[ 78.916648][ T26] audit: type=1800 audit(1568711209.321:32): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed(directio) comm="startpar" name="ssh" dev="sda1" ino=2417 res=0 Starting mcstransd: [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 84.446272][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 84.446284][ T26] audit: type=1400 audit(1568711214.981:35): avc: denied { map } for pid=10525 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.1.47' (ECDSA) to the list of known hosts. 2019/09/17 09:07:01 fuzzer started [ 90.684190][ T26] audit: type=1400 audit(1568711221.221:36): avc: denied { map } for pid=10534 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/17 09:07:02 dialing manager at 10.128.0.26:42959 2019/09/17 09:07:02 syscalls: 2510 2019/09/17 09:07:02 code coverage: enabled 2019/09/17 09:07:02 comparison tracing: enabled 2019/09/17 09:07:02 extra coverage: extra coverage is not supported by the kernel 2019/09/17 09:07:02 setuid sandbox: enabled 2019/09/17 09:07:02 namespace sandbox: enabled 2019/09/17 09:07:02 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/17 09:07:02 fault injection: enabled 2019/09/17 09:07:02 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/17 09:07:02 net packet injection: enabled 2019/09/17 09:07:02 net device setup: enabled 09:09:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xd) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xffd8) connect(r0, &(0x7f0000987ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) [ 215.311413][ T26] audit: type=1400 audit(1568711345.851:37): avc: denied { map } for pid=10549 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=17 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 09:09:06 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x15, 0x10, 0x3}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xb, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000004000000000000000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x6f1, &(0x7f0000000540)=""/144, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffeb0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f0000000100)=@framed={{0x18, 0xf}, [@map={0x18, 0x0, 0x1, 0x0, r0}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) [ 215.419798][T10550] IPVS: ftp: loaded support on port[0] = 21 [ 215.533065][T10550] chnl_net:caif_netlink_parms(): no params data found [ 215.585980][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.594966][T10550] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.603544][T10550] device bridge_slave_0 entered promiscuous mode [ 215.611815][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.626509][T10550] bridge0: port 2(bridge_slave_1) entered disabled state 09:09:06 executing program 2: ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541f, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000280)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000040000000001000000004000000040010080002e360e59acaa4f37be5a0000ffff53ef", 0x261, 0x400}], 0x1, 0x0) [ 215.646519][T10550] device bridge_slave_1 entered promiscuous mode [ 215.660402][T10553] IPVS: ftp: loaded support on port[0] = 21 [ 215.694638][T10550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.730367][T10550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.793248][T10550] team0: Port device team_slave_0 added [ 215.811414][T10550] team0: Port device team_slave_1 added 09:09:06 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000980)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0x7ffffffffffff00c}, {0x6}]}, 0x10) write(r0, 0x0, 0x0) [ 215.876123][T10556] IPVS: ftp: loaded support on port[0] = 21 09:09:06 executing program 4: getrandom(&(0x7f0000001bc0)=""/139, 0x8b, 0x3) [ 216.039424][T10550] device hsr_slave_0 entered promiscuous mode [ 216.087940][T10550] device hsr_slave_1 entered promiscuous mode 09:09:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000600)='/dev/ptmx\x00', 0x40, 0x0) clock_nanosleep(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000240)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ad7000)={0x1, &(0x7f0000acbff8)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, 0x0) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000000)) connect(r0, &(0x7f00000000c0)=@generic={0x9, "39d127ec9d9aa4078f41b4ddbd9c9f223975eed2a4698cd8bdc013670520341a12d97b19db872a911168b30889c939eea0a10880457db49e21df84039d5aca8a6b0606a9ac13af20c94c77dc817e15570b26329a27a31b852dd0eda73ce61ceb069348722caee85387877e8b81de488888bffe1310316d28bad65239c4f6"}, 0x80) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000640)=0xffffffffffffff78, 0x4) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200408d4, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) getrandom(&(0x7f0000001bc0)=""/139, 0x8b, 0x3) connect$inet6(r0, 0x0, 0xfffffffffffffe84) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x40, 0x0) accept4$packet(r1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendmmsg$sock(r0, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000580)='A', 0x1}], 0x1}}], 0x15, 0x4000000) close(r0) [ 216.189088][T10553] chnl_net:caif_netlink_parms(): no params data found [ 216.213593][T10560] IPVS: ftp: loaded support on port[0] = 21 [ 216.214677][T10550] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.226630][T10550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.233971][T10550] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.235848][T10558] IPVS: ftp: loaded support on port[0] = 21 [ 216.241113][T10550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.353740][T10553] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.361194][T10553] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.369274][T10553] device bridge_slave_0 entered promiscuous mode [ 216.378220][T10553] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.385288][T10553] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.393369][T10553] device bridge_slave_1 entered promiscuous mode [ 216.404706][T10562] IPVS: ftp: loaded support on port[0] = 21 [ 216.431409][T10553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.442783][T10553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.462583][T10553] team0: Port device team_slave_0 added [ 216.472800][T10553] team0: Port device team_slave_1 added [ 216.526309][ T3128] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.535089][ T3128] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.609329][T10553] device hsr_slave_0 entered promiscuous mode [ 216.667270][T10553] device hsr_slave_1 entered promiscuous mode [ 216.716625][T10553] debugfs: Directory 'hsr0' with parent '/' already present! [ 216.732085][T10560] chnl_net:caif_netlink_parms(): no params data found [ 216.822786][T10550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.835992][T10558] chnl_net:caif_netlink_parms(): no params data found [ 216.847858][T10556] chnl_net:caif_netlink_parms(): no params data found [ 216.858404][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.865743][T10560] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.873972][T10560] device bridge_slave_0 entered promiscuous mode [ 216.884866][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.894007][T10560] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.902394][T10560] device bridge_slave_1 entered promiscuous mode [ 216.921025][T10560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.941523][T10560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.984253][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.992337][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.005163][T10550] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.014967][T10558] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.022604][T10558] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.030949][T10558] device bridge_slave_0 entered promiscuous mode [ 217.039430][T10558] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.046775][T10558] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.054688][T10558] device bridge_slave_1 entered promiscuous mode [ 217.075152][T10560] team0: Port device team_slave_0 added [ 217.092719][T10556] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.100041][T10556] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.108081][T10556] device bridge_slave_0 entered promiscuous mode [ 217.122861][T10556] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.130293][T10556] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.138102][T10556] device bridge_slave_1 entered promiscuous mode [ 217.145702][T10560] team0: Port device team_slave_1 added [ 217.155776][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.164627][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 217.173094][ T3123] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.180247][ T3123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.188309][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.196938][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 217.205422][ T3123] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.212545][ T3123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.220149][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 217.234856][T10558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.318927][T10560] device hsr_slave_0 entered promiscuous mode [ 217.386798][T10560] device hsr_slave_1 entered promiscuous mode [ 217.446515][T10560] debugfs: Directory 'hsr0' with parent '/' already present! [ 217.457741][T10558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.471660][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 217.481682][T10562] chnl_net:caif_netlink_parms(): no params data found [ 217.502245][T10556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.517739][T10556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.537031][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 217.545612][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.554195][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.563015][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.571688][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.580211][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.588648][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.597128][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.605503][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.620429][T10553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.638133][T10558] team0: Port device team_slave_0 added [ 217.655940][T10562] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.663148][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.672336][T10562] device bridge_slave_0 entered promiscuous mode [ 217.681348][T10550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 217.699813][T10558] team0: Port device team_slave_1 added [ 217.706666][T10562] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.713922][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.722288][T10562] device bridge_slave_1 entered promiscuous mode [ 217.736056][T10556] team0: Port device team_slave_0 added [ 217.753605][T10556] team0: Port device team_slave_1 added [ 217.799409][T10558] device hsr_slave_0 entered promiscuous mode [ 217.866764][T10558] device hsr_slave_1 entered promiscuous mode [ 217.916631][T10558] debugfs: Directory 'hsr0' with parent '/' already present! [ 217.928522][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 217.936464][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 217.945992][T10562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.999359][T10556] device hsr_slave_0 entered promiscuous mode [ 218.038285][T10556] device hsr_slave_1 entered promiscuous mode [ 218.076766][T10556] debugfs: Directory 'hsr0' with parent '/' already present! [ 218.086051][T10553] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.094262][T10562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.114189][T10562] team0: Port device team_slave_0 added [ 218.141462][T10562] team0: Port device team_slave_1 added [ 218.160707][T10550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.200185][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.209537][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.218345][ T2845] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.225589][ T2845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.233359][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.278222][T10562] device hsr_slave_0 entered promiscuous mode [ 218.316714][T10562] device hsr_slave_1 entered promiscuous mode [ 218.366649][T10562] debugfs: Directory 'hsr0' with parent '/' already present! [ 218.381605][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.393032][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.401793][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.409187][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.418311][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.429350][T10556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.453031][T10560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.460262][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.469919][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.479254][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.487667][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.496129][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.504803][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.513551][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.522180][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.540030][ T26] audit: type=1400 audit(1568711349.081:38): avc: denied { associate } for pid=10550 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 218.541479][T10553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.577038][T10553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.592889][T10556] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.606208][T10560] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.614388][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 218.623428][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.632008][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.640042][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.647722][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.655292][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.665384][T10558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.692560][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.701352][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.713248][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.720373][T10567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.735711][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.744801][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.753725][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.761541][T10567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.769324][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 218.778069][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.786359][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.793538][T10567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.801228][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.809992][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 218.818904][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.827591][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.834648][T10567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.842242][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.851155][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 218.859741][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 218.869230][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.877176][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 218.896106][T10556] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.907932][T10556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.932257][T10558] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.940531][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 218.949885][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.958914][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 218.967494][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.976103][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 218.984484][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.992772][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.001227][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.009574][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.018398][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.026964][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.034926][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.043273][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.051132][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.058784][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.075355][T10553] 8021q: adding VLAN 0 to HW filter on device batadv0 09:09:09 executing program 0: [ 219.098001][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.109716][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.127433][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.136175][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.145194][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.153918][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.162778][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.172515][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.181216][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.188332][T10567] bridge0: port 1(bridge_slave_0) entered forwarding state 09:09:09 executing program 0: 09:09:09 executing program 0: [ 219.197154][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.206415][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.214865][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.223321][T10567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.231514][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 09:09:09 executing program 0: [ 219.241969][T10560] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:09:09 executing program 0: [ 219.290048][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.298721][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.308261][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.319593][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 09:09:09 executing program 0: [ 219.347102][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.356302][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.368049][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.378412][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.389480][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 09:09:09 executing program 0: [ 219.399559][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.428344][T10556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.439093][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.449070][T10558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 219.468532][T10560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.488313][T10562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.542862][T10558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.585610][T10562] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.607230][ T26] audit: type=1400 audit(1568711350.151:39): avc: denied { map_create } for pid=10605 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 219.624098][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready 09:09:10 executing program 1: [ 219.659578][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.666582][ T26] audit: type=1400 audit(1568711350.181:40): avc: denied { map_read map_write } for pid=10605 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 219.701068][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.716646][ T26] audit: type=1400 audit(1568711350.181:41): avc: denied { prog_load } for pid=10605 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 219.724700][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.749651][ T26] audit: type=1400 audit(1568711350.191:42): avc: denied { prog_run } for pid=10605 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 219.758673][ T2845] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.780253][ T2845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.790237][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.799602][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.811038][ T2845] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.818640][ T2845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.846742][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.863350][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.896220][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.918837][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.940008][T10621] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 219.943590][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.984526][T10621] EXT4-fs (loop2): invalid inodes per group: 16384 [ 219.984526][T10621] [ 219.993892][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.005499][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.015205][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.026925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.035321][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.044187][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.053926][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.082253][T10562] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 09:09:10 executing program 2: 09:09:10 executing program 0: 09:09:10 executing program 1: [ 220.175542][T10562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.324587][ T26] audit: type=1400 audit(1568711350.861:43): avc: denied { create } for pid=10642 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:09:10 executing program 5: 09:09:10 executing program 4: 09:09:10 executing program 3: 09:09:10 executing program 0: 09:09:10 executing program 1: 09:09:10 executing program 2: 09:09:10 executing program 2: [ 220.351449][ T26] audit: type=1400 audit(1568711350.861:44): avc: denied { write } for pid=10642 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 220.376820][ T26] audit: type=1400 audit(1568711350.891:45): avc: denied { read } for pid=10642 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 09:09:11 executing program 4: 09:09:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000500)=0x10) fstat(r0, &(0x7f0000000000)) 09:09:11 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [{@smackfsroot={'smackfsroot', 0x3d, 'loose'}}]}}) 09:09:11 executing program 3: socket$inet6(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = dup(r0) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:09:11 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x7) r0 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000140)={0xfffffffffffffffc, 0xec, 0x6, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x7}) write$sndseq(r2, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) r3 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x41) r5 = dup2(r4, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x26, 0x0, 0x0, 0x0, @time, {}, {}, @control}], 0xff97) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) r6 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) dup2(r6, r3) open(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff577, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x10, 0x0) r8 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r8) r9 = open(&(0x7f0000002bc0)='./file0\x00', 0x40c2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) write(r9, &(0x7f0000000600)='4', 0x4100) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r10 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) 09:09:11 executing program 5: 09:09:11 executing program 2: 09:09:11 executing program 0: 09:09:11 executing program 5: 09:09:11 executing program 2: 09:09:11 executing program 1: [ 220.790062][ T26] audit: type=1800 audit(1568711351.331:46): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16549 res=0 09:09:11 executing program 5: 09:09:11 executing program 2: 09:09:11 executing program 2: 09:09:11 executing program 0: [ 221.582547][T10672] ERROR: Domain ' /sbin/init /sbin/init /etc/init.d/rc /sbin/startpar /etc/init.d/ssh /sbin/start-stop-daemon /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/6' not defined. 09:09:12 executing program 3: socket$inet6(0xa, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x00', 0x0) r1 = dup(r0) execveat(r1, &(0x7f00000000c0)='\x00', &(0x7f0000000140), 0x0, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 09:09:12 executing program 4: 09:09:12 executing program 5: 09:09:12 executing program 2: 09:09:12 executing program 0: 09:09:12 executing program 1: 09:09:12 executing program 4: 09:09:12 executing program 0: 09:09:12 executing program 5: 09:09:12 executing program 2: 09:09:12 executing program 1: 09:09:12 executing program 5: 09:09:13 executing program 3: 09:09:13 executing program 0: 09:09:13 executing program 1: 09:09:13 executing program 4: 09:09:13 executing program 2: 09:09:13 executing program 5: 09:09:13 executing program 4: 09:09:13 executing program 5: 09:09:13 executing program 0: 09:09:13 executing program 1: 09:09:13 executing program 2: 09:09:13 executing program 3: 09:09:13 executing program 4: 09:09:13 executing program 0: 09:09:13 executing program 3: 09:09:13 executing program 2: 09:09:13 executing program 5: 09:09:13 executing program 1: 09:09:13 executing program 3: 09:09:13 executing program 4: 09:09:13 executing program 0: 09:09:13 executing program 2: 09:09:13 executing program 1: 09:09:13 executing program 4: 09:09:13 executing program 5: 09:09:13 executing program 3: 09:09:13 executing program 0: 09:09:13 executing program 2: 09:09:13 executing program 1: 09:09:13 executing program 4: 09:09:13 executing program 3: 09:09:13 executing program 0: 09:09:13 executing program 2: 09:09:13 executing program 5: 09:09:13 executing program 1: 09:09:13 executing program 4: 09:09:13 executing program 3: 09:09:13 executing program 0: 09:09:13 executing program 2: 09:09:13 executing program 5: 09:09:13 executing program 4: 09:09:13 executing program 2: 09:09:13 executing program 3: 09:09:14 executing program 1: 09:09:14 executing program 4: 09:09:14 executing program 0: 09:09:14 executing program 5: 09:09:14 executing program 2: 09:09:14 executing program 1: 09:09:14 executing program 3: 09:09:14 executing program 4: 09:09:14 executing program 5: 09:09:14 executing program 0: 09:09:14 executing program 2: 09:09:14 executing program 4: 09:09:14 executing program 1: 09:09:14 executing program 3: 09:09:14 executing program 0: 09:09:14 executing program 2: 09:09:14 executing program 5: 09:09:14 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x0, 0x3}, 0x20) pwrite64(r0, &(0x7f0000000240)="5d3457702f241e66ae9fbdd396298d0fbe68b44e49292b2f29e95cf2d9550959", 0x20, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x45a0}, {r1, 0x20}, {r1, 0x124}, {r1, 0x4200}], 0x4, &(0x7f0000000040), &(0x7f00000000c0)={0x7}, 0x8) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x94800, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000280)={0x0, "6b4272192ace80f0c7b5de5e4f2b5be28ebb52d59de8bfa485e920ddef0b64be", 0x1, 0x9, 0x0, 0x905a00, 0x4000000, 0x8}) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="17845d6ce1c7058700d9c4e6e68d212d", 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x5b003617}], 0x140, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket(0x1000000010, 0x80002, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492191, 0x0) 09:09:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x26e) r1 = dup(0xffffffffffffffff) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000500)) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = dup(0xffffffffffffffff) ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f0000000500)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40, 0xe04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000340), 0xe}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm-control\x00', 0x2000, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r5, 0x8925, &(0x7f0000000080)={'ip6_vti0\x00', @ifru_hwaddr=@local}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\xf8', @ifru_flags=0x2}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000300)) ioctl$TCSETS(r6, 0x40045431, &(0x7f00005befdc)) r7 = syz_open_pts(r6, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f00000015c0)='/proc/self\x00', 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x100000000005) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r1, 0x810c5701, &(0x7f00000003c0)) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x1100000000000000, 0x81, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000080)=ANY=[], @ANYBLOB='\x00'/40], 0x98) socket$xdp(0x2c, 0x3, 0x0) 09:09:14 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000140)=0x8, 0x4) lseek(r0, 0x800002, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='a\x00\x00\x00\x00'], 0x1) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x2, [0x7, 0x0]}, 0x8) connect$caif(r1, &(0x7f00000000c0)=@rfm={0x25, 0x8, "62d2f1db4724d1558b8063aa599f13b3"}, 0x18) lseek(r0, 0x0, 0x3) 09:09:14 executing program 5: rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xa30000}}, 0xfffffffffffffc9d, 0x0, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f00000000c0)="b0db2dea6be235c4a14fb18424b7c68aa28c7837f53d1cf1bb6afc34a6873d9c4b201c36c6a3c803740165ba64caf0db7e6f220981070b005e5c69737515641e2822eff636637874da1ba5c351f1929c6ad836e4ac5d7cf02f6eb71f01dc3264be204a959d38ce40c765c2a71f2b2fcb8f9a2eac44b6ca63a9acc12721f7486751b3e3a8456f3d8e032eb87630e67308be2c112be2e516405290cf7b083f2b42539b29b412ad52aa8d834e4180875c8d24bb173ae768", 0xb6) 09:09:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r1, 0xae78, 0x0) [ 224.194808][T10862] ptrace attach of "/root/syz-executor.1"[10553] was attempted by " 0 p  p \x0d  \x07   /dev/cachefiles ]l !- \x0c  ]4Wp/$fӖ)hNI)+/)\x5cU\x09Y kBr*΀ǵ^O+[⎻R՝迤 \x0bd \x09 Z  09:09:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f00000001c0)='vfat\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r5, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000300", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r5, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 09:09:14 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x10032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0x6, 0x0, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x9, 0x101001) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4040ae70, &(0x7f0000000040)={0x9, 0x1, 0xf6, 0x506}) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r5 = dup2(r0, r2) dup3(r5, r1, 0x0) [ 224.232200][T10862] ptrace attach of "/root/syz-executor.1"[10553] was attempted by " 0 p 0   \x07   /dev/cachefiles ]l !- \x0c  ]4Wp/$fӖ)hNI)+/)\x5cU\x09Y kBr*΀ǵ^O+[⎻R՝迤 \x0bd \x09 Z  09:09:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff0100f600000001e000000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000005de400000000000000000000000000000000000000000000000000000000001f00"/112], 0xb8}}, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x149000, 0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x30420, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r1, r7, 0xbf7d, 0xb0, &(0x7f0000000280)="5a757a9cdffa1dcd409f4fbc15c96850d82819596853e32135b95829bac2d371aa0c6237502ee9f97eeacc159cedd198bed0fe80260019c78ae6fc822ebaf8ced2775532e941bad88b3ca83eca54b8134e449dafb3195d4fa4edd646a91d78f31f592ce0fed41a404f5c213f92a56e897910ddb1751613ce8e2e9d49dd6527c2268d93acd69aa73e4bfa29387df54859c650e9f4732bb164f5e2dc39987eeedf590f4a9fed5102908f3ca2fcc8da1412", 0x7, 0xfffffffffffffffa, 0xafc, 0x8, 0x100000000, 0x1, 0x4, 'syz1\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f00000000c0)={0xc1f, 0x0, 0x100000001, 0x1, 0x2, 0xc00000000000}) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0xbc) 09:09:15 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) ioctl(r1, 0x5f, &(0x7f0000000040)="eaa2000000006d3f0000000000000000005b2d63b21c63d2ca0fbf3ca99bd664867f9a5ecb5047bf4bd3ce4eaa82a6f5bcb17bde929c1ccddbeb068830328717acb56c0df4ba408fe4e5a94adac1cde17f1f2071ab7d295645edae11c420052a85e56cc79c57ce925c") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000100)=""/13, 0xd}], 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001240)={"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"}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x2000000000000398, &(0x7f0000000000)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x4, 0x1220, &(0x7f0000000200)=""/4096, 0x40f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$tipc(r4, &(0x7f0000001800)={&(0x7f0000001640)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x4}}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001680)="99bd34208e9bce782e6441e2a1a71d3b10dd76aabc39ad7f20b0d213f92f4409a6b58676974eb2f007d0d78bc880cb32e5003fd1728ac2c40c3d09311442772d498cbcbd131dcd52dd4a", 0x4a}, {&(0x7f0000001700)="7071a530e9909107f7be32dc90baa670bfcf127df93ab4cc0e5af637016c845ba24c512cf58ffad1ea25fcc5d1883b5849d30bf89605486cac3520d916fb5f5d9edc0ce6c472061a5a01b932afb503f53b149a760b02a617f425d91365ad1eab15e8277d98afa2cf54a0c85e7c7f3b3806576e49", 0x74}], 0x2, &(0x7f00000017c0)="f6c281a8debf095b09b1dd0c528cc9c3e4f21208514d", 0x16, 0x8000}, 0x20000010) [ 224.560158][ C0] hrtimer: interrupt took 25603 ns [ 224.575267][T10880] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.594176][T10858] mkiss: ax0: crc mode is auto. 09:09:15 executing program 1: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000001c0)={@empty, 0x0, 0x3}, 0x20) pwrite64(r0, &(0x7f0000000240)="5d3457702f241e66ae9fbdd396298d0fbe68b44e49292b2f29e95cf2d9550959", 0x20, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20310, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61d7, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x45a0}, {r1, 0x20}, {r1, 0x124}, {r1, 0x4200}], 0x4, &(0x7f0000000040), &(0x7f00000000c0)={0x7}, 0x8) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f00000001c0)={0x0, 0x0, 0xc00, &(0x7f0000000400)="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"}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x94800, 0x0) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000280)={0x0, "6b4272192ace80f0c7b5de5e4f2b5be28ebb52d59de8bfa485e920ddef0b64be", 0x1, 0x9, 0x0, 0x905a00, 0x4000000, 0x8}) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="17845d6ce1c7058700d9c4e6e68d212d", 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000007000/0x3000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000100)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) process_vm_readv(r5, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x5b003617}], 0x140, 0x0) r6 = getpid() sched_setattr(r6, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket(0x1000000010, 0x80002, 0x0) r7 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f00000000c0), 0x492492492492191, 0x0) [ 224.615824][T10896] QAT: Invalid ioctl 09:09:15 executing program 1: capset(&(0x7f00000001c0)={0x24020019980330}, &(0x7f0000000140)) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) fcntl$getflags(r0, 0x1f39832d2f1eb7c) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000000)=0x5) [ 224.690744][T10903] ptrace attach of "/root/syz-executor.1"[10553] was attempted by " 0 p  p \x0d  \x07   /dev/cachefiles ]l !- \x0c  ]4Wp/$fӖ)hNI)+/)\x5cU\x09Y kBr*΀ǵ^O+[⎻R՝迤 \x0bd \x09 Z  [ 224.875816][T10909] capability: warning: `syz-executor.1' uses 32-bit capabilities (legacy support in use) 09:09:15 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f0000000000)={0x0, {0x1, 0x9}}) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@migrate={0xe4, 0x21, 0x281, 0x0, 0x0, {{@in=@multicast2, @in=@local}}, [@migrate={0x5c, 0x11, [{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@multicast2}]}, @policy_type={0xc}, @user_kmaddress={0x2c, 0x13, {@in6=@mcast1, @in6=@ipv4={[], [], @empty}}}]}, 0xe4}}, 0x0) 09:09:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) unlink(&(0x7f0000000180)='./file0\x00') r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000500)={0x0, 0x2, &(0x7f00000004c0)={&(0x7f0000000140)={0x30, r6, 0x805, 0x0, 0x0, {{}, 0x0, 0x6, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r3, r2], 0x4000000000000003) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x3) syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SIOCX25GCALLUSERDATA(r7, 0x89e4, &(0x7f0000000080)={0x24, "2f9b35f3c022f8f2159faef544d48012c3c064a05b499e7356f308899509f14b4f1f80ef8c651730be191dcc34a0f0ffc58c9315c6f0a565b49182a11f7414c81e0662360541cd7724ddeb3f50383cc6def3aebbd57b763195ba30ca87a8963769cc3e5f19ce229bd06ad6c05ab005841d37a38e1fccfce10d25b8174845c59d"}) [ 225.295826][T10892] QAT: Invalid ioctl [ 225.300865][T10880] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. 09:09:15 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000440)='./file0\x00') symlink(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f00000000c0)='./file0/../file0/file0\x00', 0x80000000002) fchdir(r1) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x572a366826812dc, 0x0) 09:09:15 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x80, 0x0) syncfs(r0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000380), 0x10) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'eql\x00'}}, 0x1e) 09:09:15 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) fcntl$setstatus(r0, 0x4, 0x400) r1 = socket(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4], 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) write(r1, &(0x7f00000001c0)="2400000018001f00ff03f4f9002304000a04f511080001000201000208001e8001000000", 0x24) 09:09:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f00000001c0)='vfat\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r5, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000300", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={r5, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 09:09:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) remap_file_pages(&(0x7f0000fff000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000000c0)={{0x3, 0x0, 0x0, 0x0, '\x00', 0x200}, 0x0, 0x10000000, 0x5, r4, 0x8, 0x8, 'syz1\x00', &(0x7f0000000040)=['[-ppp0)lo\xbe{*systemtrusted!+selfppp1\x00', 'mime_typelosecurity\x00', '!vboxnet1\x00', '[\x00', '\x00', '\x00', '%\x00', '+ppp1lo\x00'], 0x50, [], [0xb, 0x4536, 0x8, 0x1]}) 09:09:16 executing program 5: r0 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000000)={0x0, 0x1d6d, 0x40, 0x200, 0xf, 0x1f, 0xa358, 0xe2, 0x1, 0xfff}) socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, 0x0, 0x0) 09:09:16 executing program 2: perf_event_open(&(0x7f00000005c0)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8281696a780eecb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="2e0000003200050ad25a80648c6356c10224fc00120000000a000a00053582c1b0acea8b09000180feff0000d1bd", 0x2e}], 0x1}, 0x0) socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r4, 0xf01, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40030405}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xa0, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ccf}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @multicast1}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1d42}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0xd05c1221af7d7b2c, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x74fe4a6d52b0561a}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0xfad49f863b615178, &(0x7f0000000000)=0x1000, 0x4) [ 225.570004][T10935] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.600601][T10948] mmap: syz-executor.0 (10948) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 09:09:16 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) fcntl$setstatus(r0, 0x4, 0x400) r1 = socket(0x10, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4], 0x3) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1) write(r1, &(0x7f00000001c0)="2400000018001f00ff03f4f9002304000a04f511080001000201000208001e8001000000", 0x24) 09:09:16 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x10000, @empty, 0x4}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0xae, @empty, 0x44}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0xa, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x5, &(0x7f0000000100)=0x2) 09:09:16 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x7f, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r2, r3], 0x3) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) setsockopt$inet6_MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x4e22, 0x6, @rand_addr="8ff7760dc0de019036b58478dc095068", 0x98}, {0xa, 0x4e21, 0xf095, @remote, 0x3}, 0x80, [0x8, 0x2, 0x632, 0x4, 0xf30, 0xac, 0x9, 0xffffffff]}, 0x5c) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000040)={0x0, 0x9, 0xff, &(0x7f0000000000)=0x4}) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)={0x9, 0x1, 0x2, 0x20, 0x2, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x3c) [ 225.719024][T10956] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 09:09:16 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x2000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x0) exit(0x0) [ 225.833846][ T26] audit: type=1400 audit(1568711356.371:47): avc: denied { setopt } for pid=10954 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 226.024224][T10935] bond0: (slave bond_slave_0): Releasing backup interface [ 226.085780][T10956] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 09:09:16 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x36f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r3 = socket(0x5, 0x1, 0xfffffffffffffffe) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000080), 0x4) splice(r0, 0x0, r2, 0x0, 0x19404, 0x0) 09:09:16 executing program 0: r0 = gettid() socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x458000, 0x0) fstat(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x200040000000015, 0x805, 0x0) fstat(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x1, 0x0) r6 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x20001) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f00000001c0)=r6) setregid(0x0, r4) getgroups(0x4, &(0x7f0000000380)=[0xee01, r4, 0x0, 0x0]) getgid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) setresgid(r2, r7, 0xee00) socket$alg(0x26, 0x5, 0x0) futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) prlimit64(r0, 0x0, 0x0, 0x0) 09:09:16 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x2000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x0) exit(0x0) 09:09:16 executing program 2: openat$usbmon(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/usbmon0\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000080)) r2 = syz_open_dev$usb(&(0x7f0000000200)='/dev/bus/usb/00#/00#\x00', 0x40000fffffa, 0x0) dup2(r0, r2) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000000)=0x3) [ 226.126757][T10965] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.2'. 09:09:16 executing program 3: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x2000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x0) exit(0x0) 09:09:16 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) syslog(0x2, &(0x7f0000000400)=""/201, 0xc9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10100, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x61900, 0x0) 09:09:16 executing program 2: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x10000}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000380)=0xc) socket(0x0, 0x80002, 0xc) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000000c0)={'netdevsim0\x00', {0x2, 0x8000000004e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080), &(0x7f0000000300), 0x8) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000140), 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, 0x0) 09:09:17 executing program 3: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) sendfile(r1, r2, 0x0, 0x548) [ 226.448293][ T26] audit: type=1400 audit(1568711356.981:48): avc: denied { syslog } for pid=11005 comm="syz-executor.4" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 09:09:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) r4 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x3ef800000, 0x800) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000300)={0x1, 0xfa19, 0x5, 0x0, 0x8}) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x507, 0x0, 0x0, {0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8, 0x1, 'pie\x00'}, {0xc, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x7}]}}]}, 0x38}}, 0x0) fsetxattr(r1, &(0x7f0000000280)=@random={'trusted.', 'pie\x00'}, &(0x7f0000000380)='system*\x00', 0x8, 0x1) 09:09:17 executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) syslog(0x2, &(0x7f0000000400)=""/201, 0xc9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10100, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x61900, 0x0) 09:09:17 executing program 2: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) syslog(0x2, &(0x7f0000000400)=""/201, 0xc9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10100, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x61900, 0x0) [ 226.585847][ T26] audit: type=1400 audit(1568711357.121:49): avc: denied { map } for pid=11023 comm="syz-executor.3" path=2F6D656D66643AB3202864656C6574656429 dev="tmpfs" ino=32982 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 09:09:17 executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) syslog(0x2, &(0x7f0000000400)=""/201, 0xc9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10100, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0)=0x1, 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f00000002c0)=0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x61900, 0x0) 09:09:17 executing program 4: r0 = socket(0x10, 0x802, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0xa, {0x21ae, 0xa3d, 0x9, 0x65, 0x800, 0x7fff}}) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendto$llc(r1, &(0x7f0000000240)="a0f7d9ddf687d2104d0a42c587dff521f29afdc6383cc4a6a53da66aab7d91b278e10d06f5f593b4842cff09a5d24171d494c82422c47899c227e9d7ec12eed980c58514851b30db3ea8c4c4d34bb1217af4d4ad8fadd058f78beac66b73ddc5bb3f22a5f04134b81f3eba69648793c604574840799ef99d94ffa90267008e0fca2d54a1df02bafea84aa69ce3b7f5250feaed06b5906afaed935be7df9be4e48e154664aea509a85927115386a5c9592ee9a1fa33c80ff9246c28a471a064513360050b2ca922783e9dd42c16916e56fe283be045f2c0bab6a73241d1dc02", 0xdf, 0x4080, &(0x7f0000000040)={0x1a, 0x322, 0x2, 0x10, 0x6, 0x2}, 0x10) r2 = getpgid(0xffffffffffffffff) ptrace$peek(0x1, r2, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xff, "5f1b3676702c9d0273e878f073f9878c02e7f7164e384b26f2e98646c61fdf2d32dc0dff72b19a1493bda6c462e3d7287e2427df3f9c96aa9520bac53c407c41412259436bec6cea9b2c85f9fabc32adaabf554992f8e82ec326cce36ad0d6496778646ce5d95a479103a9e31d4841bb15dc0f130550c4f7cbd4e66e6a634ae0345aa75a73d373ad16382a8b940dfec758a7251a3195a6db3b214cab106afaa1fc240cf23ec54607185363d3daa07f7f2bbc5d0602004787b984c7d2c4efb217b0fb6742b844a41a9c2337ad15100a91eb6de542fc282d2ccc3eaee17f61bd2d2535787223ac83b5314991ed4489bceb6eed434b812bcd5cf6d45d75c600d0"}, &(0x7f00000001c0)=0x107) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000200)={r3, 0x40, 0x4, [0x4, 0x10001, 0x6, 0x2]}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00\x00\x00@\x00', &(0x7f0000000040)=ANY=[]}) 09:09:17 executing program 0: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000500)="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", 0xfc) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x101000, 0x80) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000000)) 09:09:17 executing program 2: syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r0, r1, r2], 0x3) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x8) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)=0x1) r3 = syz_open_dev$loop(0x0, 0x0, 0x881) r4 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r4, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) sendfile(r3, r4, 0x0, 0x20000102000007) gettid() 09:09:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x802, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/130) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f0000000200)='wlan0\x00', 0x0, r4) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r6 = dup(r5) r7 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r9, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r7, r8, r9], 0x3) write$FUSE_NOTIFY_POLL(r8, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x6}}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8b1a, &(0x7f0000000040)='wlan0\x00') 09:09:17 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101080) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x00\x00\x00\x00\x00\x00\x00\x00x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*\x81\x00\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\x89\xccd3`\x80\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r6, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000500000000000800053516141500"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={r6, 0x80000001, 0x4b2b, 0x7, 0x3, 0x1ff}) 09:09:17 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, [{0x0, 0xe000000}, {}]}]}}, &(0x7f0000000500)=""/4096, 0x3e, 0x1000, 0x1}, 0x20) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x610800, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x71, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r3, 0x6}, &(0x7f0000000080)=0x8) 09:09:17 executing program 5: openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x2000, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) clone(0x20002100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000080)=0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000001f650000000000006507000002000000270700004c0000001f75000000000000bf54000000000000070400000400f9ffad43010000000000950000000000000005000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1}, 0x48) add_key$user(0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x0) exit(0x0) [ 227.234134][T11053] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. 09:09:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000300)={{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x100a0, 0x0, 0x3d00}) 09:09:17 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) unlinkat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") futex(&(0x7f000000cffc)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100000f, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000016) 09:09:17 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x80800) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x80, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, r1) close(r1) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4], 0x3) ioctl$VIDIOC_STREAMON(r3, 0x40045612, &(0x7f0000000180)=0x7ff) r5 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x3125, 0x901100) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xee24) dup3(r6, r7, 0x40000) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000900)=ANY=[@ANYBLOB="66696c7465720000050000000000000000000000000000000000000000000000070000e20200000058000000000000700300007003000070030000040000005b5fd62d81db92ab75276702823705290c775df0a3e20d1101103252ef9ccc4b92f3882f79685c36a4ed1cdff0074692e144e0bb94fc4f360b120b045c0d2c53f8a5c5", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000180100000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000030600398500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000002b5af0ffab0b00000000000000000000d6920d10f0b100000000000000000000ac1414bb0000000002000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4a8) r8 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x4000, 0x0) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @dev}}, &(0x7f0000000280)=0x1c, 0x800) finit_module(r9, &(0x7f00000002c0)='/dev/media#\x00', 0x3) ioctl$VIDIOC_S_SELECTION(r8, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x2, {0x40, 0x101, 0x1, 0x2}}) 09:09:17 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) sendmmsg(r0, &(0x7f0000002240)=[{{&(0x7f0000000000)=@in={0x2, 0x4e23, @broadcast}, 0x331, 0x0}}], 0x1, 0x0) [ 227.367421][T11073] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 227.389072][T11065] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.449049][T11053] syz-executor.3 (11053) used greatest stack depth: 23392 bytes left 09:09:18 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101080) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x00\x00\x00\x00\x00\x00\x00\x00x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*\x81\x00\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\x89\xccd3`\x80\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r6, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000500000000000800053516141500"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={r6, 0x80000001, 0x4b2b, 0x7, 0x3, 0x1ff}) 09:09:18 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101080) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x00\x00\x00\x00\x00\x00\x00\x00x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*\x81\x00\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\x89\xccd3`\x80\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r6, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000500000000000800053516141500"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={r6, 0x80000001, 0x4b2b, 0x7, 0x3, 0x1ff}) 09:09:18 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x101080) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000080)='minix\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000740)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x00\x00\x00\x00\x00\x00\x00\x00x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*\x81\x00\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\x89\xccd3`\x80\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\vO\x17\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r6, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000500000000000800053516141500"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000000c0)={r6, 0x80000001, 0x4b2b, 0x7, 0x3, 0x1ff}) 09:09:18 executing program 0: prctl$PR_SET_ENDIAN(0x14, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00\x00\x00\t\xf6\x00', 0x3bc) connect$inet(r1, &(0x7f0000593000)={0x2, 0x0, @multicast1}, 0x10) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000300)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, {0x2, 0x0, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r4}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r4, 0x7}}, 0x10) sendmsg$rds(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1}, 0x800) 09:09:18 executing program 1: syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={[{@nodiscard='nodiscard'}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0xaf7e3da5d033e28a, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x8) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, &(0x7f0000000100)='gfs2\x00', &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c) [ 227.650570][T11092] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.699894][T11094] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. [ 227.763450][T11104] gfs2: not a GFS2 filesystem 09:09:18 executing program 3: openat$nullb(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nullb0\x00', 0xc000, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r4, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r8, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r8}}, 0x20}}, 0x0) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockname$packet(r9, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r14, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r14}}, 0x20}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14, 0x80000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2a3, &(0x7f0000000200)={&(0x7f00000006c0)=@bridge_getneigh={0x0, 0x1e, 0x8, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r4, 0x1, 0x200}, [@IFLA_MASTER={0x0, 0xa, r8}, @IFLA_NUM_TX_QUEUES={0x0, 0x1f, 0x537}, @IFLA_IFALIAS={0x0, 0x14, 'rose0\x00'}, @IFLA_LINKINFO={0x0, 0x12, @ip6gretap={{0x291, 0x1, 'ip6gretap\x00'}, {0x0, 0x2, [@gre_common_policy=[@IFLA_GRE_ENCAP_TYPE={0x0, 0xe, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x0, 0x17, 0x1}, @IFLA_GRE_ERSPAN_DIR={0x0, 0x17, 0x1}], @IFLA_GRE_REMOTE={0x0, 0x7, @mcast1}, @IFLA_GRE_LOCAL={0x0, 0x6, @ipv4={[], [], @multicast2}}, @gre_common_policy=[@IFLA_GRE_ENCAP_SPORT={0x0, 0x10, 0x4e21}, @IFLA_GRE_LINK={0x0, 0x1, r16}, @IFLA_GRE_ENCAP_TYPE={0x0, 0xe, 0x3}, @IFLA_GRE_ERSPAN_INDEX={0x0, 0x15, 0x1777c}, @IFLA_GRE_IGNORE_DF], @IFLA_GRE_LOCAL={0x0, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xc}}}, @gre_common_policy=[@IFLA_GRE_ENCAP_TYPE, @IFLA_GRE_LINK={0x0, 0x1, r10}, @IFLA_GRE_ERSPAN_INDEX={0x0, 0x15, 0xe6c7e}, @IFLA_GRE_IGNORE_DF={0x0, 0x13, 0x1}, @IFLA_GRE_COLLECT_METADATA, @IFLA_GRE_IKEY={0x0, 0x4, 0x3}], @gre_common_policy=[@IFLA_GRE_IGNORE_DF, @IFLA_GRE_OFLAGS={0xffffffffffffffcb, 0x3, 0x2}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0x3}, @IFLA_GRE_IKEY={0x0, 0x4, 0xa6}, @IFLA_GRE_ERSPAN_HWID={0x0, 0x18, 0x200}], @gre_common_policy=[@IFLA_GRE_OKEY={0x0, 0x5, 0x1}, @IFLA_GRE_OFLAGS, @IFLA_GRE_OFLAGS, @IFLA_GRE_PMTUDISC, @IFLA_GRE_IGNORE_DF, @IFLA_GRE_ERSPAN_VER={0x0, 0x16, 0x1}, @IFLA_GRE_IGNORE_DF, @IFLA_GRE_ENCAP_FLAGS={0x0, 0xf, 0x20}, @IFLA_GRE_COLLECT_METADATA, @IFLA_GRE_IGNORE_DF], @gre_common_policy=[@IFLA_GRE_LINK={0x0, 0x1, r14}, @IFLA_GRE_LINK={0x0, 0x1, r15}], @IFLA_GRE_REMOTE={0x0, 0x7, @empty}]}}}, @IFLA_CARRIER_CHANGES={0x0, 0x23, 0x80000000}]}, 0x20}}, 0x0) [ 227.860395][T11113] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.873070][T11104] gfs2: not a GFS2 filesystem 09:09:18 executing program 0: r0 = io_uring_setup(0xa3, &(0x7f0000000080)) io_uring_enter(r0, 0x0, 0x0, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r1, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 09:09:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) read$eventfd(r3, &(0x7f0000000140), 0x8) ioctl$PPPIOCGNPMODE(r2, 0xc008744c, &(0x7f0000000100)={0x10017, 0x2}) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000000)={0x1000, 0x0, 0x2, 0x0, 0x19, 0x0, 0x0, 0x9, 0x0, 0x3, 0xfffffffffffffffd, 0x7fff}) 09:09:18 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") listen(r0, 0x3) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef}, 0xb) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r2, &(0x7f0000004300), 0x3a4, 0x0, 0x0) 09:09:18 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2a, &(0x7f0000000400)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0xf0a40, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f0000000180)={0x3, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e24, @rand_addr=0x3}}}, 0x108) flock(r1, 0x4) [ 228.091735][T11137] Unknown ioctl -1073187764 09:09:18 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = dup(0xffffffffffffffff) creat(&(0x7f00000008c0)='./file0\x00', 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000003c0)) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000440), 0x0}) r2 = dup(0xffffffffffffffff) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000280)) ioctl$LOOP_SET_FD(r1, 0x4c00, 0xffffffffffffffff) fsetxattr$trusted_overlay_upper(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) accept(0xffffffffffffffff, &(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r3) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x4) bind$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0x0, 0x109401) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bind$bt_rfcomm(r4, 0x0, 0x0) write$P9_RVERSION(r4, &(0x7f0000000780)=ANY=[], 0x0) ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, &(0x7f0000000180)={0x10000, 0x1, 0xfffffffffffffff7, 0x3, 0x4}) [ 228.138849][T11143] Unknown ioctl -1073187764 09:09:18 executing program 5: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x5, 0x0) r1 = socket(0x0, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sched_setattr(0x0, 0x0, 0x0) r2 = getpgid(0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r2) tgkill(0x0, 0x0, 0x11) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) connect$x25(0xffffffffffffffff, &(0x7f0000000300)={0x9, @remote={[], 0x1}}, 0x12) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x4) write$binfmt_aout(r4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x15c) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r4, r4, &(0x7f0000000000), 0x8080fffffffe) r5 = syz_open_dev$sndpcmp(&(0x7f00000004c0)='/dev/snd/pcmC#D#p\x00', 0x562a, 0x202000) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000040)=""/88) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000580)=[{0x34, 0x0, [0x0, 0x9, 0x400, 0x5, 0xc4, 0x9, 0x7f, 0x400, 0x1, 0x2, 0x0, 0x6, 0xab, 0x80, 0x0, 0x51d8]}, {0x2, 0x0, [0x2, 0x0, 0x4, 0x3, 0x4, 0xab64, 0x3, 0x4, 0x20, 0x0, 0x0, 0x100, 0x101, 0x3, 0x1, 0x6]}, {0x4, 0x0, [0x9, 0x0, 0xd83, 0x0, 0x3, 0xb97, 0x0, 0x0, 0x100000001, 0x400, 0x2fd4, 0x4, 0x2, 0x5000000000000000, 0x0, 0x5]}, {0xd32858910f52dc6, 0x0, [0x6, 0x8, 0x400, 0x75d4, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff, 0x8000, 0x0, 0x1dc, 0x0, 0x344]}], 0xffffffffffffffff, 0x1, 0x1, 0x120}}, 0x20) 09:09:18 executing program 4: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000780)='/dev/vga_arbiter\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000800)='team\x00') r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet6_mreq(r3, 0x29, 0x15, &(0x7f0000000840)={@mcast2, 0x0}, &(0x7f0000000880)=0x14) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f00000008c0)={@initdev, @broadcast, 0x0}, &(0x7f0000000900)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r10, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="2000000011003b0e25bd70000000000000000000", @ANYRES32=r10, @ANYBLOB="000094bbeac3114c47679c33358000db3eee493f7ab5db1e00000000048a8caa341b15d19d0469c9494801197769f6f3ef6b4ee6dc0336eb2d3159edfb64fe3f7f121327a22b97a881d6821bfc439f50d7cdeac06651045fc0e78448b6e8770888fe6fbe6ed3c03b83ad7e42eb7ec653a77fb53c201119baad64f79d42626641c69ff2a4e9e2c8b98c26b1f3be62d3bf6a2d498f8ff37f26753d287243642b6dbf2a48eb1949e70dfb3c3a6c3fdd50d2a5e05539f149918c366b921a154f6708df"], 0x20}}, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000c40)=0x14, 0x800) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c80)={0x0, @multicast2, @loopback}, &(0x7f0000000cc0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000d00)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000e00)=0xe8) r14 = socket(0x10, 0x802, 0x0) write(r14, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000e40)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f00)={@dev, @dev, 0x0}, &(0x7f0000000f40)=0xc) r18 = socket(0x10, 0x802, 0x0) write(r18, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_IP_XFRM_POLICY(r18, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f00000012c0)=0xffffffffffffffbf) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000001680)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001640)={&(0x7f0000001300)={0x32c, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0xd0, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x57f}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x100, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x71}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0xb0, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x24}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r16}}}]}}, {{0x8, 0x1, r17}, {0x78, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8000}}}]}}]}, 0x32c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r20 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x422000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r20, 0x29, 0x30, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xad9, @mcast1, 0x1}}, 0x1, 0xa, [{{0xa, 0x4e22, 0x7, @ipv4={[], [], @multicast1}, 0x80000000}}, {{0xa, 0x4e24, 0x10000, @local, 0x1f}}, {{0xa, 0x4e22, 0x1a875b6f, @rand_addr="667a05817d298db5fdadc239138b8a29", 0x3}}, {{0xa, 0x4e20, 0x8, @local, 0x4}}, {{0xa, 0x4e21, 0x3ff, @mcast1, 0x401}}, {{0xa, 0x4e23, 0x11, @local, 0x3}}, {{0xa, 0x4e22, 0x81, @local, 0x81}}, {{0xa, 0x4e23, 0x400, @mcast1, 0xffffffff}}, {{0xa, 0x4e20, 0x8, @remote, 0x7fffffff}}, {{0xa, 0x4e23, 0x7, @local, 0x3}}]}, 0x590) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r21, 0x8912, 0x400200) syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x3, 0x2) getpeername(r21, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x80) r23 = openat$null(0xffffffffffffff9c, &(0x7f0000000740)='/dev/null\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r23, 0x641f) r24 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x14, 0x8000, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], r22}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x4, 0x40000000004, 0x100000001, 0x4, r24}, 0x3c) 09:09:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0xfffffffffffffffe) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x100000000000022c, 0x6c00000000000000) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000000)={0xabf, 0xffff}) 09:09:18 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) sched_setattr(r1, &(0x7f0000000280)={0x30, 0x3, 0x0, 0x8000, 0x100000001, 0x6, 0x0, 0x3f}, 0x0) r2 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0x10001, 0x770224d925180e01) futimesat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{0x0, 0x7530}}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000020000000"], 0x30}}, 0x0) getdents(r0, &(0x7f0000000180)=""/79, 0x4f) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') getgid() 09:09:18 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x16d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="49443212f1139805000000000100f7f9ffffffffffffff", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="04000020010000000300008004020000a66d4c239b9530a7"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r6) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x4) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r10, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r8, r9, r10], 0x3) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000180)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000280)={{0x0, 0x5, 0x1f, 0x4, '\x00', 0x9}, 0x6, 0x10000000, 0x1, r11, 0xa, 0x7, 'syz0\x00', &(0x7f0000000200)=['/cpuset+mime_type\x00', 'vboxnet1\x00', 'bdev@]vboxnet0\x00', '\xbdmd5sum}*\x00', 'cpuset,\x00', '\x00', ').-\x00', '\x00', '\x00', 'selinux:[-\xab\x00'], 0x4f, [], [0xfffffffffffffff9, 0x3, 0x800, 0x8]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 09:09:19 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) timer_create(0x7, &(0x7f0000000000)={0x0, 0x0, 0x1, @thr={&(0x7f0000000100)="12362781e137992f621d6ffa20ef0d4b5cbe85f86b596b348c9bd62ace441b", &(0x7f0000000400)="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"}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) 09:09:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xc0, 0x80) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000200)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10004045}, 0x4000000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r3, 0x4) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x71, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000300)={r7, 0x10000}, 0x8) r8 = open(0x0, 0x0, 0x0) openat$cgroup_subtree(r8, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r9, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r10 = accept(r3, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000100)={0x0, @aes128, 0x0, "209a9afc78a08af2"}) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10) sendto$packet(r10, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) [ 228.428935][T11169] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 228.456512][T11169] FAT-fs (loop5): Filesystem has been set read-only [ 228.463402][T11169] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 17) 09:09:19 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0xe) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x61}, {0x80000006}]}, 0x10) chdir(&(0x7f0000000040)='./file0\x00') 09:09:19 executing program 3: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x16d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f0000000040)=0x10) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000500)={&(0x7f00000003c0), 0x10, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="49443212f1139805000000000100f7f9ffffffffffffff", @ANYRES64=r4, @ANYRES64=r5/1000+10000, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="04000020010000000300008004020000a66d4c239b9530a7"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r6) r7 = creat(&(0x7f0000000140)='./file0\x00', 0x4) r8 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r10, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r8, r9, r10], 0x3) ioctl$TIOCGPGRP(r9, 0x540f, &(0x7f0000000180)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f0000000280)={{0x0, 0x5, 0x1f, 0x4, '\x00', 0x9}, 0x6, 0x10000000, 0x1, r11, 0xa, 0x7, 'syz0\x00', &(0x7f0000000200)=['/cpuset+mime_type\x00', 'vboxnet1\x00', 'bdev@]vboxnet0\x00', '\xbdmd5sum}*\x00', 'cpuset,\x00', '\x00', ').-\x00', '\x00', '\x00', 'selinux:[-\xab\x00'], 0x4f, [], [0xfffffffffffffff9, 0x3, 0x800, 0x8]}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) 09:09:19 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x88082, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='ecryptfs\x00', 0x0, 0x0) 09:09:19 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/s\x03\x00\x00\x00\x00\x00\x00\x00\xfb\x00\x00\x80', 0x0, 0x20142) ioctl(r0, 0xc2604110, &(0x7f0000000080)="6e8310c1aa69df608cedbfdd64ac6db0806afec62275b6ce967411255e1624565db52fb210e194304975a702b431471082391eb0ce04a04cf379f7c2c015a660e86968cfb2") r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/203) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000100)={0x80000000, 0xfcc, 0x1}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000000)=""/3, &(0x7f0000000040)=0x3) 09:09:19 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, r0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4) writev(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x6c, 0x0, @dev, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0) 09:09:19 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'ip_vti0\x00', {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x40, @empty, 0x6}, @in6={0xa, 0x4e24, 0x7, @empty, 0x7}, @in6={0xa, 0x4e24, 0x1, @rand_addr="baa72b113fa9226aee3ee8ad7f773782", 0xfffffffffffffffc}, @in6={0xa, 0x4e24, 0x3f, @remote, 0x9}], 0x70) getsockopt$sock_timeval(r3, 0x1, 0x23, 0x0, &(0x7f0000000040)) [ 228.804852][T11204] Error parsing options; rc = [-22] [ 228.821494][T11205] Error parsing options; rc = [-22] 09:09:19 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x1331045151d1a20f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:09:19 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4], 0x3) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x74, 0x0, [0x0, 0x10000, 0x3, 0xe28]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x148, 0x24, 0x40b, 0x0, 0x0, {0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8, 0x1, 'red\x00'}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}]}}]}, 0x148}}, 0x0) 09:09:19 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000180)={0xa920, 0x1, 0x0, 0xffffffffffffffff}) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) r2 = dup(r1) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r2, 0x0) [ 229.048135][T11222] ion_mmap: failure mapping buffer to userspace 09:09:19 executing program 3: r0 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000040)={0x0, 0x4, 0x6, 0x8, 0x200}) r1 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r1, 0x80084121, 0x0) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000000)) 09:09:19 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) geteuid() mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) pipe(0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x0, 0x0) mount$bpf(0x20000000, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x5004, 0x0) mount$bpf(0x20000000, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x588e, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r0 = dup(0xffffffffffffffff) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000280)=0x1, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40000012, r0, 0x0) mount$bpf(0x0, &(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000a40)='bpf\x00', 0x0, 0x0) umount2(&(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000340), 0x0) semget(0x0, 0x0, 0x0) 09:09:20 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xb0, 0x1) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000040)={0xffffffff, {{0xa, 0x4e23, 0x253c29b8, @dev={0xfe, 0x80, [], 0xa}, 0x1}}}, 0x88) creat(&(0x7f0000000280)='./file0\x00', 0x0) mount$9p_rdma(0x0, &(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)='9p\x00', 0x0, &(0x7f0000000c80)={'trans=rdma,', {'port'}}) 09:09:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='\x93!u\x8e') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x2d431a31218b0a00, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x20021010) 09:09:20 executing program 0: r0 = getpgid(0x0) ioprio_set$pid(0x1, r0, 0x101000000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) io_setup(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf60300000000ff00}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 09:09:20 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000004c0)=0xffffffffffffffb8) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001080), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x298, r3, 0x1402, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a07}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35a0}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x403e}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89e7}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000090) socket$nl_generic(0x10, 0x3, 0x10) 09:09:20 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x1331045151d1a20f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 09:09:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$TIOCSIG(r0, 0x40045436, 0x41) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x626, 0x20000000fb], 0x1f004}) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @local}}, 0x4, 0x6}, &(0x7f0000000040)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={r6, 0x3c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x10001}, @in={0x2, 0x4e20, @rand_addr=0x3}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000340)=0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) [ 229.571685][T11261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=11261 comm=syz-executor.3 09:09:20 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 229.728444][T11253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=11253 comm=syz-executor.3 09:09:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0xbfcb270a40538e4f, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0xaaaaaaaaaaaace2, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0xc}}) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) rt_sigqueueinfo(r2, 0x33, &(0x7f0000000280)={0x3b, 0x5, 0x5}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$setlease(r3, 0x400, 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cf, 0x0, 0xffffffffffffffff], 0x100000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:09:20 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000004c0)=0xffffffffffffffb8) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001080), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x298, r3, 0x1402, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a07}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35a0}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x403e}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89e7}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000090) socket$nl_generic(0x10, 0x3, 0x10) 09:09:20 executing program 5: r0 = io_uring_setup(0x40000000f, &(0x7f00000005c0)={0x0, 0x0, 0x1, 0x0, 0x0, [], {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x3, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7ff, 0x200000007, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) io_uring_enter(r0, 0x0, 0x2, 0x1, 0x0, 0x360) io_uring_setup(0x166, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x3, 0xd6}) 09:09:20 executing program 4: mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") gettid() timer_create(0x0, &(0x7f0000001ec0)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xff00, 0x0) tkill(0x0, 0x14) open$dir(&(0x7f0000000540)='./file0\x00', 0x27e, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB="0100020600810000"], 0xc) 09:09:20 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 230.041183][T11287] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=11287 comm=syz-executor.3 09:09:20 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@local}}, {{@in=@broadcast}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f00000004c0)=0xffffffffffffffb8) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000001080), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r3, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000180)={0x298, r3, 0x1402, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xde}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfff}]}, @TIPC_NLA_LINK={0xa0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a07}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35a0}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x403e}]}, @TIPC_NLA_LINK={0xe4, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x24000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x89e7}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x20000004}, 0x44000090) socket$nl_generic(0x10, 0x3, 0x10) 09:09:20 executing program 5: r0 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x40004e20, 0x0, @rand_addr, 0x200000000000004}, 0x1c) listen(r0, 0xffffffffffffffff) syz_emit_ethernet(0x10077, &(0x7f0000000240)={@local, @random='\a\x00', [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4f, &(0x7f0000000080)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x19, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@eol]}}, {"95"}}}}}}}, 0x0) [ 230.238525][T11295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=11295 comm=syz-executor.3 [ 230.276687][T11298] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 230.399652][T11298] syz-executor.5 (11298) used greatest stack depth: 23256 bytes left [ 230.857102][ T21] device bridge_slave_1 left promiscuous mode [ 230.863301][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.918946][ T21] device bridge_slave_0 left promiscuous mode [ 230.925298][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.617116][ T21] device hsr_slave_0 left promiscuous mode [ 231.676597][ T21] device hsr_slave_1 left promiscuous mode [ 231.721694][ T21] team0 (unregistering): Port device team_slave_1 removed [ 231.732546][ T21] team0 (unregistering): Port device team_slave_0 removed [ 231.745078][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.780890][ T21] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.857541][ T21] bond0 (unregistering): Released all slaves [ 231.972929][T11309] IPVS: ftp: loaded support on port[0] = 21 [ 232.028860][T11309] chnl_net:caif_netlink_parms(): no params data found [ 232.059533][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.067296][T11309] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.075223][T11309] device bridge_slave_0 entered promiscuous mode [ 232.083116][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.090262][T11309] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.098414][T11309] device bridge_slave_1 entered promiscuous mode [ 232.114610][T11309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.160498][T11309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.182163][T11309] team0: Port device team_slave_0 added [ 232.189872][T11309] team0: Port device team_slave_1 added [ 232.278906][T11309] device hsr_slave_0 entered promiscuous mode [ 232.317568][T11309] device hsr_slave_1 entered promiscuous mode [ 232.396342][T11309] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.403466][T11309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.410808][T11309] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.418004][T11309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.448700][T11309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.461146][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 232.471006][ T3128] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.479738][ T3128] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.492109][T11309] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.503291][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.512278][ T3128] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.519491][ T3128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.539568][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.548544][ T22] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.555644][ T22] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.566918][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.576151][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 232.592903][T11309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 232.603861][T11309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 232.616329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.625692][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 232.634136][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 232.643713][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 232.662321][T11309] 8021q: adding VLAN 0 to HW filter on device batadv0 09:09:23 executing program 0: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x10000}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, 0x0, 0x8801) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x10001}, 0x0) socket(0x10, 0x80002, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@remote, @mcast1, @ipv4, 0x9, 0x738, 0xffffffff7fffffff, 0xf00, 0xfffffffffffffffb, 0x1020082}) 09:09:23 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d0104cfe47bf070") r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="240000004f0007031dfffd946f610500070200006700000077000000421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:09:23 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x266, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_MIIMON={0x8, 0x8, 0xde0}]}}}]}, 0x3c}}, 0x0) 09:09:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$isdn(0x22, 0x2, 0x10) splice(r1, 0x0, r0, 0x0, 0x20, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000000)=r5, 0x4) r6 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x2000000000012}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r6, 0x1000000000016) 09:09:23 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@random={'\xf2\x12\xebW\xb3w\x99\x1fb\x9e\x977]', '\x00\xcfS\x16F\xc8F\xd4E\xfc\xb2\xa6\xfb@\x1d\xf9bD\xd0\x8aR\xca\xe3.\x92\xc7\xda\xfe\x9f\xab\x14\xe5\x06\x0e^9\xb4\xaf\aH\x11\xb6\xc8\xb6+\xb1\xe5\xf3\xdd\xf6\xd7?}\x04\x87\xb3\x9b\xeb\x19\x1e\xca\xe1\x17\xc5\x8a<\x19k\xd1\x11\xfe\xa9\x8e\xafZ\x99\xa2\xaae\x84d\x80\xc3\x01A\xd8\x89\xebh\x9aR\xae\xaeC\xc8\x1a\xac\x03$\x8a\xce/|\x9ds\xe3\xb6d\x1d\x96\xfb*\xd6\xc2\x927Vu\xee\xd4> \x98\xe05\x9b\'ZW\x12\x00\xecH\xacD\xbc\x8a\x80\x97\fe4\xcc\t\xdbb'}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000240)=""/132) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x2f, 0x3ff, 0x0, 0x0, {0x7}, [@typed={0x8, 0x3, @fd=r0}]}, 0x1c}}, 0x0) [ 232.784357][T11317] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 232.793945][T11317] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 232.812925][T11318] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 232.822425][T11318] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 09:09:23 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x10b, 0x5, 0x0, {0x0, 0x0, 0xffffffffffffffff}}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 232.894108][T11329] __nla_validate_parse: 9 callbacks suppressed [ 232.894119][T11329] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. 09:09:23 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500), 0xc, 0x0}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000180)={{}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x6, 0x67d, 0x1, 0x0, 0x7}) ptrace$setsig(0x4203, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1}) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) accept4(0xffffffffffffffff, &(0x7f00000006c0)=@tipc=@name, &(0x7f0000000440)=0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000540)={0x3000, &(0x7f00000004c0), 0x0, r3}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYRES16=0x0, @ANYBLOB="c0363e1acdefd56f4f3baa62b05462f4b72e9164b89f724efc7ca4f894c6b7f1d1f0a8bd1f3a544e4080bdd91e2c67c3ab1a2827c86ea66c646547a9e9a7a4"], 0x2}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 232.959351][ T26] audit: type=1400 audit(1568711363.491:50): avc: denied { create } for pid=11334 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 232.985905][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:09:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 233.201736][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 233.227209][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 09:09:23 executing program 0: socket(0x200000000010, 0x2, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x10000}) r1 = dup3(r0, 0xffffffffffffffff, 0x0) recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(r1, 0x0, 0x8801) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x10001}, 0x0) socket(0x10, 0x80002, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@remote, @mcast1, @ipv4, 0x9, 0x738, 0xffffffff7fffffff, 0xf00, 0xfffffffffffffffb, 0x1020082}) 09:09:23 executing program 4: creat(&(0x7f0000000200)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'\x00\x02w\xa5\x00', 0x3d, r1}, 0x2c, {[{@mmap='mmap'}, {@debug={'debug'}}, {@access_user='access=user'}, {@aname={'aname', 0x3d, 'trans=fd,'}}, {@mmap='mmap'}]}}) r5 = semget$private(0x0, 0x6, 0x4) semctl$IPC_INFO(r5, 0x1, 0x3, &(0x7f0000000000)=""/179) 09:09:23 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:23 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x401}, 0xb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000000)="d102b58c5407000613f32e00"/24, 0x9) sendto$inet6(r1, &(0x7f0000000040)="cd", 0x1, 0xfc, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x800da0ffffffff], 0xffffffffffffffff}, 0x1000000000000002}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r5, r6], 0x3) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3, 0x8, 0x4, 0x35d, 0x8}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r8, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x17b1) getsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:09:23 executing program 3: syz_open_dev$audion(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x501, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'nr0\x01\x00', 0x4009}) socket$kcm(0x29, 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000200)=0xa7) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x105000, 0x0) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x71b40219f869ddf4}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x40, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xe3f3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffff7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000000}, 0x80) r3 = open(&(0x7f0000000080)='./file0\x00', 0x301, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_FD(r3, 0x4c00, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0xa0, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x81000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}}]}, @IFLA_GROUP={0x8}]}, 0xa0}}, 0x0) [ 233.406242][T11357] 9pnet: Insufficient options for proto=fd [ 233.483826][T11364] 9pnet: Insufficient options for proto=fd 09:09:24 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) write$P9_RWRITE(r0, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x401}, 0xb) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$inet6_buf(r2, 0x29, 0x2d, &(0x7f0000000000)="d102b58c5407000613f32e00"/24, 0x9) sendto$inet6(r1, &(0x7f0000000040)="cd", 0x1, 0xfc, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [0x800da0ffffffff], 0xffffffffffffffff}, 0x1000000000000002}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r5, r6], 0x3) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e21, @local}}, 0x3, 0x8, 0x4, 0x35d, 0x8}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000200)={r8, 0x5}, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x17b1) getsockopt$sock_int(r3, 0x1, 0x3f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 09:09:24 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 233.779070][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.796005][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.813964][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.832033][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.843234][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.855786][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.866206][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.887008][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.897797][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.908808][T11380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 233.923516][T11380] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 09:09:26 executing program 5: getrlimit(0x3, &(0x7f0000000000)) 09:09:26 executing program 4: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={[{@uid={'uid', 0x2c}}]}) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20000, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000100)='/proc/capi/capi20\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf25020000000c000500bc000000000000000c000200b00000000000000008000100000000001c00070008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="0c00050000010000000000000c00080000d0d50d00000000"], 0x68}, 0x1, 0x0, 0x0, 0x10004000}, 0xf6ac6c926b2e6be0) write$P9_RREADDIR(r0, &(0x7f0000000040)={0xb, 0x29, 0x1, {0x4}}, 0xb) 09:09:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000080)='syz1\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="25bca274769e620aa734fa0095e0612687463915e38802a9d8aea872943afd874e2f98b579a7186270146d0e0206e73ba8c63cd7dcc6760253ef", 0x3a, 0x400}], 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61626f72742c6e6f71756f74612c696e69745f697461626c653d3078303030303030303030303030303030302c7573726a07756f74613d2c6d626c6b5f696f5f7375626d69742c002b81bab9b2b9e20fa54d6a84fb4dc9340432ecd5a6b0090aa480042d418f0e79da1132075a5b12ba21a761c9d4a52189547c70a5ce0ac91d33b8ec0c2bdbbdbac93d9b17c530411d71d42dbdf34ad2449e52274f3594a4e853e2fa1b2948"]) 09:09:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:26 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='numa_maps\x00') preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x10) 09:09:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_rr_get_interval(0x0, &(0x7f0000000000)) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x24, r1, 0xe73e08281eb6b85d, 0x0, 0x0, {0xa}, [@TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0x4, 0x1, 'syz1\x00'}]}]}, 0x24}}, 0x0) [ 235.874327][T11326] delete_channel: no stack [ 235.929710][ T26] audit: type=1400 audit(1568711366.471:51): avc: denied { map } for pid=11388 comm="syz-executor.1" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=34467 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 236.014516][T11395] ntfs: (device loop4): parse_options(): The uid option requires an argument. 09:09:26 executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 09:09:26 executing program 5: perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xe172, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={0x0, 0x0, &(0x7f000000b000)={&(0x7f000002c000)=@mpls_newroute={0x1c, 0x18, 0x21}, 0x1c}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000000) ioctl$int_in(r2, 0x800000c004500a, &(0x7f0000000040)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0) 09:09:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) [ 236.164451][T11393] EXT4-fs (loop0): Unrecognized mount option "usrjuota=" or missing value [ 236.178613][T11395] ntfs: (device loop4): parse_options(): The uid option requires an argument. 09:09:26 executing program 1: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getpeername$tipc(r0, &(0x7f0000000100), &(0x7f0000000140)=0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000900)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e21, @multicast1}}, 0x24) syz_emit_ethernet(0x46, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000aaaaaaaaaa000800450000380000000000119078ace4194214ffbbe000000100004e210024907801000000020000000000000002000000000000000100000001000000"], 0x0) io_setup(0xfffffffffffeffff, &(0x7f00000000c0)) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x61d6) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000180)=""/99) 09:09:26 executing program 4: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_DO_IT(r0, 0xab02) 09:09:26 executing program 3: connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x4, 0x5, 0x10001, "348f64040e79c2be00ee107846a1d7699ccee7c64510138b8f09f623bc660462a6c3484e3794f1cd86aab90572559b3b7ded20ffbbc16c0637159f349447ee", 0x1}, 0x60) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi30ncci\x00', 0x8800, 0x0) finit_module(r0, 0x0, 0x0) [ 236.253405][ T26] audit: type=1400 audit(1568711366.791:52): avc: denied { map } for pid=11408 comm="syz-executor.5" path="/dev/dsp1" dev="devtmpfs" ino=18571 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sound_device_t:s0 tclass=chr_file permissive=1 09:09:26 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) 09:09:26 executing program 3: mkdir(&(0x7f00000000c0)='./file0\x00', 0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000080)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0xfc9481659e751c5a) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) getdents64(r0, &(0x7f0000007180)=""/143, 0x8f) getdents64(r0, 0x0, 0x0) [ 236.398136][T11421] EXT4-fs (loop0): Unrecognized mount option "usrjuota=" or missing value 09:09:27 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_subtree(r0, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'memory'}, {0x2d, 'rdma'}, {0x2b, 'rdma'}, {0x2d, 'pids'}, {0x2d, 'memory'}]}, 0x27) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4], 0x3) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000000240)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc004ae0a, &(0x7f00000001c0)={0x8d}) syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x7, 0x401002) 09:09:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='maps\x00') preadv(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0xa0e) 09:09:27 executing program 4: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)=0x80000000, 0xa3) 09:09:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) 09:09:27 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='seU\x86W\xbb\x8d\xc21\x8cNcurit\xff\aSMACK64\x00\x9f\xc3', &(0x7f0000000200)='hugetlb\x14\xfa)\x9a\xab\x06\x00\x00\x00\x8a{\xbf\x80\xbd\x8ffs\x00', 0x19, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') 09:09:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x38}, 0x10) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/230, 0xe6) 09:09:27 executing program 3: mknod$loop(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) stat(&(0x7f0000001240)='./file0\x00', 0x0) syz_mount_image$ext4(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0xfa8c52531fee2a61, 0x0) write$FUSE_ENTRY(r1, &(0x7f0000000380)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffe}}}, 0x90) r2 = open$dir(&(0x7f0000000740)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000700)='./file0\x00', 0x90002) sendfile(r0, r2, 0x0, 0x7ffffff0) sendfile(r2, r2, &(0x7f0000000140)=0x8800, 0x8800000) 09:09:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:27 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='seU\x86W\xbb\x8d\xc21\x8cNcurit\xff\aSMACK64\x00\x9f\xc3', &(0x7f0000000200)='hugetlb\x14\xfa)\x9a\xab\x06\x00\x00\x00\x8a{\xbf\x80\xbd\x8ffs\x00', 0x19, 0x0) chdir(&(0x7f00000003c0)='./file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f00000000c0)='./file0\x00') 09:09:27 executing program 0: bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647740500080089ea010000000000f109a708f78293c8744e1a", 0x0}, 0x28) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x100, 0x0) r0 = socket$inet(0x2, 0xa, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000000)=0x2) 09:09:27 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000008c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) fallocate(r0, 0x50, 0x0, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="c80000001000050700"/20, @ANYRES32=r4, @ANYBLOB="4300000000000000a800120008000100767469009c00020008000100", @ANYRES32, @ANYBLOB="080003000900000008000100", @ANYRES32=0x0, @ANYBLOB="08000500ac1e000108000400e000000208000500000500ac1414aa080002000600000008000600ff070000080002000100000008000600ffffff7f0800020000000000080002000600000008000300f8ffffff08000100", @ANYRES32, @ANYBLOB="04000000", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000500000000000800050000000000"], 0xc8}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) r6 = syz_open_procfs(r5, &(0x7f0000000100)='auxv\x00') bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfffffffffffffff9}, @map={0x18, 0xb, 0x1, 0x0, 0x1}, @generic={0x2, 0x8, 0x6, 0xfffffffffffffff9, 0x8}, @jmp={0x5, 0x100000000, 0x6, 0x5, 0x0, 0xfffffffffffffff0, 0x4}, @alu={0x4, 0x9, 0x4, 0xb, 0x9, 0x30, 0x8}, @call={0x85, 0x0, 0x0, 0x17}, @exit], &(0x7f0000000080)='GPL\x00', 0x1, 0x36, &(0x7f00000000c0)=""/54, 0x41100, 0x4, [], r4, 0xb, r6, 0x8, &(0x7f0000000140)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0x1, 0x40, 0x200}, 0x10}, 0x70) [ 237.118542][T11477] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) 09:09:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 237.192402][T11484] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 09:09:27 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.ima\x00', &(0x7f0000000140)=@v2={0x5, 0x1, 0x11, 0x0, 0xbe, "2f6d8f0d0f08ef1240ac1b9321cf1aa1da4b2a50de8c52600c1c915a026d7113681cb5c68c498fcee99254d3831a5ed84f7a921c62b4015a5082a6253f9ec54205a9acd42008a5fa3059834ee6a1573c204a809895f1e6b647bc146b5c4284efc7ee9d6285386a55f0556d2a9dfd3ce0bcf6401f1871794d4d8366d81db81bbb648851ac408c3bc84da0f97f5ce106e2548392e2f265344f56cd2918926254fd7aaf1208220eb6f653c745d94a065d31e7f2513274eaae8833037831fe7f"}, 0xc8, 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="f255a86d472f9765d7532021179f1ba771b8adf55c772051", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)="4bc2ba160eca7a81393d3b818a078e88", 0x5000}], 0x1}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) 09:09:27 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000180)={{0xd315, 0x2}, 'port0\x00', 0x20, 0x20000, 0x800, 0x7fff, 0xffff, 0x1ff, 0x800, 0x0, 0x1, 0xf000000000000000}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') prctl$PR_GET_THP_DISABLE(0x2a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r3, 0xea28b1e7388ddb3a, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60, 0x2d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8254}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 09:09:27 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)={&(0x7f00000002c0)='./file0\x00', 0x0, 0x38}, 0x10) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/230, 0xe6) [ 237.279019][T11484] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.5'. 09:09:27 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x82ffffff) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r2, 0x11, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000180)={0x54, 0x1, 0x8001, {0x3}, {0x9, 0x7}, @const={0x1, {0x6, 0x776, 0x6, 0x9}}}) request_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffff9) 09:09:27 executing program 2: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:28 executing program 3: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x40) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000001d40)={0xffffffff00000001}) 09:09:28 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x4000) mknodat(r4, &(0x7f0000000180)='./file0\x00', 0x80, 0x8000) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000000c0)=""/112) setsockopt$TIPC_MCAST_REPLICAST(r3, 0x10f, 0x86) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x3e, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05000000000000000000010000000000000009410000004c001800000060657468000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030805f737200"/103], 0x68}}, 0x0) [ 237.583776][T11503] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:09:28 executing program 5: socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet6_udp_int(r4, 0x11, 0x66, &(0x7f0000000140), &(0x7f00000001c0)=0x4) write$rfkill(r3, &(0x7f0000000100)={0x5, 0x4, 0x1, 0x1, 0x48c5730b}, 0x8) r5 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r5, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_mount_image$reiserfs(&(0x7f0000000340)='reiserfs\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={[{@usrjquota_file='usrjquota=/yz'}]}) [ 237.673214][T11512] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:09:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:28 executing program 3: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)={0x15, 0x65, 0xffff, 0x8001, 0x8, '9P2000.L'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@loose='loose'}]}}) chdir(&(0x7f0000000180)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) [ 237.728399][T11503] syz-executor.4 (11503) used greatest stack depth: 21912 bytes left 09:09:28 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000180)={{0xd315, 0x2}, 'port0\x00', 0x20, 0x20000, 0x800, 0x7fff, 0xffff, 0x1ff, 0x800, 0x0, 0x1, 0xf000000000000000}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') prctl$PR_GET_THP_DISABLE(0x2a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r3, 0xea28b1e7388ddb3a, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60, 0x2d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8254}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 09:09:28 executing program 0: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)) r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x1f, 0x2) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000300)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0x120) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 237.818889][ T26] audit: type=1400 audit(1568711368.361:53): avc: denied { setattr } for pid=11535 comm="syz-executor.5" name="exec" dev="proc" ino=34696 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=file permissive=1 [ 237.894067][T11536] REISERFS warning (device loop5): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. 09:09:28 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$setflags(r1, 0x2, 0x0) write$P9_RREADDIR(r0, 0x0, 0x0) 09:09:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:28 executing program 0: io_setup(0x8, &(0x7f00000003c0)=0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x3, 0x1, 0x7ff, 0x5}) io_getevents(r0, 0x2, 0x800000000000024, &(0x7f0000d83f60)=[{}, {}], 0x0) r4 = memfd_create(&(0x7f0000000140)='sec]ritynodev:ppp1bdev\x00', 0x0) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}]) io_destroy(r0) 09:09:28 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000080)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) r2 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "dc0af7d271fd5af7"}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000240)) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r4, 0x4b47, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) accept4$alg(r4, 0x0, 0x0, 0x800) setuid(r6) r7 = socket(0x200040000000015, 0x805, 0x0) fstat(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r8) getgroups(0x4, &(0x7f0000000380)=[0xee01, r8, 0x0, 0x0]) fchown(r4, r6, r9) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r2, &(0x7f0000000340)={0xa0, 0x19, 0x2, {0x2, {0x4, 0x3}, 0x20, r6, r10, 0x0, 0x3f43727e, 0x8, 0x3, 0x8, 0x1f7, 0x0, 0x6, 0x5, 0x5, 0xbff, 0x6, 0x1, 0x7, 0x8}}, 0xa0) 09:09:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:28 executing program 2: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:28 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:28 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/2, 0x11a}, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40400, 0x0) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000000100)=""/20, 0x14}, {&(0x7f0000000140)=""/71, 0x47}, {&(0x7f0000000240)=""/172, 0x1d8}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/4, 0x4}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f00000003c0)=""/92, 0x5c}], 0x8, 0x0) 09:09:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000440)={'syz', 0x2}, 0x0, 0x0, r3) r5 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r6, 0x200001000008912, &(0x7f0000000140)="11dca5055e0bcfe47bf070") add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, r5) r7 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0xfffffffffffffffb, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3f, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r7) 09:09:28 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000180)={{0xd315, 0x2}, 'port0\x00', 0x20, 0x20000, 0x800, 0x7fff, 0xffff, 0x1ff, 0x800, 0x0, 0x1, 0xf000000000000000}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') prctl$PR_GET_THP_DISABLE(0x2a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r3, 0xea28b1e7388ddb3a, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60, 0x2d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8254}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 09:09:29 executing program 5: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x71, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)={r3, 0x7d, "e172462611fe4077ca1e07d83fbba90257948535e82c16346e473ac078e3ff4d0a3ea832a6f7945b9646526299d4b59aa52ecc833c9d1bec343b7de28a6f9147f90d572d844a98f87ce1e3075a837190fb7330e5b68639a5667c2fc52e84768ebf406c6538551c292b1c947af2fd9c8d812231e47fff5c8a9c1e40f636"}, &(0x7f0000000080)=0x85) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e23, 0x31d9, @loopback, 0x53f}}, 0x2, 0x3ff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf67000000000000150600000fff07003506000002000000070600000ee60000bf050000000000003d650000000000006507000002000000070700004c00fbff1e75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000050000000000000095000000000000008a0b5286771a356045bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0xfffffd46}, 0x48) 09:09:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:29 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_PROTO_DOWN={0x8, 0x4}]}, 0x30}}, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000180)={{0xd315, 0x2}, 'port0\x00', 0x20, 0x20000, 0x800, 0x7fff, 0xffff, 0x1ff, 0x800, 0x0, 0x1, 0xf000000000000000}) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') prctl$PR_GET_THP_DISABLE(0x2a) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f00000002c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x80, r3, 0xea28b1e7388ddb3a, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x3b}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60, 0x2d}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x6}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8254}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x800) 09:09:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 238.694554][T11595] QAT: Invalid ioctl 09:09:29 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x280000, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000300)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x10) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x400}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0x1, 0x800) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000440)={0x0, r4}) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000100)={@remote}, &(0x7f0000000200)=0x14) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r5, 0x4b47, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket(0x200040000000015, 0x805, 0x0) fstat(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r9) getgroups(0x4, &(0x7f0000000380)=[0xee01, r9, 0x0, 0x0]) fchown(r5, r7, r10) setxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f00000002c0)=@v3={0x3000000, [{0x2, 0x7fffffff}, {0x401, 0xffffffff}], r7}, 0x18, 0x0) r11 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r11, 0x0) ioctl$TUNGETIFF(r11, 0x800454d2, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xfffffffffffff800, 0x6f3, 0x2, 0x1000, 0x0, 0x68, 0x404, 0x4, 0xca, 0x3, 0x7ff, 0x5, 0x0, 0x5, 0x237, 0x1, 0x2, 0x16d, 0x0, 0xbf00, 0x0, 0x1, 0x1ba4, 0xfc, 0x1, 0xfffffffffffffff9, 0x3, 0x8, 0x1, 0x5f29, 0x5, 0x4, 0x0, 0x3, 0x4, 0x2f, 0x0, 0x598f, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x4, 0x9, 0x200, 0xd, 0x1f, 0x3, 0x5}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x790e4db8eabeea34, 0x0) [ 238.783117][T11598] QAT: Invalid ioctl 09:09:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x7, 0x37c0ad83f75a9e8d) connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0xb) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$rose(r2, 0x104, 0x2, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) lsetxattr$security_smack_transmute(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64TRANSMUTE\x00', &(0x7f00000000c0)='TRUE', 0x4, 0x4) 09:09:29 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getsa={0x3c, 0x12, 0x1, 0x0, 0x0, {@in=@broadcast, 0x0, 0x0, 0x3c}, [@srcaddr={0x14, 0xd, @in=@multicast1}]}, 0x3c}}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @loopback, @multicast1}, &(0x7f0000000140)=0xc) 09:09:29 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000220001002bbd7000fedbdf25021014acff00000005000000110002007d8d21c0f3998e78ce94cceaa0b5cf7f6e0091377cc8e4845a0918ac589231da9c643ff810704fafdadad851d751ed8bf22bdd77da71d5f3328f2f8fdf2b3dbb0d9885d83385dbe9210cbad9aff8611bf67fb79e5945eed4552ce372a070227bb4f117e141377ba40a12655d00faa8e7b0e02478974ef4c5d5adb4fd490d38b27618fb1e68f46e08e0634960cf4f2482185c22b01b8989eb49ef7c378ac92522a57314dd12"], 0x20}, 0x1, 0x0, 0x0, 0x1198}, 0x7b7bd10aea4c400d) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, {}, 0x0, 0x2}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x2) 09:09:29 executing program 1: prctl$PR_SET_DUMPABLE(0x34, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getflags(r0, 0x40a) 09:09:29 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x1d9) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x17f) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000480)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000204, 0xfffffffffffffffe, 0x0, 0x0, 0x4cb]}) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1c}}, {0xa, 0x0, 0x0, @mcast2}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x5c) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) ioctl$SCSI_IOCTL_DOORUNLOCK(r4, 0x5381) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000100000000000000001040000fc0200ff03000000"]) 09:09:29 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.e_in_bytes\x00\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RCLUNK(r2, &(0x7f0000000000)={0x7}, 0x7) fallocate(r2, 0x0, 0x0, 0x2000402) fallocate(r1, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2, 0x0, 0x8}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x2, 0x4, 0x83e, 0xdf1, 0x3, 0x3, 0x5, 0x2be, 0x40, 0x164, 0xef, 0x100, 0x38, 0x1, 0x1d5, 0x20, 0xfffffffffffffff7}, [{0x2, 0x1, 0x7ff, 0x0, 0x25f7, 0x9, 0x7, 0x3}], "57b6ac979737b3532d402402b7d6c95fa952f1898b5130138f75a4f6ec627a66fb9e689d3af6a4d3f6dbe15dde5eee817470be192d37bef3dd9b927430632b4228488b7537e1c21942abf571d60ee7dd7dadcb300388", [[], [], [], [], []]}, 0x5ce) 09:09:29 executing program 3: unshare(0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f00000000c0)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x18, {0x2, 0x0, @local}, 'tunl0\x00'}) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0xfffffffffffffffb, 0x7f, 0x7ff, 0x7b}, 'syz0\x00', 0x55}) [ 239.777935][ T26] audit: type=1800 audit(1568711370.321:54): pid=11634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="hugetlb.2MB.e_in_bytes" dev="sda1" ino=16701 res=0 [ 240.177722][ T21] device bridge_slave_1 left promiscuous mode [ 240.184452][ T21] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.217076][ T21] device bridge_slave_0 left promiscuous mode [ 240.223379][ T21] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.816829][ T21] device hsr_slave_0 left promiscuous mode [ 240.856729][ T21] device hsr_slave_1 left promiscuous mode [ 240.922328][ T21] team0 (unregistering): Port device team_slave_1 removed [ 240.934061][ T21] team0 (unregistering): Port device team_slave_0 removed [ 240.944233][ T21] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.995244][ T21] bond0 (unregistering): Released all slaves [ 241.091568][T11648] IPVS: ftp: loaded support on port[0] = 21 [ 241.149181][T11648] chnl_net:caif_netlink_parms(): no params data found [ 241.175183][T11648] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.182487][T11648] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.190363][T11648] device bridge_slave_0 entered promiscuous mode [ 241.198316][T11648] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.205410][T11648] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.213082][T11648] device bridge_slave_1 entered promiscuous mode [ 241.228700][T11648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.239862][T11648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.258688][T11648] team0: Port device team_slave_0 added [ 241.287916][T11648] team0: Port device team_slave_1 added [ 241.348917][T11648] device hsr_slave_0 entered promiscuous mode [ 241.386812][T11648] device hsr_slave_1 entered promiscuous mode [ 241.426477][T11648] debugfs: Directory 'hsr0' with parent '/' already present! [ 241.443601][T11648] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.450742][T11648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.458176][T11648] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.465231][T11648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.504298][T11648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.517956][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 241.525965][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.534682][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.546142][T11648] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.559922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.568931][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.576459][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.587915][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.597541][ T3128] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.604683][ T3128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.628289][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.637963][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.646577][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 241.659977][T11648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.672128][T11648] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 241.680935][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 241.689578][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 241.712959][T11648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.790681][T11655] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready 09:09:32 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x480403, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x3305, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="d41ca2533cb2e6220ba40feac0377c3d073ab78e1910acf59267eace96d320fba03201e5eb7a5fe18bbf542a84d85505bfcfe19282d5a751733fb24f6797d5207cc320af195031c3646253d6eeacf8a80202fe", 0x53}, {&(0x7f0000000140)="3b6d42eeb7", 0x5}, {&(0x7f0000000180)="d017729fd6ceb1e67fd23604b11ac33a850123e6999e45646c34f8701aa134607c89e47f5625d19d3233aaf4df28761ddaae4747c7b2b579e9de20d8210599ce8ab276463450e2f6de6ae7bc7b495949ed9988c3f6f9cc0629b601f1899ec00e8301171d47e7fb93d677821c96de5e90756df2eb30c19206129dc66ee573b52caf229349cb43a42f24b21a9f6faca1c5d53582f1362c7db63da46be0a058fbb9a2177b6bae3b9d75fb1b0032df2c92353d745311d99ef1dd7c0d36603c639d048a644637aa08277402784cb73b4f38893a838b82", 0xd4}, {&(0x7f0000000280)="2f9014c83ce16278478f152da24425911df22b96b698a1a78fd230b49774d785c1357b93c92aefabe29b86", 0x2b}, {&(0x7f00000002c0)="2ae6c702251ed1b2ccfae1d8ab4a4d2e0878965d392f7abf6bb258292281fcca9d0ef8b16d561941fae0781986a051133855172e26423a67ec012293a26308a703d3094a60ad0d43aeefe5a2c31d6a1275ba65646391358fc509df07e405f92911dc3aa8816958a40fe4b6fd4ae490a3c6033ed1", 0x74}], 0x5) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000040)={0x57, 0x6, 0x3, {0x100000000, 0x2}, {0x2, 0x2}, @const={0x311, {0x14, 0x5, 0xeba, 0xfff}}}) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000000000)={0x7fff, 0x800000000000000, 0x10001, 0x3}, 0x10) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000003c0)={0x200, 0x8}) 09:09:32 executing program 1: setrlimit(0x7, &(0x7f0000000040)) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) r1 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @rose}, [@bcast, @bcast, @netrom, @netrom, @bcast, @default, @remote, @null]}, &(0x7f0000000240)=0xffffffffffffff68, 0x100000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) socket$can_bcm(0x1d, 0x2, 0x2) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000280)="647f7bb33aa9155627a430357ddcb32be5c8548476f60a0efa5ea3e9a5b343aa3d9e07462a186a2f85e8bc2051e2e8d68c76eb3e16e2f898486053e116969351fc0bbd3671c18eba9c29464b8ef9840d0dafa22aff74fc2e029df22d741809f06677d208d81a3e7403de827dac5a789b3149f266df6d62d009", 0x79, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r2, 0x0) 09:09:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:32 executing program 3: r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x420000) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) fsopen(&(0x7f0000000140)='logfs\x00', 0x1) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) fsconfig$FSCONFIG_SET_STRING(r2, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r5 = userfaultfd(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x430a02, 0x0) dup2(r5, r0) 09:09:32 executing program 5: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000702000)) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0xdc, 0x0, 0x4, "a607babf7ebacf09657db625a8d2e2f8b283c34fa06167ea273a5fa035f2f3900aebd0d01bd6a500f38da4a63bbf4b59fd67ce78cbcf0144444d93d3fce34498ecad171169b4cb11c96a0ca41fc23df9d7f52fd9bf0ded68a6ebd7eb3111cea6ccd879e936d5206da0989739151bb1a8f2bb327f390b059c28cf2fca4d9a302b950519ea0da906bf6a25e3eca6509fabcd86778458f9fa7d6a0a1a5991779c99e2a173755f42b55ba98df3774e6fadeb0eae2db8c411297cb7c16aaff2e2216ab57df7c4156a44ecac21af66ddb1c1c2dbcf1a9c07e1b68207a959eb"}) 09:09:32 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 09:09:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x78, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, r2, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) 09:09:32 executing program 1: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0) r3 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r6, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r4, r5, r6], 0x3) rt_sigreturn() ioctl$SNDRV_TIMER_IOCTL_STATUS(r5, 0x80605414, &(0x7f0000000280)=""/139) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x180000, r5}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f00000001c0)={r7}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000100)={'batadv0\x00\x80\x01\xa0\xff\xff\xff\xff\x00', @random="0100040c0b10"}) 09:09:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) 09:09:32 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x78, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, r2, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) 09:09:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x78, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) keyctl$chown(0x4, r0, r2, 0x0) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000140)='S', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r3, 0x0, 0x0) 09:09:32 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 09:09:32 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:32 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x806) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f00000000c0)={0x0, 0x7ffe, 0x10, 0x0, 0x80000, 0x200000000000000}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fcntl$notify(r1, 0x402, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r2, r3, r4], 0x3) ioctl$KDGETMODE(r3, 0x4b3b, &(0x7f0000000040)) 09:09:32 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x3f36533b, 0x2) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x40) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 09:09:32 executing program 0: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) [ 242.459463][T11706] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! 09:09:33 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 09:09:33 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 09:09:33 executing program 1: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 09:09:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x3f36533b, 0x2) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x40) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 09:09:33 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f00000003c0)=0x2000) keyctl$set_reqkey_keyring(0xe, 0x4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x300, 0x1) ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f00000000c0)=""/243) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r5, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r3, r4, r5], 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0) close(r6) write$cgroup_type(r6, &(0x7f0000000080)='threaded\x00', 0xfffffc61) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000780)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000840)={&(0x7f0000000740), 0xc, &(0x7f0000000800)={&(0x7f0000000440)=ANY=[@ANYBLOB="010001170000104bfc8b58f113c3fda0831f0ed2c9ed0057eb242638bc2de4bbd789007dbd15fe9b4c1bf15bc99fc1d8c343e33d3de3fa2a20729ef4133b01698ae297ae274e18788af7acc726c95345f98bf6b8564f0fc4d2dc29edf881e8730f2ffbfe105b149eeed863abd46ae602af7f3a7ecc3900309b240e273768449fa0", @ANYRES16=r7], 0x2}, 0x1, 0x0, 0x0, 0x20008804}, 0x2000) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket(0x10, 0x802, 0x0) write(r9, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r11 = socket(0x10, 0x802, 0x0) write(r11, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r12 = socket(0x10, 0x802, 0x0) write(r12, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x413000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x80, r7, 0x810, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SOCKETS={0x54, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r8}, {0x8, 0x1, r2}, {0x8, 0x1, r1}, {0x8, 0x1, r9}, {0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r1}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x6, 0x0, 0x2, {0x7, 0x7, 0x6, 0x20}}) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000040)='lazytime\x00', 0x0, 0x0) 09:09:33 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x1f) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55515bdc50b38a3ebf3defb30f8a906151", 0x20) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000800)=ANY=[@ANYRES32=0x0], 0x4) readv(r2, &(0x7f00000007c0)=[{&(0x7f0000001d80)=""/4096, 0x20011b6f}], 0x1) 09:09:33 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x3f36533b, 0x2) sendmsg$unix(r0, &(0x7f0000000900)={&(0x7f0000000180)=@abs, 0x6e, 0x0}, 0x40) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}}], 0x4000000000002c5, 0x2, 0x0) 09:09:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:33 executing program 0: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000340)='\x01\x00\x00\x02\x01C\x9fo&H\xba:\xe3\xc3\xdc\x00\x00\x00\x00\x00', 0x14, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x20500, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000080)={0xfbfb, 0x2}) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 09:09:33 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:33 executing program 1: r0 = memfd_create(&(0x7f00000000c0)='@)cpuset\x10GPLposix_acl_access\x00', 0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2012, r0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000180), 0x2, &(0x7f00000001c0)=""/147, 0xfffffffffffffe88}, 0x10122) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x20000001}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e22, @rand_addr=0x3}, 0x200, 0x0, 0x0, 0x0, 0xff, &(0x7f00000002c0)='vlan0\x00', 0x100000001, 0xffffffffffffffff, 0x80}) mq_open(0x0, 0x0, 0x0, &(0x7f0000000080)) 09:09:33 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000140)={0x1, 0x2, 0x6, 0x8, '\x00', 0x2}) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0) r1 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000001c0)) pwritev(r1, &(0x7f0000001380)=[{&(0x7f0000003040)="02", 0x1}], 0x100000000000026a, 0x0) fallocate(r1, 0x20, 0x0, 0xfffffeff000) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000180)={0x8, 0x2, 0x9}) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x100, 0x0, 0x7, 0x0, 0x0, 0xfffffffeffffffff, 0x4000000001, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x200, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x1000000000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) socket$unix(0x1, 0x5, 0x0) fallocate(r3, 0x0, 0x0, 0x14000101) [ 243.579392][ T26] audit: type=1800 audit(1568711374.121:55): pid=11751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16712 res=0 [ 243.678969][ T26] audit: type=1800 audit(1568711374.151:56): pid=11762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16712 res=0 [ 244.067209][ T7] device bridge_slave_1 left promiscuous mode [ 244.073399][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.117385][ T7] device bridge_slave_0 left promiscuous mode [ 244.123671][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.806800][ T7] device hsr_slave_0 left promiscuous mode [ 244.866555][ T7] device hsr_slave_1 left promiscuous mode [ 244.922382][ T7] team0 (unregistering): Port device team_slave_1 removed [ 244.933974][ T7] team0 (unregistering): Port device team_slave_0 removed [ 244.944087][ T7] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.980397][ T7] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.056624][ T7] bond0 (unregistering): Released all slaves [ 245.191357][T11769] IPVS: ftp: loaded support on port[0] = 21 [ 245.244229][T11769] chnl_net:caif_netlink_parms(): no params data found [ 245.269655][T11769] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.276787][T11769] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.284591][T11769] device bridge_slave_0 entered promiscuous mode [ 245.292247][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.299391][T11769] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.307503][T11769] device bridge_slave_1 entered promiscuous mode [ 245.322996][T11769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.333892][T11769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.351577][T11769] team0: Port device team_slave_0 added [ 245.359189][T11769] team0: Port device team_slave_1 added [ 245.469730][T11769] device hsr_slave_0 entered promiscuous mode [ 245.506903][T11769] device hsr_slave_1 entered promiscuous mode [ 245.556525][T11769] debugfs: Directory 'hsr0' with parent '/' already present! [ 245.576255][T11769] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.583381][T11769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.590722][T11769] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.597799][T11769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.645344][T11769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.661053][ T3123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 245.672079][ T3123] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.680310][ T3123] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.692254][T11769] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.704199][T10567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 245.713187][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.720297][T10567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.738511][ T2845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 245.747026][ T2845] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.754094][ T2845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.773589][T11769] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 245.784825][T11769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 245.799132][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 245.808613][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 245.818107][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 245.826612][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 245.835362][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 245.843161][ T3128] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 245.860075][T11769] 8021q: adding VLAN 0 to HW filter on device batadv0 09:09:36 executing program 4: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r1, 0x0, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x7fffffff, 0x0) 09:09:36 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r5}, 0x10) sendfile(r4, r2, 0x0, 0xffffffff) 09:09:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@fragment, 0x8) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet6_opts(r2, 0x29, 0x39, 0x0, &(0x7f0000000040)) 09:09:36 executing program 0: socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfffffffffffffc00, 0x20000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x830100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x1c, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'veth0_to_bridge\x00'}}}}, [""]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, &(0x7f0000000040)) 09:09:36 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x20ff0cdc) sendmsg(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x9, @mcast1, 0x8d5d}, 0x80, &(0x7f0000000140)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000080)="e98cec00b957432350b03373c88b7f399672434e8687f06c2c1b506879c6ae85d6cb72860674cf9847559075a354a9416419e9fabd97979ab609eab65a71e694fd1d263538e4fb0350db25137a247478eacdf82af8f5e0b201f082395f5f6262692fbabea6716a9685ebdb45430ade281a8ed1a3eea20abbf4560faf080d63396ff2e27d37c6332f09cdbbf792b027abef5aa6b2f289f23c47a46b5f75", 0x9d}], 0x2, &(0x7f0000000180)=[{0x108, 0x119, 0x7fff, "cb8226bc636bf4e109ff625dfc10a42f74160c8f9430b965d0326a469d525fc04e41bb06a740a1fbbeed8a965f0dc9c83a93bfbf5384e364053e2afaa9b41fbb0f9428e7d327e9b95936a7fd7a9f8b8328946ff4145ee257bbcfcdab563ab850d91f57b7bfb35d08f96f98dcbebb48d635f6a7c91d1a8f312f9e1c86ddfebfab688123143dd883fa3f83ebfbe7d98d729bc2600ddd2005b3b7d3e707bd3d0d1ae8ff5d4e642154c3bb5969e8c18edd95534a9e396b5392722260b8ee62b92929a180225dc66d8c481e49b51b2721591272446cd6a140440f9d3f6752b29d6a5ac8f3b6b4919fb8f09d588b6fa1971e42f6cd741ef60532"}], 0x108}, 0x4000) setresuid(0x0, r3, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) 09:09:36 executing program 5: syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x10000, 0x400402) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x1}) 09:09:36 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x96d1, 0x4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) accept4(0xffffffffffffffff, &(0x7f0000000580)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000000)=0x80, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRESHEX, @ANYRESOCT, @ANYBLOB="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", @ANYRES64, @ANYBLOB="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"], 0x2bf) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x296, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 09:09:36 executing program 0: utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10000, 0x20}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000800ffffffff08000a00000000002a020800ac1e0001"], 0x2c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x898fd13755b449c, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0xff66, 0x400}], 0x5, 0x0) 09:09:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:36 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1c800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10040, 0x0) ioctl$KDGKBLED(r4, 0xc0045405, &(0x7f0000000000)) [ 246.079362][ T26] audit: type=1800 audit(1568711376.621:57): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16561 res=0 [ 246.131414][ T26] audit: type=1804 audit(1568711376.641:58): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 [ 246.162594][ T26] audit: type=1804 audit(1568711376.701:59): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 09:09:36 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(pcrypt(morus640-sse2))\x00'}, 0x58) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x8000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x4, 0x4) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/199, 0xc7) 09:09:36 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 246.315357][ T26] audit: type=1804 audit(1568711376.731:60): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 [ 246.436035][T11800] kvm [11798]: vcpu0, guest rIP: 0x8a disabled perfctr wrmsr: 0xc1 data 0x4d00000000f [ 246.436329][T11808] EXT4-fs (loop0): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 246.511814][ T26] audit: type=1804 audit(1568711376.731:61): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 [ 246.813834][ T26] audit: type=1804 audit(1568711377.351:62): pid=11839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 09:09:37 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r5}, 0x10) sendfile(r4, r2, 0x0, 0xffffffff) 09:09:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fc9000)='/dev/sequencer2\x00', 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1c800, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x10040, 0x0) ioctl$KDGKBLED(r4, 0xc0045405, &(0x7f0000000000)) 09:09:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000006f40)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004fc0)=ANY=[@ANYBLOB="10000000000000008400000000000002"], 0x10}}], 0x2, 0x0) splice(r0, &(0x7f0000000040), 0xffffffffffffffff, &(0x7f00000000c0), 0xc9, 0x1) 09:09:37 executing program 1: tkill(0x0, 0xf) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000001040)='/dev/zero\x00', 0x10000, 0x0) socket(0x10, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11dca5055e0bcf") syz_genetlink_get_family_id$tipc(0x0) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) memfd_create(0x0, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r3) socket(0x10, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, 0x0, 0x0, r4) setgroups(0x0, &(0x7f00000003c0)) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$IP6T_SO_GET_INFO(r5, 0x29, 0x40, &(0x7f0000000080)={'mangle\x00'}, &(0x7f0000000140)=0x54) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000001300)) fstat(r0, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(0x0) mount$9p_virtio(&(0x7f0000001140)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='9p\x00', 0x8000, &(0x7f00000013c0)=ANY=[@ANYBLOB='trans=virtio,debug=0x0000000000000004,dfltuid=', @ANYRESHEX=r1, @ANYBLOB=',privport,dfltuid=', @ANYRESHEX=r3, @ANYBLOB=',nodevmap,access=client,fowner=', @ANYRESDEC=0x0, @ANYBLOB="145c818dce32e9ed", @ANYRESDEC=r6, @ANYBLOB=',uid>', @ANYRESDEC=r7, @ANYBLOB=',\x00']) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200000000, 0x2, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$set_reqkey_keyring(0xe, 0x3) syz_open_dev$vbi(&(0x7f0000000580)='/dev/vbi#\x00', 0x1, 0x2) [ 246.867805][ T26] audit: type=1804 audit(1568711377.381:63): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 09:09:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write(r2, &(0x7f0000000600)="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", 0x200) sendfile(r2, r3, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', r5}, 0x10) sendfile(r4, r2, 0x0, 0xffffffff) 09:09:37 executing program 4: mkdir(&(0x7f00000001c0)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x2a00015, 0x0) chdir(&(0x7f0000000040)='./file0\x00') rename(&(0x7f00000000c0)='./control\x00', &(0x7f0000000140)='./file0\x00') [ 246.971629][ T26] audit: type=1804 audit(1568711377.381:64): pid=11838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 09:09:37 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000340)={0xf, 0x8}, 0x10) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000300)={0x0, 0x0, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000400)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @dev, 0x4}, {0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @mcast2={0xff, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}, {0x2, 0x0, 0x6, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000000)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) 09:09:37 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 247.181500][ T26] audit: type=1804 audit(1568711377.391:65): pid=11837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir289270628/syzkaller.IXpzHz/51/file0" dev="sda1" ino=16561 res=1 09:09:37 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) sched_setparam(r1, &(0x7f0000000000)=0x1f) write$sndseq(r0, &(0x7f0000000640)=[{0x81, 0x100000001, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) write$sndseq(r0, &(0x7f0000000100)=[{0x8, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8={"2bc19f37f2b8a743b071543e"}}], 0x30) [ 247.270872][ T26] audit: type=1800 audit(1568711377.551:66): pid=11860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16740 res=0 09:09:37 executing program 4: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000240)={0x6, {{0xa, 0x4e21, 0x5, @empty, 0xfffffffffffffffd}}, 0x0, 0x2, [{{0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x107}}, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, [], 0x18}, 0x7bf}}]}, 0x190) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x20000) ioctl$BLKPBSZGET(r0, 0x127b, &(0x7f0000000040)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 09:09:37 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f00006b8000/0x2000)=nil, 0x3) syncfs(0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8001, 0x100) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000040)={0x5, 0xea223e514b47404, @raw_data=[0x2, 0x4, 0x6, 0xfff, 0x3, 0x378e, 0x6, 0x5, 0x91, 0x5, 0x6, 0x100000001, 0x4, 0x1, 0x0, 0xffffffff80000000]}) 09:09:38 executing program 5: connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000eb5c1e2dfda29876d4e8b264697cf7062ab31edaef1b0f767677bb75a33170f6fcb079b0e42c", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r1, 0x4) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 09:09:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:38 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x80044dfc, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r1 = socket(0x10, 0x802, 0x3) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) mmap$binder(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0x0) 09:09:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1f}, 0x4200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000000000000000000080009000c000000", 0x24) 09:09:38 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x5, 0x800) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x7) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 09:09:38 executing program 0: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) write$P9_RREMOVE(r0, &(0x7f00000001c0)={0x7, 0x7b, 0x1}, 0x7) r1 = getuid() mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='bpf\x00', 0x2000408, &(0x7f0000000340)={[{@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode', 0x3d, 0x4}}], [{@euid_gt={'euid>', r1}}]}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f00000004c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000001440)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3dc82f01bfb4a67cf621d6234555c08dc540473753cd89e9b08e3f5972fe9ca162b123e192e8c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d"], 0x15) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000200)={0x2e, 0x9, 0x80000001, @empty, 'nr0\x00'}) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r6 = syz_open_dev$mice(&(0x7f00000003c0)='/dev/input/mice\x00', 0x0, 0x5938548d171a06a5) write$selinux_attr(r6, &(0x7f0000000400)='system_u:object_r:boot_t:s0\x00', 0x1c) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 09:09:38 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0xb, 0x209e1e, 0x3, 0x181, r0, 0xffff, [], 0x0, 0xffffffffffffffff, 0x0, 0x200000000003}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r1, 0x4) 09:09:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:38 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0x80044dfc, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) r1 = socket(0x10, 0x802, 0x3) socket$kcm(0x29, 0x7, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) mmap$binder(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x1, 0x11, r0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0x0) 09:09:38 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:38 executing program 3: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x1, 0x0) pwritev(r0, &(0x7f00000013c0)=[{&(0x7f00000000c0)='i', 0x2b3}], 0x1, 0x63) 09:09:38 executing program 4: syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f0000001580)=[{&(0x7f0000000080)="9ac9a5a333271e8da5323279501fb76f8d0726ebcda7213aa719f393bf33410a643ad39ec484bd02903d3bed20623fd8e01e8788f78334920c8c16b2a861e3b790405689135d99e1230826ac075a47b8aad6774042d34a4f54e02e7d273574d8b248054941c7c69244276da203b9734ea404822c59974ad6742ec2938f6ee12cb3add30d59d4dbeeadaac232dda3f992d2d91958456882e1", 0x98, 0x1000}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="a7c31ce22b1216265398403a79e7be228c7996185bfe0bcc4ea66ff5f6f6c5898235740b416bcd380eceab6892b2fbe1053cce444368fbf99f223bba81b357084d218c8c1816ede04537a4564293d78cf28431fb8ed813d2c1cb2fd494fb0bd7d929fd72a17fa41b5c54a6e9747cedd24a2c2452df6d0749a2f763e586fe53ed0aa983e61357b2976c7e202a4193fb15aa4abc0b59d1d7797aaa8e9b08a0b08305", 0xa1, 0xfffffffffffffffb}, {&(0x7f0000000140)="c85ace47e71896783999d87035b430984efb2cc71aabf513daf20e160bd112e3b4d390c27af5a3ec87eb4625763c1a689b0ccf43ba0965e82fb75a68fda5eea0596888c699", 0x45, 0x1}, {&(0x7f0000001440)="7d2d74461816d3df8331acb713060cc2c1c06963c2d4d70f3526c66a81e259d681ba744bd8847de8babd8356b34d5119324e585c492f97d8dcf78c1e544ff091ed6755bd4000caa48cb9e64a2b41c43132fc5fc72b887ac5b93b4d013ec34a5d0a0d4311cc807e8483259dbe4fced8f0b4a3916f1714244b38d345dc", 0x7c, 0x46}, {&(0x7f00000014c0)="0726fccbe857105b245d978ce3268c5a24170a24bbcd51ebe51998b1ef7993d5523c3d9ade1c58cc93f3eded17e0bba7914311a029989e8b650247f80cd9ad7872de9e8b5dff266ade77cde6ecfbbe98134f68fe3ee762ce50ecf2ac9a35f3b535a06b33a9592efe06d04838c886dd0fd7f086683b6fb9b6117b1b6e84241c86ff240b81d3cebe1fa1bf3707dde9e8f0fa75", 0x92, 0x3}], 0x2c2000, &(0x7f0000001640)={[{@nls={'nls', 0x3d, 'cp850'}}, {@fmask={'fmask', 0x3d, 0x80}}, {@show_sys_files_yes='show_sys_files=yes'}], [{@fsname={'fsname', 0x3d, '['}}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x11000008912, &(0x7f00000001c0)="1130a50d5e0bcfe47bf070") r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f00000002c0)={0x0, 0xfffffffffffffefe, &(0x7f0000000340)=[{&(0x7f0000000200)="2400000018007be11dfffd946f6105000a0000061f000081000008000800170004ebff7e280000001100ffffba16a0aa1c0900000000000020000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 09:09:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) 09:09:38 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0xb, 0x209e1e, 0x3, 0x181, r0, 0xffff, [], 0x0, 0xffffffffffffffff, 0x0, 0x200000000003}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r3, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000240)=r1, 0x4) 09:09:38 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000000)={0xa, 0x800000000000000, 0x0, @empty}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000100)="e66ffb2c77ba09cf8754d6369eb7", 0x1}], 0x1}}, {{&(0x7f0000000580)={0xa, 0x0, 0x16d0, @local, 0x401}, 0xfffffea1, &(0x7f0000000700), 0x1, 0x0, 0xffffff5a}}], 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0xf71b, 0x2, 0x4, 0x8002, 0x2, [{0xe032, 0xfffffffffffffffb, 0x3b, 0x0, 0x0, 0x401}, {0xe43e, 0x4, 0x3ff}]}) [ 248.301861][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:09:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x2, 0x101801) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x2, 0x0) r4 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000200)='/dev/capi20\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000140)={0x80000020, 0x9, 0x2, 0x0, 0x0, [{r4, 0x0, 0xfd9}, {r3, 0x0, 0xffff}, {r3, 0x0, 0x2}, {r1, 0x0, 0x2000000}]}) dup3(r0, r1, 0x0) 09:09:38 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) [ 248.685465][T11945] bond0: (slave bond_slave_1): Releasing backup interface 09:09:39 executing program 3: r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x6, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000040)={0x2, 0x0, 0x3, {0x0, 0x0, 0xfffffffffffffffe, 0x400}}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f00000000c0)={0x1000, 0x8, 0x4, 0x800, {0x0, 0x2710}, {0x4, 0x2, 0x1a32f1eb, 0x200, 0x4a, 0xb21, "6ac9c6e0"}, 0x8000, 0x4, @userptr=0xc00, 0x4}) 09:09:39 executing program 1: ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000880)={"8b7bffbded494b321d3eeae26b2c32cc3695d990b4ae59e22f2f36d5bed709f867a106747e48c98a1b99bc7434f49d361e62f98fa0ed454e0087a316805f7ed85be5949cf3b412715df004007921c1c3326f8f604a2c2e90182c2a301afe922dce27feb0e1e1c678542f98b8eea47fbb8fe9ecd8178796b87930a679e4c03b54a581cffd1aa7745d3da0d90ed5546cdaa2a586f607f4aa36e67333228513f3de671f7eb28bd1b6f47314bf1dff54fa5f6a8d7ae7b8956fe0899b3e780f4764fcdff4d4e585825ecb9db5a34073ca8d57fb7041d33b5ccbdf2df13ed507af941a8137256ef8b24979fcedd3248fb67d264a6263600f648744e6fa4c60d22516e9290af732873582dc9b6eb1ce73bc102cbdfc35b6d0c7ba9fb5f173277d1d5d4e58cbb760ede874af3389478121410945bcba10d9fbee012e12f39663b9041f413e705d5ff6c90924afba5fa600bfb96db1b61cd4811774bfe061841416649313731cca391d8e73e358f9e63dd2ac36e26985534bbf96cdd5928a79aeb97f8472370998eaa6d8bcb120248f4a8c41e515791cdfb27151874a45b59faf2e7968b758c4684ccae6e716370a3ee6235fa9fca1af3e661b37c9f7f907da55e693877a61ca1696d32f5bedf1395d3993bc080d90c4afc730e8e410c315eb113669b22688b93d84e5d9ab32313a41c763d4f91aaa4d2a848c07dce486a2af66804ec41e9009be55c459f782854ff594585f2aab96248e7906a8328aecbec774779707e591ee60348ca9663251f17a265cd88d28fa2e277a8330f5414bb3b6c869a7253804b5d17d0c5d33856892d7a6ca23d14400342d10e160dba6be0caefe2bdc1e45e8b1740a1ecc4a92fdca44ef414931c9a84dac7fe87770a2138fcfa514dca59d8470f9d1948921e86f4efeada357b5a2d4309939d7ec27bd38c33a10a90b1a41fa0db9d26684c3e43a49b618d0f03d9b27e724b379f976ff43613b58e5b58d7723a0602047e1af1d2692c0c8fa664f17644da32d1d6ae8d41e97b342f9ce10ad8e60c2ca6ea44522b09d24c165a24355cb0eb044798f0f91a5655dc6da56b2613a28ffb55642fb4ff846bfafbb7bad2eac0af076ea3439811ec4c805dbbc5c099f6b0a14fc6574d03f8fff3a3f05ef0255d3c19c91588994248fc682d6f1f30f601f9c1f2dcca9f22e1ed8457fe7cd709b6815e1e293a11a80b4f3aacce00dfb4ff867b545643c771470da21ba3b08dc411e6744d2d86cff8371f2c10d9e9789945fae99675c27a42c5a10f1e61e216258944af5bf95b733dc06b1b7b1c298f41332909002e110d778986a3bd06378cbf817e23aeada43a346bf5dcc7c6303b1b7f2214241ecdccff9299e0d041b97f7fd77eb1fb614b742a8a04179487fd98720fc374906da1b08f8ade23f84dfe38aca6d12331cf6ee8bd84f4c533bce599c"}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000006c0), 0x4000000000003c6, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x7, 0x10, 0x2}) 09:09:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000000)) 09:09:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) fallocate(r1, 0x4, 0xffffffff, 0x3) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYPTR64, @ANYBLOB="03802e37a70ca50a51b8b4065adc57d136605dcdc8692f603f84c63497165c376308149256f13d5157a6d71266ba0bcbcdfa23567077e6201c2edc14f81b316613a97d762a775a0b2cf2aa5f13530f7f0fe97b6ec9feee00000000000000000000003935aed91fd7c6589608cf05b40bd70dd32ddb4e8a3be1b78a985a5eb56c48230c8aa4e2ed9f52350561e24ce2525937af8fc763fbca7dcf9650da0704291a19b44607da30cf9153dc491f266104d3b00c283834da5a006404d0dc21eac3779e5027ce702dc626d8a4a512a61b80b1c03003f6bf31e92ca2d4b26b511fbb67", @ANYRESHEX=0x0], 0xa1) r3 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x101, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x27, 0x1, 0x0, 0x7, 0x400, 0x100, "95f6fa0814cca0f804fcc5e9792e75dd7a0d1a05e46beacc2f65480c232c7f49a613587a17179332a51c717a16a36eb88b74ac7f56363513e33c67c088cbf7", 0x34}, 0x60, &(0x7f00000003c0)=[{&(0x7f0000000340)="9a19e6d7765544aa95dcc6cba984c332375183dac3c6c22ed4eec6f35d28728de5b9a6522cff822c8964cc1b1eb7b2074dae170b12a6ea9fb8676fd173dd8bfdffb74ca5ca0fdf4166c30960e7f55e07df388070703fa78c715b9c3b1dbd", 0x5e}, {&(0x7f0000000140)="204aac3f274196c0151ec3", 0xb}], 0x2, &(0x7f0000000440)={0x80, 0x118, 0xff, "0cc4de0f00b02f41c7f920754e5fa52da7df99f77235555ac46cea81bfefb65561806125f9f159d1798fc36ff07c0253650af11d67a043ba2588c9eb3a6c44031ccc54b4d0f6e401518dbd753dc63c49106b97a730f3e09299eba5f599cf0b8204e3370737c851ee4b81"}, 0x80, 0x240080a2}, 0xc000) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000001c0)={0x20000080002004, 0x23, 0x402, 0x0, 0x3, 0x5}) recvmmsg(r2, &(0x7f0000003480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000005c0)=""/137, 0x89}, {&(0x7f0000000680)=""/99, 0x7fffef77}], 0x2}}], 0x2, 0x0, 0x0) [ 248.818210][T11975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 09:09:39 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x8000000000006, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x41395527) r5 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r5, 0x0) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f00000000c0)) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0x35b) 09:09:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) 09:09:39 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1b0000001c008106e00f80ecdb4cb9f207c804a01a000000880314", 0x1b}], 0x1}, 0x20000000) r1 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$revoke(0x3, r1) add_key(&(0x7f0000000080)='blacklist\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="6812f246e36cf24c5ad918013c73470edbf517932536a78c70115a24afe69da56cadb331aad175be09628d6791f857f6369f1027fe27171cce77500913307368167a9c181403c74d033435aecaad315ce61ca90eb5ee4d0b218691bf6d6211ca2e0a85a4747d0a857ec804a09e3cef7ca106cf1a445ce7764227fc78a0cc86de555ca20cc1bdba9c2d", 0x89, r1) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x0, 0x0) write$P9_RSTATFS(r2, &(0x7f0000000240)={0x43, 0x9, 0x2, {0x3, 0x3f, 0xff, 0x6, 0x5e, 0x10000, 0xd1, 0x6, 0x1f}}, 0x43) ioctl$KVM_GET_DEBUGREGS(r2, 0x8080aea1, &(0x7f00000002c0)) 09:09:39 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffd, 0xa0005) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0xe9, 0x7}, 0x8) ioctl$TCSBRKP(r0, 0xc0105500, 0xac2) 09:09:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x1f, @mcast2, 0x20}}}, &(0x7f0000000000)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x0, 0x8001, 0x25e, r5}, &(0x7f0000000100)=0x10) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = syz_open_pts(r0, 0x0) syz_open_dev$adsp(0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)={0x1c, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff}) 09:09:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) 09:09:39 executing program 0: mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) open(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x200000, 0x1f4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) dup(r1) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x4000000000005) r3 = dup3(r2, r1, 0x0) write$UHID_INPUT(r3, &(0x7f00000015c0)={0x8, "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", 0x1000}, 0x1006) r4 = semget$private(0x0, 0x4, 0x200) semctl$GETVAL(r4, 0x4, 0xc, &(0x7f0000000080)=""/237) 09:09:39 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008913, &(0x7f0000000000)="f0700000cf1c9d9d0d7346e7a9b65a93a8bdb300000000000000") getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f00000001c0)={{0xfffffffffffff677, 0x3, 0x800, 0x49e, 0x2, 0x4}, 0xea1, 0x4, 0x5, 0x3, 0xa0000000, "08e79705cdfd9d17a64befb286ace78470ba19765f09f151c7d8d580f1004ede5d873ff1272d3766e78826af978c7ddee5019a74e218bdd260403ecc8db2391472a4a1e4a879925a1e2209e91fac337c1614ec78504ed8a0433b7bb7e7ddf5598ce949db537607f0b0d71e888d183094bec271aaca852a836dc013ead34e9bb0"}) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100), &(0x7f0000000180)=0x4) 09:09:39 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, 0x0) 09:09:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) sendto$packet(r3, &(0x7f00000000c0)="3b3b899a7d6007c4d43424f44ae65b74291a4824d482753f28535d78002969193d064fae23e409740b3421577f0f219de1d9d5aed098a384ae6e899f065dc4305be52047f56d388d610572abcccb77b787261ab121cb0468c2365baf84f9c0205b47d7836147cb29ae2ae7499a4abc193a40b9e5", 0x74, 0x4000000, &(0x7f0000000140)={0x11, 0x9, 0x0, 0x1, 0x1000, 0x6, @remote}, 0x14) r4 = socket(0x11, 0x80a, 0x0) dup(r4) r5 = socket(0x10, 0x802, 0x0) write(r5, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8) fchmod(r2, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x8) close(r3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff5e, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@noalign='noalign'}]}) 09:09:40 executing program 2 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 249.569186][T12031] FAULT_INJECTION: forcing a failure. [ 249.569186][T12031] name failslab, interval 1, probability 0, space 0, times 1 [ 249.641832][T12031] CPU: 0 PID: 12031 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 249.650204][T12031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.660584][T12031] Call Trace: [ 249.664140][T12031] dump_stack+0x172/0x1f0 [ 249.668488][T12031] should_fail.cold+0xa/0x15 [ 249.673183][T12031] ? fault_create_debugfs_attr+0x180/0x180 [ 249.679246][T12031] ? lock_downgrade+0x920/0x920 [ 249.684354][T12031] ? ___might_sleep+0x163/0x280 [ 249.689225][T12031] __should_failslab+0x121/0x190 [ 249.694238][T12031] should_failslab+0x9/0x14 [ 249.699016][T12031] __kmalloc+0x2e0/0x770 [ 249.703450][T12031] ? mark_held_locks+0xf0/0xf0 [ 249.708457][T12031] ? _parse_integer+0x190/0x190 [ 249.713500][T12031] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 249.719327][T12031] tomoyo_realpath_from_path+0xcd/0x7b0 [ 249.725105][T12031] ? tomoyo_path_number_perm+0x193/0x520 [ 249.730875][T12031] tomoyo_path_number_perm+0x1dd/0x520 [ 249.736398][T12031] ? tomoyo_path_number_perm+0x193/0x520 [ 249.742141][T12031] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 249.747970][T12031] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 249.754410][T12031] ? ___might_sleep+0x163/0x280 [ 249.759290][T12031] ? selinux_file_mprotect+0x620/0x620 [ 249.764765][T12031] ? __fget+0x384/0x560 [ 249.769104][T12031] ? ksys_dup3+0x3e0/0x3e0 [ 249.773642][T12031] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.779994][T12031] ? fput_many+0x12c/0x1a0 [ 249.784457][T12031] tomoyo_file_ioctl+0x23/0x30 [ 249.789336][T12031] security_file_ioctl+0x77/0xc0 [ 249.794294][T12031] ksys_ioctl+0x57/0xd0 [ 249.798586][T12031] __x64_sys_ioctl+0x73/0xb0 [ 249.803283][T12031] do_syscall_64+0xfd/0x6a0 [ 249.807847][T12031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 249.813930][T12031] RIP: 0033:0x4598e9 [ 249.818126][T12031] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 249.837736][T12031] RSP: 002b:00007f47e1befc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 249.846247][T12031] RAX: ffffffffffffffda RBX: 00007f47e1befc90 RCX: 00000000004598e9 [ 249.854228][T12031] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 249.862295][T12031] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 249.870361][T12031] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bf06d4 [ 249.879856][T12031] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 09:09:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000080)=0x9) sendmsg$kcm(r1, &(0x7f00000004c0)={&(0x7f00000001c0)=@nl=@unspec, 0x80, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000050000002500000002110000"], 0x14}, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000040)={0x7, 0x3f, 0x1, 0x1}, 0x10) 09:09:40 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18}, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r3 = accept4$inet6(r2, 0x0, &(0x7f0000000240), 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x71, &(0x7f0000000040)={r7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000440)={r7, @in6={{0xa, 0x4e23, 0x9, @remote, 0xffffffffffffffc1}}, 0x0, 0xfffffffffffffffb, 0xfffffffffffff000, 0x2, 0x1}, &(0x7f00000003c0)=0x98) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r10 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r10, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x71, &(0x7f0000000040)={r11}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000280)={r11, 0x83, "dcbcfd0d1d9ae181587bec16ca29d8868ca3ae597b7a2c4eb7b76cb677e6cbf5b8d6d0405a4a4be08934155c721566d25184327de42973041bc743584522bda9c02f7093c1ecfcb5127a26bac856915ba76aa98948088bd05a3757aec3393424bd4d09d6da3327ca40019af7aae282702a00cf651b05c44a9dd69eb3e83f0f062c97c9"}, &(0x7f0000000340)=0x8b) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000002040)={r12, 0x1, 0x1000, "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"}, 0x1008) r13 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x81, 0x800) r14 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r14, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r15, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r13, 0x84, 0x7b, &(0x7f00000001c0)={r16, 0x18}, &(0x7f0000000200)=0x8) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[], 0xffffffaa) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000000)=""/84, 0x54}], 0x1}}], 0x1, 0x2000, 0x0) [ 249.981966][T12031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.985164][T12033] XFS (loop0): Invalid superblock magic number 09:09:40 executing program 2 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 250.131739][T12056] FAULT_INJECTION: forcing a failure. [ 250.131739][T12056] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 250.145087][T12056] CPU: 0 PID: 12056 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 250.152878][T12056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.163032][T12056] Call Trace: [ 250.166345][T12056] dump_stack+0x172/0x1f0 [ 250.170781][T12056] should_fail.cold+0xa/0x15 [ 250.175586][T12056] ? fault_create_debugfs_attr+0x180/0x180 [ 250.181592][T12056] ? lock_downgrade+0x920/0x920 [ 250.186676][T12056] should_fail_alloc_page+0x50/0x60 [ 250.192041][T12056] __alloc_pages_nodemask+0x1a1/0x900 [ 250.197446][T12056] ? __alloc_pages_slowpath+0x2520/0x2520 [ 250.203181][T12056] ? avc_has_extended_perms+0x8e4/0x10f0 [ 250.209875][T12056] ? unwind_get_return_address+0x61/0xa0 [ 250.215738][T12056] ? profile_setup.cold+0xbb/0xbb [ 250.220864][T12056] ? fault_create_debugfs_attr+0x180/0x180 [ 250.226686][T12056] ? lock_downgrade+0x920/0x920 09:09:40 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386105, &(0x7f0000000300)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x101001, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r5, 0x8a, "0d70cc0f8311a7ffeab31eb7d9ea77df2a8bee4e3e4a94d39a3be73a3e06e33e259d77b62d81323c5751fc34b9fc5f8208baa6ac4599587e54e0a47a7224836e3c21befb90763dbe2969a84bf8e8c89bc847cb08789db2a2cae9686f0298829d8f52abeb2ce950dc0cc3c4cbe45587c3f520a963ca6cd77ae72a6ce80a38ae4829a92b1a10d9bdd40a47"}, &(0x7f0000000200)=0x92) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x554e) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x71, &(0x7f0000000040)={r9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000280)={r9, 0x68}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000000240)=@sack_info={r10, 0xffff, 0x80000000}, &(0x7f0000002000)=0x7) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r12}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r12, 0x3, 0x80000000}, 0x8) 09:09:40 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x3ff, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x36d4, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff7ffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x5618}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x9, 0x10) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="2e0000002300817ee45de087185082cf0400b0eba06ec400002339e00586f9835b3f00009148790000f85acc7c45", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x802, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)={{0x107, 0x8000, 0x7, 0x273, 0x13, 0x1, 0x249, 0xff}, "9fad6f6290fa762d0e17985c682f07f58a7715e18d071a3ef37937f83eb1fc6854ed2b1d8f8bc752b82e4a018a595ba19991d89a75ca10b8966b03d78a026d4ce3effd0f8d232ac14ed9d6ec370b6c6c37ef6fa447c4dd6341de3e76f4aa8a82773008bb968fcf7ce39aca2f8424e57dd340e9a2067f22f433f4d3f6f28a211d779044ee3ee6a55ca392712cf82a5ff934619aad946af5ab93d66358e0c19bd7c567add3579d3e8f7a383a4c2094181a043f5cfc46d1fb6e43b53181643ee0a1bff27a406f4acd453e44ead9ad728da5257fa7ea413efd1100548469ca4957", [[], [], [], [], [], [], []]}, 0x7ff) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=""/244, 0x0, 0x0, 0x101}, 0x18) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000000)=""/21, &(0x7f0000000040)=0x15) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x591800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000ac0)={0x0, 0x7fff, 0x38}, &(0x7f0000000780)=0xffffff99) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000007c0)={r4, 0x20}, 0x8) ioctl$BLKROTATIONAL(r3, 0x127e, &(0x7f0000000180)) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000008c0)={r4, 0x8, 0x30}, &(0x7f0000000900)=0xc) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000380)="53502b6bf1d72a98f66653b26992edc60f0ec285a0cf890738a89b93c47aec22b7b2b82f874e7d65c6fb06b50e2ba766592608e227b83658af319b60ac9c26a528e3d570e9d4574252f2047800862c15246733cd6f950f5b97cc0d9cf030f94a44a8c6c906f29ee8da3e2db712b257d6b73b3850fd59582901fde75d3ea71fd4df8e8e294a87992ea6eb85d9ce1b7356c9a5f71f2c154cc0f8431f02f7528124f0b5e67e0c9e8f32f9dd52b236cf1738cc7a76cb93ee61e3fae9889f7ee22330d73fe908fbc10782017ae683941c9acce85b14dae33b6b18292c8ccbe27fc67d97a0f360") ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}, {}]}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r6) r7 = socket(0x1e, 0x805, 0x0) connect(r7, &(0x7f0000000080)=@x25={0x9, @remote={[], 0x3}}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYBLOB="01000000d8c6d0cc5e2df6490f8fb375af19630e6086907c31a4ee07655006f00900d4799fa8", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r8, 0x3a8e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000600)={r9, 0x6, 0x140a09e5, 0x3, 0x9961, 0x3}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000580)={r10, 0x100}, 0xffffffffffffffe9) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) open_by_handle_at(r11, &(0x7f0000000d40)=ANY=[@ANYBLOB="ba000000eb020000166fe3a36dc14feb69ced1b0560f818c8ee22228eb78ea2e8bfd408493a45fc21b0e1a2988d2b0a6fbc710eaa62cd99de440aca4da233bb2e39021061e9d36669d863774b94925344777c4defc9c23240d2460006030c81b0f99a8228c807d44c6678d5538223e810cb6a7a0785fed8ad7a1b2c539c8b325ee6c27a37f25cd7a62d1cd1ee290105ffa44e6a559f92ec64b5a896816955962a5818309bf3c0f6676672f6f3c5d921060a43e33fb932ebdb4adb2bc5513c371d6ed9ac5"], 0x4000) r12 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x591800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000ac0)={0x0, 0x7fff, 0x38}, &(0x7f0000000780)=0xffffff99) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f00000007c0)={r13, 0x20}, 0x8) ioctl$BLKROTATIONAL(r12, 0x127e, &(0x7f0000000180)) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f0000000340)) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f00000008c0)={r13, 0x8, 0x30}, &(0x7f0000000900)=0xc) ioctl$KDSKBSENT(r12, 0x4b49, &(0x7f0000000380)="53502b6bf1d72a98f66653b26992edc60f0ec285a0cf890738a89b93c47aec22b7b2b82f874e7d65c6fb06b50e2ba766592608e227b83658af319b60ac9c26a528e3d570e9d4574252f2047800862c15246733cd6f950f5b97cc0d9cf030f94a44a8c6c906f29ee8da3e2db712b257d6b73b3850fd59582901fde75d3ea71fd4df8e8e294a87992ea6eb85d9ce1b7356c9a5f71f2c154cc0f8431f02f7528124f0b5e67e0c9e8f32f9dd52b236cf1738cc7a76cb93ee61e3fae9889f7ee22330d73fe908fbc10782017ae683941c9acce85b14dae33b6b18292c8ccbe27fc67d97a0f360") ioctl$DRM_IOCTL_RES_CTX(r12, 0xc0106426, &(0x7f0000000200)={0x7, &(0x7f0000000140)=[{0x0}, {}, {}, {}, {}, {}, {}]}) r15 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) close(r15) r16 = socket(0x1e, 0x805, 0x0) connect(r16, &(0x7f0000000080)=@x25={0x9, @remote={[], 0x3}}, 0x80) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r16, 0x84, 0x1d, &(0x7f0000000c00)=ANY=[@ANYBLOB="01000000d8c6d0cc5e2df6490f8fb375af19630e6086907c31a4ee07655006f00900d4799fa8", @ANYRES32=0x0], &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r15, 0x84, 0x9, &(0x7f0000000000)={r17, @in={{0x2, 0x0, @empty}}}, 0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r17, 0x3a8e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r12, 0x84, 0x1, &(0x7f0000000600)={r18, 0x6, 0x140a09e5, 0x3, 0x9961, 0x3}, &(0x7f0000000540)=0x14) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r12, 0x84, 0x19, &(0x7f0000000580)={r19, 0x100}, 0xffffffffffffffe9) ioctl$DRM_IOCTL_GET_SAREA_CTX(r12, 0xc010641d, &(0x7f0000000300)={r14, &(0x7f0000000480)=""/112}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000300)={r14, &(0x7f0000000480)=""/112}) ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f00000002c0)={r5, 0x3}) [ 250.231549][T12056] cache_grow_begin+0x90/0xd20 [ 250.236320][T12056] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 250.242406][T12056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 250.248657][T12056] __kmalloc+0x6b2/0x770 [ 250.252914][T12056] ? mark_held_locks+0xf0/0xf0 [ 250.257688][T12056] ? tomoyo_realpath_from_path+0xcd/0x7b0 [ 250.263444][T12056] tomoyo_realpath_from_path+0xcd/0x7b0 [ 250.269005][T12056] ? tomoyo_path_number_perm+0x193/0x520 [ 250.274655][T12056] tomoyo_path_number_perm+0x1dd/0x520 [ 250.280255][T12056] ? tomoyo_path_number_perm+0x193/0x520 [ 250.285907][T12056] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 250.291720][T12056] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.297970][T12056] ? ___might_sleep+0x163/0x280 [ 250.302855][T12056] ? selinux_file_mprotect+0x620/0x620 [ 250.308360][T12056] ? __fget+0x384/0x560 [ 250.312706][T12056] ? ksys_dup3+0x3e0/0x3e0 [ 250.317566][T12056] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.317579][T12056] ? fput_many+0x12c/0x1a0 [ 250.317598][T12056] tomoyo_file_ioctl+0x23/0x30 [ 250.317612][T12056] security_file_ioctl+0x77/0xc0 [ 250.317629][T12056] ksys_ioctl+0x57/0xd0 [ 250.342431][T12056] __x64_sys_ioctl+0x73/0xb0 [ 250.347127][T12056] do_syscall_64+0xfd/0x6a0 [ 250.351656][T12056] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.357660][T12056] RIP: 0033:0x4598e9 [ 250.357674][T12056] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 09:09:40 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") listen(r0, 0xfffffffffffffffe) r2 = socket$inet6_sctp(0xa, 0x2000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r3 = accept(r0, 0x0, 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r5 = socket(0x10, 0x802, 0x0) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r9 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x8001, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r9, 0x40bc5311, &(0x7f0000000440)={0xad, 0x2, 'client1\x00', 0x1, "7b6a5786d071c445", "bc895069df3b02c3bd7deccf956e1c74fc3a670c61217880a10b1c1331c7c4cb", 0x0, 0xbf}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="191b1d6bb86c66db4d281d279278bc2ebb0b8a771a64f8669d7789dbb4050090389ee4c89ad3c4940358c9d8e58d83d08ecbc90d2433883c580172f4ff01c893b0b9797628c76669b33738fb50681137c5997b2fd772b66b7b5643d5c4a775b833ec00", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x71, &(0x7f0000000040)={r10}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r10, 0x3f}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=r11, 0x4) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r12, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r13 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r13, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000f1888b6e6b3315d7e2e46d5f6daf30b8ff2476e6aba8dcf271b089a7022d316a62f340878ac075c773", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r12, 0x84, 0x71, &(0x7f0000000040)={r14}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000500)={r14, @in6={{0xa, 0x4e23, 0xfffffffffffffeff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xca}}}, 0x84) write(r5, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000000140), &(0x7f0000000240)=0x68) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x4, 0x4, [0x8, 0x9, 0x9, 0x40]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={r15, 0x9}, 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x14) [ 250.357680][T12056] RSP: 002b:00007f47e1befc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.357692][T12056] RAX: ffffffffffffffda RBX: 00007f47e1befc90 RCX: 00000000004598e9 [ 250.357708][T12056] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 250.381276][T12056] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.381284][T12056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bf06d4 [ 250.381290][T12056] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 09:09:41 executing program 2 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 250.601502][T12086] FAULT_INJECTION: forcing a failure. [ 250.601502][T12086] name failslab, interval 1, probability 0, space 0, times 0 [ 250.614478][T12086] CPU: 0 PID: 12086 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 250.622273][T12086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 250.632771][T12086] Call Trace: [ 250.636094][T12086] dump_stack+0x172/0x1f0 [ 250.640433][T12086] should_fail.cold+0xa/0x15 [ 250.645759][T12086] ? fault_create_debugfs_attr+0x180/0x180 [ 250.651576][T12086] ? ___might_sleep+0x163/0x280 [ 250.656725][T12086] __should_failslab+0x121/0x190 [ 250.661670][T12086] should_failslab+0x9/0x14 [ 250.666246][T12086] __kmalloc+0x2e0/0x770 [ 250.670559][T12086] ? ext4_find_extent+0x76e/0x9d0 [ 250.675860][T12086] ext4_find_extent+0x76e/0x9d0 [ 250.680890][T12086] ext4_ext_map_blocks+0x1dc/0x5040 [ 250.686078][T12086] ? __kasan_check_read+0x11/0x20 [ 250.691201][T12086] ? ext4_ext_release+0x10/0x10 [ 250.696056][T12086] ? __kasan_check_write+0x14/0x20 [ 250.701294][T12086] ? down_read+0x10a/0x3f0 [ 250.705722][T12086] ? down_read_killable+0x460/0x460 [ 250.710935][T12086] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.717191][T12086] ? ext4_es_lookup_extent+0x3fd/0xbf0 [ 250.722890][T12086] ext4_map_blocks+0xdc5/0x17f0 [ 250.727742][T12086] ? ext4_issue_zeroout+0x190/0x190 [ 250.733199][T12086] ? __might_sleep+0x95/0x190 [ 250.737974][T12086] ? ext4_journal_check_start+0x1ba/0x250 [ 250.743700][T12086] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 250.750035][T12086] ? __ext4_journal_start_sb+0x146/0x4d0 [ 250.755831][T12086] ext4_alloc_file_blocks+0x29c/0xaf0 [ 250.761480][T12086] ? ext4_extent_block_csum_set+0x350/0x350 [ 250.768086][T12086] ? __kasan_check_write+0x14/0x20 [ 250.773581][T12086] ? down_write+0xdf/0x150 [ 250.778073][T12086] ? __might_sleep+0x95/0x190 [ 250.782831][T12086] ? __might_fault+0x12b/0x1e0 [ 250.787685][T12086] ext4_fallocate+0x9a4/0x2470 [ 250.792559][T12086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 09:09:41 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f00005f7ffa)='ramfs\x00', 0x0, 0x0) mlock(&(0x7f0000400000/0x4000)=nil, 0x4000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400080, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={r4, 0x6}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000001c0)={r5, 0xc9, "174b5da703f790d4a1899bc86b7a2a79a335650b3f28ee68c59b8ca7245c914e7562412317c8322a500fed5c47aa9bdf4b4f2f54acd0f72265388dafe8cf095603a8b6a80105cf49b06ee5c7dbfd88a67ca8648cf334c082d622a2f6035ae7901eee4dd4d0b8d5bfa62aab7fd06d08d9ad121a471142102e1a654b21a1bdf7eedfed12e4be2deda02e45ab017675aa226bd7ee75ef89cb93860b9d33dc77cd668e9ce816a5d956c5e075fa2bceea237c54b91070038dde91b8f829c8b9badffdc359764c1e2d34eb24"}, &(0x7f00000002c0)=0xd1) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) mbind(&(0x7f000040a000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(0xffffffffffffffff, 0xc08c5336, 0x0) [ 250.798899][T12086] ? __this_cpu_preempt_check+0x3a/0x210 [ 250.804551][T12086] ? ext4_insert_range+0x14c0/0x14c0 [ 250.810200][T12086] vfs_fallocate+0x4aa/0xa50 [ 250.814810][T12086] ioctl_preallocate+0x197/0x210 [ 250.819843][T12086] ? generic_block_fiemap+0x70/0x70 [ 250.825254][T12086] do_vfs_ioctl+0x11c7/0x13e0 [ 250.829944][T12086] ? ioctl_preallocate+0x210/0x210 [ 250.835057][T12086] ? selinux_file_mprotect+0x620/0x620 [ 250.840630][T12086] ? __fget+0x384/0x560 [ 250.844833][T12086] ? ksys_dup3+0x3e0/0x3e0 [ 250.849288][T12086] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 250.855522][T12086] ? fput_many+0x12c/0x1a0 [ 250.859930][T12086] ? tomoyo_file_ioctl+0x23/0x30 [ 250.864856][T12086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 250.871398][T12086] ? security_file_ioctl+0x8d/0xc0 [ 250.876516][T12086] ksys_ioctl+0xab/0xd0 [ 250.880688][T12086] __x64_sys_ioctl+0x73/0xb0 [ 250.885299][T12086] do_syscall_64+0xfd/0x6a0 [ 250.889905][T12086] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 250.896061][T12086] RIP: 0033:0x4598e9 09:09:41 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) unshare(0x100) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000100)={r4, 0x4, 0x5, 0x80, 0x8, 0x800}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r5, 0x5}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x20600) prctl$PR_GET_TIMERSLACK(0x1e) fcntl$getown(r0, 0x9) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r7 = socket(0x10, 0x802, 0x0) write(r7, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r8, 0xffff}, &(0x7f00000000c0)=0x8) sched_rr_get_interval(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r9, 0x4c80, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getegid() sendto$inet6(0xffffffffffffffff, &(0x7f0000000540), 0x0, 0xffffffffffffffff, 0x0, 0x0) [ 250.899965][T12086] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 250.919923][T12086] RSP: 002b:00007f47e1befc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 250.928634][T12086] RAX: ffffffffffffffda RBX: 00007f47e1befc90 RCX: 00000000004598e9 [ 250.936683][T12086] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 250.944641][T12086] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.952684][T12086] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bf06d4 [ 250.960735][T12086] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 09:09:41 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x800000000, 0x79, 0x10, 0x90}, [@ldst={0xb, 0x0, 0xb, 0x0, 0x0, 0x37}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70) 09:09:41 executing program 2 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 251.172592][T12106] FAULT_INJECTION: forcing a failure. [ 251.172592][T12106] name failslab, interval 1, probability 0, space 0, times 0 [ 251.185546][T12106] CPU: 0 PID: 12106 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 251.193166][T12106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.203314][T12106] Call Trace: [ 251.206613][T12106] dump_stack+0x172/0x1f0 [ 251.210953][T12106] should_fail.cold+0xa/0x15 [ 251.215551][T12106] ? unwind_get_return_address+0x61/0xa0 [ 251.221331][T12106] ? fault_create_debugfs_attr+0x180/0x180 [ 251.227140][T12106] ? __es_tree_search.isra.0+0x1bf/0x230 [ 251.227154][T12106] ? save_stack+0x5c/0x90 [ 251.227171][T12106] __should_failslab+0x121/0x190 [ 251.227186][T12106] should_failslab+0x9/0x14 [ 251.227204][T12106] kmem_cache_alloc+0x47/0x710 [ 251.227217][T12106] ? __es_shrink+0xad0/0xad0 [ 251.227236][T12106] ? do_raw_write_lock+0x124/0x290 [ 251.261014][T12106] __es_insert_extent+0x2cc/0xf20 [ 251.266060][T12106] ext4_es_insert_extent+0x2d0/0xa70 [ 251.271364][T12106] ? ext4_es_scan_clu+0x50/0x50 [ 251.276249][T12106] ? __es_find_extent_range+0x361/0x490 [ 251.276272][T12106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.276292][T12106] ? ext4_es_find_extent_range+0x131/0x660 [ 251.293966][T12106] ext4_ext_put_gap_in_cache+0xfe/0x150 [ 251.299550][T12106] ? ext4_rereserve_cluster+0x240/0x240 [ 251.305109][T12106] ? ext4_find_extent+0x76e/0x9d0 [ 251.310154][T12106] ? ext4_find_extent+0x6a6/0x9d0 [ 251.315207][T12106] ext4_ext_map_blocks+0x20c4/0x5040 [ 251.320515][T12106] ? ext4_ext_release+0x10/0x10 [ 251.325389][T12106] ? __kasan_check_write+0x14/0x20 [ 251.330516][T12106] ? down_read+0x10a/0x3f0 [ 251.334921][T12106] ? down_read_killable+0x460/0x460 [ 251.334938][T12106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.334958][T12106] ? ext4_es_lookup_extent+0x3fd/0xbf0 [ 251.351916][T12106] ext4_map_blocks+0xdc5/0x17f0 [ 251.357046][T12106] ? ext4_issue_zeroout+0x190/0x190 [ 251.362254][T12106] ? __might_sleep+0x95/0x190 [ 251.366969][T12106] ? ext4_journal_check_start+0x1ba/0x250 [ 251.372701][T12106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 251.378955][T12106] ? __ext4_journal_start_sb+0x146/0x4d0 [ 251.384776][T12106] ext4_alloc_file_blocks+0x29c/0xaf0 [ 251.390262][T12106] ? ext4_extent_block_csum_set+0x350/0x350 [ 251.396346][T12106] ? __kasan_check_write+0x14/0x20 [ 251.401468][T12106] ? down_write+0xdf/0x150 [ 251.405907][T12106] ? __might_sleep+0x95/0x190 [ 251.410694][T12106] ? __might_fault+0x12b/0x1e0 [ 251.415701][T12106] ext4_fallocate+0x9a4/0x2470 [ 251.420477][T12106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.426738][T12106] ? __this_cpu_preempt_check+0x3a/0x210 [ 251.432392][T12106] ? ext4_insert_range+0x14c0/0x14c0 [ 251.437693][T12106] vfs_fallocate+0x4aa/0xa50 [ 251.442313][T12106] ioctl_preallocate+0x197/0x210 [ 251.447354][T12106] ? generic_block_fiemap+0x70/0x70 [ 251.452574][T12106] do_vfs_ioctl+0x11c7/0x13e0 [ 251.457263][T12106] ? ioctl_preallocate+0x210/0x210 [ 251.462388][T12106] ? selinux_file_mprotect+0x620/0x620 [ 251.462401][T12106] ? __fget+0x384/0x560 [ 251.462418][T12106] ? ksys_dup3+0x3e0/0x3e0 [ 251.462434][T12106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 251.462455][T12106] ? fput_many+0x12c/0x1a0 [ 251.488009][T12106] ? tomoyo_file_ioctl+0x23/0x30 [ 251.492964][T12106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 251.499318][T12106] ? security_file_ioctl+0x8d/0xc0 [ 251.499335][T12106] ksys_ioctl+0xab/0xd0 [ 251.499350][T12106] __x64_sys_ioctl+0x73/0xb0 [ 251.499367][T12106] do_syscall_64+0xfd/0x6a0 [ 251.499384][T12106] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 251.499394][T12106] RIP: 0033:0x4598e9 [ 251.499415][T12106] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 251.548007][T12106] RSP: 002b:00007f47e1befc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 251.548020][T12106] RAX: ffffffffffffffda RBX: 00007f47e1befc90 RCX: 00000000004598e9 [ 251.548027][T12106] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 251.548033][T12106] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 251.548039][T12106] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bf06d4 [ 251.548045][T12106] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 [ 251.586442][ T26] kauditd_printk_skb: 9 callbacks suppressed 09:09:41 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = perf_event_open(&(0x7f0000000180)={0x6, 0xfffffffffffffe28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="8a98aa14b58e"}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) write$P9_RWALK(r4, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) 09:09:41 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x1, 0x2) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0xc0386105, &(0x7f0000000300)) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, &(0x7f0000000040)={r5}, &(0x7f0000000080)=0x8) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snapshot\x00', 0x101001, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000100)={r5, 0x8a, "0d70cc0f8311a7ffeab31eb7d9ea77df2a8bee4e3e4a94d39a3be73a3e06e33e259d77b62d81323c5751fc34b9fc5f8208baa6ac4599587e54e0a47a7224836e3c21befb90763dbe2969a84bf8e8c89bc847cb08789db2a2cae9686f0298829d8f52abeb2ce950dc0cc3c4cbe45587c3f520a963ca6cd77ae72a6ce80a38ae4829a92b1a10d9bdd40a47"}, &(0x7f0000000200)=0x92) r6 = socket(0x10, 0x802, 0x0) write(r6, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0x554e) getsockopt$inet_sctp6_SCTP_CONTEXT(r7, 0x84, 0x71, &(0x7f0000000040)={r9}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000280)={r9, 0x68}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000000240)=@sack_info={r10, 0xffff, 0x80000000}, &(0x7f0000002000)=0x7) r11 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r11, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r12}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r12, 0x3, 0x80000000}, 0x8) 09:09:42 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = perf_event_open(&(0x7f0000000180)={0x6, 0xfffffffffffffe28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="8a98aa14b58e"}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) write$P9_RWALK(r4, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) [ 251.586458][ T26] audit: type=1804 audit(1568711381.731:76): pid=12113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir147214282/syzkaller.kVsBr2/27/bus" dev="sda1" ino=16758 res=1 09:09:42 executing program 1: r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self//exe\x00', 0x3, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="000000040000000000000010000000000000002000000000000000c22f578142f05283d0594ee438f64866fcd16468d09846d186a0893ebdbe6a7013611dbda88709a76d6b828b096ba9ff47147c283320cc4cd23f987b5b87185806e1c15282be640f0b8cc79ba800ca4318ea3527783d79a5df9ac46382e469338d8f2656399ba3232a647267500c68d8104da8354b8fdc8078c192321170b80d950dbb2a3b0baa482d7d9951b715c51f93dcc0bf5d5ba7129cfbfc26d7625dd16a01a4"], 0x24, 0x0) 09:09:42 executing program 2 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 251.750054][ T26] audit: type=1804 audit(1568711381.731:77): pid=12113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir147214282/syzkaller.kVsBr2/27/bus" dev="sda1" ino=16758 res=1 09:09:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100), 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0xfffffffffffffffe}, 0x10) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001cc0)=""/108, 0x6c}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2003, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) [ 251.797638][ T26] audit: type=1804 audit(1568711382.331:78): pid=12123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir147214282/syzkaller.kVsBr2/28/bus" dev="sda1" ino=16758 res=1 09:09:42 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = perf_event_open(&(0x7f0000000180)={0x6, 0xfffffffffffffe28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="8a98aa14b58e"}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) write$P9_RWALK(r4, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) [ 251.892538][T12133] FAULT_INJECTION: forcing a failure. [ 251.892538][T12133] name failslab, interval 1, probability 0, space 0, times 0 [ 251.905376][T12133] CPU: 1 PID: 12133 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 251.912931][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 251.922996][T12133] Call Trace: [ 251.926568][T12133] dump_stack+0x172/0x1f0 [ 251.930917][T12133] should_fail.cold+0xa/0x15 [ 251.935523][T12133] ? unwind_get_return_address+0x61/0xa0 [ 251.941257][T12133] ? fault_create_debugfs_attr+0x180/0x180 [ 251.947087][T12133] ? __es_tree_search.isra.0+0x1bf/0x230 [ 251.952794][T12133] ? save_stack+0x5c/0x90 [ 251.957200][T12133] __should_failslab+0x121/0x190 [ 251.962134][T12133] should_failslab+0x9/0x14 [ 251.966623][T12133] kmem_cache_alloc+0x47/0x710 [ 251.971437][T12133] ? __es_shrink+0xad0/0xad0 [ 251.976016][T12133] ? do_raw_write_lock+0x124/0x290 [ 251.981114][T12133] __es_insert_extent+0x2cc/0xf20 [ 251.986135][T12133] ext4_es_insert_extent+0x2d0/0xa70 [ 251.991429][T12133] ? ext4_es_scan_clu+0x50/0x50 [ 251.996407][T12133] ? __es_find_extent_range+0x361/0x490 [ 252.001955][T12133] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.008360][T12133] ? ext4_es_find_extent_range+0x131/0x660 [ 252.014249][T12133] ext4_ext_put_gap_in_cache+0xfe/0x150 [ 252.019872][T12133] ? ext4_rereserve_cluster+0x240/0x240 [ 252.025427][T12133] ? ext4_find_extent+0x76e/0x9d0 [ 252.030444][T12133] ? ext4_find_extent+0x6a6/0x9d0 [ 252.035572][T12133] ext4_ext_map_blocks+0x20c4/0x5040 [ 252.040943][T12133] ? ext4_ext_release+0x10/0x10 [ 252.045888][T12133] ? __kasan_check_write+0x14/0x20 [ 252.051069][T12133] ? down_read+0x10a/0x3f0 [ 252.055567][T12133] ? down_read_killable+0x460/0x460 [ 252.060755][T12133] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.067247][T12133] ? ext4_es_lookup_extent+0x3fd/0xbf0 [ 252.072786][T12133] ext4_map_blocks+0xdc5/0x17f0 [ 252.077753][T12133] ? ext4_issue_zeroout+0x190/0x190 [ 252.082944][T12133] ? __might_sleep+0x95/0x190 [ 252.087700][T12133] ? ext4_journal_check_start+0x1ba/0x250 [ 252.093409][T12133] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.099633][T12133] ? __ext4_journal_start_sb+0x146/0x4d0 [ 252.105518][T12133] ext4_alloc_file_blocks+0x29c/0xaf0 [ 252.110971][T12133] ? ext4_extent_block_csum_set+0x350/0x350 [ 252.116864][T12133] ? __kasan_check_write+0x14/0x20 [ 252.122050][T12133] ? down_write+0xdf/0x150 [ 252.126456][T12133] ? __might_sleep+0x95/0x190 [ 252.131190][T12133] ? __might_fault+0x12b/0x1e0 [ 252.135948][T12133] ext4_fallocate+0x9a4/0x2470 [ 252.140792][T12133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.147021][T12133] ? __this_cpu_preempt_check+0x3a/0x210 [ 252.152733][T12133] ? ext4_insert_range+0x14c0/0x14c0 [ 252.158091][T12133] vfs_fallocate+0x4aa/0xa50 [ 252.162672][T12133] ioctl_preallocate+0x197/0x210 [ 252.167635][T12133] ? generic_block_fiemap+0x70/0x70 [ 252.172831][T12133] do_vfs_ioctl+0x11c7/0x13e0 [ 252.177503][T12133] ? ioctl_preallocate+0x210/0x210 [ 252.182639][T12133] ? selinux_file_mprotect+0x620/0x620 [ 252.188083][T12133] ? __fget+0x384/0x560 [ 252.192264][T12133] ? ksys_dup3+0x3e0/0x3e0 [ 252.196751][T12133] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 252.203208][T12133] ? fput_many+0x12c/0x1a0 [ 252.207702][T12133] ? tomoyo_file_ioctl+0x23/0x30 [ 252.212727][T12133] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.218954][T12133] ? security_file_ioctl+0x8d/0xc0 [ 252.224053][T12133] ksys_ioctl+0xab/0xd0 [ 252.228193][T12133] __x64_sys_ioctl+0x73/0xb0 [ 252.232772][T12133] do_syscall_64+0xfd/0x6a0 [ 252.237265][T12133] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 252.243142][T12133] RIP: 0033:0x4598e9 [ 252.247031][T12133] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 252.266620][T12133] RSP: 002b:00007f47e1befc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.275016][T12133] RAX: ffffffffffffffda RBX: 00007f47e1befc90 RCX: 00000000004598e9 [ 252.283195][T12133] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 252.291248][T12133] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 252.299293][T12133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bf06d4 [ 252.307351][T12133] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 09:09:42 executing program 4: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0x100121) connect$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000140)=[@sack_perm, @sack_perm={0x2}, @timestamp], 0x11cc51) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000000)) 09:09:43 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100), 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0xfffffffffffffffe}, 0x10) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001cc0)=""/108, 0x6c}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2003, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) 09:09:43 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x48890}, 0x0) recvfrom$rxrpc(r0, 0x0, 0x1a0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file0\x00', 0x450be, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10010, r1, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r1, 0x4008af14, &(0x7f0000000080)={0x3, 0x2}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) 09:09:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000100), 0x4) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000200)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0xfffffffffffffffe}, 0x10) recvmmsg(r2, &(0x7f0000003d80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000001cc0)=""/108, 0x6c}], 0x1}}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2003, 0x0) ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) 09:09:43 executing program 4: move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x25) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="2e0000001c00810ce00f80ecdb4cb9f207c804a00d00000088000afb0a0002000a0ada1b40d805000300c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) [ 252.480824][ T26] audit: type=1804 audit(1568711383.021:79): pid=12140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir147214282/syzkaller.kVsBr2/29/bus" dev="sda1" ino=16757 res=1 09:09:43 executing program 2 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) 09:09:43 executing program 0: syz_open_dev$sg(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0xf1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x80011, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r2, 0x0) write$P9_RWALK(r2, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, r2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00') r3 = perf_event_open(&(0x7f0000000180)={0x6, 0xfffffffffffffe28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x4000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) dup2(r2, r3) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) write$P9_RWALK(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth1\x00', @random="8a98aa14b58e"}) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x28812, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r4, 0x0) write$P9_RWALK(r4, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@empty, @in=@multicast2}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) 09:09:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x7, 0x0) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="230000005e0081aee4050c00000f0000709110ecab372942b44ee4a0008bc609f6d8ff", 0x23}], 0x1}, 0x0) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x4) 09:09:43 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e20, 0x51d, @loopback, 0x2}}, 0xffffffff80000001, 0x4}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000200)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x18}, [@ldst={0x6, 0x5, 0x6803, 0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) [ 252.697957][T12166] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. 09:09:43 executing program 4: connect$pptp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x20000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000040)=""/50, 0x32, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000480)="43107afd1bc67cf8d10d4fb5ee1d377c90719c229060baaa48a7ecdfb14116a5c2875fa73b1c09508603901badf28c246a612ea01395205546c9e69e50340326995a4e97f8107a7926dd88c42583e402815f69c33c34cd8de151baa97e68f09a6f10755ec369d403") ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000080)={0x3, 0x0, [0x0, 0xffffffffffffff29, 0x100000000, 0x2002, 0x1000000000000], 0xb}) socketpair(0x2, 0x2, 0x7fff, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000eb5c1e2dfda29876d4e8b264697cf7062ab31edaef1b0f767677bb75a33170f6fcb079b0e42c", @ANYRES32=0x0], 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={r2}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_id=r2, 0x4) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x802, 0x0) write(r3, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f00000002c0)={{0x2, 0x4e22, @local}, {0x1, @remote}, 0x40, {0x2, 0x4e23, @multicast2}, 'ip6gre0\x00'}) [ 252.769261][T12169] FAULT_INJECTION: forcing a failure. [ 252.769261][T12169] name failslab, interval 1, probability 0, space 0, times 0 [ 252.815037][T12169] CPU: 0 PID: 12169 Comm: syz-executor.2 Not tainted 5.3.0+ #0 [ 252.822862][T12169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 252.833086][T12169] Call Trace: [ 252.836397][T12169] dump_stack+0x172/0x1f0 [ 252.840713][T12169] should_fail.cold+0xa/0x15 [ 252.845337][T12169] ? fault_create_debugfs_attr+0x180/0x180 [ 252.851132][T12169] ? ___might_sleep+0x163/0x280 [ 252.855978][T12169] __should_failslab+0x121/0x190 [ 252.860904][T12169] should_failslab+0x9/0x14 [ 252.865392][T12169] kmem_cache_alloc+0x2aa/0x710 [ 252.870497][T12169] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 252.876199][T12169] ? __mark_inode_dirty+0x3d1/0x1390 [ 252.881478][T12169] ext4_mb_new_blocks+0x5b9/0x3870 [ 252.886575][T12169] ? quarantine_put+0x11c/0x1c0 [ 252.891745][T12169] ? ext4_find_extent+0x76e/0x9d0 [ 252.896841][T12169] ext4_ext_map_blocks+0x2b34/0x5040 [ 252.902114][T12169] ? ext4_ext_release+0x10/0x10 [ 252.906949][T12169] ? lock_acquire+0x190/0x410 [ 252.911607][T12169] ? ext4_map_blocks+0x4b1/0x17f0 [ 252.916723][T12169] ? ext4_es_lookup_extent+0x3fd/0xbf0 [ 252.922168][T12169] ext4_map_blocks+0x529/0x17f0 [ 252.927004][T12169] ? ext4_issue_zeroout+0x190/0x190 [ 252.933669][T12169] ? __might_sleep+0x95/0x190 [ 252.938346][T12169] ? ext4_journal_check_start+0x1ba/0x250 [ 252.944133][T12169] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 252.950472][T12169] ? __ext4_journal_start_sb+0x146/0x4d0 [ 252.956087][T12169] ext4_alloc_file_blocks+0x29c/0xaf0 [ 252.961536][T12169] ? ext4_extent_block_csum_set+0x350/0x350 [ 252.967409][T12169] ? __kasan_check_write+0x14/0x20 [ 252.972587][T12169] ? down_write+0xdf/0x150 [ 252.977111][T12169] ? __might_sleep+0x95/0x190 [ 252.981855][T12169] ? __might_fault+0x12b/0x1e0 [ 252.986668][T12169] ext4_fallocate+0x9a4/0x2470 [ 252.991416][T12169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 252.997640][T12169] ? __this_cpu_preempt_check+0x3a/0x210 [ 253.003262][T12169] ? ext4_insert_range+0x14c0/0x14c0 [ 253.008532][T12169] vfs_fallocate+0x4aa/0xa50 [ 253.013285][T12169] ioctl_preallocate+0x197/0x210 [ 253.018297][T12169] ? generic_block_fiemap+0x70/0x70 [ 253.023658][T12169] do_vfs_ioctl+0x11c7/0x13e0 [ 253.028331][T12169] ? ioctl_preallocate+0x210/0x210 [ 253.033426][T12169] ? selinux_file_mprotect+0x620/0x620 [ 253.038867][T12169] ? __fget+0x384/0x560 [ 253.043012][T12169] ? ksys_dup3+0x3e0/0x3e0 [ 253.047418][T12169] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 253.053813][T12169] ? fput_many+0x12c/0x1a0 [ 253.058300][T12169] ? tomoyo_file_ioctl+0x23/0x30 [ 253.063306][T12169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.069636][T12169] ? security_file_ioctl+0x8d/0xc0 [ 253.074730][T12169] ksys_ioctl+0xab/0xd0 [ 253.079054][T12169] __x64_sys_ioctl+0x73/0xb0 [ 253.083849][T12169] do_syscall_64+0xfd/0x6a0 [ 253.088340][T12169] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.094472][T12169] RIP: 0033:0x4598e9 [ 253.098357][T12169] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.118117][T12169] RSP: 002b:00007f47e1befc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.126683][T12169] RAX: ffffffffffffffda RBX: 00007f47e1befc90 RCX: 00000000004598e9 [ 253.134775][T12169] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000004 [ 253.142731][T12169] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 253.150772][T12169] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bf06d4 [ 253.158811][T12169] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 09:09:43 executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/71, 0x47}}], 0x1, 0x0, 0x0) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x7b, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "434b1a0ecccf80a7281c591244d4892e79ae7fd0a58f3388aff143ce6b75762a726d602fe6a1d4652c8151a131105792e169e2efeae0f5ec65fe9ed216e3c8e6bb29a6b4572cb0a5d5f8e59006aa0d490b32b490378f7e193ac2d080872df2439c6d39f0825e35fea624c18a685487b623389f7c277520e1a9688acb70e6d731228c09e1bd991c217faa80853aca5fd42e682037347ff1bf134fda7e128b99cfec9b1edb1b9920db3ad2f7437c0e4c2e2a00a815f1"}], 0x18}}], 0x40000000000037b, 0xc000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x401}, 0x4) [ 253.203589][ T26] audit: type=1804 audit(1568711383.741:80): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir147214282/syzkaller.kVsBr2/30/bus" dev="sda1" ino=16761 res=1 09:09:43 executing program 5: r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket(0x10, 0x802, 0x0) write(r1, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x71, &(0x7f0000000040)={r4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000000)={r4, 0x6}, &(0x7f0000000040)=0x8) getsockopt(r0, 0x0, 0xd2, 0x0, 0x0) 09:09:43 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x100, 0x4) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r3, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) r4 = socket(0x10, 0x802, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x402000, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xd0, &(0x7f0000000000)={{0xa, 0x0, 0x0, @dev}, {0xa, 0x0, 0x0, @mcast2}}, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r5, r6, r7], 0x3) ioctl$PERF_EVENT_IOC_RESET(r6, 0x2403, 0x9) write(r4, &(0x7f0000000400)="240000001a0001f00080000400ede80e0af6f92c7839010600f2ffcb080019003cb7fd0f", 0x24) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f00000000c0)={0x3, 0x1, &(0x7f0000000280)="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", {0x8, 0x100000001000000, 0x37303250, 0x6, 0x1, 0x3f, 0x8, 0x9}}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000240)=[r1, r2, r3], 0x3) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, &(0x7f0000000000)) 09:09:43 executing program 2 (fault-call:3 fault-nth:6): perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7e4, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) [ 253.377255][T12192] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 253.380721][ T3907] kobject: 'loop2' (0000000010f1ff85): kobject_uevent_env [ 253.385097][T12192] #PF: supervisor instruction fetch in kernel mode [ 253.399907][T12192] #PF: error_code(0x0010) - not-present page [ 253.405906][T12192] PGD 55452067 P4D 55452067 PUD 59d01067 PMD 0 [ 253.412165][T12192] Oops: 0010 [#1] PREEMPT SMP KASAN [ 253.413729][ T3907] kobject: 'loop2' (0000000010f1ff85): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 253.417463][T12192] CPU: 1 PID: 12192 Comm: syz-executor.3 Not tainted 5.3.0+ #0 [ 253.417471][T12192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.417482][T12192] RIP: 0010:0x0 [ 253.417501][T12192] Code: Bad RIP value. [ 253.417507][T12192] RSP: 0018:ffff888052d8fcd8 EFLAGS: 00010246 [ 253.452059][ T3907] kobject: 'loop0' (0000000014559b9e): kobject_uevent_env [ 253.453665][T12192] RAX: dffffc0000000000 RBX: ffffffff8992dda0 RCX: ffffc9000cba5000 [ 253.453675][T12192] RDX: 0000000000000000 RSI: ffff888052d8fd40 RDI: ffff88805e540100 [ 253.453683][T12192] RBP: ffff888052d8fda8 R08: ffff8880a5379518 R09: 0000000000000000 [ 253.453696][T12192] R10: fffffbfff134b3b7 R11: ffff8880a0c56200 R12: ffff8880a5379040 [ 253.479145][ T3907] kobject: 'loop0' (0000000014559b9e): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 253.483057][T12192] R13: ffff88805e540100 R14: 0000000000000000 R15: ffff888052d8fd40 [ 253.483070][T12192] FS: 00007f2a34879700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 253.483077][T12192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.483092][T12192] CR2: ffffffffffffffd6 CR3: 0000000055478000 CR4: 00000000001406e0 [ 253.524370][ T3907] kobject: 'loop1' (00000000d426250c): kobject_uevent_env [ 253.529502][T12192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.529509][T12192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.529514][T12192] Call Trace: [ 253.529586][T12192] rds_bind+0x420/0x800 [ 253.529603][T12192] ? rds_remove_bound+0xd40/0xd40 [ 253.529622][T12192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.529633][T12192] ? security_socket_bind+0x8d/0xc0 [ 253.529718][T12192] __sys_bind+0x239/0x290 [ 253.543919][ T3907] kobject: 'loop1' (00000000d426250c): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 253.544491][T12192] ? __ia32_sys_socketpair+0xf0/0xf0 [ 253.613553][T12192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.619808][T12192] ? put_timespec64+0xda/0x140 [ 253.624596][T12192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.630855][T12192] ? __x64_sys_clock_gettime+0x16d/0x240 [ 253.636500][T12192] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 253.642671][T12192] __x64_sys_bind+0x73/0xb0 [ 253.647185][T12192] do_syscall_64+0xfd/0x6a0 [ 253.651701][T12192] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.657596][T12192] RIP: 0033:0x4598e9 [ 253.661494][T12192] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.682639][T12192] RSP: 002b:00007f2a34878c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 253.691063][T12192] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000004598e9 [ 253.699222][T12192] RDX: 0000000000000010 RSI: 0000000020000040 RDI: 0000000000000003 [ 253.707199][T12192] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 253.715177][T12192] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f2a348796d4 [ 253.723247][T12192] R13: 00000000004bfa2b R14: 00000000004d1608 R15: 00000000ffffffff [ 253.731243][T12192] Modules linked in: [ 253.735216][T12192] CR2: 0000000000000000 [ 253.741112][T12192] ---[ end trace 91fb43ed4ef2d0a9 ]--- [ 253.747070][T12192] RIP: 0010:0x0 [ 253.750670][T12192] Code: Bad RIP value. [ 253.752135][T12204] FAULT_INJECTION: forcing a failure. [ 253.752135][T12204] name failslab, interval 1, probability 0, space 0, times 0 [ 253.754859][T12192] RSP: 0018:ffff888052d8fcd8 EFLAGS: 00010246 [ 253.773829][T12204] CPU: 1 PID: 12204 Comm: syz-executor.2 Tainted: G D 5.3.0+ #0 [ 253.775749][T12192] RAX: dffffc0000000000 RBX: ffffffff8992dda0 RCX: ffffc9000cba5000 [ 253.782946][T12204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 253.782951][T12204] Call Trace: [ 253.782978][T12204] dump_stack+0x172/0x1f0 [ 253.782998][T12204] should_fail.cold+0xa/0x15 [ 253.783014][T12204] ? fault_create_debugfs_attr+0x180/0x180 [ 253.783035][T12204] ? ___might_sleep+0x163/0x280 [ 253.792694][T12192] RDX: 0000000000000000 RSI: ffff888052d8fd40 RDI: ffff88805e540100 [ 253.801282][T12204] __should_failslab+0x121/0x190 [ 253.801299][T12204] should_failslab+0x9/0x14 [ 253.801310][T12204] kmem_cache_alloc+0x2aa/0x710 [ 253.801324][T12204] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 253.801337][T12204] ? __mark_inode_dirty+0x3d1/0x1390 [ 253.801351][T12204] ext4_mb_new_blocks+0x5b9/0x3870 [ 253.801365][T12204] ? quarantine_put+0x11c/0x1c0 [ 253.801375][T12204] ? ext4_find_extent+0x76e/0x9d0 [ 253.801395][T12204] ext4_ext_map_blocks+0x2b34/0x5040 [ 253.805474][T12192] RBP: ffff888052d8fda8 R08: ffff8880a5379518 R09: 0000000000000000 [ 253.809263][T12204] ? ext4_ext_release+0x10/0x10 [ 253.809285][T12204] ? lock_acquire+0x190/0x410 [ 253.809297][T12204] ? ext4_map_blocks+0x4b1/0x17f0 [ 253.809315][T12204] ? ext4_es_lookup_extent+0x3fd/0xbf0 [ 253.809328][T12204] ext4_map_blocks+0x529/0x17f0 [ 253.809344][T12204] ? ext4_issue_zeroout+0x190/0x190 [ 253.814872][T12192] R10: fffffbfff134b3b7 R11: ffff8880a0c56200 R12: ffff8880a5379040 [ 253.819708][T12204] ? __might_sleep+0x95/0x190 [ 253.819725][T12204] ? ext4_journal_check_start+0x1ba/0x250 [ 253.819739][T12204] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 253.819751][T12204] ? __ext4_journal_start_sb+0x146/0x4d0 [ 253.819765][T12204] ext4_alloc_file_blocks+0x29c/0xaf0 [ 253.819782][T12204] ? ext4_extent_block_csum_set+0x350/0x350 [ 253.824966][T12192] R13: ffff88805e540100 R14: 0000000000000000 R15: ffff888052d8fd40 [ 253.832573][T12204] ? __kasan_check_write+0x14/0x20 [ 253.832587][T12204] ? down_write+0xdf/0x150 [ 253.832601][T12204] ? __might_sleep+0x95/0x190 [ 253.832613][T12204] ? __might_fault+0x12b/0x1e0 [ 253.832628][T12204] ext4_fallocate+0x9a4/0x2470 [ 253.832644][T12204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.832663][T12204] ? __this_cpu_preempt_check+0x3a/0x210 [ 253.837968][T12192] FS: 00007f2a34879700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 253.843466][T12204] ? ext4_insert_range+0x14c0/0x14c0 [ 253.843482][T12204] vfs_fallocate+0x4aa/0xa50 [ 253.843503][T12204] ioctl_preallocate+0x197/0x210 [ 253.848770][T12192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.854130][T12204] ? generic_block_fiemap+0x70/0x70 [ 253.854150][T12204] do_vfs_ioctl+0x11c7/0x13e0 [ 253.854167][T12204] ? ioctl_preallocate+0x210/0x210 [ 253.860075][T12192] CR2: ffffffffffffffd6 CR3: 0000000055478000 CR4: 00000000001406f0 [ 253.865056][T12204] ? selinux_file_mprotect+0x620/0x620 [ 253.865068][T12204] ? __fget+0x384/0x560 [ 253.865082][T12204] ? ksys_dup3+0x3e0/0x3e0 [ 253.865096][T12204] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 253.865108][T12204] ? fput_many+0x12c/0x1a0 [ 253.865132][T12204] ? tomoyo_file_ioctl+0x23/0x30 [ 253.870561][T12192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.874999][T12204] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 253.875014][T12204] ? security_file_ioctl+0x8d/0xc0 [ 253.875027][T12204] ksys_ioctl+0xab/0xd0 [ 253.875044][T12204] __x64_sys_ioctl+0x73/0xb0 [ 253.880726][T12192] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.888608][T12204] do_syscall_64+0xfd/0x6a0 [ 253.888626][T12204] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 253.888635][T12204] RIP: 0033:0x4598e9 [ 253.888649][T12204] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 253.888655][T12204] RSP: 002b:00007f47e1bcec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.888666][T12204] RAX: ffffffffffffffda RBX: 00007f47e1bcec90 RCX: 00000000004598e9 [ 253.888672][T12204] RDX: 0000000020000000 RSI: 000000004030582a RDI: 0000000000000003 [ 253.888678][T12204] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 253.888691][T12204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f47e1bcf6d4 [ 253.894167][T12192] Kernel panic - not syncing: Fatal exception [ 253.898616][T12204] R13: 00000000004c32aa R14: 00000000004d6a98 R15: 0000000000000005 [ 254.217249][T12192] Kernel Offset: disabled [ 254.221599][T12192] Rebooting in 86400 seconds..