbcdaa77002e1e7ea1ff5ff4564366f653412f137350fe2623e1a10923e68eec1c7b06a2fa00f31b252f97d8996429d382029555941718baf90f8f0c637e1a7309e138287dc9572e7f8a3510b1b7c387941369bec0d7cd77970e3d7ccfc63c8b34cc8a048c894e4427e08316f6df153cdfeee8232f3a39cdf2c8fb1e4f8fa2723c47aa3c99e6f3bdd9a8b121"}, 0x107) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000007c0)=0x2c0, 0x4) ftruncate(0xffffffffffffffff, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r5, 0x0, 0x24000810) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000000)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x486, 0x0, 0x0) r7 = open(&(0x7f00000000c0)='./bus\x00', 0x141046, 0x4010) lseek(r1, 0x0, 0x7) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) r10 = dup(r7) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000800)=ANY=[@ANYBLOB="06fa7e92a8f21983405df517db5593b49ee2a56e49e9f19d48bac09c1e036965e208e99eb43176fc5970fcad4fc7c0814d96244d6c5108bc14d2a4b473852399d144638c92845a18da5ee77ebdfafac950711a001cdb170bc6c90766e2f3f7bd0a729844eae585ad1654f5023358a93d84cb37623d693297911b15ae0179cac09148bb25598af77a692cc29a7420d695b3d76b8c96517085a7cd26825b6a8b2dcead33baf287dc43a3f0986faadd", @ANYPTR, @ANYBLOB="4da2ef5faf1d2b5b47f23c014a7149b2b9ed1f8700b97b7ea0b4040e542710beaa533e0ec0a1705d8d2b7f19d7d17fd59cfdfb0ce2b13cf706782e4464e5375fcd5de9a5e3803546855c072aea5a15514f7996519994da1ca02fbf0d348b5232b19135d1715dce38bfb9e30a59000f1e08184258036d3fc9bc7ad34a89a661ebcefb0f5b8a766da8e7aced64d71842c8dde7d7760af3805ce577382983ecb8d862659c1de10bf18f", @ANYPTR64=&(0x7f0000000980)=ANY=[@ANYRESDEC=r6, @ANYRES64=r7, @ANYRES16, @ANYPTR64, @ANYRES64=r10, @ANYBLOB="13dcc5a3e59f299b5b4a26f4f5419cd1d2781873c6265be1e5f59bdde75a057283b01cdcb726f07d2d77c1c14f1768f48c33d1e7182795bca18d02902b6aeba10403e5806f5bec172af3c62fc21422a26fe828307a11199846e2afb008ef6cccfff979936739499e0c21117bc2e98d68f817a6dfcd682bb3550ed8aa13a656f1d3a8c41cbb1e19e2680d6496", @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYRES16=r8, @ANYRESDEC=r9, @ANYRES32=r8, @ANYRES64=r10], @ANYBLOB="9739a21373e21338dc3e6893854c7b4bd88320351c3eda578e45b384ef6470a99cf25836fcb9941d97485afb2712c9b12e96dfbee030b97dc7ad964f7de266fe4ccc8fd8624812f8ee145941d94b18e52855affa8db275c6fcd19db6db1ad169b8fcfd7b478b3a08d358228d8b3fc3d2a13d4c14d3591bc578da01f8107a2cf04870736dd38bfcf12af6ca987436a3d596690c46f17d6eedc8256fbba8e8", @ANYRESOCT=r0, @ANYRESHEX=0x0]], 0x0) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, 0x0) ftruncate(r7, 0x2007fff) sendfile(r5, r7, 0x0, 0x8000ffeffffe) 03:12:13 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xfffffffffffffd7d) r0 = socket(0x11, 0x8000f, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000006c0)=0xe8) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000040)='./file0\x00', 0x5, 0x6, &(0x7f0000000500)=[{&(0x7f0000000080)="2a71e043510666ec4a15a1377f167c75a44f0af2bd3b05097f21942313f3f162c9ebbbc7d58066d3bf6bcd69918af593d8bb00c5f95582ae470b144b1cbc8e854f1a300c8b163c2532a18883b9577fcad0a1ecbc83993814ba3102dad5e870086d6cb10d5a4743b1e1467142a7e04507ccb6809dd97e1baa961d439842087b16390a828b7c3de28735436950e017fbbbe76eb997142b10eb9b30ba80605ae6ae5e12addc2900b6b14b6cb03cb2a6012575185918b5f00f17128da0afa0ca98437bab4df6c093cc4dc04438", 0xcb, 0xffff}, {&(0x7f0000000180)="ccd3b0a317772972bc4b2a436280261c976c", 0x12, 0x7}, {&(0x7f00000001c0)="41846f392ad5b5699e165bd2f20ee2fd9da172da0e8e64b937515776c87cfbc233298359791ee85496381aef6403e90e784f4803b9867919d4f3266d105b6051b9a20f47e2a75419ea65fd0d3a4280e84c8ebd6fe5c31e6616ad6a9afa125207a9d192c76542fbe1bc5e891f61f0a6dc62cde2c4ad8eb9d62de40922d9b2eb3deae3809ce28ec5350c0c041dee916bc0594fff3c9ebeeb4b49b790a7638c9c2b21c3b3bad186a6de2f2c3c73a74dd53c518804a2ac10069adabccb5117e3d4b91ef9816758817a4aa5b0b05a09dd49a4493b490672fa69f95453125638990207da3d83", 0xe3, 0x6}, {&(0x7f00000002c0)="d8df5231a3873ecb863c303c2c7025618ffeb5bbc44851a14bc50cdc0680ba61802d8feee5a99ea0a76ae3af27c5266a1d595a039e44b292868817e607e1f2a3056ea298977e43cc90d2610e235bb9474ad71afea923ff698a960f15b5fa0afabb22ce9b23f08f2572d25b197c18f8ca17c064d6403c93746c0c6b1bc25daa5074b38021d7efa274fb03a8a9930247a8a89fc1986fbd58d77132cea04bf4db36632ab7", 0xa3, 0x7}, {&(0x7f0000000380)="58aa64469be0cc6feb5823f5b6ec28ba3d64b841cdf8fe9bbbaea958b9a712ceeade12bc1b555fddfc2a072dbc1b58a68f6893a0d2ef76fd53f2b9bc292667ed1965dbc18d5691f7cb4c842aea5008008710d3e815fee92f99d1db0a82f0768e1de695efd567d91c48a312", 0x6b, 0xffffffffffff0243}, {&(0x7f0000000400)="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", 0xfc, 0x8000}], 0x1040400, &(0x7f0000000700)={[{@lazytime='lazytime'}], [{@dont_measure='dont_measure'}, {@seclabel='seclabel'}, {@subj_role={'subj_role', 0x3d, '#posix_acl_access'}}, {@smackfshat={'smackfshat', 0x3d, 'proceth0'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fowner_lt={'fowner<', r1}}]}) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) 03:12:13 executing program 2: syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="b100485caa2a43f586dd60e44d9300103c0000000000000000000000ff00000000000000000000000000014e24000004019078001dd5d6003131e000000000"], 0x0) [ 183.854118] overlayfs: unrecognized mount option "workäir=." or missing value 03:12:13 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:13 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ftruncate(r0, 0x8) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") clock_adjtime(0x0, &(0x7f00000001c0)={0x803f}) 03:12:13 executing program 2: r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x85) r1 = openat(0xffffffffffffffff, 0x0, 0x800, 0x68) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r2, &(0x7f0000000240)=""/4096, 0x1000) perf_event_open(&(0x7f0000001400)={0x7, 0x70, 0x0, 0x7fffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0xfffffffffffff992, 0x0, 0x8, 0x0, 0xe82d, 0xa8b4, 0x7, 0x8, 0x0, 0x5, 0x25, 0x1, 0x7ff, 0x200, 0x0, 0x0, 0x0, 0x40, 0x8, 0x16, 0x200, 0x5, 0x607, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000001240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000b2bbd7000fddbdf25010000003400070008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0c00040007000000000000000c000300ffff0000000000000c00020002000000000000000c000800030000000000000008000100000000001c00070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r0, @ANYBLOB="0800010000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000810) preadv(r2, &(0x7f00000024c0), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000000)=0x7ffffffc, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$smack_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r6, 0x641e) sendto(r5, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 03:12:13 executing program 1: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fff}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0xdf8f}) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x40, 0x181000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 03:12:13 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(r3, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:12:13 executing program 3: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000006, 0x200) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x740000, 0xffffffff7ff0bdbe}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xc, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x4, 0x0, 0x27, 0x7f}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r1, 0xfffffffffffffffe}, 0x8) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4008550d, &(0x7f0000000080)) 03:12:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:13 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20000, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f00000001c0)) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000180)={0x9, "cc43382e3a0f4103cd41026b4f5da6b40994f11813ef32f427c7f879326d7c34"}) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) getsockopt$inet6_dccp_buf(r2, 0x21, 0xf, &(0x7f0000000040)=""/189, &(0x7f0000000100)=0xbd) 03:12:13 executing program 0: ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x800000200000000}, 0x0, 0x0, 0xffffffffffffff9c, 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000003c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, 0x0) socket$inet(0x10, 0x3, 0xc) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000200)=0xffff) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f00000001c0)={0x0, 0x2710}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) sched_setattr(0x0, 0x0, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffff9c, 0x112, 0xa, &(0x7f0000000240)=0x3, 0x4) recvfrom$inet6(r0, &(0x7f0000000100)=""/185, 0xb9, 0xf06b07e17e5232ca, &(0x7f0000000080)={0xa, 0x4e24, 0xda0, @remote, 0x6}, 0x1c) 03:12:13 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) eventfd2(0x0, 0x80000) fcntl$setstatus(r0, 0x4, 0x6100) ftruncate(r0, 0x8200) lseek(r0, 0x0, 0x2) write$binfmt_misc(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7d8bc5d4a459425f8c64a09bcd1c9d4c16b83a377a59767eaa929ee30cd287f29505b0d4b66c849d0526cd22b8581d763ad3c134c606a484f2add056"], 0x3c) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x0) sendfile(r0, r2, 0x0, 0x4008000fffffffe) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0, 0x9}, 0x14) ftruncate(r1, 0x0) 03:12:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r2, 0x4008ae48, &(0x7f0000003580)={0x0, 0x0, @ioapic}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) 03:12:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) [ 184.406269] audit: type=1400 audit(1555816333.739:45): avc: denied { create } for pid=7670 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 03:12:13 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='('], 0x1) r1 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbb1) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, 0x3, 0x7, 0x185b}, 0xa) 03:12:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB="eb5cfbdedcadc82d581eb6c641f04e91ddce74ca7af440c6dfb9816b74164272"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0xaaaaafe, 0x0, 0x0, 0xffffffffffffffdd) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:12:13 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) [ 184.528236] audit: type=1804 audit(1555816333.839:46): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir176441794/syzkaller.Ev0xrt/23/bus" dev="sda1" ino=16582 res=1 03:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) [ 184.802197] audit: type=1804 audit(1555816333.969:47): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir176441794/syzkaller.Ev0xrt/23/bus" dev="sda1" ino=16582 res=1 [ 184.909798] audit: type=1804 audit(1555816333.969:48): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir176441794/syzkaller.Ev0xrt/23/bus" dev="sda1" ino=16582 res=1 03:12:14 executing program 2: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$TIOCSTI(r1, 0x40186f40, 0x7400dc) 03:12:14 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f319bd070") openat$md(0xffffffffffffff9c, &(0x7f0000000380)='/dev/md0\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1, 0x58}]}, &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x200000, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/policy\x00', 0x0, 0x0) sendto$netrom(r1, &(0x7f0000000240)="3a40c7411dea1da2f516ed9006f29b5a4039900e7ddd0290b8002babf511b4cd289ab2d186da326b1a97fd3a6878e7a01a8fff90157f949b70a81fcc22690fd0e8e101266c011b", 0x47, 0x4, &(0x7f00000002c0)={{0x3, @null, 0x1}, [@bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x9b, "015fd9ab2cc2caa2a4cb0b76b429159e4061fb658eb5a4e0049527267fe11a7befd7ab704b9c7f9b2e2bc7989d351a8a49b6075d4b1860809e80bdbbafc00249dd92024e515b3cd0f552988e150ab855172d861f07946e1ceeae4fe176d6ed16a3675a8d07a5d177dfb77a4ef16512555b154a9ae4050c97f87cc2eecbe2d3303038dc478d1ae21adc2c3db1e7abe602f7a801b1d6697c7d976473"}, &(0x7f00000000c0)=0xbf) 03:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:14 executing program 4: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="ab903eb7aa7793d4e2eece1d"], 0x1}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000040)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = syz_open_dev$midi(0x0, 0x0, 0x80000) write$UHID_CREATE(r2, &(0x7f0000001080)={0x0, 'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb}, 0x120) recvmmsg(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000480)=""/136, 0x88}, 0xbf}, {{0x0, 0x0, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/91, 0x5b}, 0x3}], 0x2, 0x40, 0x0) lstat(&(0x7f0000000300)='./file0\x00', 0x0) write(0xffffffffffffffff, 0x0, 0x0) 03:12:14 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(r3, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:12:14 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='('], 0x1) r1 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbb1) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, 0x3, 0x7, 0x185b}, 0xa) 03:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:14 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(r3, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:14 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(r3, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 0: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f00001d0ffa)='ramfs\x00', 0x1000818, 0x0) r0 = creat(&(0x7f00000001c0)='./file0/bus\x00', 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='('], 0x1) r1 = open$dir(&(0x7f0000000040)='./file0/bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0xbb1) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, 0x3, 0x7, 0x185b}, 0xa) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x40) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x2, 0xffffffffffffff03) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) fcntl$getown(r0, 0x9) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x8000000004e20, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x6) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)) r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 5: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r1 = socket$inet6(0xa, 0x803, 0x3) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r3, 0x0, 0x4000005) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(r3, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') prctl$PR_GET_SECCOMP(0x15) sendmsg$IPVS_CMD_DEL_DAEMON(r0, 0x0, 0x40000) dup3(r2, r1, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, 0x0, 0x4f}, 0x100) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 03:12:15 executing program 2: syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffe9a, 0x0, 0x0, 0xff37) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff86) ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x0, 0xfff, 0x6]}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f00000000c0)) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:12:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x8f) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x3, 0x2, 'client0\x00', 0x1, "c323ca1b5f58a47e", "66c90f2ccb45c976b3c5f4acb5af5ea1d362821dd5cb1965037115a792e8c897", 0x1, 0x3ffc0000000000}) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000006000000000075a000"/32], &(0x7f0000f6bffb)='GPL\x00', 0x80, 0xcc, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffeee}, 0x48) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x2002, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000700)='/selinux/commit_pending_bools\x00', 0x1, 0x0) renameat2(r1, &(0x7f00000003c0)='./file0/file0\x00', r2, &(0x7f0000000680)='./file0\x00', 0x1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0xfffffffffffffffd, 0x70, 0x3, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(0xffffffffffffffff, 0x40247007, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x50080, 0x0) ioctl$TIOCSBRK(r6, 0x5427) r7 = syz_open_procfs(0x0, &(0x7f0000000400)='mountinfo\x00') ioctl$TIOCGETD(r7, 0x5424, &(0x7f0000000580)) set_thread_area(&(0x7f0000000340)={0x6, 0x20001800, 0x0, 0x0, 0x10000000000ffff, 0x8000000000000001, 0x4000000080101, 0x2, 0xffffffff, 0x3}) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000480)={0x2a, 0x4, 0x0, {0x1, 0xbe, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) mount(&(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x820c01, 0x0) mount(&(0x7f0000000740)=ANY=[@ANYBLOB="2f6465762f6d640200363788d72474f9d295cfe15cf926e8ec5e02119b365138a8502f171a8bf2f3cd8727521b7cf8b3cdeb7ba533364a48e8b5f944eb67797c213d9d2a6dc1d796e969d1a7b18142ef78defcef3cf40caf01de96e37bcc8daf976f3a9ef7600aab942722b9c641616201b5a7d6abb90f74a2202c0c2ac81b686946a200f620aed50a4456e9"], 0x0, &(0x7f00000004c0)='nfsd\x00', 0x2000023, &(0x7f00000006c0)='\x8auU{-\x154\x05-\xab\xc0\xcb\x1an\xd76*5\xec2c\x9f\xcf\xb8\xb6v\x9aA\x06K\x95\xd4dx#\xf8\x90\r\xf1S\xc4\xc2\a\b\x03^\xe6b\x03\xaal)eb,z4\xc9\xe8\x11Y\xacV') mount(&(0x7f0000000940)=ANY=[@ANYBLOB="969957b52d30fea3a6942efad2628dcef5d3b6364e061019df973b2f53d859e769464fe2a2410d59da45d13169add1c5529ce3628e6153ceb2e151b4c4a2bdac535d60eb398d4d6952a19e3d52a29749828eb1caff4558ca709d9c13c28a2da129717e838eb618c9886828e09ad44bc03f33827c69c3fbb70d4b5fba995326c48ced38769a4d61db50c0ec11260778f607660f2b85e3cd0d67bc0cccd8dfba547fe5e36524ef742126514000d7cf7126e2536307a8290af7f78189fa963bfaf8cf0dee8d84a76599366358414b18f32d01f7a3d0b4802a4d706109f9138e415087feea00"/241], 0x0, 0x0, 0x80010, 0x0) mount(&(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x7ffff, 0x0) r8 = dup2(r7, r4) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f00000000c0)) ioctl$TCSBRKP(r7, 0x5425, 0x3) write$FUSE_OPEN(r8, &(0x7f0000000380)={0x20, 0x0, 0x8, {0x0, 0x1}}, 0x20) mount(&(0x7f0000000500)=ANY=[], &(0x7f0000000540)='./file0\x00', &(0x7f0000000800)='devtmpfs\x00', 0x847, &(0x7f0000000780)) [ 186.386415] kvm: emulating exchange as write 03:12:15 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20800, 0x0) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000080)={{0x2, 0x4}, 0x20}, 0x10) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000140)={r0}) 03:12:15 executing program 4: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00'/36]}) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0xddd3, 0x20000) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000200)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x8000102}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="8062f5584770e159015a8af7e75df146f2f8af8e7368632082a9c959bc8a5a22195c849b6d041f325d67c38266270ff76ec4ac1a843e5364dda152b4f31aff7cad76a8456a00a818b20448d2e20f141afcc95356ab34be4513", 0x59}, {&(0x7f0000000180)="09a657a723c6da89d0af211454a502d04d11b1b6f7b0fb576ed708046cd742820680e666ae65f39006f98b6a4fe500ac906cfc650b20ca38", 0x38}, {&(0x7f0000000300)="b4e9ec8121a7ed835c0374743a1e2a0cd97569b0e7f656cc5d740c191e670c7bbeae7f8d161327d11d4c874126b4f84f18056469c155d45f09b342fe7f726396c6c7d85d45e16e336aab2767f4886be6cad4785dd4489bda75377a9d9bb7b621e4b4835a75cba5c04b39b26ba915148951951c12c15ee3596ac4f57937ca181bf86715c35200e4f25eb4a264fea0a66ea2b8e1e1515a4836203605b9f115e86e8bb362c70de5366c4a8e7d911e3b9a678f0080cc3b3c53829873b0fc139a71d20271db0bec180d4975217f1e59ca", 0xce}], 0x3, &(0x7f0000000440)=[{0x110, 0x110, 0x2c6f, "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"}, {0x18, 0x10b, 0xc978, "72b3"}], 0x128}, 0x24000000) r2 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x6, @dev={[], 0x16}}, 0x1e, {0x2, 0x4e21, @rand_addr=0x1}, 'bpq0\x00'}) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000040)=0xfffffffffffffff8, 0x4) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c12") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc\xb2\x9c/sys/ne\xd3F\xf3\xe9v4/vsz\xf7\xd2\xa1t/sync_threshold\x00ZC_\xed\xe4}*\xa8\xb2A\x82\xf5\xd4T\xca\xdd\\\xf0%\xdc?\xd39;\xa5\x1d\x8f\xf0~\t\xc7\xdf^X.\xc4\xec\xf85\xeclf\xa4\xc1\x84\xde}y\x00\x00\x00\x00\x00\x00\xf3W\x87b\xa3\x9aT%2\xf4\x03\x04\xc5\x00`\xd6\xdc4\xd7\x01\xaf\x05\x9d\x06\xd9\b\x00\x00\x00\x00\x00\x00\x00\xfa\x92', 0x2, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f00000002c0)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = dup(r1) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x9, 0x5}, {0x7, 0x3f}, 0x3, 0x4, 0x1000}) mq_timedreceive(r2, &(0x7f0000000000)=""/88, 0x58, 0x0, 0x0) read(r2, &(0x7f0000001900)=""/4096, 0x1000) ftruncate(r3, 0x8007d) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000240)={0x361, 0x10001, 0x81}) sendfile(r2, r0, 0x0, 0x2008000fffffffd) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000100)) [ 186.612291] tmpfs: Bad mount option ! 03:12:16 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1, 0x40080) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000080)={0x1000, 0x80000001, 0x5, 'queue0\x00', 0x100000001}) r1 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r1, &(0x7f000003bfff)='/', 0x1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xe10b}) fallocate(r1, 0x1, 0x0, 0x7fff) lseek(r1, 0x0, 0x400000000004) 03:12:16 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) close(r0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) 03:12:16 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319b") r1 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @string=&(0x7f0000000040)}}) 03:12:16 executing program 0: openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/relabel\x00', 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0adc1f123c123f319bd070") sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00040000000000ff00000400000014df9202d80accd042a23c308964a537000000c93866fbddf94db92905afdd9196156ce9887779c1c15e00000000"], 0x1}}, 0x0) 03:12:16 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x400, 0x32315559}) syz_mount_image$reiserfs(&(0x7f0000000040)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x6a6, 0x4, &(0x7f0000000100)=[{&(0x7f00000000c0)="e6e4eb748f7ae625b879642746", 0xd, 0x7fff}, {&(0x7f00000001c0)="9371e3c5ff16d4d7b7f3f689b9c355144a4dabff41a9ae13994644dd88d6d53041bfabdb95263841ec6997cdbd48c4d81ce95176e1892767be78c41fb594d63da8a2c1dc34b0a878033906d8f73924bac9400e6d36e97c9891ab7383b98e7547952a0a7fa774efffa2b5edda64df4c65064dbbb2746e0b7dde4f2b7ab764ee6b5eccc596fbd9121ab10d0e49e3b120510b17f529", 0x94, 0x100000000}, {&(0x7f0000000280)="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", 0xfb, 0x9}, {&(0x7f0000000380)="3ced68a3d6c761af3075120207782a575e26ba08a3bd2da8081c1f0ebb58701c806aebdf314ff0a938d50fe42a731e8c7d50499519f4581613cf88be0da3d77424bf6bf31fa85cda1459476f540539970914970df7f8747cee389bb8c431d223ec82497d0ac0778273b6febc2d4c6df434452897114df6b6f985d20ddb6330f5a0e753ed2a6634e0d2555e89d9ae12086ec32c74e6d47822d33dd10dccb4fac21536ea730dbfbbe75ac2a668ba8064748eef9393667d2b253143c990ddf1df861f5befb5dc18784d85878d2fe8e01b9c8a650122c2f1", 0xd6, 0x3fe}], 0x8010, &(0x7f0000000480)={[{@data_journal='data=journal'}, {@commit={'commit', 0x3d, 0x1}}, {@hash_rupasov='hash=rupasov'}], [{@context={'context', 0x3d, 'staff_u'}}, {@dont_appraise='dont_appraise'}]}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000500)='/dev/qat_adf_ctl\x00', 0x210000, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000600)={{0x1, 0x5, 0x7, 0x9b7e, '\x00', 0x7}, 0x2, 0x0, 0x80000000, r2, 0x7, 0x46, 'syz1\x00', &(0x7f0000000580)=['&\x00', '\x00', ':posix_acl_accesseth1&.\xeb!(nodevwlan1)-\'\x00', 'hash=rupasov', 'dont_appraise', '+\x9a{&}bdev\xbd\x00', 'staff_u'], 0x56, [], [0x7fffffff, 0x5, 0x20, 0x9]}) 03:12:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='devpts\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') preadv(r0, &(0x7f0000000940)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f00000008c0)=""/106, 0x5b}, {&(0x7f00000007c0)=""/242, 0xf2}, {&(0x7f0000001380)=""/239, 0xfc36}], 0xc7, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000815fe45ae087185082cf0300b0eba06ec4000023000000000800004003000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 03:12:16 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0xfffffffffffffe39) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) connect$inet6(r1, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x9}, 0x8) [ 187.112924] ================================================================== [ 187.120475] BUG: KASAN: global-out-of-bounds in strscpy+0x20e/0x2c0 [ 187.126890] Read of size 8 at addr ffffffff8677b0b8 by task syz-executor.3/7826 [ 187.134335] [ 187.135971] CPU: 1 PID: 7826 Comm: syz-executor.3 Not tainted 4.14.113 #3 [ 187.143068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.152427] Call Trace: [ 187.155028] dump_stack+0x138/0x19c [ 187.158669] ? strscpy+0x20e/0x2c0 03:12:16 executing program 5: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="220000002100070700be0000090007010a00001e00003c0000ff040405000c000000", 0x22) r1 = fcntl$getown(r0, 0x9) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/mnt\x00') setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @mss={0x2, 0x2}, @timestamp, @timestamp, @timestamp], 0x5) [ 187.162225] print_address_description.cold+0x5/0x1dc [ 187.167422] ? strscpy+0x20e/0x2c0 [ 187.170981] kasan_report.cold+0xaf/0x2b5 [ 187.175174] __asan_report_load8_noabort+0x14/0x20 [ 187.180123] strscpy+0x20e/0x2c0 [ 187.183506] prepare_error_buf+0x94/0x1aa0 [ 187.187751] ? lock_downgrade+0x6e0/0x6e0 [ 187.191931] ? scnprintf_le_key+0x600/0x600 [ 187.196275] ? _parse_integer+0xe8/0x140 [ 187.200400] __reiserfs_warning+0x9f/0xb0 [ 187.204707] ? reiserfs_printk+0xd0/0xd0 [ 187.208780] ? ip6_string+0x3b0/0x3b0 [ 187.212598] reiserfs_parse_options+0xa16/0x1820 [ 187.217380] ? reiserfs_sync_fs+0xe0/0xe0 [ 187.221542] ? trace_hardirqs_on+0x10/0x10 [ 187.225810] ? __lock_is_held+0xb6/0x140 [ 187.229941] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 187.234972] ? lockdep_init_map+0x9/0x10 [ 187.239041] ? debug_mutex_init+0x2d/0x5a [ 187.243203] reiserfs_fill_super+0x461/0x2b20 [ 187.247714] ? finish_unfinished+0x1010/0x1010 [ 187.252313] ? snprintf+0xa5/0xd0 [ 187.255775] ? set_blocksize+0x270/0x300 [ 187.259834] ? ns_test_super+0x50/0x50 [ 187.263720] mount_bdev+0x2c1/0x370 [ 187.267341] ? finish_unfinished+0x1010/0x1010 [ 187.271917] get_super_block+0x35/0x40 [ 187.275800] mount_fs+0x9d/0x2a7 [ 187.279166] vfs_kern_mount.part.0+0x5e/0x3d0 [ 187.283666] do_mount+0x417/0x27d0 [ 187.287218] ? retint_kernel+0x2d/0x2d [ 187.291107] ? copy_mount_string+0x40/0x40 [ 187.295338] ? copy_mount_options+0x199/0x2f0 [ 187.299839] ? copy_mount_options+0x1fe/0x2f0 [ 187.305114] SyS_mount+0xab/0x120 [ 187.308560] ? copy_mnt_ns+0x8c0/0x8c0 [ 187.312461] do_syscall_64+0x1eb/0x630 [ 187.316339] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.321188] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.326372] RIP: 0033:0x45b69a [ 187.329571] RSP: 002b:00007f864dfd2a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 187.337296] RAX: ffffffffffffffda RBX: 00007f864dfd2b40 RCX: 000000000045b69a [ 187.344562] RDX: 00007f864dfd2ae0 RSI: 0000000020000080 RDI: 00007f864dfd2b00 [ 187.351822] RBP: 0000000000000004 R08: 00007f864dfd2b40 R09: 00007f864dfd2ae0 [ 187.359084] R10: 0000000000008010 R11: 0000000000000206 R12: 0000000000000004 [ 187.366343] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 187.373618] [ 187.375235] The buggy address belongs to the variable: [ 187.380597] __func__.31266+0x798/0x3a60 [ 187.384645] [ 187.386256] Memory state around the buggy address: [ 187.391176] ffffffff8677af80: fa fa fa fa 00 02 fa fa fa fa fa fa 00 02 fa fa [ 187.398543] ffffffff8677b000: fa fa fa fa 06 fa fa fa fa fa fa fa 07 fa fa fa [ 187.405911] >ffffffff8677b080: fa fa fa fa 00 00 00 02 fa fa fa fa 00 03 fa fa [ 187.413259] ^ [ 187.418435] ffffffff8677b100: fa fa fa fa 00 00 03 fa fa fa fa fa 00 03 fa fa [ 187.425807] ffffffff8677b180: fa fa fa fa 00 03 fa fa fa fa fa fa 00 00 00 00 [ 187.433158] ================================================================== [ 187.440517] Disabling lock debugging due to kernel taint [ 187.446675] Kernel panic - not syncing: panic_on_warn set ... [ 187.446675] [ 187.454062] CPU: 1 PID: 7826 Comm: syz-executor.3 Tainted: G B 4.14.113 #3 [ 187.462196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 187.471552] Call Trace: [ 187.474157] dump_stack+0x138/0x19c [ 187.477777] ? strscpy+0x20e/0x2c0 [ 187.481305] panic+0x1f2/0x438 [ 187.484486] ? add_taint.cold+0x16/0x16 [ 187.488476] kasan_end_report+0x47/0x4f [ 187.492442] kasan_report.cold+0x136/0x2b5 [ 187.496671] __asan_report_load8_noabort+0x14/0x20 [ 187.501594] strscpy+0x20e/0x2c0 [ 187.505478] prepare_error_buf+0x94/0x1aa0 [ 187.509721] ? lock_downgrade+0x6e0/0x6e0 [ 187.513883] ? scnprintf_le_key+0x600/0x600 [ 187.518201] ? _parse_integer+0xe8/0x140 [ 187.522269] __reiserfs_warning+0x9f/0xb0 [ 187.526432] ? reiserfs_printk+0xd0/0xd0 [ 187.530498] ? ip6_string+0x3b0/0x3b0 [ 187.534297] reiserfs_parse_options+0xa16/0x1820 [ 187.539053] ? reiserfs_sync_fs+0xe0/0xe0 [ 187.543203] ? trace_hardirqs_on+0x10/0x10 [ 187.547429] ? __lock_is_held+0xb6/0x140 [ 187.551523] ? workqueue_sysfs_register+0x3c0/0x3c0 [ 187.556534] ? lockdep_init_map+0x9/0x10 [ 187.560585] ? debug_mutex_init+0x2d/0x5a [ 187.564739] reiserfs_fill_super+0x461/0x2b20 [ 187.569230] ? finish_unfinished+0x1010/0x1010 [ 187.573807] ? snprintf+0xa5/0xd0 [ 187.577255] ? set_blocksize+0x270/0x300 [ 187.581311] ? ns_test_super+0x50/0x50 [ 187.585190] mount_bdev+0x2c1/0x370 [ 187.588812] ? finish_unfinished+0x1010/0x1010 [ 187.593388] get_super_block+0x35/0x40 [ 187.597299] mount_fs+0x9d/0x2a7 [ 187.600666] vfs_kern_mount.part.0+0x5e/0x3d0 [ 187.605159] do_mount+0x417/0x27d0 [ 187.608696] ? retint_kernel+0x2d/0x2d [ 187.612581] ? copy_mount_string+0x40/0x40 [ 187.616816] ? copy_mount_options+0x199/0x2f0 [ 187.621341] ? copy_mount_options+0x1fe/0x2f0 [ 187.625833] SyS_mount+0xab/0x120 [ 187.629284] ? copy_mnt_ns+0x8c0/0x8c0 [ 187.633167] do_syscall_64+0x1eb/0x630 [ 187.637049] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 187.641895] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 187.647087] RIP: 0033:0x45b69a [ 187.650265] RSP: 002b:00007f864dfd2a88 EFLAGS: 00000206 ORIG_RAX: 00000000000000a5 [ 187.657960] RAX: ffffffffffffffda RBX: 00007f864dfd2b40 RCX: 000000000045b69a [ 187.665221] RDX: 00007f864dfd2ae0 RSI: 0000000020000080 RDI: 00007f864dfd2b00 [ 187.672502] RBP: 0000000000000004 R08: 00007f864dfd2b40 R09: 00007f864dfd2ae0 [ 187.679850] R10: 0000000000008010 R11: 0000000000000206 R12: 0000000000000004 [ 187.687116] R13: 00000000004c782d R14: 00000000004dd880 R15: 00000000ffffffff [ 187.695154] Kernel Offset: disabled [ 187.698776] Rebooting in 86400 seconds..