[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [ 61.339219][ T27] audit: type=1800 audit(1576445250.839:25): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="cron" dev="sda1" ino=2414 res=0 [ 61.359220][ T27] audit: type=1800 audit(1576445250.839:26): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 61.380063][ T27] audit: type=1800 audit(1576445250.849:27): pid=8949 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.204' (ECDSA) to the list of known hosts. 2019/12/15 21:27:41 fuzzer started 2019/12/15 21:27:42 dialing manager at 10.128.0.26:37271 2019/12/15 21:27:43 syscalls: 2701 2019/12/15 21:27:43 code coverage: enabled 2019/12/15 21:27:43 comparison tracing: enabled 2019/12/15 21:27:43 extra coverage: enabled 2019/12/15 21:27:43 setuid sandbox: enabled 2019/12/15 21:27:43 namespace sandbox: enabled 2019/12/15 21:27:43 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/15 21:27:43 fault injection: enabled 2019/12/15 21:27:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/15 21:27:43 net packet injection: enabled 2019/12/15 21:27:43 net device setup: enabled 2019/12/15 21:27:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/15 21:27:43 devlink PCI setup: PCI device 0000:00:10.0 is not available 21:30:35 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000300)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) ioctl$TCFLSH(r0, 0x540b, 0x0) 21:30:35 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000f21301ce646ba1a3800100000000006704d49b22b4ec00000000000000004601f77039f21d2bf31e71afb3"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046602, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000898000/0x1000)=nil, &(0x7f0000844000/0x1000)=nil, &(0x7f000031a000/0x4000)=nil, &(0x7f000004a000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000049c000/0x1000)=nil, &(0x7f0000763000/0x1000)=nil, &(0x7f0000620000/0x1000)=nil, &(0x7f00000e0000/0x3000)=nil, &(0x7f000084a000/0x4000)=nil, &(0x7f00000001c0)="d0a0d023337f1c7bc5400362d24ffacf0f130bdd40b411bd6247293e754551f9dc3599e123556f44d2abf712623e069b887090ee17013dbb35d223eb73048c9e3c7b912f260c09c2e8ed8a23d664a6416a717796af0749c7971fd7c43ff7b28d20c3c79688c1698001093fa584812f3bd31a5081550b4fca21ea2340be1c5972df9390b0ac96b7fcc3b86bdc891da2e6f6b810e12c5ed996a87bea80a6e24e22d91bd5c1ca63531c6b1c9f6d38040760edfa7dd0671b6dc712da9b2f5ed3b945f809a9d6e8608f6a2beae5cfbe09d02a6a18bd8ad10f1d205b0579dc439b0054b516221959644448e2a4cc38b1a16bf5e6e88e", 0xf3}, 0x68) syzkaller login: [ 246.052720][ T9115] IPVS: ftp: loaded support on port[0] = 21 [ 246.158192][ T9117] IPVS: ftp: loaded support on port[0] = 21 21:30:35 executing program 2: ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x1, 0x0) semget(0x1, 0x3, 0x200) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000001280)}}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='cgroup\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) [ 246.270256][ T9115] chnl_net:caif_netlink_parms(): no params data found [ 246.318002][ T9115] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.326877][ T9115] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.335569][ T9115] device bridge_slave_0 entered promiscuous mode [ 246.367894][ T9115] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.376550][ T9115] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.394969][ T9115] device bridge_slave_1 entered promiscuous mode [ 246.490761][ T9122] IPVS: ftp: loaded support on port[0] = 21 [ 246.509243][ T9115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.540461][ T9115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.555708][ T9117] chnl_net:caif_netlink_parms(): no params data found 21:30:36 executing program 3: syz_open_dev$usbfs(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x90a, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x1) ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000240)=@usbdevfs_driver={0x0, 0x5516, 0x0}) [ 246.620072][ T9115] team0: Port device team_slave_0 added [ 246.671462][ T9115] team0: Port device team_slave_1 added [ 246.692995][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.708466][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.716425][ T9117] device bridge_slave_0 entered promiscuous mode [ 246.725900][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.732996][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.743150][ T9117] device bridge_slave_1 entered promiscuous mode 21:30:36 executing program 4: clone(0x1ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f000096a000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000414000/0x1000)=nil) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10600, 0x0) [ 246.967617][ T9115] device hsr_slave_0 entered promiscuous mode [ 247.004794][ T9115] device hsr_slave_1 entered promiscuous mode [ 247.140867][ T9117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.154739][ T9117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 21:30:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r1 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x58) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0x0) [ 247.181175][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 247.215129][ T9125] IPVS: ftp: loaded support on port[0] = 21 [ 247.249097][ T9117] team0: Port device team_slave_0 added [ 247.260227][ T9117] team0: Port device team_slave_1 added [ 247.262552][ T9127] IPVS: ftp: loaded support on port[0] = 21 [ 247.342517][ T9115] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.437619][ T9117] device hsr_slave_0 entered promiscuous mode [ 247.464697][ T9117] device hsr_slave_1 entered promiscuous mode [ 247.534699][ T9117] debugfs: Directory 'hsr0' with parent '/' already present! [ 247.545824][ T9115] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.598698][ T9115] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.639701][ T9115] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 247.731544][ T9129] IPVS: ftp: loaded support on port[0] = 21 [ 247.745758][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.752850][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.761587][ T9122] device bridge_slave_0 entered promiscuous mode [ 247.771523][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.778689][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.786787][ T9122] device bridge_slave_1 entered promiscuous mode [ 247.844079][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.857925][ T9117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.910066][ T9117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.957577][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.982717][ T9122] team0: Port device team_slave_0 added [ 247.994784][ T9122] team0: Port device team_slave_1 added [ 248.000607][ T9117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 248.036564][ T9117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.146907][ T9122] device hsr_slave_0 entered promiscuous mode [ 248.194907][ T9122] device hsr_slave_1 entered promiscuous mode [ 248.254582][ T9122] debugfs: Directory 'hsr0' with parent '/' already present! [ 248.387625][ T9125] chnl_net:caif_netlink_parms(): no params data found [ 248.439704][ T9115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.477658][ T9127] chnl_net:caif_netlink_parms(): no params data found [ 248.502467][ T9122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 248.559180][ T9122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 248.628768][ T9122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 248.700620][ T9122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 248.766207][ T9125] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.774590][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.783847][ T9125] device bridge_slave_0 entered promiscuous mode [ 248.792581][ T9125] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.799813][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.807845][ T9125] device bridge_slave_1 entered promiscuous mode [ 248.887680][ T9115] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.896822][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.905851][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.926812][ T9127] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.933911][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.942568][ T9127] device bridge_slave_0 entered promiscuous mode [ 248.952309][ T9127] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.959803][ T9127] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.967742][ T9127] device bridge_slave_1 entered promiscuous mode [ 248.998797][ T9125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.010864][ T9125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.048121][ T9129] chnl_net:caif_netlink_parms(): no params data found [ 249.059162][ T9127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.070385][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.079965][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.088642][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.095852][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.103740][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.112693][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.121214][ T3698] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.128277][ T3698] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.137887][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.155917][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.180915][ T9127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.208898][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.220454][ T9125] team0: Port device team_slave_0 added [ 249.230711][ T9125] team0: Port device team_slave_1 added [ 249.268326][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.277482][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 249.286762][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 249.295571][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 249.304032][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 249.314163][ T9133] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 249.325625][ T9127] team0: Port device team_slave_0 added [ 249.345483][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.374049][ T9127] team0: Port device team_slave_1 added [ 249.391732][ T9129] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.400145][ T9129] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.408827][ T9129] device bridge_slave_0 entered promiscuous mode [ 249.419279][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 249.427698][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 249.436907][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 249.445562][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 249.453863][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.461979][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.474342][ T9115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.491366][ T9117] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.499107][ T9129] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.506888][ T9129] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.514804][ T9129] device bridge_slave_1 entered promiscuous mode [ 249.556523][ T9125] device hsr_slave_0 entered promiscuous mode [ 249.604908][ T9125] device hsr_slave_1 entered promiscuous mode [ 249.644937][ T9125] debugfs: Directory 'hsr0' with parent '/' already present! [ 249.659822][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.693992][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.705723][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.713417][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.724997][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.733297][ T3698] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.740521][ T3698] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.749401][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.763942][ T9129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.789597][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 249.798904][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 249.807710][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.814958][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.822570][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 249.831718][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 249.840292][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.847424][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.855178][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 249.869603][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 249.901863][ T9129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.947836][ T9127] device hsr_slave_0 entered promiscuous mode [ 249.994960][ T9127] device hsr_slave_1 entered promiscuous mode [ 250.034555][ T9127] debugfs: Directory 'hsr0' with parent '/' already present! [ 250.054290][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 250.066438][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 250.077160][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.084252][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.092260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.101444][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 250.110440][ T9125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 250.194586][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 250.203307][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.213670][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.222817][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.232197][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.249404][ T9125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 250.311001][ T9125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 250.384994][ T9125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.447812][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.455703][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.463571][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.471288][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.479292][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.488197][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.497035][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.506047][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.514863][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.523547][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.537835][ T9115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.547813][ T9129] team0: Port device team_slave_0 added [ 250.562302][ T9117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.578393][ T9117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.607965][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.616599][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.625450][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.633723][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.647035][ T9129] team0: Port device team_slave_1 added [ 250.668357][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.685587][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.716779][ T9122] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.741328][ T9127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 250.835608][ T9127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 250.867468][ T9127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 250.917303][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 250.925336][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 250.979175][ T9129] device hsr_slave_0 entered promiscuous mode 21:30:40 executing program 0: 21:30:40 executing program 0: [ 251.031130][ T9129] device hsr_slave_1 entered promiscuous mode [ 251.085654][ T9129] debugfs: Directory 'hsr0' with parent '/' already present! 21:30:40 executing program 0: [ 251.130899][ T9127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.172746][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.195582][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.203060][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 21:30:40 executing program 0: [ 251.223622][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 21:30:40 executing program 0: [ 251.395009][ T9125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.401908][ T9129] netdevsim netdevsim5 netdevsim0: renamed from eth0 21:30:41 executing program 0: [ 251.487116][ T9129] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 251.521260][ T9158] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 251.540004][ T9129] netdevsim netdevsim5 netdevsim2: renamed from eth2 21:30:41 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'raw\x00'}, &(0x7f0000000080)=0x54) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001d80)={'tunl0\x00', 0x0}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, r2}, 0x58) clock_gettime(0x0, &(0x7f0000002900)={0x0, 0x0}) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000027c0), 0x40004c3, 0x1ba, &(0x7f0000002940)={0x0, r3+10000000}) [ 251.612158][ C0] hrtimer: interrupt took 51996 ns [ 251.622529][ T9129] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 251.694775][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 251.702583][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 251.732148][ T9125] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.817864][ T9127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.895037][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 251.903874][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 251.923904][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.931114][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.946397][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 251.959629][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 251.971350][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.978576][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.993548][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.042484][ T9127] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.089169][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.098510][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.109788][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.123013][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 21:30:41 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socket(0x3, 0x6, 0x3) close(r1) io_setup(0x3, &(0x7f00000001c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) io_submit(r2, 0x1e09328e, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000800000000001, 0x0, r1, 0x0, 0x12f}]) r3 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x1, 0x80) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000140)=0xc188) [ 252.139470][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.150770][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.164957][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready 21:30:41 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='team0\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000100)) r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x401, 0x2c00) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000000c0)='\x00', 0x0, r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000d4d000/0x2000)=nil, 0x2000, 0x0, 0x2013, r4, 0x0) ioctl$EVIOCGSW(r4, 0x8040451b, &(0x7f0000000000)=""/72) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000d1c000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f0000196000/0x4000)=nil, 0xc07000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video36\x00', 0x2, 0x0) [ 252.201632][ T9125] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 252.242427][ T9125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 252.258781][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.295242][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.303864][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.333229][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.349270][ T9135] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.356483][ T9135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.371866][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.380783][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.396317][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.410622][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.463651][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.475130][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.482774][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.505813][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.514234][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.521329][ T9135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.530541][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.540507][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 252.606404][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 252.613901][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 252.650546][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 252.672113][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 252.707773][ T9125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.729754][ T9129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.750532][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 252.759220][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 252.768565][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 252.777295][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 252.785996][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 252.794524][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 252.802309][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 252.817066][ T9129] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.826342][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 252.835570][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 252.855944][ T9127] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 252.863696][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 252.873166][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 252.881930][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.889036][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.910872][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 252.919303][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 252.928434][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 252.937669][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.944807][ T9135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.952838][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 252.996035][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.003572][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.012263][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 253.022830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 253.032206][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 21:30:42 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0xd2, &(0x7f0000000000)={0x0}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='team0\x00') r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2300}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_NET={0x24, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4000880) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="2900000021001b0f04003fffffbfdaf00200000000e80001dd0000040d000d00ea1100000005000800", 0x29}], 0x1) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) [ 253.070834][ T9127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.091906][ T9129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.130494][ T9129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.143927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 253.153720][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 253.162489][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 253.171767][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 253.180440][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 253.188921][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 253.197487][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 253.206690][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 253.225115][ T9193] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 253.252852][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 253.268811][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 253.288041][ T9129] 8021q: adding VLAN 0 to HW filter on device batadv0 21:30:43 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = epoll_create1(0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='/dev/video#\x00', &(0x7f0000000180)='/dev/video#\x00', &(0x7f0000000200)='rfdno', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='wlan0]&\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='em0-\x00', &(0x7f0000000380)='system\x00', &(0x7f00000003c0)='/dev/video#\x00', &(0x7f0000000400)=')@systemeth1\x00', &(0x7f0000000440)='security\'trustedbdeveth0!vmnet1\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='wfdno']) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 21:30:43 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket(0x200000000010, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write(r0, &(0x7f000095c000)="2400000026007f000000000000007701000000ff0100000000000000ffffffff0100ff10", 0x24) 21:30:43 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0xffff, 0x5, 0x7, 0x7, 0x2, 0x0, 0xe0, 0x8, 0x1, 0x0, 0x101, 0x7}) unshare(0x40000000) 21:30:43 executing program 1: mkdir(&(0x7f00000004c0)='./file1\x00', 0x1e5) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file1\x00', 0x0, 0x1c}, 0x10) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000500)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache='cache=fscache'}, {@cache_loose='cache=loose'}, {@version_u='version=9p2000.u'}], [{@dont_hash='dont_hash'}]}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='team0\x00') getpeername$netrom(r4, &(0x7f0000000280)={{0x3, @default}, [@remote, @default, @bcast, @default, @bcast, @remote, @netrom, @null]}, &(0x7f0000000140)=0x48) r5 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0505510, &(0x7f0000000200)={0x3, 0x2, 0x4, 0x101, &(0x7f0000000040)=[{}, {}]}) mount$overlay(0x400fe0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"]) 21:30:43 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x5, 0x6, 0x800, 0x70bd29}, 0x26f}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xffd7) splice(r1, 0x0, r3, 0x0, 0x80000000, 0x0) 21:30:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x37, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f000014f000)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000538a3bf600000000000100bdb500000000000000000000000000000000000000000000000000000000000000c9000000000000000000003ed0510059000000f3ff0000000000000000000000008a0800ecff000000004000f900000000000000000100000000000000"], 0xb8}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f00000001c0)='team0\x00') setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000000)=0x8001, 0x4) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_udp_int(r6, 0x11, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) [ 253.819627][ T9227] IPVS: ftp: loaded support on port[0] = 21 21:30:43 executing program 5: ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f00000002c0)={@hyper}) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) syncfs(r0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0xea, 0x8001, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, @perf_config_ext={0x7f, 0x9}, 0x28240, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDGKBMETA(0xffffffffffffffff, 0x4b62, 0x0) rename(0x0, 0x0) socket$netlink(0x10, 0x3, 0x2) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) lsetxattr(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="977423403774e0efbf53faee18b9b86ad90df74e7c3814c1cb05f4bc03e0102210745d853b1e479b75c70e1eac8438bc42fe768a9e1a3f4482e77c31cfdede5adbafb0520fe653543448e73af800"/92], 0x0, 0x0, 0x2) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) 21:30:43 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x76}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 21:30:43 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000000)={0x4c, 0x3, 0x0, [{0x76, 0xfffffffffffffbff, 0x200, 0x6, 0x2, 0x80, 0xc9}, {0x7fffffff, 0xfffffffffffffffd, 0x8, 0x1, 0x0, 0x1, 0x81}, {0x1, 0x0, 0x0, 0x7, 0x81, 0x1e, 0x4}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = gettid() getpgid(r3) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, 0x0, 0x739dae9c) 21:30:43 executing program 1: sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)='+4', 0x2}], 0x1000000000000261) 21:30:43 executing program 4: r0 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x2}, 0x8) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x150, r1, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4ab}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff76e}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7cf0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0xa}, 0x6) sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1fff8}], 0x1}, 0x0) 21:30:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = creat(&(0x7f0000000280)='\x00', 0x100) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000300)={0x0, 0xffffffff, 0x4, &(0x7f00000002c0)=0x6}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x2}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_getlink={0x20, 0x12, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x2}}, 0x20}}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsu\x00', 0x101000, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000340)={0x1f, {0x6, 0x5, 0x2b, 0x9, 0x6, 0x1f}, 0xdc}, 0xa) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/btrfs-control\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f00000003c0)={{0xff, 0xff}, {0x7, 0x6}, 0x2, 0x2, 0x99}) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@flushsa={0x54, 0x1c, 0x200, 0x70bd2c, 0x25dfdbfe, {0xff}, [@lastused={0xc, 0xf, 0x22b834e3}, @output_mark={0x8, 0x1d, 0x5}, @ipv4_hthresh={0x8, 0x3, {0x11, 0x1d}}, @lifetime_val={0x24, 0x9, {0x2, 0x6, 0x2, 0x2}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40022}, 0x1) [ 254.218312][ T9250] IPVS: ftp: loaded support on port[0] = 21 [ 254.383208][ T182] tipc: TX() has been purged, node left! 21:30:44 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = epoll_create1(0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='/dev/video#\x00', &(0x7f0000000180)='/dev/video#\x00', &(0x7f0000000200)='rfdno', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='wlan0]&\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='em0-\x00', &(0x7f0000000380)='system\x00', &(0x7f00000003c0)='/dev/video#\x00', &(0x7f0000000400)=')@systemeth1\x00', &(0x7f0000000440)='security\'trustedbdeveth0!vmnet1\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='wfdno']) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 21:30:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) truncate(&(0x7f00000000c0)='./file0\x00', 0x8) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe0, 0x900, &(0x7f00000006c0)="b9ff0300000d698cb89e40f088a8d501890600de0500000077fb7f11c72be9", 0x0, 0x100}, 0x28) [ 254.675954][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 254.675968][ T27] audit: type=1800 audit(1576445444.179:31): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="bus" dev="sda1" ino=16537 res=0 21:30:44 executing program 2: ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, &(0x7f0000000000)=""/171) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000036e000/0x18000)=nil, 0x0, 0x30a, 0x0, 0x0, 0x8b) 21:30:44 executing program 4: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/attr/current\x00', 0x2, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) kcmp(r3, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r4) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x400, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f00000003c0)={0x7, {{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x1a}, 0x8}}, {{0xa, 0x4e22, 0x1ff, @loopback, 0x4}}}, 0x108) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[], &(0x7f0000000100)=""/215, 0x0, 0xd7, 0x8}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f00000001c0)='team0\x00') setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000040)=0x6, 0x4) r7 = userfaultfd(0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f00000001c0)='team0\x00') r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r9, 0x0, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x883a}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r7, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @aes128, 0x3, [], "83aca00bf8dc2eb994dbfbcbb94ae156"}) ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) 21:30:44 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x10, 0x10, 0x0, 0x0, 0x40000000}}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x480881, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x6, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000200)={0x3ff, 0x7, 0xffff8001, {0x77359400}, 0x3}) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f00000000c0)={0x8000, "3fd1c65fafe33cacbbaa6daf368b57d9af1474a13c4a94525dfa6947f3ffefd3", 0x65b107984add2696, 0x9, 0x6, 0x8}) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x73, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706e700000000000000002eceff200005000100df5ac3f5"], 0x1c}}, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0xf, 0xf8, 0x1, 0xfa, 0x9, @broadcast}, 0x10) 21:30:44 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x240c2, 0x4) r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x1) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000000c0)) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x402080, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) write$9p(r1, &(0x7f0000000800)="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", 0x600) sendfile(r1, r2, 0x0, 0x10000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r4, 0x89e4) 21:30:44 executing program 2: sendmsg$kcm(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002200)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x80, 0x0}, 0x0) r0 = socket$kcm(0xa, 0x3, 0x11) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x3}) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000002200)=@nl=@unspec={0x2001001000000000, 0x0, 0x0, 0xd8ff}, 0x80, 0x0}, 0x0) timer_gettime(0x0, &(0x7f0000000080)) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 21:30:44 executing program 5: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000180)) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0xe, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x24) r2 = socket(0x2000000000000021, 0x800, 0x6) connect$rxrpc(r2, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0xe, {0xa, 0x0, 0x0, @ipv4={[], [], @dev}}}, 0x24) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="7be1f71eb14098f1d51ec25315afb9db685a010074b194d532342c8ffdac79b40d25a12603b26ef0c200000000f1a2e18810f7d0e9f52014bb3d9e02000000e63309006af374b79a735eac7c5812e0e0b678465121aa13662e9e75b21bbc0a27cbbe645d22e966c35375b0045ff5f04cae573487b380c01f463ca7639042eae3964804ef2e89afc5b105074c1865dbb1c8261794265abede1bb52239e193b40397c69dc40b16e3ff8cbdf947a4eb48357ef84b282c"]) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1) fcntl$dupfd(r3, 0x0, r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/sockstat\x00') sendfile(r4, 0xffffffffffffffff, 0x0, 0xe0) r6 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x2403, 0xffffffffffffffff) sendfile(r6, 0xffffffffffffffff, 0x0, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r3, &(0x7f0000000240), 0x1192aca8268c9077, 0x3, 0x0, 0xffffffffffffff06) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x29d912f5e24f2f79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x8000001, 0x96180) ioctl$KDGETMODE(r7, 0x4b3b, 0x0) syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES16, @ANYPTR=&(0x7f00000009c0)=ANY=[@ANYRESDEC, @ANYPTR], @ANYBLOB="08a600000076", @ANYRES32, @ANYRES32, @ANYRESDEC=r7], 0x7, 0x2) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x5, 0x0) recvfrom$inet(r3, &(0x7f0000000040)=""/6, 0xffffffffffffff1e, 0x300, 0x0, 0xfffffffffffffe3d) [ 254.993299][ T9283] BPF:hdr_len not found 21:30:44 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0, 0x0, 0x0, 0x389}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/anycast6\x00') socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x0, 0x8000003}, 0x20) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x8040) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000c85000)) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x20004811) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0xfffffffe) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, 0x0) r4 = dup(r3) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x3a8, 0x4000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000100)={0x0, 'netdevsim0\x00', {0x2}, 0x3}) 21:30:44 executing program 1: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) acct(&(0x7f0000000240)='./file0\x00') mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) [ 255.176903][ T9297] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.203105][ T27] audit: type=1800 audit(1576445444.699:32): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16520 res=0 21:30:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0xff47) accept$alg(r0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000240)={r5, r6, r6}, 0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={'crct10dif\x00'}}) r7 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0x0, r7) keyctl$reject(0x13, r5, 0x6, 0xe1, r7) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_ifreq(r3, 0x57, &(0x7f0000000600)={'ipddp0\x00', @ifru_settings={0x800, 0x8001, @cisco=&(0x7f00000002c0)={0x1000}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r9}, &(0x7f0000000140)=0x14) r10 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10000, 0x0) connect$netrom(r10, &(0x7f0000000240)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) recvmmsg(r1, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/79}, {&(0x7f0000000180)=""/131}, {&(0x7f0000000500)=""/189}, {&(0x7f0000000080)=""/30}, {&(0x7f0000000300)=""/141}, {&(0x7f00000003c0)=""/142}]}}], 0x400011a, 0x0, 0x0) [ 255.337663][ T27] audit: type=1804 audit(1576445444.699:33): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir659046859/syzkaller.adVrCA/4/file0" dev="sda1" ino=16520 res=1 21:30:45 executing program 2: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="021200000e00000028bd7000000000007902130000ab66bdf6bd700000000000030007000000000002000000ac141400000000000000000007001900000000000a00000000000000000000000000000000000000000000007f0000000a004e200000004000000000000000000000000000000000ffffffff"], 0x70}}, 0x8000) perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0x80}}, 0x30) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 21:30:45 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = epoll_create1(0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='/dev/video#\x00', &(0x7f0000000180)='/dev/video#\x00', &(0x7f0000000200)='rfdno', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='wlan0]&\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='em0-\x00', &(0x7f0000000380)='system\x00', &(0x7f00000003c0)='/dev/video#\x00', &(0x7f0000000400)=')@systemeth1\x00', &(0x7f0000000440)='security\'trustedbdeveth0!vmnet1\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='wfdno']) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 255.588099][ T27] audit: type=1800 audit(1576445444.699:34): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16520 res=0 [ 255.786952][ T9319] EXT4-fs (loop2): Unrecognized mount option " [ 255.786952][ T9319] " or missing value [ 255.864660][ T9319] EXT4-fs (loop2): failed to parse options in superblock: [ 255.864660][ T9319] [ 255.949503][ T9319] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 255.988982][ T9319] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 256.027642][ T9319] EXT4-fs (loop2): orphan cleanup on readonly fs [ 256.037937][ T9319] EXT4-fs error (device loop2): ext4_orphan_get:1247: comm syz-executor.2: bad orphan inode 128 [ 256.061062][ T9319] ext4_test_bit(bit=127, block=112) = 0 21:30:45 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000140)={0xa, &(0x7f0000000100)=""/10}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_VF_PORTS={0x0, 0x18, [{0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "cf09ea47ce055d15720113b660c27095"}, @IFLA_PORT_VF={0x0, 0x1, 0x4e}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "bb18896ce288c6d03c4fbe4c9507e6bd"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'em1\x88\x00'}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "faca3aa252bb6108a2783bba28abdc6b"}, @IFLA_PORT_VF={0x0, 0x1, 0x400}]}, {0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x0, 0x5, "6a94619e7a4fbe152359b6262766db78"}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "1f2b9db735384536bb9232ad765f20a6"}, @IFLA_PORT_HOST_UUID={0x0, 0x5, "4d2cbe06d30605671aa0730d356f6567"}, @IFLA_PORT_PROFILE={0x0, 0x2, 'veth\x00'}]}, {0x0, 0x1, [@IFLA_PORT_VF={0x0, 0x1, 0x10000}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "8d801c5d91c82c7115abc8ebd1b1963b"}, @IFLA_PORT_REQUEST={0x0, 0x6, 0x20}, @IFLA_PORT_PROFILE={0x0, 0x2, 'cgroup.events\x00'}, @IFLA_PORT_VF={0x0, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x0, 0x4, "524d9656761f04ce20ce5e8eb813d0a6"}]}, {0x0, 0x1, [@IFLA_PORT_REQUEST, @IFLA_PORT_REQUEST={0x0, 0x6, 0x3}]}]}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0) [ 256.092564][ T9319] EXT4-fs (loop2): mounted filesystem without journal. Opts: [ 256.092564][ T9319] ; ,errors=continue [ 256.104132][ T27] audit: type=1800 audit(1576445445.589:35): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16520 res=0 [ 256.183772][ T9306] Process accounting resumed 21:30:45 executing program 1: syz_open_dev$dmmidi(&(0x7f0000000900)='/dev/dmmidi#\x00', 0x2, 0x0) syz_open_dev$loop(0x0, 0x0, 0x100082) memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_genetlink_get_family_id$nbd(0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x2, 0x7fff}, 0xf) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)}, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:30:45 executing program 5: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='team0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20300000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x14040000) read$FUSE(r0, &(0x7f0000000380), 0x313) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x10, 0x10, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000200)={0x0, {0xfffffbff, 0x1}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 21:30:45 executing program 4: mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x10000}, 0x4000, 0x80000000000003, 0x4, 0x7, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000)) pipe(&(0x7f0000000200)) r1 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)=@nl=@unspec={0x1200000000000000, 0x0, 0x700000a, 0x80fe}, 0x80, 0x0}, 0x0) accept(r1, 0x0, &(0x7f0000000240)) open(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x101200, 0x0) open(&(0x7f00000001c0)='.\x00', 0x20000, 0x130) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x241010}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c000c00}, 0x40000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) fdatasync(0xffffffffffffffff) r3 = syz_open_dev$video4linux(&(0x7f0000000180)='/dev/v4l-subdev#\x00', 0x3ff, 0x500) ioctl$VIDIOC_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f00000003c0)={0x0, 0x0, [], @bt={0x9, 0x3, 0x9, 0x0, 0x8, 0x7, 0x1f988eae8daeac14, 0x2}}) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d80040030000000000000000", 0x21}], 0x1}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)=""/91, 0x5b}, {0x0}], 0x2}, 0x0) 21:30:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="3e260f090f20e0350000d7a502000200e0260f205bf78d7132713279e6c3c685030000440f20c0350f000000440f22c0b949090000f3e1000fae44ee08", 0x3d}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 256.351865][ T9340] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.431032][ T9346] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. 21:30:46 executing program 4: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty}}, 0xe8) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsu\x00', 0x200, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000100)={0x0, 0x10, 0x1, 0x1, "ea4e2ee7d34312609746649d2f9f4172e512bc9504b4e7783caf4ae523314c90"}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x3c5) 21:30:46 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) dup2(r3, r2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x50f781, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0xa40, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'cpu'}, {0x2d, 'memory'}]}, 0xd) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u='version=9p2000.u'}]}}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x6) 21:30:46 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = epoll_create1(0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='/dev/video#\x00', &(0x7f0000000180)='/dev/video#\x00', &(0x7f0000000200)='rfdno', &(0x7f0000000280)='wfdno', &(0x7f00000002c0)='wlan0]&\x00'], &(0x7f0000000500)=[&(0x7f0000000340)='em0-\x00', &(0x7f0000000380)='system\x00', &(0x7f00000003c0)='/dev/video#\x00', &(0x7f0000000400)=')@systemeth1\x00', &(0x7f0000000440)='security\'trustedbdeveth0!vmnet1\x00', &(0x7f0000000480)='rfdno', &(0x7f00000004c0)='wfdno']) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) [ 256.664574][ T9360] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing 21:30:46 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000000)=0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x10, 0x4, 0x4, 0x4, 0x52, 0x1, 0x1, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r4}, 0x3c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000000040)=0x2e8, 0x4) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000c88000)={r8, 0x0, &(0x7f0000000100)=""/15}, 0x1c7) [ 256.880726][ T9368] kvm: emulating exchange as write 21:30:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x14) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={r9}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000040)={r9, @in6={{0xa, 0x4e24, 0x6, @local, 0x25}}, 0xa9, 0x9, 0x20000, 0x40, 0x8}, &(0x7f0000000140)=0x98) r11 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x0, 0x200601) ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYBLOB="059d4c4ca22f6fe7040000000401"], &(0x7f00000001c0)=0x12) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0xfffffffffffffe43, &(0x7f0000000000)={&(0x7f0000004780)=@getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}]}, 0x34}}, 0x0) 21:30:46 executing program 1: r0 = socket$inet6(0xa, 0x80003, 0x6b) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='team0\x00') connect$x25(r1, &(0x7f0000000040)={0x9, @remote={[], 0x0}}, 0x12) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3e}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 21:30:46 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='team0\x00') setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x7, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000040)={0x0, 0x3ff, 0x2, 0x80, &(0x7f0000ffb000/0x2000)=nil, 0x9}) r4 = dup(r1) pipe2(&(0x7f0000003000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='hwsim0\x00', 0x10) ioctl$SIOCRSGCAUSE(r5, 0x89e0, &(0x7f0000003040)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r6 = userfaultfd(0x0) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r6, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r7 = userfaultfd(0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r7, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000002c00010700"/20, @ANYRESDEC=r7, @ANYBLOB="00000002000000000300000058000100627066005000208195b5363d1f3bc445b4a79a5be60200080004000000000004000500400002003c00010000000000020000200000000000000084799c570b75daf6a86081eca80289160000001100000000000000001000"/116], 0x3}}, 0x4801) r8 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r8, &(0x7f0000000140), 0x49249ab, 0x0) 21:30:46 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000180)=0x983, 0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d68d9e853d14fda", "800c463ad0b08877125cd90ac9fc4327", "bcccafd2", "0d2e80caf5caf81f"}, 0x28) semget(0x3, 0x0, 0x0) recvmmsg(r2, &(0x7f0000002680)=[{{0x0, 0x6c, &(0x7f0000000880), 0x1}}], 0x3ffffff000000f1, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000002c0)={0x10008000f0f045}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x2400, 0x6) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f00000000c0)={0xa20000, 0x6, 0xfff, [], &(0x7f0000000080)={0x9b0001, 0x1, [], @value64=0x3ff}}) r6 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/renderD128\x00', 0x26092a995ec193e0, 0x0) dup2(r6, r1) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) 21:30:46 executing program 5: ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000240)) ioctl$int_in(r0, 0x800000c0045002, &(0x7f00000000c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='team0\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20300000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10001}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x14040000) read$FUSE(r0, &(0x7f0000000380), 0x313) r3 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x10, 0x10, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000200)={0x0, {0xfffffbff, 0x1}}) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 21:30:46 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x4, 0x4, 0xff}, 0x13) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000b67000), &(0x7f0000000000)=0x4) bpf$MAP_CREATE(0x2, &(0x7f0000000180)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0, 0xffff}, 0x3c) 21:30:47 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000004c0)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TUNGETFEATURES(r3, 0x800454cf, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}}, 0x20}}, 0x20008800) connect$nfc_raw(r5, &(0x7f0000000080)={0x27, 0x1, 0x1, 0x2}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r10}]]}}}]}, 0x38}}, 0x0) r11 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) recvmmsg(r11, &(0x7f0000008380)=[{{&(0x7f0000000600)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/175, 0xaf}, {&(0x7f0000001740)=""/211, 0xd3}], 0x3, &(0x7f0000001880)}, 0x40}, {{&(0x7f00000018c0)=@ethernet, 0x80, &(0x7f0000003a00)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/189, 0xbd}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x3, &(0x7f0000003a40)}, 0xff}, {{&(0x7f0000003a80)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000003b00)=""/129, 0x81}, {&(0x7f0000003bc0)=""/22, 0x16}, {&(0x7f0000003c00)=""/33, 0x21}, {&(0x7f0000003c40)=""/176, 0xb0}, {&(0x7f0000003d00)=""/143, 0x8f}], 0x5, &(0x7f0000003e40)=""/97, 0x61}, 0x2}, {{&(0x7f0000003ec0), 0x80, &(0x7f0000004200)=[{&(0x7f0000003f40)=""/163, 0xa3}, {&(0x7f0000004000)=""/219, 0xdb}, {&(0x7f0000004100)=""/22, 0x16}, {&(0x7f0000004140)=""/158, 0x9e}], 0x4, &(0x7f0000004240)=""/174, 0xae}, 0x9}, {{0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004300)=""/220, 0xdc}, {&(0x7f0000004400)=""/55, 0x37}, {&(0x7f0000004440)=""/8, 0x8}, {&(0x7f0000004480)=""/16, 0x10}], 0x4, &(0x7f0000004500)=""/187, 0xbb}, 0x2b46}, {{&(0x7f00000045c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000005980)=[{&(0x7f0000004640)=""/4096, 0x1000}, {&(0x7f0000005640)=""/170, 0xaa}, {&(0x7f0000005700)=""/68, 0x44}, {&(0x7f0000005780)=""/162, 0xa2}, {&(0x7f0000005840)=""/61, 0x3d}, {&(0x7f0000005880)=""/218, 0xda}], 0x6}}, {{&(0x7f0000005a00)=@alg, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005a80)=""/166, 0xa6}, {&(0x7f0000005b40)=""/30, 0x1e}], 0x2, &(0x7f0000005bc0)=""/185, 0xb9}, 0x10001}, {{&(0x7f0000005c80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @empty}}}}, 0x80, &(0x7f0000005e80)=[{&(0x7f0000005d00)}, {&(0x7f0000005d40)=""/218, 0xda}, {&(0x7f0000005e40)=""/40, 0x28}], 0x3}, 0x7}, {{&(0x7f0000005ec0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000060c0)=[{&(0x7f0000005f40)=""/25, 0x19}, {&(0x7f0000005f80)=""/8, 0x8}, {&(0x7f0000005fc0)=""/100, 0x64}, {&(0x7f0000006040)=""/20, 0x14}, {&(0x7f0000006080)=""/19, 0x13}], 0x5, &(0x7f0000006140)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000007140)=@alg, 0x80, &(0x7f0000008280)=[{&(0x7f00000071c0)=""/4096, 0x1000}, {&(0x7f00000081c0)=""/150, 0x96}], 0x2, &(0x7f00000082c0)=""/174, 0xae}, 0x7fffffff}], 0xa, 0x40000020, &(0x7f0000008600)={0x77359400}) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000008640)=@can_newroute={0x88, 0x18, 0x8, 0x70bd26, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_MOD_AND={0x18, 0x1, {{{0x2, 0x1, 0x0, 0x1}, 0x4, 0x2, 0x0, 0x0, "708e23b051dc225e"}}}, @CGW_MOD_XOR={0x18, 0x3, {{{0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "6b57b51a8fc75ab3"}, 0x2}}, @CGW_MOD_UID={0x8, 0xe, 0xee01}, @CGW_FILTER={0xc, 0xb, {{0x3}, {0x3}}}, @CGW_DST_IF={0x8, 0xa, r10}, @CGW_FILTER={0xc, 0xb, {{0x5, 0x1}, {0x1, 0x0, 0x1}}}, @CGW_FILTER={0xc, 0xb, {{0x1}, {0x2, 0x0, 0x1}}}, @CGW_CS_XOR={0x8, 0x5, {0x2, 0x2, 0x5, 0xf7}}, @CGW_DST_IF={0x8, 0xa, r12}]}, 0x88}}, 0x3727884e0e4364d5) 21:30:47 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) semget$private(0x0, 0x0, 0x212) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x200000, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x6}, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 21:30:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89101) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:47 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 21:30:47 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r2, 0x0) memfd_create(&(0x7f00000000c0)='\x00', 0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score_adj\x00') r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) r6 = getpid() sched_setscheduler(r6, 0x5, &(0x7f00000001c0)) ptrace$cont(0x9, r6, 0x2, 0x3) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r7}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={r7, 0x6}, 0x8) sendfile(r0, r3, 0x0, 0x401) 21:30:47 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000001c0)='team0\x00') ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600000000000a0000000000000000000000000000000000ffff00000000000000000000000005000900fd0000000a00000000000000fe88000000000200f3000000000000000100000000000000000200010000000000000005fd0000000005000500000000000a00000000000000ff02000000000000000000000000000100000000000000"], 0x98}}, 0x0) 21:30:47 executing program 4: getpid() ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f00000001c0)) r3 = getpid() sched_setscheduler(r3, 0x5, &(0x7f00000001c0)) r4 = clone3(&(0x7f0000000580)={0x82000, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100), 0x39, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000380)=""/238, &(0x7f00000001c0)=[0x0, 0x0, r2, 0xffffffffffffffff, r3], 0x5}, 0x50) r5 = getpid() sched_setscheduler(r5, 0x5, &(0x7f00000001c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = userfaultfd(0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r8, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r0, &(0x7f0000000240)={r7, r8, 0xfe000000}) io_setup(0x1ff, &(0x7f00000004c0)=0x0) io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f00000002c0)='security.SMACK64EXEC\x00', &(0x7f0000000340)={'TIPCv2\x00'}, 0x8, 0x0) r10 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r10, &(0x7f0000000280), 0x1033b) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) fdatasync(r10) syz_open_dev$ndb(&(0x7f0000000180)='/dev/nbd#\x00', 0x0, 0x9b38ac02e441d2fb) r11 = userfaultfd(0x0) ioctl$UFFDIO_API(r11, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r11, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r11, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r12 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r13 = accept4(r12, &(0x7f0000000680)=@pppol2tp, &(0x7f0000000500)=0x80, 0x181000) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000200)={0x0, r13, 0x7, 0x20000006, 0x3, 0x4}) 21:30:47 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) syz_open_dev$admmidi(0x0, 0x7, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB]) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/17) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x2010) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000000)={@mcast2, 0x5, r8}) r9 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) ftruncate(r9, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r9, 0x0, 0x80001d00c0d0) 21:30:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xe, 0x0, 0xfffffffffffffea8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="660f1757f366b98e0900000f32b800008ec8f36f0fe17a0d66b8000000000f23d00f21f86635000000010f23f80fc76e0067f36465263e0f20c166b9240b000066b80200000066ba000000000f300f005f9f", 0x52}], 0x1, 0x64, &(0x7f00000000c0)=[@cr0={0x0, 0x8}, @efer={0x2, 0x8000}], 0x2) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:30:47 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x7e6480, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x2, 0x408402) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0x701, 0x0, 0x0, {0xd, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6810000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x30, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14004804) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000005c0)={&(0x7f0000000340), 0xc, &(0x7f0000000580)={&(0x7f0000000a80)={0x2cc, r3, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffb6d6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_BEARER={0x134, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ip_vti0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, [], 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x10001, @rand_addr="fdf4c2342631def9bf802fc6aab546b9", 0xfffffffb}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x620}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_MON={0x4}, @TIPC_NLA_LINK={0xc8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x8051}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e21, 0x400, @loopback, 0x7fffffff}}}, &(0x7f0000000140)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r7, 0x1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = dup2(r9, r8) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8946, &(0x7f00000001c0)='team0\x00') r13 = syz_genetlink_get_family_id$fou(&(0x7f0000000640)='fou\x00') sendmsg$FOU_CMD_GET(r12, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r13, 0x488, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x32}]}, 0x1c}, 0x1, 0x0, 0x0, 0x22000000}, 0x40) ioctl$sock_rose_SIOCADDRT(r12, 0x890b, &(0x7f0000000200)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @null, @netrom={'nr', 0x0}, 0x1, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @null, @default, @default]}) r14 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r11, &(0x7f0000000840)={0x0, 0x3cb, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYBLOB="ff9a0000000000000000040000a52bb1436990af1f5ab7029b36bcfc48790000a037d130f2498ac2ff0fde3a4faa8f1d7dd04a81b5f4edba0bfa34d263a146915d566fd03d5158321e827b7674217afa883bc130e9d5ad301c98ab43a5c3c380304546235dde21f493e45aaecb48"], 0x14}}, 0x0) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) r16 = fcntl$dupfd(r15, 0x0, r15) ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200) r17 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r18) r19 = getgid() lstat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r20) setregid(r19, r20) r21 = getgid() lstat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r22) setregid(r21, r22) r23 = getgid() lstat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r24) setregid(r23, r24) r25 = getgid() lstat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r26) setregid(r25, r26) getgroups(0x6, &(0x7f00000004c0)=[r19, r22, r24, r25, 0xee01, 0x0]) mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000440)='fuse\x00', 0x200000, &(0x7f0000000880)={{'fd', 0x3d, r16}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r18}, 0x2c, {'group_id', 0x3d, r27}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xb5d}}, {@blksize={'blksize'}}]}}) 21:30:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 258.844000][ T9454] 9pnet: Insufficient options for proto=fd 21:30:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="70010000240007efd3fc00"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x170}}, 0x0) r2 = socket(0x10, 0x80002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000100)={r5}, &(0x7f0000000140)=0x14) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x4, 0x7f, 0x4, 0xfffffffe}, {0x3ff, 0x9, 0xb4, 0xfffffff9}, {0x7fff, 0x0, 0x1, 0x41}, {0x8, 0x3, 0x7f, 0x6}, {0x6, 0x9, 0x1, 0x3ff}, {0x5, 0x6, 0x0, 0xf1}, {0x4, 0x0, 0xfc, 0xd3}]}, 0x10) sendmmsg$alg(r2, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0xe, &(0x7f0000000100)}], 0x492492492492642, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x5) 21:30:48 executing program 1: perf_event_open(&(0x7f0000000600)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) semget$private(0x0, 0x0, 0x212) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x200000, 0x0) r1 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000680)=ANY=[@ANYBLOB="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"]) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000080)) dup3(r0, r1, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x6}, 0x2) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 258.871254][ T27] audit: type=1804 audit(1576445448.369:36): pid=9455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir139200962/syzkaller.EUmMzb/8/bus" dev="sda1" ino=16562 res=1 21:30:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 259.104688][ T9464] 9pnet: Insufficient options for proto=fd 21:30:48 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 259.197862][ T27] audit: type=1804 audit(1576445448.699:37): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir139200962/syzkaller.EUmMzb/8/bus" dev="sda1" ino=16562 res=1 21:30:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) dup3(r0, r0, 0x180000) ftruncate(r2, 0x8200) r3 = open(&(0x7f00000002c0)='./bus\x00', 0x8e85f388a0a55d09, 0x0) r4 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x10, 0x10, 0x0, 0x0, 0x40000000}}) ioctl$VIDIOC_G_STD(r2, 0x80085617, &(0x7f0000000100)=0x0) ioctl$VIDIOC_S_STD(r4, 0x40085618, &(0x7f0000000200)=r5) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) prctl$PR_SET_FPEMU(0xa, 0x1) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) socket$inet(0x2, 0x80001, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000380)=@assoc_value, &(0x7f0000000340)=0xb12b08c575bca189) r7 = socket$inet(0x2, 0x80001, 0x84) r8 = syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r8, 0xc0305616, &(0x7f0000000280)={0x0, {0x3, 0x2}}) openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0xffffffffffffffdb) sendmmsg(r0, &(0x7f0000007fc0), 0x3ffffffffffff6c, 0x0) 21:30:48 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x4, 0x70, 0x2, 0x0, 0x2, 0x0, 0x0, 0x6, 0x4000, 0xe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0x9, 0xb0}, 0xa4e916851cc21f09, 0x3, 0x7, 0x1, 0x0, 0x3}, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xf) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000140)=0x1, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xae, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) 21:30:48 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x3d, &(0x7f0000b67000), &(0x7f0000000140)=0xffffffffffffff45) ioctl$SIOCAX25GETINFO(r2, 0x89ed, &(0x7f0000000000)) 21:30:48 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800160001000000"], 0x3c}}, 0x0) 21:30:48 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r2 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x32, 0x4, @tid=r2}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80800, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000001c0)) read(r3, &(0x7f0000000080)=""/128, 0xae3f1a6) [ 259.374582][ T27] audit: type=1800 audit(1576445448.769:38): pid=9442 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16562 res=0 21:30:49 executing program 3: clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='6\xcf', 0x2) r2 = memfd_create(&(0x7f0000000040)='/dev/auts\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x2000001, 0x11, r2, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000140)) prctl$PR_SET_DUMPABLE(0x4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000a7f000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f0000000300)=[@efer], 0x1) ioctl$VIDIOC_G_JPEGCOMP(r0, 0x808c563d, &(0x7f0000000180)) [ 259.480548][ T27] audit: type=1800 audit(1576445448.769:39): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.5" name="bus" dev="sda1" ino=16562 res=0 [ 259.511303][ T9483] 9pnet: Insufficient options for proto=fd 21:30:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000300)='msdos\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="64656275672c00cbf0c666c7748f35196a6d2c129d48648acb4ed1ffebe0379634"]) 21:30:49 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x79ddaf5be5f2e664, 0x0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:30:49 executing program 2: pipe(&(0x7f0000001440)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff00000000000000", 0x1e5) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000008, 0x0, &(0x7f00000001c0)={0x77359400}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x286200) read(r0, 0x0, 0xffffffbe) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x802, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r5, &(0x7f0000000040)={0x11, 0x800000000000004, r6, 0x1, 0x0, 0x6, @dev}, 0x14) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) socket$inet_dccp(0x2, 0x6, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150081f87059ae08060c040002ff0f02000000000000018701546fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a03000000461eb886a5e54e8ff5314461", 0x4c}], 0x1}, 0x0) r10 = socket$kcm(0x2, 0x3, 0x2) close(r10) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000100)=@nat={'Sat\x00\x00\x00\x00z\x00', 0x19, 0x4, 0x8, [0x200001c0, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, 0x0, &(0x7f0000001380)=ANY=[@ANYPTR=&(0x7f0000001400)=ANY=[@ANYRES16=r9, @ANYPTR64=&(0x7f00000013c0)=ANY=[@ANYRES16=0x0, @ANYRES16], @ANYRESHEX=r10]]}, 0x80) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1000000, 'wrr\x00', 0x21, 0xffffffffffffff8f, 0x54}, 0x2c) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty=0x4c00}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @empty}, 0x96, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000001300)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @rand_addr=0x7}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='vxcan1\x14\x00', 0x3, 0x2, 0x7ff}) ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000001480)={0x750, {0x2, 0x4e22, @dev={0xac, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x2, @broadcast}, 0x48, 0x0, 0x2, 0x46a, 0xfffe}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001240)={0x84, @local, 0x4e20, 0x4, 'l\x02p\xaa[\xbb$\xf5\x9c\x00\x00\x04\x00', 0x17, 0x1f, 0x5a}, 0x2c) lsetxattr$security_smack_transmute(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000002440)='TRUE', 0x4, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r4, 0x80045400, &(0x7f00000012c0)) sendmmsg(r5, &(0x7f0000001300), 0x123, 0x8000) write$UHID_DESTROY(r3, &(0x7f0000000040), 0x4) write$UHID_CREATE(r3, &(0x7f0000001100)={0x0, 'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000100)=""/4096, 0x1000, 0x8, 0x9e, 0x1, 0x0, 0x1}, 0x120) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000001280)={0xaa, 0x20}) dup2(0xffffffffffffffff, 0xffffffffffffffff) [ 259.732818][ T9503] netlink: 'syz-executor.4': attribute type 22 has an invalid length. 21:30:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000240)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) socket(0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) shutdown(0xffffffffffffffff, 0x2) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x0, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(0xffffffffffffffff, r2, &(0x7f0000000240)=0x202, 0x4000000000dc) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(r4, 0x401070ca, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x68, 0x0, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb0d}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x14, 0x7, [{0x8}, {0x8}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x58}}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x24448000}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)={0x74, r3, 0x2, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x100000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xcfcc6e3b4e04f11c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x70000000000000}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x20801) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r6 = socket$inet6(0xa, 0x0, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r7, &(0x7f0000000240)=0x202, 0x4000000000dc) r8 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOC_PR_RELEASE(r8, 0x401070ca, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x68, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xb0d}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000880), 0xc, 0x0}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x20801) openat$adsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/adsp1\x00', 0x0, 0x0) [ 259.800506][ T9506] FAT-fs (loop5): bogus number of reserved sectors [ 259.819579][ T9506] FAT-fs (loop5): Can't find a valid FAT filesystem 21:30:49 executing program 4: r0 = open(&(0x7f0000000040)='./bus\x00', 0x1fe, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x3) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r2 = fanotify_init(0x200, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) syncfs(r3) fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0) sendfile(r0, r0, &(0x7f00000001c0), 0x8080fffffffe) creat(&(0x7f0000000140)='./bus\x00', 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 21:30:49 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0xc00, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000180)={0x7, 0x4d, 0x2}, 0x7) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x30}, [@map={0x18, 0x3, 0x1, 0x0, r2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x78) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = accept4(r3, &(0x7f0000000200)=@un=@abs, &(0x7f0000000040)=0x80, 0x181000) connect$vsock_stream(r4, &(0x7f0000000280)={0x28, 0x0, 0x2711, @host}, 0x10) 21:30:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000000000a01, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000340)=""/138, 0x1ab}], 0x100000000000037d) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={r6}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={r6, 0x5, 0x70000000, 0x5}, 0x10) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1f}) read(r1, &(0x7f0000000100)=""/19, 0xfffffd81) 21:30:49 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, &(0x7f0000000080)) socket(0xa, 0x801, 0x3f) vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000000200)="a6", 0x1}], 0x1, 0x0) close(r1) r4 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f00000001c0)='team0\x00') accept$alg(r5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet_udp_int(r4, 0x11, 0x200001000000067, &(0x7f0000000280)=0x4c, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) splice(r0, 0x0, r1, 0x0, 0x10000, 0x0) 21:30:49 executing program 5: r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0xfe) r1 = open(&(0x7f0000000040)='./file0\x00', 0x200c2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$nbd(r1, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], 0x4d) inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x1010) sendfile(r1, r1, &(0x7f0000000200), 0xa198) 21:30:50 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:30:50 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "215e23b6a14a937e", "df28196f6317ffbc13846cbe59f4f1b8c255c35c6b898da733494d6ae33cbdfb", "7b45bfdf", "1215ddea89823d54"}, 0x38) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c}, 0x1c}}, 0x4000) sendto$inet6(r0, &(0x7f0000000180)='Y', 0x1, 0x4000, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x4, &(0x7f0000000700)=[{&(0x7f0000000300)="cad9389362050b2c2bc7a2dd29de296716a634a9c4b95081d529b5f83fd7c32fb3f83c8577cb1ed2011c16e2da46a649e9bc4d114ba9bb72213d02cb123cd04d69756436954b744c3550dd9c8ce73773975e14e5f4b843661ddc93bd8729edd071f3283ba1cfb472e34dea96c14270b7062bb17368c2f8a970c9e2f1dacb94faf99cf100346e65962f926cb0b75289f3ed5aca1986eb186bb402b038a0fff17002149eba0433c869e622548e61cc23feb4fed6523bc56c9771a21aeb1494eab59cd3e5a96f4739386d5d0c4aca0cce3f814a5ac3f8eb97719159389b0e0bac", 0xdf, 0x99}, {&(0x7f0000000400)="9670b54f75670a8a01aa8d563a39569212c0a54496e0166d61ceb55297f6f97d78bc87bf18e68fd5f8ba9d137afbeefd9254369a5a476fb283ce529920c073190a8d3e111636dbc49d9d7723edf82ba514d25f7402506b2b15cbf1d069683fc4ae2a521b6ccdb5047fc19cc79a4b49ec4782a108e285be86b73c89e6772834f7cd3d208e016340eff655e2d932e7025132e1be42eb3b4f0088c36ead8b2dca0473c3c84bc8b8903f09fcdbfe27cc388808f6a6329ca05781732ce0c21d4dff7cefbb02592d4a79a087abdc794af456fafe0a4f8d5e82315bf88d593c5d52b9aee21714aa0e12b9", 0xe7, 0x1}, {&(0x7f0000000500)="4abe915c8a2ac5821cceeff7ae902ea07f0eb7546d54ebcf3ba23ea25e5da492ff3f7ff932a2b42d406fed55b9444bc86be0961ee4ff8e8840c1ebb132b5644b16309924af1b2c057bcfe04cb44c483bb794533a8beba965d63a1413ede6169fa643e0b859f51e791450dea6f3ba2cb37a1e93a71bd2091ead8d286dcec7c1920585a81590c0ad80deb854fecca67774b3e960cae70cedd52cebe64ea0c8aa0a2082356066c493f4e832da5aa550ba046d49c39888928438bcd5d4b95646a0eb41", 0xc1}, {&(0x7f0000000600)="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", 0xfa, 0xfffffffffffffff8}], 0x80000, &(0x7f0000000140)='+=/,nodevsecurityvmnet0\x00') close(r0) 21:30:50 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000323ce49eebd81ae95300000002000000ffd38d9b0c00010004000000", @ANYRES32], 0x24}}, 0x0) 21:30:50 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={[], 0x5, 0x5, 0x20, 0x10000, 0xfffffffffffffd2d, r4}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x9006000) 21:30:50 executing program 4: syz_open_dev$sndseq(0x0, 0x0, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000040)) arch_prctl$ARCH_GET_FS(0x1003, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000004c0)=0x80) fcntl$getownex(r1, 0x10, &(0x7f0000000600)) socketpair(0x0, 0xa5127033f7754595, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000480)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x12}) lseek(0xffffffffffffffff, 0x10000000000000, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='team0\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000640)='TIPC\x00') r4 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x2, 0x408402) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r5, 0x701, 0x0, 0x0, {0xd, 0x0, 0x1a0ffffffff}}, 0x14}}, 0x0) set_thread_area(&(0x7f0000000440)={0x1, 0x100000, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1}) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x6810000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a80)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf250d0000001c000900080002007f00000008000200e3ffffff08000100010000003db0ed0a15c310288242c46953d39d45468424684a923f0121c344dfbcbf6bc189b026e540c813ca28e490d9e8fb3d48a4e982e5fe54d132f8e1c1e442816f51505ed262dfe2ad4d070a2259d6b2cde4ad65917302b38b56fb9beb37bc24e9cf5a504b27bb63031467863b2dde5d79c8afda5fb1ecb6df649a5b4b4b1ad6f830c7506be50bfed644bb7edb8ace2f89a34252ed7bbf7f210cfe5c6065de6158ada51225d3b7996ba24e122ef1b63fa842b63e7dba36aca3a9a88136307d3577cd86da5a5568cb5eb04a3b78e003cd"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x14004804) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f00000001c0)='team0\x00') r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40400040}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)={0x2cc, r8, 0x630, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA={0xb0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa38}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_LINK={0xa8, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x77}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x2c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x45b2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x91}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_LINK={0xb8, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x376}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe1d0}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x300400c0}, 0x800) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xdc, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast2}}}}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffe1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x4}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xe21}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffff801}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) read(r0, &(0x7f0000009f9c)=""/100, 0x64) 21:30:50 executing program 5: creat(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='team0\x00') sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f00000004c0)={&(0x7f0000000280), 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x6c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc633}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x240000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c00000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7e}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe808}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xeb}]}, @TIPC_NLA_MEDIA={0x38, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x4}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)={0x68, r5, 0x5, 0x0, 0x0, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0xf00, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80020080}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x1c}}, 0x800) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDSKBMETA(r6, 0x4b63, &(0x7f0000000100)=0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) [ 261.377882][ T27] audit: type=1804 audit(1576445450.879:40): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir139200962/syzkaller.EUmMzb/13/bus" dev="sda1" ino=16570 res=1 21:30:50 executing program 1: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000013c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x200}, {0x0, 0x5}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x3f5c7cea03a3303e}, 0x0, @in=@rand_addr=0x101, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x7ff, 0x1}}, 0xe8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f00000001c0)='team0\x00') setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x6, 0x8000}, 0x4) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r3, &(0x7f0000000240), 0x5c3, 0x0) [ 261.515319][ T27] audit: type=1804 audit(1576445450.929:41): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir139200962/syzkaller.EUmMzb/13/bus" dev="sda1" ino=16570 res=1 21:30:51 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:30:51 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000300)="88809740d0593cda7b106ee610a66bc746c38f1e59dd092e884c64c88b195575497ce548b169e965665377a639cbd835b6ed7d17a073a823ca14242b1229ab4aea75c93f71be522d9f5189f24e36df05c3ed18f11506adf683a94e3fdaa2e867340407788fefbeabc5ad59da06") mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1220, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x1d2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000040), r2, 0x0, 0x100000200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[r2, r0]}, 0x2) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x2, 0x4) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x5}, 0x28, 0xfb1bd33fa216ce40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x6, 0x40000) write$sndseq(r1, &(0x7f0000000240)=[{0x8, 0x81, 0x88, 0x6, @tick=0xd8, {0x0, 0x40}, {0x2, 0x1}, @raw32={[0xa9a0000, 0x83c]}}, {0x7, 0x1f, 0x7, 0x4, @time={r4, r5+30000000}, {0x4, 0x8}, {0x7, 0xde}, @raw8={"e7a3cdb72efa4228a524c603"}}], 0x60) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x1) [ 261.787613][ T27] audit: type=1804 audit(1576445450.929:42): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir139200962/syzkaller.EUmMzb/13/bus" dev="sda1" ino=16570 res=1 21:30:51 executing program 4: clone(0x40005fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004700)={&(0x7f0000002700)=ANY=[@ANYBLOB="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"], &(0x7f0000004600)=""/210, 0x4f, 0x193, 0x8}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = userfaultfd(0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x40, 0x6, &(0x7f0000000580)=[{&(0x7f0000000140)="1c0d2ad6e237dbe0b6c97208badc4902c5cf28a6feaec396ea673cc63901c037af7f3d7d1d8fbd4999cd988e8158bacaf4c18d33d49da7ba5b23a543755d360a490addcd43169881f76eb61d86001d94535d3ca46c84c012cd7b310de94895ce20a53fafe2b29ee69a453a7e6d9f3dfd", 0x70, 0x6}, {&(0x7f00000001c0)="8f82803a3a7e25504685cffddb87df2764b53ef0932a0542f800b407007e8f20e7c3509edb06af5afcc7d2aecbced1392cd76ba98149531cd64a26b52d04e7200673c25b8cf6592dc19b0cba52f5c7b51af3101f140e43a4adffc413ce16ec9c685be99bc199c3776cc6d1361c9baab23ab0db3e84887b1658767267b5c88b1bcd7fb81c444c996d1b3970b5dbe59e45fda997c0b2fb37b1ff3cc4cdc0d6c59010e4fbc7ca0ef485cddc89a7a33ccba0414a5a693c88a61a186182c9683cf02a6f02696a6fdec244dd777a2b030ff331199fdffbff626568fd781c764b381b5d72205044", 0xe4, 0x7f}, {&(0x7f00000002c0)="ff8edc93e06d176fdab88296f5474d2ede3d5a876c3aec96ac905f6ecf0b0f41cc6a0dc1f029a2864c25d4aa29da524643e2da6525128c3c6b1354d9439a540c59e37bbdfaa13526f8365bbb2ec21e440bc1", 0x52, 0x6}, {&(0x7f0000000340)="54e357a1e71f1355cf385cf1b7df937af684fe4bfcc3c2996fac9b8124db395830a2bbf8e7b40c45330a9f16ebfffe123829dace35c17c9afd71ea0c69657411ff4d57f7333a3a900e7d54ad1be2", 0x4e, 0xffffffff}, {&(0x7f00000003c0)="c537908d2c44f74eea8ce026c995e5b9cfc69fbea65743bab59152fb2543a0aaf2052f851a771e67547b4ba7da150eabf1a5bc14cd0a20bf4cdfe77936618d791f622bc354bef83531a9d5850ba3f3598213fc143c9359fed0ee41d4414668b301c225c7fb1c3451719bef311532c46bbe9b86f45505c86def665b54305c3ee4df732468e5966c18e382301e", 0x8c, 0x7fff}, {&(0x7f0000000480)="db30123c88a8a837803fc09019f548392bae1f6f8d057c616d7100f7a9a8f82a5a701e6d8c51ce4b7a7fa953395ebadc2bf25eb9ca3d09ce49d84aa1c1d361d971b7053e9b28a370ffe8339b651acef0b5c605ae6c34f1ac7c00904ed3294956b6ebafc82ed5977eac603f22b114f01709a8d861dec71c83863912547a52839d4c5806928e3ae0eadc64fba56b2ffaa84218dc7e2dfd19cc5c603c54a440df6058fca6e26ad4c21a41cad7370d733bccea4f6c59b9fa20eaeb3c73176460d45b1471f46ce2a81249d963c91f1224e10f035e67", 0xd3, 0x9}], 0x100800, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f67727069642c7573726a71756f7461bd2c64696f726561645f6e6f6c6f636b2c757365725f78617474722c6d696e697864642c696e6f64655f7265616461686561645f626c6b733d3078303030303030303030323030303030302c657569643d2fc1e80b379646e41b4b8ec344dfac81de71d39b5a4fb97a0c8958a8a10f1b6cbd6d6e7ebd7231f56f2868ca7cfc4afbf139281544f9cdc40b3afa95c925d4a5a754ddca464bcace1e4fe12c03602664aa9b16530d216635490a65ad28871679fa2f0b31a894b1da5f30f29784924a686254ed527fcf604452ca229c7e2db225cb", @ANYRESDEC=r3, @ANYBLOB="2c735ba1b6b0d74a47b43d657468302c6f626a5f726f6c653d6e6f64657673656c696e757875736572706f7369785f61636c5f61636365737376626f786e65743073656c696e757873797374656dde272c2a2c646f6e745f6d6561737572652c736d61636b6673666c6f6f723d2c686173682c66756e633d504154485f434845434b2c666f776e65723c", @ANYRESDEC=0x0, @ANYBLOB=',fscontext=sysadm_u,fowner<', @ANYRESDEC=r5, @ANYBLOB=',\x00']) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5387, &(0x7f00000007c0)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$TCGETX(r7, 0x5432, &(0x7f0000000640)) ioctl$UFFDIO_REGISTER(r1, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) splice(r0, &(0x7f0000000000)=0x1, r1, &(0x7f0000000040)=0x2b0f, 0x100000001, 0x3) r8 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000800)='/dev/dlm_plock\x00', 0x40000, 0x0) ioctl$SIOCX25SFACILITIES(r8, 0x89e3, &(0x7f0000000840)={0x66, 0x9, 0x9, 0x6, 0x200, 0x81}) [ 261.941757][ T27] audit: type=1804 audit(1576445450.969:43): pid=9593 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir139200962/syzkaller.EUmMzb/13/bus" dev="sda1" ino=16570 res=1 [ 261.999045][ T9611] BPF:[1] Invalid btf_info:6fc0403 [ 262.048325][ T27] audit: type=1804 audit(1576445451.519:44): pid=9610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir659046859/syzkaller.adVrCA/16/bus" dev="sda1" ino=16564 res=1 [ 262.079035][ T9611] BPF:[1] Invalid btf_info:6fc0403 21:30:51 executing program 2: r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ffffffffffa, 0x6d1a4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$UI_SET_RELBIT(0xffffffffffffffff, 0x40045566, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x20, 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f00000001c0)) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000140)={[], 0x5, 0x5, 0x20, 0x10000, 0xfffffffffffffd2d, r4}) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfffffffffffffff8, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x240, 0x0, 0x9006000) 21:30:51 executing program 5: sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000000)="5500000019007f5300fe01b2a4a280930a60ffff00a84302910000003900090008000c00", 0x24}], 0x1}, 0x0) r0 = socket(0x1000000010, 0x80002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) write(0xffffffffffffffff, &(0x7f0000000000)="24000000190001f0008000361731ed6402", 0x11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492191, 0x0) 21:30:51 executing program 1: r0 = socket(0x11, 0x3, 0xfffffffffffffc01) recvfrom$unix(r0, &(0x7f0000000240), 0x0, 0x40012003, 0x0, 0x713) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") r2 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00') connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @multicast1}, &(0x7f0000000340)=0xc) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f00000001c0)={@loopback, r4}, 0x14) connect$l2tp(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) r5 = socket(0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000380), 0x13e) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000000), 0x10) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGARP(r7, 0x8954, &(0x7f000000b680)={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, {0x6, @local}, 0x62, {0x2, 0x4e23, @loopback}, 'ip6tnl0\x00'}) r8 = socket$inet6(0xa, 0x800, 0xd5b) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000440)) r9 = socket(0x40000000015, 0x5, 0x0) ioctl(r9, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000600)={r3}) getsockopt$inet6_IPV6_IPSEC_POLICY(r10, 0x29, 0x22, &(0x7f0000000ec0)={{{@in6=@mcast1, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000480)=0xfffffffffffffd82) getgid() getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000580)=0x25f) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000780)={{{@in=@local, @in6=@initdev}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xffffffffffffffa0) getgid() getpid() r11 = socket(0x40000000015, 0x5, 0x0) ioctl(r11, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") accept$inet6(r11, &(0x7f00000003c0)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000540)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in=@dev, @in=@empty}}, {{@in6=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000d80)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000980), &(0x7f00000000c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@multicast1, @in=@remote}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000b80)=0xe8) getgid() ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f00000011c0)) r12 = socket(0x40000000015, 0x5, 0x0) ioctl(r12, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071") getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000001200)={{{@in6=@mcast1, @in6=@mcast1}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000700)=0x33a) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001340), &(0x7f0000001380)=0xc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000003a40)) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000003a80)={{{@in=@remote, @in=@remote}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000003b80)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003bc0), &(0x7f0000003c00)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003c40), &(0x7f0000003c80)=0xc) r13 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r13, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x17f) write(r13, &(0x7f0000000580)="240000001e001f0214f9f4ff08000000070d00"/36, 0x24) getsockopt$inet_IP_IPSEC_POLICY(r13, 0x0, 0x10, &(0x7f0000003cc0)={{{@in=@multicast1, @in6=@dev}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000680)=0x1000000e0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000bc0), &(0x7f0000000c00)=0xff21) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000003e80)) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000003ec0), &(0x7f0000003f00)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000500)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003fc0), &(0x7f0000004000)=0xc) r14 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r14, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r15 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000a80)={{{@in=@local, @in=@remote}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@local}}, 0x0) getgid() gettid() getsockopt$inet_IP_XFRM_POLICY(r13, 0x0, 0x11, &(0x7f0000004140)={{{@in=@broadcast, @in6=@local}}, {{@in=@multicast1}, 0x0, @in=@local}}, &(0x7f0000000380)=0xfffffe4a) getgid() gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000c80)={{{@in=@multicast2, @in6=@initdev}}, {{}, 0x0, @in=@initdev}}, &(0x7f00000002c0)=0xffffffffffffff7d) getgid() ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000009c0)) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r16, 0x29, 0x22, &(0x7f0000004400)={{{@in6=@mcast1, @in=@multicast2}}, {{}, 0x0, @in=@multicast2}}, &(0x7f0000004500)=0xffffffffffffff7a) getgid() ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000280)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000004900), &(0x7f0000004940)=0xc) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000004980), &(0x7f00000049c0)=0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000040)=0x9, 0x4) sendto$llc(r6, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x1a, 0x200000000304, 0x0, 0x0, 0x0, 0x0, @random="0387945b9f37"}, 0x10) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) recvmmsg(r6, &(0x7f000000cd80)=[{{&(0x7f000000be80)=@ll, 0x80, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, {{0x0, 0x0, &(0x7f000000c600)=[{&(0x7f000000c3c0)=""/56, 0x38}, {&(0x7f000000c400)=""/74, 0x4a}, {&(0x7f000000c480)=""/114, 0x72}, {&(0x7f000000c500)=""/132, 0x84}, {&(0x7f000000c5c0)=""/15, 0xf}], 0x5, 0x0, 0x0, 0x7d48bddc}, 0x100000001}, {{0x0, 0x0, &(0x7f000000c700)=[{&(0x7f000000c680)=""/90, 0x3a}], 0x1, &(0x7f0000000640)=""/16, 0x10, 0x7f}, 0x200}, {{&(0x7f000000c780)=@ethernet, 0x80, &(0x7f000000ca00)=[{&(0x7f000000c800)=""/210, 0xd2}, {&(0x7f000000c900)=""/92, 0x5c}, {&(0x7f000000c980)=""/82, 0x52}], 0x3, &(0x7f000000ca40)=""/40, 0x28}, 0x206}, {{&(0x7f000000ca80)=@pppol2tpv3in6, 0x80, &(0x7f000000cd00)=[{&(0x7f000000cb00)=""/255, 0xff}, {&(0x7f000000cc00)}, {&(0x7f000000cc40)=""/180, 0xb4}], 0x3, &(0x7f000000cd40)=""/5, 0x5, 0x2}, 0xffffffff}], 0x5, 0x1c, 0x0) 21:30:51 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x7, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB]) close(r0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/17) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="0a056b652735470340180c8818424265"}, 0x1c) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x2010) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x200004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer\x00', 0x20000, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/187, 0xbb, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x2, {0xb, @sdr={0x0, 0x1}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r6, r5) write$binfmt_misc(r1, &(0x7f0000000200)={'syz0', "e06f76599ec77750995d46dab717f75aec8c4048e3a262d0c2721ba9b3dbd1dce90369cf5fe9ec8f07857ddff31ab2f17793b8179e866424d8c81f9de077a712092e63704ef5860a0943cc4a086c07675fb38e9a72d25466"}, 0x5c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = msgget$private(0x0, 0x0) msgsnd(r9, &(0x7f0000000400)={0x3, "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"}, 0x401, 0x0) msgsnd(r9, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000f8d37243cd926b4e7fad760e0be914ec8df5694d072bcb774b68d9735800007b8c86c1ac3abdf1e80760dfe4e52774f0e285c9b20ba891fd55c8bc6ff041a139ef506d68888787021f0010df1642368c9845c663a20cc7d0ad0f6ed2846d9098e93b1df9c3a2c620e1ed"], 0x2a, 0x800) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) [ 262.393356][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 262.490071][ T27] audit: type=1804 audit(1576445451.989:45): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir074905104/syzkaller.mpK8sS/16/bus" dev="sda1" ino=16575 res=1 21:30:52 executing program 1: clone(0x20008579, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x2a4500, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = accept(0xffffffffffffffff, &(0x7f0000000780)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000800)=0x80) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000880)='fou\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr="d838ed6e052b6211218092bbe1933bfd"}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x14) getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f00000008c0)={@empty, 0x0}, &(0x7f0000000900)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r8}]]}}}]}, 0x38}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4008000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x54, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x2c}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}, @FOU_ATTR_TYPE={0x8, 0x4, 0x6}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x21}}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x1d}, @FOU_ATTR_IFINDEX={0x8, 0xb, r8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}]}, 0x54}, 0x1, 0x0, 0x0, 0x40002}, 0xec46b51d9df7ca85) openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setparam(0x0, 0x0) 21:30:52 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000300)="88809740d0593cda7b106ee610a66bc746c38f1e59dd092e884c64c88b195575497ce548b169e965665377a639cbd835b6ed7d17a073a823ca14242b1229ab4aea75c93f71be522d9f5189f24e36df05c3ed18f11506adf683a94e3fdaa2e867340407788fefbeabc5ad59da06") mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1220, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x1d2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000040), r2, 0x0, 0x100000200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[r2, r0]}, 0x2) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x2, 0x4) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x5}, 0x28, 0xfb1bd33fa216ce40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x6, 0x40000) write$sndseq(r1, &(0x7f0000000240)=[{0x8, 0x81, 0x88, 0x6, @tick=0xd8, {0x0, 0x40}, {0x2, 0x1}, @raw32={[0xa9a0000, 0x83c]}}, {0x7, 0x1f, 0x7, 0x4, @time={r4, r5+30000000}, {0x4, 0x8}, {0x7, 0xde}, @raw8={"e7a3cdb72efa4228a524c603"}}], 0x60) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x1) [ 262.624658][ T9606] syz-executor.3 (9606) used greatest stack depth: 22360 bytes left 21:30:52 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:30:52 executing program 1: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000300)="88809740d0593cda7b106ee610a66bc746c38f1e59dd092e884c64c88b195575497ce548b169e965665377a639cbd835b6ed7d17a073a823ca14242b1229ab4aea75c93f71be522d9f5189f24e36df05c3ed18f11506adf683a94e3fdaa2e867340407788fefbeabc5ad59da06") mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1220, 0xffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x1d2) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, &(0x7f0000000040), r2, 0x0, 0x100000200002, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[r2, r0]}, 0x2) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x2, 0x4) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0xfd, 0x4, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x6}, 0x8000000200000402, 0x800007f}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000380)='trusted.overlay.nlink\x00', &(0x7f00000003c0)={'U+', 0x5}, 0x28, 0xfb1bd33fa216ce40) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_open_dev$vcsu(&(0x7f00000002c0)='/dev/vcsu#\x00', 0x6, 0x40000) write$sndseq(r1, &(0x7f0000000240)=[{0x8, 0x81, 0x88, 0x6, @tick=0xd8, {0x0, 0x40}, {0x2, 0x1}, @raw32={[0xa9a0000, 0x83c]}}, {0x7, 0x1f, 0x7, 0x4, @time={r4, r5+30000000}, {0x4, 0x8}, {0x7, 0xde}, @raw8={"e7a3cdb72efa4228a524c603"}}], 0x60) r6 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r6, &(0x7f0000000080)={0x14}, 0xfffffff4) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x1) [ 263.121547][ T9647] FS-Cache: Duplicate cookie detected [ 263.127621][ T9647] FS-Cache: O-cookie c=00000000396f814f [p=00000000c759d2f2 fl=222 nc=0 na=1] [ 263.137124][ T9647] FS-Cache: O-cookie d=000000006497e66b n=00000000a5dd55b3 [ 263.144650][ T9647] FS-Cache: O-key=[10] '0200020000807f000008' [ 263.151089][ T9647] FS-Cache: N-cookie c=000000005964fcfb [p=00000000c759d2f2 fl=2 nc=0 na=1] [ 263.160363][ T9647] FS-Cache: N-cookie d=000000006497e66b n=000000007105119a [ 263.179433][ T9647] FS-Cache: N-key=[10] '0200020000807f000008' [ 263.214144][ T27] audit: type=1804 audit(1576445452.709:46): pid=9651 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir487597293/syzkaller.N8T06R/19/bus" dev="sda1" ino=16554 res=1 21:30:52 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000280)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x25, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) r4 = dup(r3) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000180)=0x4, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x38}}, 0x0) recvfrom$packet(r4, &(0x7f0000000480)=""/138, 0x8a, 0x40000260, &(0x7f0000000300)={0x11, 0x2, r7, 0x1, 0xfe}, 0x14) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f00000002c0)=0x5) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631177fbac14140ce0", 0x0, 0x9}, 0x28) 21:30:52 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_dev$admmidi(0x0, 0x7, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB]) close(r0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000080)=""/17) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr="0a056b652735470340180c8818424265"}, 0x1c) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(0xffffffffffffffff, 0x0, 0x2010) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) open(&(0x7f0000000600)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x200004) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer\x00', 0x20000, 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000140)=""/187, 0xbb, 0x40, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x2, {0xb, @sdr={0x0, 0x1}}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) dup2(r6, r5) write$binfmt_misc(r1, &(0x7f0000000200)={'syz0', "e06f76599ec77750995d46dab717f75aec8c4048e3a262d0c2721ba9b3dbd1dce90369cf5fe9ec8f07857ddff31ab2f17793b8179e866424d8c81f9de077a712092e63704ef5860a0943cc4a086c07675fb38e9a72d25466"}, 0x5c) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) r9 = msgget$private(0x0, 0x0) msgsnd(r9, &(0x7f0000000400)={0x3, "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"}, 0x401, 0x0) msgsnd(r9, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000000000000f8d37243cd926b4e7fad760e0be914ec8df5694d072bcb774b68d9735800007b8c86c1ac3abdf1e80760dfe4e52774f0e285c9b20ba891fd55c8bc6ff041a139ef506d68888787021f0010df1642368c9845c663a20cc7d0ad0f6ed2846d9098e93b1df9c3a2c620e1ed"], 0x2a, 0x800) getresuid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) [ 263.268216][ T27] audit: type=1804 audit(1576445452.769:47): pid=9652 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir659046859/syzkaller.adVrCA/17/bus" dev="sda1" ino=16576 res=1 21:30:53 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) close(r0) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 263.731615][ T9650] syz-executor.3 (9650) used greatest stack depth: 21704 bytes left 21:30:53 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x20000000000000a, 0x2, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff64, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {0x0, 0xe85581bf4bf2767d}], 0x100000000000002a, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r6, &(0x7f0000000440)="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", &(0x7f0000000040)=""/208, 0x2}, 0x20) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21:30:53 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='team0\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x3c, r2, 0x1, 0x9effffff, 0x0, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x9841004}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xb4, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0xb4}}, 0x24900) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000420007fe6f79d645ffffffffffffff00000000006f42fa0d5a108be9a86c255e78a4df744341dee7ecc322e765df7df565e2", @ANYRES32=0x0, @ANYBLOB='\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x800}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$rfkill(r4, &(0x7f00000001c0)={0x2, 0x5, 0x0, 0x0, 0x1}, 0x8) getsockname$netlink(r3, &(0x7f0000000000), &(0x7f0000000080)=0xc) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) [ 263.915271][ T182] tipc: TX() has been purged, node left! 21:30:56 executing program 4: perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xffe8) r3 = socket$inet(0x2, 0x3, 0x29) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000001440)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) 21:30:56 executing program 2: pipe(&(0x7f00000001c0)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0xfffffd1e, 0x0, 0x229}}], 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x24e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flock(r0, 0x4f26bcf88be88975) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r2, &(0x7f00000017c0), 0x333, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = getgid() lstat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r6) setregid(r5, r6) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f00000001c0)) r8 = getpgid(r7) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = getgid() lstat(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, 0x0, 0x0, r12) setregid(r11, r12) r13 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sendmsg$unix(r2, &(0x7f0000000780)={&(0x7f0000000040)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f00000000c0)="3d606cb5cb3eb3bf0f96f42086e5d5dc73ef153515c7a9b7100b571bdbbe10a86c3cbc705496fa06e50c747533c08ec26339f68957d4a04c70626e10da70a707712ee1f7f42d3fc6f195696b9e0e1be6ab82f37fcee857426472c35a874352a97f52135e090951c1826adf21d1b45b03b2ac11e7ecbfaec1752ebafbf9649d859c56d9cb9132", 0x86}, {&(0x7f0000000200)="ba97708325a90de7487a710fb2d58955c5fc062f0fbe1a933a465151fbfa38245cba52a857df4914414ae4a020a2c7e540dbec5aeccca040eda5d9adffe084df1b8e984b56bdc87ecfe62767fb32ec4c55faa03476ff6e42519dd78cb58d3a03c3e8cf95885548d6d7c8c30e9b0fec88517c84e8a782320cb90caf81179aae53bd6b8c304f4fec6c4531d66bf1339f31961657459069060f42121dafd1c669f3a2761c425b0a7d8c665554991d554e44e13c839a0b10d5d8", 0xb8}, {&(0x7f00000002c0)="92818e2c084170a6826cd9fec7b8562895c681a909bdddcb6359952934421281764a01af6af2ce738231d2d378b8ed555e63eb3666320fe5baf792dbf01eb82a15210c08e281ac", 0x47}, {&(0x7f0000000340)="e7ae9de0ea1149f3b9c0ac8b2a1394f6e016528e9f3ec84338cbe0533a250d18d1828648695b56d549c7b15e28f53b6dfc07e55dba0afd8f9d08f46a8606b52a15a76d8534e66c85d2cda45ab44e68150b57675d3474e7142b815e93d8fdcfac7f7ea685ca5300e1372660f4efbc5583f338744308d104c15a3758b31c6599a1929328a620a64689ea51d0518849144ff6e148f1ceed21f34246d874bb661805ea59d8c6de7abdaca873e149d89bc72e7e2ae88754a0d6c5578d2b68df45434f05dd8c6e402fde4572adecba194f", 0xce}, {&(0x7f0000000440)="175f346d21674886913ffdde63b1383508194a7827491f0111bbc20da93292da3f10352941eb596ad043daa743a648baf615e7a810ffb56d7d6b5091866869d658dd7ed8de3e88b9ab5516f6c921afdd8b99450d6e2620869c3ea4aec16960c150d599a77365a796cb31907ff9a99771aeb3f644a7caac511336af657f6a52afb2fe4751c51861038a883cca38741122f3a0e1ce4326bc9d81475b99080c8dc713b9edd61b4ffb195b821b46981435cc0779be27a8f1a7883f7834a077526642d280ce80cda6270dca6c5fead3a0d11874b02f1935e954e08f9bd314efdc18742dab759e6a304be6ab37c9196d231d775402b1", 0xf3}, {&(0x7f0000000180)="e6b1e0dea8ecc8ecc5821296991ec14678f4c66b5847499f55fb5f5c900ad9129ae8b827565424f31a3f454b2b6727f91089f5b432de50053c0f66a5", 0x3c}, {&(0x7f0000000540)="5e40a7aeb2805e424fb71e9239292e3a928de275bedcf714f342689e1133a76ea5c031c36833e15a22b7d912cdabc683b827d0f18f0c1830f33b343a09c3ee05d751defcfe407639f13c7261cc6b2159c8d7b53395e2a7274e52004c93e8589ab9d222af15b34f5f2f542874813f2097875f887ed58181a720de104d5b22492cf098c2cab9aa108106103cb26434c925388faf7da9fe3a55a1670daf57b5b4ec5378f5b22521ad52e8ac297fd2e5a3004914d53f2274d0e39c5c971ab275c99e4b67", 0xc2}], 0x7, &(0x7f0000000700)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r8, r10, r12}}}, @rights={{0x1c, 0x1, 0x1, [r13, 0xffffffffffffffff, r1]}}], 0x60, 0x810}, 0x14044008) 21:30:56 executing program 1: mknod(&(0x7f0000000100)='./file0\x00', 0x800000000000744, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) personality(0xe000017) ioctl$SNDCTL_DSP_RESET(r2, 0x5000, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000001000)=[&(0x7f0000001d40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a\x00\x00\x00\x00pfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zf\xafc\xf9\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac4\x86\xa5>\x14$D\x9en\t\x12\x89S1\xa8;u\xba\x1c1\xb6\x1c\xf4\x06\x97T\xbc\xd0\xbdh\xb9p\t%\xe5O\n\xe7\xf0!W\xfd6j \f\r\xc63\xa4\x7f\xebs\xa0\xca\xc3$K}O\xc5,U\xad\xa7*\x00r\x9f\xc9\xf0\xb2\xd6\xd6\xd0\xb5\xd97\x9c@0\x94\xd3&G\xf5\x9b\x01QE\xe9\xda\xde{}\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000002f80)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x94*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i.Epw\xba\xe1\v\x1a9\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xb9\xcbu2d\xa3\xb1\xce\x83\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192G&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xacl\xcdX\x04IW\f\xb4r\xfc\xfd\xf8\xcb%\xe8+\xd7\xb542NT|\x1b\xa9\x94\x11F+c\x17\ag\xa4\x94\xef\xab\xdd\xb3\xfc\x9f\x8dTJ\x05\xe2\xdd\\\a\xe0DAg=\x13\x8f\xb0Ho\x8c\\s(\x98\xcff\xd5\xfc\x11\xa5$\xb6\xa4s9\xf4\x01E\xcd&\x99\xf67\xd5\x13\x87+.h\x84\xf6\x01\xbe\x86\xe1\nG\x99\xd7\x17\xeb\xf2\x03Fb\xb1f\xf5\x95\xc8ph\xd5\x84C\xf4\xd1\xe1\xa5z\"y9VG\x01r{\xd2\x18rn\x81\xcc\xc8\a\xd3\x13_\x13\xad\\p\x14\xf8\xd5}e\x98Wp\xf9\xd91\x16\xa8\xbb2?@\xf2\v\x12\xc6D8\xf5o\x00\x00\x00\x00\x00\x00', &(0x7f0000001240)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac']) 21:30:56 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) r1 = epoll_create1(0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 21:30:56 executing program 5: syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000c00000a00000000ff0700007fffffffffffffff", 0x16, 0x1c0}]) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x8000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000003c0)=0x80, &(0x7f0000000400)=0x1) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000600)='/dev/audio1\x00', 0x502474a12fffd20d, 0x0) fsetxattr$trusted_overlay_opaque(r2, &(0x7f0000000640)='trusted.overlay.opaque\x00', &(0x7f0000000680)='y\x00', 0x2, 0x3) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f00000a0fe0)={{&(0x7f00005e3000/0x800000)=nil, 0x20ce6000}, 0x200000}) fcntl$setpipe(r3, 0x407, 0x40) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x80, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000005c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x8d2, @local, 0x7}, 0x1c, &(0x7f0000000340)=[{&(0x7f0000000180)="57bd305e912394d69ae87cef773ba5bd914d819b82e6649b35cc052dec02944b9eace1295b7fbe94fcc5969dd73a3bedd645f381268a874d7328ead3fff0c829d033bed2f3939d4b1f077b1aee5eea259fa4283009b0ba0247a0ee7da781f45733417652dad84c0181358d9805ab119e9c706a7291b962cbba395b29fe0e425665ca2a5b6be44533a6de78e1355f279599ac496b2423e8e0c4d2a462d2b585eb3a6846c8bf4ee6356f20266ecaa7ac24afad6368ce33ddad13a7605e85ffa82f9373", 0xc2}, {&(0x7f0000000280)="7a805a21c02d9903a581cf44b893fd4ddb875e4018c0772002aeb986dae68075924388ba950938dfbea2a964e5a86dbbccfa1b26a8a10648b6c21562702b1f9704b9141cd03b3577f3bfabe1ba54b7ef5119d2bf7ab72eea3b210eb851e0bcaef1c01a9d6fd5669a8f1553936663eacbb3ae37191b9658170434345738b5f34578e465884374f5f1bff9b27664ad1d2e48150d1b54cad52c8e20b10efbf9d7", 0x9f}, {&(0x7f0000000440)="ef0462b9f5f83446b70cd1625bc59b11e80390275a2f734f6e68d491fd34ee78d7863bf24c1ae6b0b43f7eadbfaf4e45d66e38d35585a7c326ffb7b6b87bfb6780ebdea3888f893610ea8ffba88b01f24f32c6fea6011a6e0b4e837c0d18316398b334ca41febb3252454b18d2d60951660c0933954a465df51e1f0f373200dece68f7204275b68c240fe7df0412932ddab566d9dc5c1ff9f8ed4b636fadc6f71acc226bb3b17e5b4221de66de743405990efed8d90c77bf3b5f83", 0xbb}, {&(0x7f0000000500)="bf7e65a866ca65071e0151e88b3cb1efc3771ce4d0708bc6fd5553d539d90db45f074e9e17ccde8edacfcb34a31e56fbe05a528243890a1c6e815170a6c23f40c31faff697444210d24cb2ff90967cbd0026f0bb0a8fa5f78c7fe464eefabddb832f0eae992dff956a6025b45b55b787bb3cecff700ef13de30f80e8fd50a1534c9964deea52c1b36fcd62cb28e8bf6836fdaf21d95b4b0984e06a5161e2d680d7037385c05e045213b80b7bb8f60ec6", 0xb0}], 0x4, 0x0, 0x0, 0x8000}, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x16, 0x1, 0x1ff, &(0x7f0000000040)}, 0x20) 21:30:56 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000440)=ANY=[@ANYBLOB="c660e547", @ANYBLOB="1d0100ff07000000000000ffffb8343cf3061f3afc07dd2a1a5d8b5b2c91bcecbdcbf07a90100906ca441a9454882a286234964ee18432f208dee49c257c1229e8a6ed677f05c8f1cb3326652476ed3431ac78409d6a0ec808f8e29763eda8eb00d9efab81f0f10e8ce700ca0f12de9b9379f4964e5d18d2aa2495e0cbd843a95ed66fdd8e06398a0c643d427baccae66df1674d1e27a332af02f6c2e329e1e9e1970422df9167b0cb7d063cc609e4758fa2d538617740cbe0dc8790663554b4c96a9883234a56887581cc5549b57ee1ed7d11f6c619000000000000000000"], 0x2}}, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) pread64(r1, &(0x7f0000000040)=""/18, 0x12, 0x159) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000580)=""/143, &(0x7f0000000340)=0xfee5) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) unshare(0x400) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x6, 0x1, 0x7}, 0x11) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r5, 0x4) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x0, 0x400000000000000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x1}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000002c0)={{0x89, @rand_addr=0x7f, 0x4e22, 0x2, 'ovf\x00', 0x20, 0x9, 0x7f}, {@loopback, 0x4e20, 0x0, 0x3, 0x1, 0x20}}, 0x44) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r7, 0xae80, 0x0) [ 267.454703][ T9693] Dev loop5: unable to read RDB block 1 21:30:57 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x0, 0x20}) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020662a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x5c0, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) [ 267.571475][ T9693] loop5: AHDI p2 21:30:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xd5, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @mcast1}, @gre_common_policy=[@IFLA_GRE_IFLAGS={0x8}], @gre_common_policy]}}}]}, 0x54}}, 0x0) 21:30:57 executing program 4: clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x22c05eaff8ba22d9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f00000005c0)=[{0x0}], 0x1}], 0x1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f00000001c0)='team0\x00') accept$netrom(r0, &(0x7f00000000c0)={{0x3, @netrom}, [@null, @rose, @rose, @rose, @bcast, @default, @rose, @default]}, &(0x7f0000000040)=0xffffff92) setresuid(0x0, 0x0, 0xee01) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0xb9f1957fbdbf6f7c, 0x60) exit(0x0) r2 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0xd, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x10, 0x10, 0x0, 0x0, 0x40000000}}) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000240)={0x0, @reserved}) r3 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x3f, 0x4000) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f0000000200)=0x100) preadv(r1, &(0x7f0000000500), 0x37d, 0x0) [ 267.639264][ T9693] loop5: partition table partially beyond EOD, truncated [ 267.732918][ T9714] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 21:30:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)) ioctl$TIOCPKT(r2, 0x5420, &(0x7f00000002c0)=0x3) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x488840, 0x0) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(0xffffffffffffffff, 0xc0845658, &(0x7f0000000300)={0x0, @bt={0x1c2e, 0x8000, 0x1, 0x2, 0xfff, 0xffff, 0xfffffffb, 0xfffffff8, 0x0, 0x7, 0x6, 0xe38, 0x6, 0x3, 0x1c, 0x28}}) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000802}, 0x20044000) read(r2, &(0x7f0000000040)=""/11, 0xb) r5 = syz_open_pts(r2, 0x0) r6 = dup3(r5, r2, 0x0) ioctl$TCSETA(r6, 0x5406, &(0x7f00000000c0)) 21:30:57 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$BLKPG(r0, 0x1269, 0x0) sched_setaffinity(0x0, 0x2fb, &(0x7f00000008c0)=0xa010000000000005) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SIOCX25GCAUSEDIAG(r0, 0x89e6, &(0x7f0000000040)={0x0, 0x20}) r1 = getpgrp(0x0) setpriority(0x0, r1, 0xffff) socket$isdn(0x22, 0x3, 0x25) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x40, 0x1) socket$inet6(0xa, 0x40000080806, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0xc020662a, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x5c0, 0x0) clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000440)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000600)='security.capability\x00'], &(0x7f0000000780)=[&(0x7f00000007c0)='\xd7\x06\xac>(\x10\xe0\xc1\xd9\xb6\x01\x97\x97\xe31\xd1\xe5\xebw-\xb7\xc3=\xb8|B\x12\xcbk\x92]\xc34;W\a\xdd[\x96\xbe\xcb\x9b\x8cDS\xa1\xd4H\x114\xc1f*W\x01r?+\x05\x8b\xa6G\xb8\x7fS\x0e\xbf\x06\x1f^\xa3zv\xc60\xa5\xd8\xe3\xee\x19p\x9aW]\xb5T\r\xbam\xd2\x9eR\f^f\xa5\xdb\xc5\xe2\xa3\x16\x1bs\xa3)_?\xc9\f\xa35\x10\xe2\xd4\x86\f\x91\xeeY9\t \xaf\xeb\xf3\xed/\x9c\xa9\x86\x95E\x98)\xcb1!T\xbc\x84=\x1feQ\xf9S\xd9\xbd`]\x16\xbf\x03\xb5Co\xacb,\xd3\xe6\xbf\x9a\xecN%\x9c\xbb\xb0\x98\xf0\x93PG[\xeb\x92\xfd(\xd3\x96J\x14\xfc\x10\xff\tE\xcae\xe2\xce\x1cV|2Z\x19\x8d\xb7\x13\x9c\x9b\x04\xb9$\xfe\xd9', &(0x7f0000000740)='!\x00']) [ 267.845750][ T9693] Dev loop5: unable to read RDB block 1 [ 267.883559][ T9693] loop5: AHDI p2 [ 267.944592][ T9693] loop5: partition table partially beyond EOD, truncated [ 425.724645][ T1116] INFO: task syz-executor.3:9125 blocked for more than 143 seconds. [ 425.732908][ T1116] Not tainted 5.5.0-rc1-next-20191213-syzkaller #0 [ 425.739971][ T1116] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 425.748783][ T1116] syz-executor.3 D24280 9125 1 0x00004004 [ 425.755180][ T1116] Call Trace: [ 425.758587][ T1116] __schedule+0x934/0x1f90 [ 425.763016][ T1116] ? __sched_text_start+0x8/0x8 [ 425.768053][ T1116] ? _raw_spin_unlock_irq+0x23/0x80 [ 425.773258][ T1116] ? _raw_spin_unlock_irq+0x23/0x80 [ 425.779173][ T1116] ? lockdep_hardirqs_on+0x421/0x5e0 [ 425.784634][ T1116] schedule+0xdc/0x2b0 [ 425.788707][ T1116] rwsem_down_write_slowpath+0x6e8/0xf80 [ 425.794327][ T1116] ? up_write+0x490/0x490 [ 425.798698][ T1116] ? mark_held_locks+0xf0/0xf0 [ 425.803471][ T1116] ? lock_acquire+0x190/0x410 [ 425.808843][ T1116] ? vfs_unlink+0xd5/0x620 [ 425.813288][ T1116] down_write+0x13c/0x150 [ 425.817665][ T1116] ? down_write+0x13c/0x150 [ 425.822173][ T1116] ? down_write_killable_nested+0x170/0x170 [ 425.828186][ T1116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.834483][ T1116] ? may_delete+0x417/0x5f0 [ 425.839063][ T1116] vfs_unlink+0xd5/0x620 [ 425.843290][ T1116] do_unlinkat+0x3f7/0x6d0 [ 425.847744][ T1116] ? __ia32_sys_rmdir+0x40/0x40 [ 425.852593][ T1116] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 425.858881][ T1116] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 425.865181][ T1116] ? getname_flags+0x277/0x5b0 [ 425.869938][ T1116] __x64_sys_unlink+0x42/0x50 [ 425.874724][ T1116] do_syscall_64+0xfa/0x790 [ 425.879272][ T1116] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 425.885450][ T1116] RIP: 0033:0x45a657 [ 425.889345][ T1116] Code: 8d ac 24 00 10 00 00 48 8b 59 20 48 85 db 75 67 48 8b b4 24 20 10 00 00 8b 8c 24 28 10 00 00 48 89 e7 f3 a4 48 8b 94 24 18 10 <00> 00 ff 12 48 8b 94 24 10 10 00 00 48 8b bc 24 20 10 00 00 8b 8c [ 425.909591][ T1116] RSP: 002b:00007fff281bd818 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 425.918632][ T1116] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000045a657 [ 425.926671][ T1116] RDX: 00007fff281bd830 RSI: 00007fff281bd830 RDI: 00007fff281bd8c0 [ 425.934676][ T1116] RBP: 0000000000000040 R08: 0000000000000000 R09: 0000000000000008 [ 425.942642][ T1116] R10: 0000000000000003 R11: 0000000000000246 R12: 00007fff281be950 [ 425.950645][ T1116] R13: 0000000001547940 R14: 0000000000000000 R15: 00007fff281be950 [ 425.958667][ T1116] [ 425.958667][ T1116] Showing all locks held in the system: [ 425.966483][ T1116] 3 locks held by kworker/u4:1/21: [ 425.971582][ T1116] #0: ffff8880ae837518 (&rq->lock){-.-.}, at: newidle_balance+0xa28/0xe80 [ 425.980275][ T1116] #1: ffffffff899afa00 (rcu_read_lock){....}, at: __update_idle_core+0x45/0x3f0 [ 425.989427][ T1116] #2: ffff8880ae827418 (&base->lock){-.-.}, at: lock_timer_base+0x56/0x1b0 [ 425.998374][ T1116] 1 lock held by khungtaskd/1116: [ 426.003385][ T1116] #0: ffffffff899afa00 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x279 [ 426.012747][ T1116] 1 lock held by rsyslogd/8987: [ 426.017618][ T1116] #0: ffff88809ac31420 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 426.027051][ T1116] 2 locks held by getty/9077: [ 426.031724][ T1116] #0: ffff88809e893090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.041301][ T1116] #1: ffffc9000177b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.051043][ T1116] 2 locks held by getty/9078: [ 426.055743][ T1116] #0: ffff88809cbce090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.064742][ T1116] #1: ffffc9000178b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.074304][ T1116] 2 locks held by getty/9079: [ 426.079013][ T1116] #0: ffff8880974c6090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.087996][ T1116] #1: ffffc9000174b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.097572][ T1116] 2 locks held by getty/9080: [ 426.102233][ T1116] #0: ffff8880977bb090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.111211][ T1116] #1: ffffc9000173b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.120811][ T1116] 2 locks held by getty/9081: [ 426.125522][ T1116] #0: ffff8880a0b2d090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.135337][ T1116] #1: ffffc9000176b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.144967][ T1116] 2 locks held by getty/9082: [ 426.149637][ T1116] #0: ffff8880a313f090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.158740][ T1116] #1: ffffc9000170b2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.168805][ T1116] 2 locks held by getty/9083: [ 426.173458][ T1116] #0: ffff8880a8172090 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 426.182424][ T1116] #1: ffffc900016cb2e0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x220/0x1bf0 [ 426.192048][ T1116] 3 locks held by syz-executor.3/9125: [ 426.197564][ T1116] #0: ffff8880990c0428 (sb_writers#3){.+.+}, at: mnt_want_write+0x3f/0xc0 [ 426.206229][ T1116] #1: ffff888092ffc448 (&type->i_mutex_dir_key#3/1){+.+.}, at: do_unlinkat+0x29f/0x6d0 [ 426.216034][ T1116] #2: ffff8880a1b6c6c8 (&sb->s_type->i_mutex_key#11){++++}, at: vfs_unlink+0xd5/0x620 [ 426.225749][ T1116] 2 locks held by syz-executor.3/9652: [ 426.231232][ T1116] #0: ffff8880990c0428 (sb_writers#3){.+.+}, at: vfs_write+0x485/0x5d0 [ 426.239673][ T1116] #1: ffff8880a1b6c6c8 (&sb->s_type->i_mutex_key#11){++++}, at: ext4_buffered_write_iter+0xba/0x460 [ 426.251110][ T1116] [ 426.253425][ T1116] ============================================= [ 426.253425][ T1116] [ 426.261857][ T1116] NMI backtrace for cpu 1 [ 426.266233][ T1116] CPU: 1 PID: 1116 Comm: khungtaskd Not tainted 5.5.0-rc1-next-20191213-syzkaller #0 [ 426.275790][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.285838][ T1116] Call Trace: [ 426.289204][ T1116] dump_stack+0x197/0x210 [ 426.293519][ T1116] nmi_cpu_backtrace.cold+0x70/0xb2 [ 426.298755][ T1116] ? vprintk_func+0x86/0x189 [ 426.303376][ T1116] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 426.308993][ T1116] nmi_trigger_cpumask_backtrace+0x23b/0x28b [ 426.314969][ T1116] arch_trigger_cpumask_backtrace+0x14/0x20 [ 426.320850][ T1116] watchdog+0xdf1/0x14e0 [ 426.325153][ T1116] kthread+0x361/0x430 [ 426.329211][ T1116] ? reset_hung_task_detector+0x30/0x30 [ 426.334743][ T1116] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 426.340455][ T1116] ret_from_fork+0x24/0x30 [ 426.344964][ T1116] Sending NMI from CPU 1 to CPUs 0: [ 426.350278][ C0] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0xe/0x10 [ 426.351985][ T1116] Kernel panic - not syncing: hung_task: blocked tasks [ 426.365422][ T1116] CPU: 1 PID: 1116 Comm: khungtaskd Not tainted 5.5.0-rc1-next-20191213-syzkaller #0 [ 426.374872][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.384928][ T1116] Call Trace: [ 426.388218][ T1116] dump_stack+0x197/0x210 [ 426.392601][ T1116] panic+0x2e3/0x75c [ 426.396487][ T1116] ? add_taint.cold+0x16/0x16 [ 426.401153][ T1116] ? lapic_can_unplug_cpu.cold+0x3a/0x3a [ 426.406785][ T1116] ? ___preempt_schedule+0x16/0x18 [ 426.411886][ T1116] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 426.418021][ T1116] ? nmi_trigger_cpumask_backtrace+0x24c/0x28b [ 426.424195][ T1116] ? nmi_trigger_cpumask_backtrace+0x256/0x28b [ 426.430332][ T1116] ? nmi_trigger_cpumask_backtrace+0x21b/0x28b [ 426.436481][ T1116] watchdog+0xe02/0x14e0 [ 426.440718][ T1116] kthread+0x361/0x430 [ 426.444778][ T1116] ? reset_hung_task_detector+0x30/0x30 [ 426.450309][ T1116] ? kthread_mod_delayed_work+0x1f0/0x1f0 [ 426.456036][ T1116] ret_from_fork+0x24/0x30 [ 426.462077][ T1116] Kernel Offset: disabled [ 426.466412][ T1116] Rebooting in 86400 seconds..