Warning: Permanently added '10.128.0.186' (ECDSA) to the list of known hosts. [ 43.956767] random: sshd: uninitialized urandom read (32 bytes read) 2019/09/29 07:01:54 fuzzer started [ 44.149342] audit: type=1400 audit(1569740514.639:36): avc: denied { map } for pid=6974 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 44.915261] random: cc1: uninitialized urandom read (8 bytes read) 2019/09/29 07:01:56 dialing manager at 10.128.0.105:41351 2019/09/29 07:01:56 syscalls: 2473 2019/09/29 07:01:56 code coverage: enabled 2019/09/29 07:01:56 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/09/29 07:01:56 extra coverage: extra coverage is not supported by the kernel 2019/09/29 07:01:56 setuid sandbox: enabled 2019/09/29 07:01:56 namespace sandbox: enabled 2019/09/29 07:01:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/29 07:01:56 fault injection: enabled 2019/09/29 07:01:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/29 07:01:56 net packet injection: enabled 2019/09/29 07:01:56 net device setup: enabled [ 47.311715] random: crng init done 07:03:58 executing program 5: lsetxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) removexattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00') r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x880, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000180)='hfsplus\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x2, 0x5, &(0x7f00000005c0)=[{&(0x7f0000000200)="05e56d5df922020e9d5b4fb28f5aaca55fcbe6d7ac4122560b4bd7d28f4534e9b9695c8403406a288b99afc834e8ba0a7b209cfbe2c751a8f86f13337d971e6713f68e05a5a6cebbaf79d9c7d964fa662f6c412868fe9e96524418563897a817c5cb4d78342d7167119aa51b873a49295b2908d5b091eba4d127e1387931a9c6461a971e10b2ca4f2cdd2644acf2ebf65789eb27746441a3c602752cd7388dab2bb09ceb133ed01bd05c72f6bdfa504d569dbdde10121574c2591d74f216985898e3185b73a2e800a62ab07bb0926a0d531bd0a8fee3268a7d852c7112ad527f9138285958be354c6f3c18", 0xeb, 0x9}, {&(0x7f0000000300)="3fb9c5ef090956d564331a06da87441664a46e2fb532b87ea274b50eec34f0cca8e01dea941d158c8b7a776b8c7ddc83dc4b9b79c2aa4738db9d9dbfcd9bd3c61e74c2c7637dbd96e7beb92eaf53c552a2044284fc376ea4bd08c626d745c2c689716933cf4de8f1c85d9bd5e0885bccb657fd53e93be255ca4522ff42a7a38f23f9a65938a2dd29e6f98dd399a2fc6a52f8de3f9698ac4683", 0x99, 0x3}, {&(0x7f00000003c0)="bb5f0708dbeee5e878d504c5d0da633c03a621bdb71cd1d04a1aadcc1259787d26bb8f9e1c9127aa820b3cdeb9f0fc262e8ecde8faf291c80399c9f2a90d38233b137fc0ddfd42fb5af7c26e50d7475df7f49b209c4488bb63bd5a2857a8600a66542f14846e37599fe8eb55f6b47606cddd159dcb9fb5b9a4d0d878f596e5bb558637704c9ce6023f480d1d1cc1bcd5566fde040439a327b3200e83bcd6769b839bae290833867290c1778af27c2f374b20226f35cef095eb3118225495022c4f6cf14f379716e236813e1c12dc2b2f2382936c426ca837a458b8477a405342a3", 0xe1, 0x895}, {&(0x7f00000004c0)="56e9fb10ff1327391182c33b8cf11be148de14c3986634c030e88e08bf790091a61df0b11fe76105d6c38b67beaf5139ff2c0047a4656ca5bf530960ea2682b155e3d824c6f55ae901052e2bccc50a458608141a05fbdf20b88dcb1a72017dca72b8f027cf424bc64a0f09da683f07e9ae64a76132856c59ddc46247fee73bf5e7d38259fdf67a930030", 0x8a, 0x4}, {&(0x7f0000000580)="a24c5133e5deef2b118df9d22d97e671d08d79fe16c8292070f2c7977df0da782b6fdc8d7d5553048e81becf98c6cd61034e0f9ff5dc5ae3757770", 0x3b, 0x1}], 0x2, &(0x7f0000000700)={[{@barrier='barrier'}, {@nobarrier='nobarrier'}, {@nls={'nls', 0x3d, 'macturkish'}}, {@creator={'creator', 0x3d, "98ab66d1"}}, {@creator={'creator', 0x3d, "15b856eb"}}, {@barrier='barrier'}, {@gid={'gid', 0x3d, r1}}], [{@obj_user={'obj_user', 0x3d, '/dev/zero\x00'}}, {@subj_user={'subj_user', 0x3d, 'proc\xf1-md5sumsvmnet1'}}]}) setxattr$trusted_overlay_redirect(&(0x7f00000007c0)='./file0/../file0\x00', &(0x7f0000000800)='trusted.overlay.redirect\x00', &(0x7f0000000840)='./file0/../file0\x00', 0x11, 0x1) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000880)={0xe43d, 0x0, 0x1, 0x7}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000008c0)={r2, 0x7fff}) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000900)) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000940)=""/138, 0x8a, 0x20, &(0x7f0000000a00)={0xa, 0x4e22, 0x3, @remote, 0x9}, 0x1c) lsetxattr$trusted_overlay_nlink(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='trusted.overlay.nlink\x00', &(0x7f0000000ac0)={'L+', 0xffffffffffff8000}, 0x28, 0x3) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/sequencer\x00', 0x80000, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000b40)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x101, @default, @netrom={'nr', 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f0000000bc0)="0ed8ff43ed4571612c7eac55c09f811a3cf247cc3b68e58e5064be24ce4f0bd421f40d4f9646236c7fd4455464cd9e269fd0b6d28ef8f0537d386847055c39451810dabd24bdd741cce32188d493a25adbca706194826a8381ef8684baa06bef0d857a6ff9ad36e5df70492da79cbcf3ec9de6a0be0a074459f98c9efe305097de69b9443420172da0b2a1a57844f9bbd06c49d27e667c195a805914c9eaebe06612f5d9a1871edebd24c657fa1244b045a46e60e26b54b63715587936684280a6d7f301d8e09810f91b2e2878eec3d3b1a55340dbf73a519115245d83dac2a762614eef882521341c5520") ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000000cc0)) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000d00)='/selinux/context\x00', 0x2, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000d40)='/dev/cec#\x00', 0x2, 0x2) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0xb0, r5, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x101}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xfe}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x65}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3f}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8804}, 0x4000010) r6 = syz_open_dev$usb(&(0x7f0000000f40)='/dev/bus/usb/00#/00#\x00', 0x800, 0x28a280) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000f80), 0x4) setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f0000000fc0)={0x7}, 0x4) setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000001000)=0x5293, 0x4) lsetxattr(&(0x7f0000001040)='./file0/../file0\x00', &(0x7f0000001080)=@random={'security.', '/dev/cec#\x00'}, &(0x7f00000010c0)='/selinux/context\x00', 0x11, 0x3) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001100)={0x0, 0x6, 0x5, 0x8000}, 0x10) r7 = syz_open_dev$dspn(&(0x7f0000001140)='/dev/dsp#\x00', 0xb6, 0x40081) ioctl$EVIOCGABS3F(r7, 0x8018457f, &(0x7f0000001180)=""/113) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001200)='/dev/hwrng\x00', 0x101000, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001280)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r8, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x3094010b}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x20, r9, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x1) 07:03:58 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x8000, 0x7fff, 0x4, 0xffff}, 0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0xffff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r1, 0x4) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x6}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000200)={r3, 0xc82e}, &(0x7f0000000240)=0x8) r4 = socket$inet(0x2, 0x800, 0x5) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000280)=""/18, &(0x7f00000002c0)=0x12) socket$isdn_base(0x22, 0x3, 0x0) r5 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/user\x00', 0x2, 0x0) r6 = fcntl$dupfd(r5, 0x406, 0xffffffffffffffff) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f0000000380)={0xd000, 0xca1f4f4c084735de, 0x48, 0x6, 0x5}) openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self\x00', 0x101080, 0x0) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x1, 0x80, 0x7, 0x6}, {0x4, 0x1f, 0x1, 0x1000}]}) keyctl$join(0x1, &(0x7f0000000480)={'syz', 0x2}) r8 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dlm-control\x00', 0x100, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000500)={r3, 0x5, 0x40, 0x22}, &(0x7f0000000540)=0x10) r9 = socket$inet6_sctp(0xa, 0x4, 0x84) sendto$inet6(r9, &(0x7f0000000580)="39964fcc9d65047b8f0e14ab92f6f1710dd9432e23c99937baacb9bdc16779efd1b17c06e26ac03d43691bde6cdabe72569b0ed1d8f086b717e883b4e13130bd00d1df2bcf08bc840bc27300490fe53a1f4253b650b037665c6e39d1a68717a24c71c23241c1ff7efbb7192c2558380124f54b5ee491dd00024360e46bc377625e3f5e158d5d4f50168fcc7611f5d0c146da754b474be4bfb1d002fb85fea98499f7d235add65b16f426be87e840a5fad7436346d0f0bf40c1274dd9373fa2e25955d181169090b86c8b25ccdd0967de7fb2924e", 0xd4, 0x40000, 0x0, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000680)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000006c0)={0x1, 0x2, 0x8, 0x5, r10}) r11 = openat$audio(0xffffffffffffff9c, &(0x7f0000000700)='/dev/audio\x00', 0x220001, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r11, 0x10e, 0x2, &(0x7f0000000740)=0x1a, 0x4) r12 = syz_open_procfs(0x0, &(0x7f0000000780)='net/hci\x00') ioctl$UI_BEGIN_FF_ERASE(r12, 0xc00c55ca, &(0x7f00000007c0)={0xa, 0x0, 0x2}) r13 = accept4(r12, &(0x7f0000000800)=@l2, &(0x7f0000000880)=0x80, 0x0) accept$inet6(r13, &(0x7f00000008c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000900)=0x1c) r14 = syz_open_dev$amidi(&(0x7f0000000940)='/dev/amidi#\x00', 0x799, 0x88000) write$capi20(r14, &(0x7f0000000980)={0x10, 0x7fff, 0x87, 0x41, 0x10, 0x100}, 0x10) 07:03:58 executing program 3: r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6(0xa, 0x400, 0x7f) accept4$inet6(r1, 0x0, &(0x7f0000000040), 0x180800) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0xa0200, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) fcntl$addseals(r2, 0x409, 0x4) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x6, 0x2000) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000180)=0x4) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x92f5e610fd742539) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x1000, "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"}, &(0x7f0000001240)=0x1008) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000001280)={r6, 0x8}, 0x8) r7 = syz_open_dev$sndpcmp(&(0x7f00000012c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x10000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000001340)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x24000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x24, r8, 0x10, 0x70bd2a, 0x25dfdbfd, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x87b}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4008081}, 0x40000) r9 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000001440)='/proc/capi/capi20ncci\x00', 0x1, 0x0) write$9p(r9, &(0x7f0000001480)="7441619a994c6696f76d11b133ffc8405f4512c55e36d336aff339fe570914c78f729890d90ed629e83a30ea38f635f3649e68b8a0eae9abddaff83366455e86a4f33bd65f42620bc40d", 0x4a) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001500)='/dev/vcs\x00', 0x40400, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f0000001540)=0x3) r11 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001580)='/dev/hwrng\x00', 0x383780, 0x0) getsockopt$bt_hci(r11, 0x0, 0x1, &(0x7f00000015c0)=""/91, &(0x7f0000001640)=0x5b) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r10, 0xc02c5341, &(0x7f0000001680)) r12 = accept$ax25(0xffffffffffffffff, &(0x7f0000001700)={{0x3, @null}, [@rose, @null, @rose, @default, @netrom, @null, @default, @default]}, &(0x7f0000001780)=0x48) sendmmsg$inet(r12, &(0x7f0000001cc0)=[{{&(0x7f00000017c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f00000019c0)=[{&(0x7f0000001800)="c0cd77dafb04016c524648a840b55493f029cb9f034d734f2b6318ae0fcc9041a657af8cb8a37714ac892d0a3ede4de74a087fe7161eae2a0a8aca68624e836704d3fdf5e8e698ecf5d18c7d39ac7ddb311a34a187076513150b504b1d8e", 0x5e}, {&(0x7f0000001880)="9791b28832e881fd445c40c66329e237556166c7414f85d83e3a9d3e820a4e31b3d2a78208c15a994b91de8c7fb92fac4f97d2fd36b4af93c5cecfcd569a7fca07683634a4dfa6a57f656870591b1bbe1e5c1adc8bb5700d2b3a97aa9c294fc0e463cf103f71e9f3a56f28c1f70041adf73e589f579cdc412fbea9f5db0db5501dff8e5d38467f127f1ed0b75b45de4a58589a5f3079ee3c622649673461814cb3f4c0e51ea97a87cf188b1fe751f688f12a7fb72cb474330bd2a4717ff6a33734aa2669a12633b26fe667", 0xcb}, {&(0x7f0000001980)="4c8cd9ea6100357b513746925a9a42adf964b8e494e849aedcbe58", 0x1b}], 0x3}}, {{&(0x7f0000001a00)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001c80)=[{&(0x7f0000001a40)="68379e5d7a13b9c088940920e2b70ea8c9ada0dfda6c7dca5328079d4651205926d668a5588d88ac41625c7a73511dca968766cf27af0ae12369549135a40e8df27825cc20c5a4bda98331357cf0f30ae1942b8c6eb57afaa2358baef46e34f2fdf84968f145a6588d041582eb6371caa3504b8612fb9e945c027784d0709798aafe2039624c7104b00ac91bcbf85b7c61d1a003f2d09eb192cfc5dd6fde29b19d74564a6e6723672b72bd5cbcf9352b6f16d7890adc95517104831e1d90c3e3e29fbcd83fff110a0306c407109cb4100b5324e1a3515d39b4af8a38ca78d2a0cdb9c0", 0xe3}, {&(0x7f0000001b40)="6cbf13c05d460c", 0x7}, {&(0x7f0000001b80)="5536963a0b601829f9f95ec6f7cbba68fa86249fc2aab24c5de3bb86dfc173d4241e8c314da3de59c4d607594b46d0bcb7953de185311b0a82f79f1b4acf7e2a9805244fef600c70c35f108685fd1b852ce50bcdd3faac00c90a01418606318cc69ff500fd3af94544b0e9444b8840", 0x6f}, {&(0x7f0000001c00)="b4c15805472c83d41d0dac39ca75b961222b9f47a70d1fcf549b5a299e0e09255b9ab8c6cd451664c3d11e1b02762429b84fe6b2e44402e6be79ae90c72b4ab86c1fcef939d4e537af6c83ef449221f78f72098cc43e44b7272d69e734cdd60b40274aef3f6462b1766d11c2ffeba5", 0x6f}], 0x4}}], 0x2, 0x80) r13 = socket$isdn(0x22, 0x3, 0x52) signalfd(r13, &(0x7f0000001d40)={0x6}, 0x8) io_setup(0x1ff, &(0x7f0000001d80)=0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000001dc0)={0xc, 0x9, 0x4, 0x4000, r10}) r16 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001e80)='/dev/mixer\x00', 0x149100, 0x0) r17 = openat$cgroup_procs(r2, &(0x7f0000001f00)='cgroup.procs\x00', 0x2, 0x0) r18 = socket(0x5, 0x5, 0x7f) r19 = openat$mixer(0xffffffffffffff9c, &(0x7f0000002180)='/dev/mixer\x00', 0x240, 0x0) r20 = accept$packet(0xffffffffffffffff, &(0x7f00000022c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002300)=0x14) io_submit(r14, 0x6, &(0x7f0000002400)=[&(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x80, r15, &(0x7f0000001e00)="b0896e5f1c7c0ab872f1539062d9c5dab21db3a845a1590d0eec45dd94b6416de7e908455c8bb9e3967c6cb2e999c464fc7013b6fb82da4ed0cbfb593109ebc84f8e2dd5d09a558a72635ecd92f04c", 0x4f, 0xf, 0x0, 0x2, r16}, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x6, 0x1, r17, &(0x7f0000001f40)="91dab2d71d21925223e8839c67d93546dda9", 0x12, 0xffffffff00000001, 0x0, 0x2, r5}, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x6, 0x16a, r5, &(0x7f0000001fc0)="b89a7345ae12a2f41c10c5dd9236c06911aac6e544ba171a39bdd838c790a8cc6efa9f6a6a85b881c6ba03b44c9dc6b3dd5bf9f189aec991da1f2f3d68fe7fce3900b70f5c15", 0x46, 0x2, 0x0, 0x3}, &(0x7f00000021c0)={0x0, 0x0, 0x0, 0x1, 0x9, r18, &(0x7f0000002080)="2bf67170f6dcc599b7487f03cfc508fd1f1aa23dc87df5c271fbb0ac7cfea7b96f94e44bf3130ed0b43db17768c4aae0c21773379de01c7577b0277d92dda42d9aa3ad96fec85ebd052197f5943c2fe9bbfd79bb4a19f02d99012aaa5462df1f80d3a215f9b42e3c3dd533ec24ff5fcf07749ac5b84ce4a4561a6bc84e532c061c2ca6207cf9ca0a1e43a00a09de7a86707f85d65c913481727753ff478368fc50a08541404d58a26733dc68d9e726cb0086cb44b778d2b252f0a956e80f4b80b321ef28563af1e13e7377b482eed368d640a7749c7dd2a4e1563d9021cd9b46ce701481355d69ed954306a52360d2f7ceb1cc80ffcb63f7", 0xf8, 0x40, 0x0, 0x0, r19}, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x7, 0x2, 0xffffffffffffffff, &(0x7f0000002200)="54922d192fe8417dd491555ea90e91aa030d7d73c1f5b3cb8a66026473b0b7ca02228bdc5f70957abca9294f27bc462c816c5ee20d30647f2af2fc050dc0e1dc05f72321800bd40ecbc97b2b8424bb0471f26e56c699088f7db9759b0140bfaec7010fa206356e91878b27d72cde1d4d787db39be39052a39211d8f9", 0x7c, 0x8, 0x0, 0x1, r3}, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x6, 0x2, r20, &(0x7f0000002340)="955c2f22137c591b126dfa3a8846ae85534a68b98d9882738cfefa3278622c122a2b9c6e1a42265dd4ae71915a726239378502c68666ab1fc31bd0913237f568e61943f3540c02520a84b5334d4dc51a1b670df0716001a9985c2449f4e8fba59a", 0x61, 0x6, 0x0, 0x2}]) 07:03:58 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000040)={0x0, 0x1e00, 0x400, &(0x7f0000000000)=0x7}) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000080)={0x96b27d5108baf098}) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x4000, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xab3c93f59928ad42, r1, 0x1, 0x7f, 0x6, @broadcast}, 0x14) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vga_arbiter\x00', 0x8c0, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000002c0)={0x20}, 0x4) r3 = getpgrp(0xffffffffffffffff) r4 = syz_open_procfs(r3, &(0x7f0000000300)='oom_score\x00') r5 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000340)='/proc/capi/capi20ncci\x00', 0x64800, 0x0) write$P9_RREMOVE(r5, &(0x7f0000000380)={0x7, 0x7b, 0x1}, 0x7) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x400, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0x80087601, &(0x7f0000000400)) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000480)={0x7, &(0x7f0000000440)=[0x0, 0x0, 0x7a2, 0x8000, 0xc3, 0x9, 0x3ff]}) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f00000004c0)=0x0) sched_setparam(r7, &(0x7f0000000500)=0x6) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='memory.swap.current\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r8, 0x6, 0x1, &(0x7f0000000580)={0xd2, 0x7, 0x3, 0x2, 0x1, 0x0, 0x7}, 0xc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_open_dev$sndseq(&(0x7f00000005c0)='/dev/snd/seq\x00', 0x0, 0x20002) ioctl$EXT4_IOC_MOVE_EXT(r9, 0xc028660f, &(0x7f0000000600)={0x0, r10, 0x61c, 0x100000001, 0x7, 0x3}) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000640)={0x3, 0x2, 0x8, 0x7}, 0x6) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000680)) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r11 = syz_open_dev$vcsa(&(0x7f00000006c0)='/dev/vcsa#\x00', 0x1b1, 0x200000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r11, 0xc08c5335, &(0x7f0000000700)={0xc00000, 0x6, 0x8001, 'queue0\x00', 0x7}) r12 = open(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0) sendto$inet6(r12, &(0x7f0000000800)="14b128c2ef6576f19d4ba6fe673299bee68abcb5e7f2a9f7172797187604e838b96f4aa8c8e6d149f6c29491ba38a50a5896d3c97fcd624db870b2ec89089fc9a0123d9a194b077f53877c53d3c8176ecb0250f2ef94794a02c0a6282c0887ac2bda6cbc3eaadff0b5ac49d7d36e82f563e7b4e2f5675e35fe370943f2e5dfc0aaccaed615c4dfb0dfa7", 0x8a, 0x9ef87010123fe645, 0x0, 0x0) [ 168.145903] audit: type=1400 audit(1569740638.639:37): avc: denied { map } for pid=6974 comm="syz-fuzzer" path="/root/syzkaller-shm076018895" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 07:03:58 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x88840, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x80, 0x204, 0x8, 0x5, r1}, &(0x7f0000000180)=0x10) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video35\x00', 0x2, 0x0) fadvise64(r2, 0x4, 0x0, 0x2) r3 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x8000, 0x0) write$uinput_user_dev(r3, &(0x7f0000000240)={'syz0\x00', {0x1480, 0x3, 0x7, 0x401}, 0x2b, [0x5a42d107, 0x0, 0x1, 0x2, 0x7, 0xd3f, 0x4, 0x1, 0x7c44, 0x200, 0xffff, 0x7fffffff, 0x3, 0x162, 0x1, 0x3ff, 0x9, 0x9, 0x1ff, 0x7, 0xaa2e, 0x5, 0x3c, 0x8, 0x7, 0x2, 0xfffffff7, 0x81, 0x7f, 0x1, 0x81, 0x20, 0x5, 0x5, 0x3ff, 0x38e, 0x80000000, 0x7f, 0x7ff, 0x6741, 0x2, 0x94, 0x6, 0x1, 0x8, 0xffffae95, 0x8, 0x2, 0x6, 0x3, 0x5, 0x2, 0x5, 0x442, 0x81, 0x1a1, 0x10001, 0x4ce, 0x9, 0xc0000, 0xd3, 0x2, 0x98, 0x2], [0x0, 0x8, 0x8, 0xee, 0xa9c7, 0x8, 0x3, 0x2, 0x0, 0x1, 0x80, 0x5f82, 0x7f, 0xff, 0xa90, 0x5, 0x9, 0xab, 0x9, 0x0, 0x74, 0x5, 0x1, 0x101, 0x4d7, 0x2, 0x200, 0x1, 0x7, 0x5ae, 0x2, 0x4, 0x0, 0x80, 0xff, 0x4, 0x4, 0x4, 0x0, 0x11c, 0x4, 0x5, 0x27, 0x0, 0x5, 0x1, 0x0, 0x1, 0x2, 0x8, 0xed, 0x56a, 0x5, 0x9, 0x4dc, 0x2, 0x3, 0xe5f8, 0x100, 0x1, 0x6, 0x1ff, 0x800, 0x3851], [0x9, 0x4, 0x3, 0x8, 0x0, 0xfffffff7, 0x3, 0x2, 0x4, 0xba, 0x5, 0x80000000, 0x1, 0x80, 0x800, 0x100, 0x6d3a, 0x6, 0x3f, 0x9, 0xb8d, 0x7, 0x7, 0x8, 0x9, 0x9, 0x4e, 0x3c, 0x0, 0x10001, 0x7fffffff, 0x7, 0x3, 0x7a, 0x2, 0x101, 0x0, 0xff, 0xffffffc0, 0x8, 0x0, 0x20, 0x4, 0x6, 0x5, 0x1, 0x4, 0x3, 0x4, 0x79d, 0x80000001, 0x5, 0x1f, 0x101, 0x8, 0x6, 0xfffffffd, 0x0, 0x1, 0x8, 0x0, 0x195a, 0x200, 0x4], [0x3d, 0x7, 0x9, 0x3, 0x8000, 0x0, 0x6, 0x5, 0x101, 0x10000, 0x80000000, 0x0, 0x81, 0xffffffe0, 0x1ff, 0x9, 0x5e, 0x25c4, 0x2, 0x3ac, 0x0, 0x80000001, 0x0, 0x8, 0x7, 0x8000, 0x9, 0x0, 0x3, 0x0, 0x6578, 0x80000000, 0x8, 0xf3f, 0xf09, 0x8, 0x7ff, 0xd8e, 0x6, 0x1000, 0x7, 0x6, 0x597c, 0x40, 0x1f, 0x100, 0xd060, 0x1, 0x200, 0x2, 0xfffffff9, 0x3, 0x80000001, 0x7, 0x80000001, 0x40, 0xc9, 0x7, 0xfffff636, 0x6, 0x5, 0x5, 0x4, 0x1]}, 0x45c) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000006c0), &(0x7f0000000700)=0x2) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='memory.stat\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r4, 0xc0285628, &(0x7f00000007c0)={0x0, 0x7fffffff, 0xfffffffe, [], &(0x7f0000000780)=0x1}) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f0000000800)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000840)={r1, 0x20, 0x1000, "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"}, 0x1008) pause() ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x19) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000001880)={0x30d, 0x0, {0x3, 0x0, 0x80, 0x0, 0x6}}) ioctl$VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000001900)={0x100, 0x8, 0x4, 0x10000, {}, {0x1, 0xe, 0x3d, 0x7, 0x3f, 0x9, "a70d4eef"}, 0x7, 0x1, @fd, 0x4}) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001980)='/dev/sequencer\x00', 0x200401, 0x0) ioctl$UI_BEGIN_FF_ERASE(r5, 0xc00c55ca, &(0x7f00000019c0)={0xa, 0xd5, 0x7}) r6 = dup3(0xffffffffffffffff, r2, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001a00)={r1, 0x7e, "1ac8415207d1625d95d75b42953cb4d13d6b66a58c33ca33b7dff6ad3456a9b45a96220b1000d3e7f54c08eb67ba092b22dd9c0bd1484e3959de6b84633e3efc05cb3d86577f818be06bf2336bb5e9d99d6c0c83963a54601d94cda7d6fbe97a1e719195c897b3619e4bd1778527286d9e0d38a45bb8f137d5902e52c749"}, &(0x7f0000001ac0)=0x86) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000001b00)={r7, 0x101}, 0x8) link(&(0x7f0000001b40)='./file0\x00', &(0x7f0000001b80)='./file0\x00') r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001bc0)='/dev/snapshot\x00', 0x0, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000001c00)=0x1, 0x4) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000001c40)) r9 = syz_open_procfs(0x0, &(0x7f0000001c80)='mounts\x00') ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f0000001cc0)=0x2) perf_event_open(&(0x7f0000001d40)={0x1, 0x70, 0x1, 0xff, 0xff, 0x81, 0x0, 0x81, 0x10040, 0x4, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000001d00), 0x2}, 0x41014, 0x1, 0xffff0001, 0x4, 0xffff, 0x6, 0x1f}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x7) syz_open_dev$audion(&(0x7f0000001dc0)='/dev/audio#\x00', 0x5, 0x120000) r10 = syz_open_dev$vcsa(&(0x7f0000001e00)='/dev/vcsa#\x00', 0x0, 0x400801) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000001e40)={@empty, 0x0}, &(0x7f0000001e80)=0x14) setsockopt$inet6_mreq(r10, 0x29, 0x15, &(0x7f0000001ec0)={@mcast2, r11}, 0x14) 07:03:58 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x80, 0x0) write$P9_RAUTH(r0, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x794c91d759099075, 0x4, 0x6}}, 0x14) alarm(0x7) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x0, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f00000000c0)=""/113, &(0x7f0000000140)=0x71) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x5c100, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r2, 0xc034564b, &(0x7f00000001c0)={0x100, 0x30314142, 0x4, 0x7, 0x4, @discrete={0x6, 0x6}}) r3 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x8, 0x1) ioctl$PPPIOCGNPMODE(r3, 0xc008744c, &(0x7f0000000240)={0x3d, 0x1}) fstat(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000380)) setreuid(r4, r6) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r7, 0xc0845657, &(0x7f0000000400)={0x0, @bt={0x5e, 0x0, 0x1, 0x3, 0x8001, 0x5, 0xa64c, 0x20, 0x5, 0x4, 0xba, 0x8, 0x6, 0x1748, 0x4, 0x40}}) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$IMGETDEVINFO(r8, 0x80044944, &(0x7f0000000500)={0x4}) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)={0x0, 0x0}) fcntl$setown(r9, 0x8, r10) r11 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000600), &(0x7f0000000680)=0x60, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r11, 0xc080661a, &(0x7f00000006c0)={{0x1, 0x0, @reserved="1abdd6cd3a790ec8916d6bf9e29cc6d2c5182896fea9263dbf862ef5d0873f9d"}}) r12 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x9, 0x880) write$selinux_create(r12, &(0x7f0000000780)=@access={'system_u:object_r:checkpolicy_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x49f}, 0x4d) fadvise64(0xffffffffffffffff, 0x0, 0x7, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000800)='/dev/autofs\x00', 0x40000, 0x0) r13 = semget$private(0x0, 0x1, 0x80) semctl$GETVAL(r13, 0x3, 0xc, &(0x7f0000000840)=""/74) r14 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r14, 0x5411, &(0x7f00000008c0)) r15 = msgget(0x0, 0x8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000a00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000b40)=0xe8) lstat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000c40)=0x0) msgctl$IPC_SET(r15, 0x1, &(0x7f0000000c80)={{0x10000, r16, r5, r17, r18, 0x0, 0x7}, 0x1, 0x0, 0x8, 0x878, 0x5, 0x200, 0xffffffffffffffff, r19}) [ 168.190166] audit: type=1400 audit(1569740638.669:38): avc: denied { map } for pid=6992 comm="syz-executor.2" path="/sys/kernel/debug/kcov" dev="debugfs" ino=13793 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 168.371690] IPVS: ftp: loaded support on port[0] = 21 [ 169.192255] IPVS: ftp: loaded support on port[0] = 21 [ 169.199638] chnl_net:caif_netlink_parms(): no params data found [ 169.246430] IPVS: ftp: loaded support on port[0] = 21 [ 169.284234] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.291393] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.298392] device bridge_slave_0 entered promiscuous mode [ 169.307397] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.314093] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.321217] device bridge_slave_1 entered promiscuous mode [ 169.357891] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.368560] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.382811] chnl_net:caif_netlink_parms(): no params data found [ 169.408748] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.416474] team0: Port device team_slave_0 added [ 169.422093] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.429884] team0: Port device team_slave_1 added [ 169.431434] IPVS: ftp: loaded support on port[0] = 21 [ 169.435984] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.448182] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.512701] device hsr_slave_0 entered promiscuous mode [ 169.560517] device hsr_slave_1 entered promiscuous mode [ 169.611735] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.618111] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.625530] device bridge_slave_0 entered promiscuous mode [ 169.635533] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.641985] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.648978] device bridge_slave_1 entered promiscuous mode [ 169.655401] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 169.677618] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 169.697002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 169.708428] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 169.755119] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 169.763267] team0: Port device team_slave_0 added [ 169.763295] IPVS: ftp: loaded support on port[0] = 21 [ 169.785509] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 169.792857] team0: Port device team_slave_1 added [ 169.801711] chnl_net:caif_netlink_parms(): no params data found [ 169.813351] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 169.830870] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.837338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.844891] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.851374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.861487] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 169.922096] device hsr_slave_0 entered promiscuous mode [ 169.960321] device hsr_slave_1 entered promiscuous mode [ 170.001361] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 170.008558] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 170.086262] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.093884] IPVS: ftp: loaded support on port[0] = 21 [ 170.094913] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.106285] device bridge_slave_0 entered promiscuous mode [ 170.118713] chnl_net:caif_netlink_parms(): no params data found [ 170.132430] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.139031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.145785] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.152176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.161853] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.168365] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.176885] device bridge_slave_1 entered promiscuous mode [ 170.242098] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.251047] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.258224] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.265374] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.296270] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.306931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.367914] chnl_net:caif_netlink_parms(): no params data found [ 170.383759] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.390643] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.397948] device bridge_slave_0 entered promiscuous mode [ 170.405030] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.413453] team0: Port device team_slave_0 added [ 170.419328] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.426504] team0: Port device team_slave_1 added [ 170.442097] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.448454] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.455908] device bridge_slave_1 entered promiscuous mode [ 170.462282] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.487029] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.498226] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.525593] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.593345] device hsr_slave_0 entered promiscuous mode [ 170.630537] device hsr_slave_1 entered promiscuous mode [ 170.683991] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.690910] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.697812] device bridge_slave_0 entered promiscuous mode [ 170.704627] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 170.716148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.760279] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 170.767438] team0: Port device team_slave_0 added [ 170.772865] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.779304] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.786813] device bridge_slave_1 entered promiscuous mode [ 170.793286] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 170.804204] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.815091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.822421] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 170.829678] team0: Port device team_slave_1 added [ 170.843080] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.852301] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 170.860742] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 170.875858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.884877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.892859] chnl_net:caif_netlink_parms(): no params data found [ 170.902585] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 170.914728] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 170.924071] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 170.933597] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 170.958915] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 170.967075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 170.977991] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.984290] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.992192] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 170.998276] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.017703] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.027043] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.036559] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 171.067710] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.076195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.084307] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.091082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.098251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 171.107238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 171.115139] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.121560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.183752] device hsr_slave_0 entered promiscuous mode [ 171.220537] device hsr_slave_1 entered promiscuous mode [ 171.281064] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 171.288262] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 171.298268] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.306651] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.314938] team0: Port device team_slave_0 added [ 171.320588] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.327643] team0: Port device team_slave_1 added [ 171.335754] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.342400] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.349578] device bridge_slave_0 entered promiscuous mode [ 171.357174] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.365978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.373851] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.380233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.391691] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 171.402072] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.410448] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.416887] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.424613] device bridge_slave_1 entered promiscuous mode [ 171.444737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 171.452927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 171.460729] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.467107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.475582] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.485617] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.543754] device hsr_slave_0 entered promiscuous mode [ 171.590563] device hsr_slave_1 entered promiscuous mode [ 171.632307] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 171.640482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.650770] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.659470] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.668520] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 171.676479] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 171.686766] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 171.695313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.703157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 171.712051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.720444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.728171] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.740325] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 171.755078] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.764257] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 171.788049] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 171.796259] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 171.804810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 171.815108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 171.824519] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 171.836906] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 171.845043] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 171.852352] team0: Port device team_slave_0 added [ 171.858409] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 171.866549] team0: Port device team_slave_1 added [ 171.872740] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 171.883426] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 171.902073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 171.909824] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 171.919936] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 171.936595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.945940] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 172.003619] device hsr_slave_0 entered promiscuous mode [ 172.040753] device hsr_slave_1 entered promiscuous mode [ 172.082753] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 172.092769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.100828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.111040] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 172.118528] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.126223] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.135940] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 172.143407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.151180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.159088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.167079] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.177027] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 172.183223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.195172] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.207773] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 172.220766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.227688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.238084] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 172.246351] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 172.257407] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 172.266527] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 172.275515] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 172.285798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 172.293565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 172.303618] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 172.309687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 172.322899] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.329016] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.341189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.361911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.369840] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.381292] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 172.388697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.396920] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.405033] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.411453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.418931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.427542] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.436452] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.442851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.450418] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.466029] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.476950] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 172.487351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.505571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 172.516094] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 172.526756] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 172.536148] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 172.548532] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.556519] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 172.564790] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 172.573172] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.581627] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.588659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.596174] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.605953] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 172.614636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 172.622772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 172.630852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 172.641473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.648788] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.655445] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.664012] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 172.683128] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.696824] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 172.714751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 172.728972] audit: type=1400 audit(1569740643.219:39): avc: denied { create } for pid=7026 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 172.734149] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 172.764310] audit: type=1400 audit(1569740643.219:40): avc: denied { write } for pid=7026 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 172.771313] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.802503] audit: type=1400 audit(1569740643.219:41): avc: denied { read } for pid=7026 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 172.832969] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 172.843369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.849474] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.880948] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.888581] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.895088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.951129] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.959014] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.990514] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.996911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.012655] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.021903] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 173.029999] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.050011] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.058798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.071301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.090529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.098414] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.120727] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.127168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.153819] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.166037] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.175136] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.182803] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.183283] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.204252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.221773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.233976] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 173.255706] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 173.264282] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.279217] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.295132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.317609] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 173.331864] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.346853] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 07:04:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) dup3(r1, r2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x38) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) dup2(r0, r3) [ 173.374047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.401513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.421482] audit: type=1400 audit(1569740643.919:42): avc: denied { create } for pid=7051 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 173.451037] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.460883] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 173.475120] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 173.495588] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.518386] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 173.527172] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 173.542312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.561314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.569132] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.590759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.599345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.629550] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.646495] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.663412] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.698556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 173.726586] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 173.741210] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.755802] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.763419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.775519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.783932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.796830] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready 07:04:04 executing program 3: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$VFIO_SET_IOMMU(r0, 0x3b66, 0x5) r1 = timerfd_create(0x5, 0x800) ppoll(&(0x7f0000000300)=[{r1}], 0x1, &(0x7f0000000340)={0x0, 0x1c9c380}, 0x0, 0x0) [ 173.807169] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.838207] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 173.849678] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.875324] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 173.886838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.902412] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.916964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.926900] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.940992] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 173.956297] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 173.966602] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 07:04:04 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f0000000080)=0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) [ 173.982527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.997246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.024933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 174.046141] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 174.065391] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.071864] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.084310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 174.105328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.114592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 174.130825] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.138919] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.152541] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 174.172648] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.179235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.196150] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.203235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 174.219610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 174.241224] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.248574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.262445] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready 07:04:04 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0xfe36, 0x200000000d8, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x200003) r1 = open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r1, 0xab04) setxattr$security_smack_transmute(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) [ 174.287119] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.314902] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.326531] audit: type=1804 audit(1569740644.819:43): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir564336485/syzkaller.5Em8P2/4/bus" dev="sda1" ino=16522 res=1 [ 174.336409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 174.376419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 174.393140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.404892] 8021q: adding VLAN 0 to HW filter on device batadv0 07:04:04 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000200), &(0x7f0000000240)=0x8) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x200000, 0x0) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f0000000180)=0x400) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00') r5 = dup(r3) sendfile(r5, r4, 0x0, 0x523) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) r6 = socket(0x10, 0x80002, 0x0) sendmsg(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="5500000018007f5300fe01b2a4a280930a60027affa84308910000003900080008000a00010000000000156f757284366a660006000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000", 0x55}], 0x1}, 0x0) [ 174.428823] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 174.444984] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready 07:04:05 executing program 5: r0 = getpid() sched_setattr(r0, 0x0, 0x0) sched_setparam(r0, 0x0) r1 = gettid() r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=0x0, @ANYBLOB="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"], 0x3}}, 0x44801) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004870000000000000bc700000000000009500000000000000e994d48069a5e565038e358a51c3473f1fc0dc2719737219d84dcb29ed71191bb5f4b1093120c866cf3fa9dec46066f11897b781ead6ede4ae175c870d707a34d5a5d2652b7e1d70f0d800e71485a837578e2fa8b621f354e828e61ecfcbbb523af055c83e5e6e63e7e8a5b325c75ab6dcfcdee80331748841c6a414fcffb54affa3c68b08a7d6e12c11fc8d2f2bb852caebcc1436de59e7f1ec1ea7acc961f8d5d08684ad8fa6f9403904afd98e0dde7b6082556d6e28c1d5"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r3, 0xc0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r4}, 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r1, r2, 0x0, 0x1, &(0x7f0000000200)='\x00', r4}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000015c0)={r0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000001580)='vmnet0}\'}\'\x00', r4}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000080)=0x1, 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat(r6, &(0x7f0000000100)='./file0\x00', 0x80, 0x41) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f00000002c0)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, [], 0x1f}, @local, 0x8, 0x1, 0xffff, 0x0, 0x1, 0x2}) read(r5, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r5, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27) [ 174.473653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 174.495450] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 174.526010] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 174.556645] IPv6: Can't replace route, no match found [ 174.566304] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 174.573223] hrtimer: interrupt took 44619 ns [ 174.582933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 174.597808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.620795] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 174.645041] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 174.667175] IPv6: Can't replace route, no match found [ 174.674269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.687682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.696316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready 07:04:05 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x803, 0x2) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x0, @in=@empty, 0x0, 0x4, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000180), 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000000000)="ba1990c1f6fb6495ce17578843a5cd9564d001fdaf15249060ce8d26579b977af4c4fdcaeb00eee1020b6c4063673daa96d88a7cb0a20e14e0456dffac23d64956ba3c7f6f8fa8a739ef6c3a3bb783140f03d0db02da9c67a0da86bf0e6cab82e27023bc2e9969b66f6c40bbade122d04e47a8d7181940084bf3ddbcbfe5ec7b60e917f65bf621d67c2fcaff728a1e096d412e16c511c4385345a732f2f6f5c8d8322b6ff3362df34ef31d59a1995e295ca7", 0xb2}], 0x2) [ 174.714655] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 174.735325] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 174.744663] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 174.796808] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 174.827351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.864908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5625 sclass=netlink_route_socket pig=7110 comm=syz-executor.3 07:04:05 executing program 2: syz_mount_image$vfat(&(0x7f0000002040)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xe002, 0x1, &(0x7f0000000140)=[{&(0x7f0000002000)="08000000d00b0000000000000204010002000270fffa", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x40000fffffc, 0x0) ioctl$MON_IOCX_MFETCH(r1, 0x40189206, &(0x7f0000000100)={0x0, 0x280}) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0xe0802, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000240)="72722b37ed5d7e22a0069bf90cad51d31b7a9c571330973b54c54b73317c86e7c040cd319c311a40868841acdb8656e4aa28bf17ae9ef0d758f158cc9ed00a52c27f869f53c41e86925d097e89177ef5921d3aaec182df4c5d87f439fcc6029a6fa3f28e47a909a8d5b9d5095cc5e07968d5019b71057c5eb14b0a13ec35a19e", 0x80) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r5, &(0x7f0000000300)=ANY=[], 0x6) r6 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0) r7 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r8 = syz_open_dev$vbi(&(0x7f0000000340)='/dev/vbi#\x00', 0x0, 0x2) ioctl$KVM_HYPERV_EVENTFD(r8, 0x4018aebd, &(0x7f0000000380)={0x3, r0}) write$9p(r6, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0daf487a70b5c117acd43725fe17993634f1695dabd7f998cd55e9d5bd911e86aa7a4ad75a574bb9693dd6018b25d942a9544bca1ebb0e8d10c092cdcb85797673972099e4041aaf8d636f66cb1103ef2050ad28fabaed33d6927889d97f4b5ce0de71d3fd832980f4f088d0d824e20549b4bbd906ffa51ce9de54d779eb4de462faac20a3ab0ed9934373ca22cea5454f4c2a740cd461e39956bb5f98df2aebc60cf32623adbffbcc378fa7250b6a3fc863dadcf6d4f8b804bfe70f0796eee6218445dad2811dd6b540ff52efa2f167dd9c1b8b016268d37db430983fefc0645d20614c8df2eb0872c58e09664e672b0b6a9970fec199257e1c606ec3e364c66a0f4d258c74accd43b987c756d602fd8787fed3aa43fd8d84e9656d4a413fa9a423bc54b873583d6d497005e54712fafc71384988d80134fbf84f53fdd74b354848006b8b5b67e7cc", 0x19a) sendfile(r6, r7, 0x0, 0x10000) sendfile(r2, r4, 0x0, 0x7fffffa7) [ 174.973272] audit: type=1800 audit(1569740645.469:44): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.2" name="file0" dev="loop2" ino=3 res=0 [ 175.024820] attempt to access beyond end of device [ 175.035007] loop2: rw=2049, want=130, limit=112 [ 175.039852] audit: type=1804 audit(1569740645.499:45): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir588883614/syzkaller.RrSxiW/1/file0/file0" dev="loop2" ino=3 res=1 [ 175.069984] Buffer I/O error on dev loop2, logical block 129, lost async page write [ 175.085815] attempt to access beyond end of device [ 175.091105] loop2: rw=0, want=130, limit=112 [ 175.096745] Buffer I/O error on dev loop2, logical block 129, async page read [ 175.113457] audit: type=1804 audit(1569740645.499:46): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir588883614/syzkaller.RrSxiW/1/file0/file0" dev="loop2" ino=3 res=1 [ 175.153494] attempt to access beyond end of device [ 175.158480] loop2: rw=0, want=130, limit=112 [ 175.167929] Buffer I/O error on dev loop2, logical block 129, async page read [ 175.176128] attempt to access beyond end of device [ 175.185278] loop2: rw=0, want=130, limit=112 [ 175.190304] Buffer I/O error on dev loop2, logical block 129, async page read [ 175.208485] audit: type=1804 audit(1569740645.499:47): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir588883614/syzkaller.RrSxiW/1/file0/file0" dev="loop2" ino=3 res=1 07:04:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000080)) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000200)="8da4363ac0ed0000000000000001004d01000000000000000002000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x80}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000140)) [ 175.254921] audit: type=1804 audit(1569740645.649:48): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir588883614/syzkaller.RrSxiW/1/file0/file0" dev="loop2" ino=3 res=1 [ 175.295109] audit: type=1804 audit(1569740645.649:49): pid=7120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir588883614/syzkaller.RrSxiW/1/file0/file0" dev="loop2" ino=3 res=1 [ 175.599574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5625 sclass=netlink_route_socket pig=7106 comm=syz-executor.3 [ 175.624162] syz-executor.3 (7101) used greatest stack depth: 24208 bytes left 07:04:06 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070") r1 = socket(0xa, 0x1, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6, 0x200) accept4(r2, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80, 0x81000) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x2e, 0x0, 0x57}, 0x2c) [ 176.068816] audit: type=1400 audit(1569740646.559:50): avc: denied { ioctl } for pid=7144 comm="syz-executor.0" path="socket:[26366]" dev="sockfs" ino=26366 ioctlcmd=0x660f scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 176.112074] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xbcb/0xcb0 [ 176.124433] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xbcb/0xcb0 07:04:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket(0x2, 0xa, 0x0) ioctl(r3, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000280)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r8, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x80, 0x7d, 0x2, {{0x0, 0x50, 0xfffffffffffffffe, 0x1, {0x82, 0x1, 0x5}, 0x0, 0x7630, 0x0, 0x0, 0x9, '/dev/sg#\x00', 0x0, '', 0xb, '/dev/vcsa#\x00', 0x9, 'fdinfo/3\x00'}, 0x1b, 'eth0cgroupsecurity&%fvmnet1', 0xee00, r8}}, 0x80) r9 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r10, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x80, 0x7d, 0x2, {{0x0, 0x50, 0xfffffffffffffffe, 0x1, {0x82, 0x1, 0x5}, 0x0, 0x7630, 0x0, 0x0, 0x9, '/dev/sg#\x00', 0x0, '', 0xb, '/dev/vcsa#\x00', 0x9, 'fdinfo/3\x00'}, 0x1b, 'eth0cgroupsecurity&%fvmnet1', 0xee00, r10}}, 0x80) getgroups(0x3, &(0x7f00000002c0)=[0xffffffffffffffff, r8, r10]) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r13 = getgid() setgroups(0x6, &(0x7f0000000380)=[r5, r6, r11, r12, r13, 0xffffffffffffffff]) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000}) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="d3aaffae741a32f50378452634721df90ca2c482fdc0751cca0c8a732c8e91") syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff49, 0x0, 0x0, 0xfffffee8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000000)=0x40, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x1}}, 0x0) 07:04:07 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff000c0000b7060000ffffffff2d6405000000000065040400010000000404000001c47d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) dup2(r0, r1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x2, 0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'veth0_to_bridge\x00', 0x2}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000180)="fcb23145b2784d205709970a9ae34b94cc24e0f11a5d2d24399b04b6d138c997d15ec641582e6df8a84e2fd2d05bd4048b3f7e12d4f641b8b785c1632b9c0ad00fb9ff7e917574acec21113e85da4056be38", 0x52, 0x8000, &(0x7f0000000280)={0x2, 0x4e21, @remote}, 0x10) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000100)=""/126) 07:04:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) accept$packet(0xffffffffffffffff, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000840)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000880)={@mcast1, r2}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000b0c00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c00010062726964676500000c0002000800080081000000"], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x8, 0xa8, 0x9, 0x4, 0x3, 0x9, 0x20, 0x5, 0xff, 0x0, 0x20}, 0xb) 07:04:07 executing program 0: shmget$private(0x0, 0x3000, 0xaeba7c5c7afa0fb2, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x5c9004, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x51, 0x8, 0xec1a, 0x5, 0x7fff}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={r1, 0x1f}, &(0x7f0000000100)=0x8) 07:04:07 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f0000000080)) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000200)="8da4363ac0ed0000000000000001004d01000000000000000002000000000000fff6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x80}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='cgroup.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000000140)) 07:04:07 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = creat(0x0, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r1) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7fffffff, 0x10000) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) socket$inet(0x2, 0x840000000003, 0x2) socketpair$unix(0x1, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open$dir(0x0, 0x200, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001880), 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="ff5b7213f6012f66b000000000e00200ffffffff816f00000000d7e81ad471"], 0x1f) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) [ 177.211096] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 07:04:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @null}, [@netrom, @default, @netrom, @null, @rose, @remote, @null, @null]}, &(0x7f00000000c0)=0x48) recvmsg(r3, &(0x7f0000000200)={&(0x7f0000000280)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000300)=""/128, 0x80}, {&(0x7f0000000680)=""/230, 0xe6}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f0000000780)=""/193, 0xc1}, {&(0x7f0000000880)=""/155, 0x9b}, {&(0x7f0000000940)=""/241, 0xf1}, {&(0x7f0000000380)=""/127, 0x7f}, {&(0x7f0000000a40)=""/68, 0x44}, {&(0x7f0000000ac0)=""/219, 0xdb}, {&(0x7f0000000bc0)=""/97, 0x61}], 0xa}, 0x10100) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="480100002400070500"/20, @ANYRES32=r4, @ANYBLOB="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"], 0x148}}, 0x0) time(&(0x7f0000000040)) [ 177.298104] kvm: emulating exchange as write [ 177.442261] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 07:04:08 executing program 0: r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2000, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r2 = socket(0x2, 0x803, 0xff) connect$inet(r2, 0x0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(0xffffffffffffffff, r3, 0x0, 0x72439a6b) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0xfffffe38) r5 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x660c, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1400000000000000010000e245", @ANYRES32=r5, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'], 0x26, 0x80000c0}, 0x0) r6 = pkey_alloc(0x0, 0x0) pkey_free(r6) setregid(0x0, 0xee00) getsockopt$MISDN_TIME_STAMP(r4, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000200)=0x4) openat$cgroup_ro(r1, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f00000002c0)) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x8001]}}}) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc058560f, &(0x7f0000000300)={0x0, 0x2, 0x0, {0x0, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, [0x1b00]}) 07:04:08 executing program 1: pipe(&(0x7f00000012c0)={0xffffffffffffffff}) read$char_usb(r0, &(0x7f0000004640)=""/4096, 0xb2e5720f77506b66) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000140)=0x10001) mlockall(0x3) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300)='/dev/kvm\x00', 0x200, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x88101) ioctl$int_in(0xffffffffffffffff, 0x800000c0045002, &(0x7f0000000100)) ioctl$int_in(r3, 0x800060c0045006, &(0x7f0000000040)=0x100000035) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000c0}, 0xc, &(0x7f0000000340)={&(0x7f0000001200)=ANY=[@ANYBLOB="001f00000f0a26d0fa1bffadf3eaa512840e76f350c617115bb6942f9c69dff752589d0ed3758bfce8bfce7e9c8e7164912416cb07f6324e4a7ca72986246c98178c7f870bde25e75bf48f243650da6c880df35e9155b0eb0ba1b53294", @ANYRES16=0x0, @ANYBLOB="000828bd7000fddbdf250e0000000800050002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x20000000) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x80040, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x3) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x3, 0x5, 0x2, 0x80000000, 0x1}) 07:04:08 executing program 4: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000040)=0x10000000006) r1 = perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r0, &(0x7f00000002c0)={0x8, "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", 0xffffffffffffff5a}, 0x1006) r2 = dup3(r1, r0, 0x0) write$vhci(r2, &(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, "59d7978a41eb5199267a4948a62a85d2c34742ccad7a0ac537afb141fdf161e7fa953791e5ac2724af3680f7c91cc0a57794813b63ccec6f5754c1ffe324e7247bb91fe3da9e49e2b6b9c2697c3d58dca80e24835e02bbf65a7ed99f41265c31a0c6bec331d4ea1e8b9b8a8eb3c5e4ec1310cba4bfc539b1aa4f588214b0c072db73deac0da2d53d22aefc7fbebddfc9b11da844efdc6dc67c6b790a955fc664ba9793b10afd27c4092f0b69f1d3ad84e8e2bb845e354f964e23f3974ff7486ff1fb0014c2599887d1"}, 0xca) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @local}) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) 07:04:08 executing program 2: r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e22, 0x0, @remote, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="280000020000000029000000020000000000002300000000000000000000000004000000000000005a4eaf989628908ffd868fa21f0cb9b9f76a88e5879c4b1e7b58888ca90bb36d92ffc0703bf475feb076a46c82eaea34b5c075cc1714dbf2adcab7472d37fcd0c046ec705c49be42480156457d7703cf9d3dbb5f6ef6dbaf3ef58e9103bacaa1878239dc454551b0544edaa1bb3c200f8d679192b98a50ca3745834e53d5d6548b4d1eb63c8788d5480ab3afcb2b9a4f2e462f18f85f84f23666f34d54d1c64bc2185cc40b83f9b6d58c6e68829171c531647d01134c1a4c2a7395f06f8c580f09"], 0x28}, 0x0) 07:04:08 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e6f6ffff6b000000000000000100000001000000000b00000040000000000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, 0x0) setxattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="ba6a317000"], &(0x7f0000000180)='ext2\x00', 0x5, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) sendmsg(r0, &(0x7f0000003900)={&(0x7f00000001c0)=@llc={0x1a, 0x101, 0x9, 0x1, 0x2, 0x3f, @remote}, 0x80, &(0x7f0000002700)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="f929e105", 0x4}, {&(0x7f0000001280)="41a2daca7c51d5ee0e7fe26f5f6a3ed2a8c33019d472a70e416cf056828dc52a976886a30111a1884a21966cc99b5d3b5b7f18299c2708a66e4405bad1ebe2a15ba44ad0dc3097b09a371549447ce32c4ad0eaaa7dd04838f9fe245f6cf7e5b9cd6ac4a581ad58a3cbcd30400f04667b4dc8d1e1b3c687332e17c966576ae8b7875abf01f3733dcda842c76833255d06c7f0a7cff5d2e2e021cb9c4340280c4fc83d4381b370038287643c5801487a31", 0xb0}, {&(0x7f0000001340)="53ab6ee4805cf73d0b40074539746465c55d662a5a72d2fd3283439f0b825db2f6addb38ce1b3c7869c687b46903b4f957a2893c1b824eaef2e21287abe788a102a967c617fafa8effd82cddc4e7fd008bafceb4ecfb153452e3ee65f1e8cd976c1fa57e3a526a3dc0416f6b022bc3a9640cfccc55261bb2851385e57b7661dc7b7fe32e0e61990162864b5fcd579d03ba1558419305eaa915035746c021b0def23ff65c101095a8a040ffeb938fda30b240a6f0941921c2b2b169792d7bd7ff22643ad694771e3ada5687b7de6bffed6a393af36f428186aa2406dbc2faa5069240e994c2ba7a", 0xe7}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="db6b94df865e365269678a39e06c0021911172b995a737e52277ffcc90ebee939fadc7162058778af2d258f01d33cc703bf9308858e0d721deeeb2b28860d2e7f7b562e23e24f5ea2e866bbf771eb566d1e110810b86c8b8e5304d13a7efd4359e03ab3d0ebf19531a5356161d7c126c3fa87eb1ac6619dc7bda3364953870d80d339bc7466b21811f8462e5a4793014dce0cb32ae445443338865029d0d8914262df059111468ffeee9512bbd0fb5f601bce2be85afbf1214ad", 0xba}, {&(0x7f0000002500)="93bca6c46c063e078d4e0b9961046f4522443420f18978d0a6325f88b12f093320dd0cbcf425e1786776babf25290fc93fd1512259d6a9a91204207a3b27f5a3e972c9f02f455c2f9ca37930099672fce920b3f05ba79449e1b15efaeeb648717279dd039686652cba36e6c3f426e4d18c5e3bf05db0e7991670f87b70e8742ee5b6785b4cdfbffbac0b44871913a556ed0561f4635cacde5e43c555ed7cde", 0x9f}, {&(0x7f00000025c0)="e9719fadb76fee6e3279ed79de391fab06df6e62a667c23cee4d506af55979e4bc2aa963a74eb446230bd83c2c1678723a20fa42a4b45ce6fc9c7e188a434d8a584102896d6d9474773d3c635bcc69b4eca07040065d454122a71af2951eac01711368b414c855d2594e35a8b6058c89f70b86043fe88862b54a37652ac1a578e4fe712d9b7ed5bdebf362e5dc1801979a1e70ce98537fc370dccca6a3ecd1fcc971f0fb89c63670480e9423f72d1130514cca4567213ff6995a9e333fe6c9bb7bc23aa3d544a3809cc5cbbad500f09ae1b74cccc5876ad878a441cd04c5e55ca956a3576adc42496833e2bb889039da9b4ff30f2442c39d7a", 0xf9}, {&(0x7f00000026c0)}], 0x9, &(0x7f00000027c0)=[{0x1010, 0x119, 0x3, "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"}, {0x40, 0x10e, 0x93, "25b45cf76710cfef9b1e777b63d2dd9148d6059626749a6c97298088855dfb66346570aedf8d812e7c98"}, {0xd8, 0x103, 0x7fffffff, "ed4c8bdd3eff0c7a4ce0f7310febb2f43b7fb8a9cbc1527a84ed9ade63618aac3e6956252c7c545607f76b75b1b191a6eb6e5c172a742cfaae9f35a7e153b3e226ba752b869508278d5a2ce78ae8d8106df4d085bcfbf512fe4de9d18afe7d717c763463b1a1794a410cc432cede7274f4e0f330de48139bda7fea886b55f2a6c6d601e29835ccd6eb3b9af6efe60d13b10cea98d2e559e7ebf59dcb10792f9406d894ec7a44db3cf7cc61e8d23839c25a6bebcc807d12411fa0d94ce330bde198d7b5b8133d21ec"}], 0x1128}, 0x1) [ 178.146900] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 178.191926] EXT4-fs (loop5): invalid inodes per group: 2816 [ 178.191926] 07:04:08 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000540)='net/wireless\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000780)={0x7fff, 0x80000001, 0x467d, 0x155, [], [], [], 0x4, 0xffffffdd, 0x7a, 0xabb7, "f87372ff6682c802b8351b60b6ee53d9"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x1f8, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x70}, {0x3, 0xffffffffd927d9bc, 0x0, 0x0, 0x0, 0x0, 0x62c, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) recvmmsg(0xffffffffffffffff, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000006c0)=""/93, 0x5d}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[]}}, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x100000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_NMI(r5, 0xae9a) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000001c0)=0x7) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="282000001d00010000000000000000aeeb318600", @ANYRES32=0x0, @ANYBLOB="000000000c0001002a52f74d95170000"], 0x28}}, 0x0) accept4$alg(r6, 0x0, 0x0, 0x800) r7 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$ASHMEM_SET_PROT_MASK(r7, 0x40087705, &(0x7f0000000180)={0x2, 0x3}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:08 executing program 2: chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) socketpair(0x1, 0x0, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f2, &(0x7f0000000580)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x30, r4, 0x805, 0x0, 0x0, {{0x1, 0x40030000000000}, 0x0, 0x5, 0x0, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB="c9522e03f4517ec267d939374d33efd373f86e5b5445e3a7e47aee08f285c98a077fb1e895c19d82d656db9106047cdf1ac0e2b9050e4466d9e3344f0a1866368a4e152e1df8dfadfb95b32ef67d", @ANYRES16=r4, @ANYBLOB="080728bd7000fedbdf25010000000000000009410000004c00180000800065746800"/98], 0x68}, 0x1, 0x0, 0x0, 0xc0801}, 0x20000000) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x24004002) r5 = creat(&(0x7f0000000240)='./bus\x00', 0x0) syncfs(r5) getsockopt$IP6T_SO_GET_REVISION_TARGET(r5, 0x29, 0x45, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x2) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={0x0}}, 0x0) fstatfs(0xffffffffffffffff, &(0x7f0000000280)=""/96) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') pivot_root(&(0x7f0000000340)='./file2\x00', &(0x7f0000000440)='./file1/file0\x00') chdir(0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') r7 = socket$netlink(0x10, 0x3, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r9, &(0x7f00000000c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x80000000001, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r9, &(0x7f0000000140)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r10}}, 0x171) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r8, &(0x7f0000000300)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), r10, 0x3}}, 0x18) fsetxattr$trusted_overlay_origin(r7, &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x0) [ 178.297434] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 178.334153] EXT4-fs (loop5): invalid inodes per group: 2816 [ 178.334153] 07:04:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x18, 0x22, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0x4, 0xf, @binary}]}, 0x18}, 0x1, 0xfdffffff00000000}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0xfffffffffffffff9, 0x8}) 07:04:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="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", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000008540)={0x0, 0x0, 0x0}, 0x0) [ 178.565106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7238 comm=syz-executor.2 07:04:09 executing program 4: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6100) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmmsg(r5, &(0x7f0000001640)=[{{&(0x7f00000000c0)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/54, 0x36}], 0x3, &(0x7f0000000380)=""/138, 0x8a}, 0x128}, {{&(0x7f0000000440)=@pppol2tpv3in6, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/44, 0x2c}], 0x1, &(0x7f0000000540)=""/254, 0xfe}, 0x36b4}, {{&(0x7f0000000640)=@pptp, 0x80, &(0x7f0000000980)=[{&(0x7f00000006c0)=""/90, 0x5a}, {&(0x7f0000000740)=""/140, 0x8c}, {&(0x7f0000000800)=""/188, 0xbc}, {&(0x7f00000008c0)=""/142, 0x8e}], 0x4, &(0x7f00000009c0)=""/68, 0x44}, 0xbe95}, {{&(0x7f0000000a40)=@x25={0x9, @remote}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000ac0)=""/180, 0xb4}, {&(0x7f0000000b80)=""/214, 0xd6}, {&(0x7f0000000c80)=""/246, 0xf6}, {&(0x7f0000000d80)=""/40, 0x28}, {&(0x7f0000000dc0)=""/12, 0xc}, {&(0x7f0000000e00)=""/139, 0x8b}, {&(0x7f0000000ec0)=""/220, 0xdc}, {&(0x7f0000000fc0)=""/237, 0xed}], 0x8}, 0xa8}, {{&(0x7f0000001140)=@rc, 0x80, &(0x7f00000015c0)=[{&(0x7f00000011c0)=""/177, 0xb1}, {&(0x7f0000001280)=""/183, 0xb7}, {&(0x7f0000001340)=""/172, 0xac}, {&(0x7f0000001400)=""/113, 0x71}, {&(0x7f0000001480)=""/20, 0x14}, {&(0x7f00000014c0)=""/198, 0xc6}], 0x6, &(0x7f0000001880)=""/4096, 0x1000}, 0x80}], 0x5, 0x60002060, &(0x7f0000001780)={0x77359400}) ftruncate(r4, 0x200004) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1000}) symlinkat(&(0x7f0000008ff8)='./file1\x00', 0xffffffffffffffff, 0x0) open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0x8000fffffffa) [ 178.680171] audit: type=1804 audit(1569740649.169:51): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 [ 178.758367] device nr0 entered promiscuous mode [ 178.808777] audit: type=1804 audit(1569740649.179:52): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 [ 178.846350] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:09 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) write(r0, &(0x7f0000000000)="805b6a636a9ee4c14dcadf147fcf53e7116c87e2368ffef3a2bb44739769f5a0226b0f76b3de058c48578f96b14392176e251cbeb17789043f27f5bf6f1b0d6b49fc1a6035979b5293edc003368e3289bb5569aa79", 0x55) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) open(0x0, 0x0, 0x4) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) mount$overlay(0x400000, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000380)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f77657264690004000066696c65302c776f726b6469723d2e2f66696c4531e46391d3990fbf"]) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000001c0)='./file0/f.le.\x00', 0x0) [ 178.873757] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.923660] audit: type=1804 audit(1569740649.189:53): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 07:04:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, 0x0}) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000040)={0xb, 0x10, 0xfa00, {&(0x7f0000000200), 0xffffffffffffffff, 0x8}}, 0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r2, 0x200004) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f00000002c0)={0x1}, 0x1) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 07:04:09 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r7, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100), 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r9 = socket(0x2, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, r8, 0x0, 0x72439a6b) r10 = socket(0x0, 0x803, 0xff) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r10, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) getresgid(&(0x7f0000000700), 0x0, &(0x7f0000001d40)) bind$x25(r5, &(0x7f0000000000)={0x9, @null='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00d'}, 0x12) dup2(r2, r5) [ 178.980551] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40554 sclass=netlink_route_socket pig=7261 comm=syz-executor.5 07:04:09 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x366494cf20392229, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x1c4, 0x0, 0x0, 0xfffffffffffffd92) ioctl$PPPIOCDISCONN(r3, 0x7439) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='ts\x00', 0x4) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1a, 0xfffffffffffffffd, &(0x7f0000000180)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r5, &(0x7f00002aafe4)={0xa, 0x4e22, 0x0, @ipv4={[], [], @loopback}}, 0x1c) listen(r5, 0x1d7) r6 = socket$inet_sctp(0x2, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="9742200b734ffb20dffdea79fff6", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}, 0x20) r8 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg(r8, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000005c40)}, 0x20040001) setsockopt$CAIFSO_LINK_SELECT(r8, 0x116, 0x7f, &(0x7f0000000200)=0xcb2, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000100)=0xc) fcntl$setstatus(r4, 0x4, 0x400) dup3(r0, r1, 0x0) poll(&(0x7f0000000180), 0x0, 0xffff) [ 179.065464] audit: type=1804 audit(1569740649.189:54): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 [ 179.067688] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.104430] overlayfs: unrecognized mount option "lowerdi" or missing value [ 179.157988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=40554 sclass=netlink_route_socket pig=7273 comm=syz-executor.5 [ 179.178279] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 179.191217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7247 comm=syz-executor.2 [ 179.213088] device nr0 entered promiscuous mode [ 179.229102] audit: type=1804 audit(1569740649.399:55): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 [ 179.235212] overlayfs: unrecognized mount option "lowerdi" or missing value [ 179.305422] audit: type=1804 audit(1569740649.399:56): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 07:04:09 executing program 1: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="f122cdd559e8e2ee95b0b822086e323998ef0feeb3c2cee69ae3ca199add39920f848f8816a8776d58a6063d2c6e201c5914275a41e911703dc778320597de7ad94667e7de7b128a885fe46d14f34fd418f20afbc5529584bb2445b415f9520c1cc63b5b6d25a736c1c45ea15156308663417f98a0ebbda85f50d008ee3944b498fb4323efd8db56a1326769112761e35d90e219ceb2ad626f20c29e16781c3b3e7053d2c3c30899058688a4054199e5d19a035e165b2e1189b828ec2b154f7b6645946c99e3ab2bb8d926", @ANYRESDEC, @ANYBLOB="396d144452ef53ff04f1288ff8ca25e2438e", @ANYRES32], @ANYBLOB='\\']) [ 179.339363] audit: type=1804 audit(1569740649.449:57): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 [ 179.428922] audit: type=1804 audit(1569740649.459:58): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.4" name="/root/syzkaller-testdir530299570/syzkaller.LNEkP3/4/bus" dev="sda1" ino=16564 res=1 07:04:09 executing program 2: r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) lseek(r0, 0x0, 0x4) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x0) [ 179.472280] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001300010800"/20, @ANYRES32=r1, @ANYBLOB="00000000000000000c0001000000000000000000463ca19ceb95632a3f8fca266dddbdd4bb67c0e3a6aca0b648856b45f17fedf01bcee0e6adb78158a7ecd8d03176a228a928797b574f3953b42dac9b100a3e8fad11714a0249e15bf644d8ac15e6343f19cab21a6e6a"], 0x2c}}, 0x0) [ 179.518277] 9pnet: Insufficient options for proto=fd 07:04:10 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x1132}) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') r2 = socket$kcm(0x10, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="fa0c000026008152915a655267d7d137ab2ff96e27bf28b285fe3903a44a6017edcaa3a2b4dade3baee72569b51366463fedf5e787c05b0cb5927a3a7edfb4d078e9ae1504d489e058be9fafaa633705b6d4bf6a01f2cd9ebf19724a1b0b9760612582bccd3983ce4474844c065e914dab8bbd52a45f431678bfe28633bf7c8dc83df809238ed87f1e393883ef750ce79c6f84e5e5de176e2f26024e4e3a3d8fbdaf3254022f265d8ccc5fd7205d9d9c2c4076c58162523082d81a39c43f782332ba8e82b4107a049cb82bba8b5edd80473844291437b8d22edca68047582e6be601e9df5e60a32c7cd202c5a30b8b606e43362739551cbb013b65e238f41cc00d7900140cf06b7bc9030f2563bcf9d4f4b7f48c79ec1a323d06276a0a3f8846b7c62b66f9709cabcaad234c53f3bc9b11165a6321f1db1057f076cfaebf8fbfa033fdc1dc2c3e314b36b3b3dd50425447da8bc5938ff7a17361100ab0b1ffeab7ac487411824224781eb9cdd4edef57ae91cd61f56a56c0599cfc3a491447207610f242da6cd6b030ae5f35e3181c44ae68665a023759b9ef4358db46107edc49194aed72b62600ec0ae4fc9065be059fc010cd6e6c9ea77c666b5e25693fbcf595e3e57113ff3a0e0c63d0604a16ea5adb8b7b54d47d4d8804612fde571863064528a49bf684d8a880a11afd819f186c177c49cac3ba1e9d1aa7ad0ff36b9e36d73c05b8abcaf96df0aacd2c9653f30ec29e1284af8749a9b2803c2727e992a6e65df192e1875c3e6d3553ffb7cb34ffee8f8ac0123c390454b42a0316952cbc9949376d9320ec207f77c2d5eb9e86d720cf8e9008a9a51932b45cd4cab21414c92d1c20f9e15e3fc16c7ce181e9ab19b01b70343934c823b1215e173405dd225233823cd4a604a77f06b14eb05b860e6cf8790335788c43abe9de1598e9952e5c7e6b2f8b17b1788ff3033e7d1635b008834bdf4054e6195e55000827c6202b227dde06f23ae21c00b371bdb6b7ea47b2e78844b52a77f9f0929790dcd7df2752e4af092d539c87c18751a5eb3eb4d38a2a0e070064b4ffaacff0543b115cc89f6c7e78f12147ebfcf1c80bac8f98deb59cbe670adb4cd1882a7e0ca4ba85ae9d445223ffb32301d46c0c9b05a830cbea0f72294ab3b539e4ed7cac2e22b235e8ceedeb643fb90b061a58368e76036ff3c1828d8a4e21288662afb6f2acab00d734db7ffc8373a928571819ce9ea6cb0956a6093b2b1f65662b76bc6ac8a19008cf08a6342d64674271451714e1d0e4ff7647fe7551d3cf16f37cb5547317e4fef51e4fb471de6ffbb90c2dd4a64266c4c2f75fc62e58ec306fb92212fb262d8b138899a3b53e67cde2f97d94cd2265cc04d32b29edf77e75b1f88372495cb2937f183bfc8604d72efb3af5c1f41b665b25592676b0ad2185478eade7e663e743e0e09cce6224c787ce1d789dc4a9b350bfe3a75f551341b11dd96cdaea17989dad565b16324a69842dc29a0ed16744ea5935598ac8238e146139189927a14d3b2863044b63b468ae75f48fab68ad235c36daffebfe4b468fc9b13198b1a683dcd3b3b4294ba22caddbacf8792d5783bc12e2538e4609e6bb6e9eeab98a06452c252a657f400260458c29fae8879097698c9aba2b2d889fc78f00d0d8271e09e8542b71018be6ff8cb03cb423e79303047d6ce124a00f64461b899bbddc4fe87ff677533391e16c01fa9cd6420bdc856c4c7f057b249ee9817efd6ab2cd02eb887d2631435ef2d5a1c7e57ac046ef615a1285ca89ade18ae69af3b3f8f76ca8aa060e373c0f99424fe1c5fadc72fe145fd2d4e4da4b78597890516857de188fcdaf15e3b0871b346cd39ab772cc25fab49e60c818cde934b137144adfc4fbde3ddbeccce9679f02b66746e822c67b3ed5fdafb4a936a2683b39a002115ecd62220605ca542610a80f2e3530aa89d3ed6ed9c57bbfd5db3a0b62786a608309a355443c616032008f9458b2f10db93e29470192370084e9322c309c9b23333b46d04e79176659503ad4b05deebb3c67d715ee6e84a89002ea6f7f71bf41ad36b42c8ae01c97174dbb641e50641aba60c291a84e906c013087370a5043e07d36fcead378f6c1e6ed3f5ac695124b82b20261cf7c9b82172e09c81d7d39eed72aee5678613a3c671ddd44f2c7c75a3b5d316aa165d56594fccab20903d7f503a08928e76c779918b2463b720ee6367a43e494a1db3ed1a80690e665570c01ce7eb979cdd95d4e1ca51730eb2cd63ffb2a56049601627c9788254945142dce85adbe1eb5997d16cdfe2a3758b13dc6bb121e2206ae64206868c1c5e89a101bc121719ac435dcad093f5f67cefd863cc7c8f3fc8a9dc62a83c115f1ce714b18af067951aa06dd9bb4ed98a820bf4704d156977caa4e6415b2a0df0386e2f6a061bf44abc8a397cf4abdafc51b78ebec9831f3c60fde6e62a1fd082903080aef20ff8de8bc0dced06f627514600539ca7114a088848da4244a85b4cf5b976d3a698c9a568d417e276917baba05d1a02181db2e6cc35986da4ccc63f8cd8e85a4a923dd27e2f499664601fdc44fdf46e2d2880cd5a7ece89c370234c438dcc0b43865cc62bad21e9dc37da758cbe01752f02fd9cbfe98630a30a78bb1239e25cdaba3d45d13cd3e7216d9d8070f3ff1a0cd9a0c91f29974c98f2677ba88c1091bde4be0cd37ea5eeb3b9cbb0360a00ddd40bbd60ffb8d4daa973ef0977c18dd4b38a605cee957872dca85787c37b6931293eddb77015faf143d1d28d24822d1a5d134799e8175a38b255aaf0e39b68c7f734e2e1e7044626daa84c9113e86d86ef63c863703703ea163319261dcf516c32d49478f7af30d52baa18ea6b0fc286c06b7e4ee019bf3fe74845a652d4a52aaa241a189c411e90e2953863a2bc4124e573607b94cdff19e280731824931a83f056cb5857672619b97ce38081592c0c319ce72e04e9eadce89775cfb5a4b2842663bc79bde565435cbcd46c4d505ceef7dde86512d39d4cb270deb7e79ebf8602bdc0d76c3e833d36ee08be10be634f44056c2f3fd6a328c7cd562e9c96ff7845fc3df81a876bb07f1cc833bed6ca1dc5cf935a4e959db6a4fae6edbc45357d8758faa9cd04cd41eb6efcfbd91658519bf520b90107f767d126854818485e98cb7ef56804de6950bf4e72098a949d14ea0e4e9f2534cf16cac0aeb970fc5c39f37e93910d5c99ac163792260d2280ec5c9a79bf295588ec23f524aae65f800f9c39e338f3d66b1a69e5488e04823eab36ae6ec6a2c5ce133ccd819a2b217b1ab7f4afd1697bb42929b3131358b5421c83f925571934442d0fd0ce3990d4e5d31d8b956f76df3c2f8533e46b892c88692ce009155dd5c7dbe4c86874b95762650f63e4b4aabb41320978b05b80cfe8fa2830904ef6b5c4f7ad46ca5dac151c9077c4d2c6adfe5066a8eb09a9bc6892330ea2b259a53c7137f8498254e1b04bf920c35c5333c4d640b11da60917ae921037b4aedbd6a0fbeeaf88ef6defc830552b4cbe3fe2a844806a48923dd428ea1c8d797bd8e6aabd1d1a8c97c8038b627120a77f4e47fa1f788aa9da268b0ec10fc453cb722685df76547dbf55a16663aa2b2a51e9c52456cccdf682592d1369dd12e3d3cb504e0f2d7004e60c297d5a25d0298045dae8fca8cb795ea57288b85a7e705820087d55ca6c42e920e2aa1174e128622cf64a197fd728cb2949536ba63e8bda8589261f1377caea37302e47228d3708a5666c66ba711d3c0b310a8c47e86d26597299d523c28c90e4feab43e950f398f7b61ccf7e6490d75ba6d8214e2d5ef2d7a088db490e1ebacf4e6eecc896cb1c704f0a8fcdf4ccb5dfa53eaf43d709287f36c10188c19fd59da7d73494de089c1b0a69ee22dcb847001c5317846a876bee1685d11c4db0673ec4c3a12008bb719650525b3c39e2b0469edda93830b3f1bde3e5b0b4637197866bb08c5858cf0d9876e3c7cad54169887bf9c80f9f4be362e1bc8c27f3434e9a918bac355c184bd899b9aebe6be20e70c0c69234342eb8b57aa9ffb7797a32df91cec2bbc90201658ca227abf1fe68e65363867e1f6ad79b827f363d64fbd3b188d95307d011c4ce5bf4407908c058eeb97ec98dd0ebfdab6b348fa387f2a7573cac25344c983e8fd526c30ee6d59fe99a30c7d7e2864aa22bfa49df5f32da68309cab3ed9c2ce69b6ecb8508ce28a43ebd6c809b8afd07a4606e664965d316f3707a3abee9bcdc32a78031b0171fb565d90c16cd56e5792c0cf618b799715f32538e38f493d4e19ec76fc8a07576a13975706bfc2bb1516c2d18a4385cc37a206eac6c9fb8d073572ba2671d2198abf24fdd0c40d079ae44962c26743b4bf5950ac5ee34c5d7bd60b364ce670958112c37b9829bed7e1327356d6b94af3ba020c2337b2dba37d00af8a128a614390cdde62ce871f948427fb5c187df9a1540a5cc71da1a86144acbfd94bf433f744f0c4f2a675eba3ed251c5b11b08dfefc726c0394a9b75121d88467ed4b2cd69819dfe50693a4a4c8370d3af12f41c0067283bbb5a90044a340fc357a11081a6c13bb9c32d9caa448479fd5f0302b6729ca7233094540b14546d6bcc15771c2686279b34f9c0914f5306d0fabd5979266ea01a17a22507e560dbf904dd62c40e2bcc", 0xcfa}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000008540)={0x0, 0x0, 0x0}, 0x0) 07:04:10 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) syz_mount_image$ntfs(&(0x7f0000000080)='\x00\x00\xc9\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffb5, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) setxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='security.ima\x00', &(0x7f0000000100)=@ng={0x4, 0xf, "845070f4563cb296f997dbc965"}, 0xf, 0x0) [ 179.653028] device nr0 entered promiscuous mode 07:04:10 executing program 5: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) accept$unix(r1, &(0x7f00000000c0)=@abs, &(0x7f0000000040)=0x6e) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) syz_mount_image$hfsplus(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="0007000008bd12c911334d756a4494d6c6eba0aaf50e53e64534adc434cb12b9916fdd123de3664714f7db568094287ebe4b00e771d2f2d5321c5fa766cd824eef97978e41ea49748813808d002ec48591c4cd9f49a4bcf71aa2ffb1e0d8a76ca513f8282d8d1aefb8cb6cb238ba2fafa7c62e262eb0b2ab0e363cb441e312674d5909944e0f0cbfb5cc7d2847addcab95c8dc63525cd11eca83286745154e206e8ac2132131d4d7d1f941ac6c3b02f16a1d6013110f833b779c9624666f6f3b225ee80c82df2f811db5d6d08c9e06dc73c78db240f6f7d5723830a7fa9ed54b42bcb0c5bf29c3c80c686910"]) [ 179.689303] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:10 executing program 1: socket$packet(0x11, 0xa5f83f412ad2cbf4, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x0, 0x200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) r3 = creat(&(0x7f00000003c0)='./file1\x00', 0x1) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) write$binfmt_script(r2, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYPTR64=&(0x7f0000000a00)=ANY=[@ANYPTR=&(0x7f0000000880)=ANY=[@ANYRESOCT=r2, @ANYRES16, @ANYRESHEX=0x0, @ANYBLOB="b871e5e47b6ead48f9a85d0d933577f75123d6353db0100c03823d1f7bc6ab4180d1ea40fafdaaf1af15e53d38fc0ef4cf9e86a6bc9ae8f35a4b094059f16bd163d1892c9caf3b428f85292848cf5dc6d8c17ae665855282f9d5f99df741b1b9993df3bafe000000000000000000"], @ANYRES64=r5, @ANYBLOB="a5adbe6470fb6df35c33fff963b4133bf784bc5c2a9beff69ecd349644806edb0b1de28958eadbc20ce91bfeefe405b5a583b3b77a3652f4d7628aabc552ad7bc85a8dad303fed3dc36b559befdd6879c6306164"], @ANYRES64=r6, @ANYRESOCT], 0xfffffffffffffe58) close(r3) openat(r3, &(0x7f0000000380)='./file0\x00', 0x0, 0x200) r7 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x20, 0x100) ioctl$KVM_ARM_SET_DEVICE_ADDR(r7, 0x4010aeab, &(0x7f0000000340)={0xfffffffffffffffd, 0xd000}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0xfffffd6e) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f00000006c0)='\x8a\xd3\x00\x00\x00\xf9\x00', 0x200c4, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x13) ioctl$KVM_IRQFD(r8, 0x4020ae76, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0xe0000000000, r9}) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r9, 0xc0f85403, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r9, 0xc02c564a, &(0x7f0000000280)={0xeec7, 0x50565559, 0x0, @discrete={0x5af}}) unshare(0x40000000) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000740)=0x2, 0xfd6d) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)=ANY=[@ANYPTR=&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], @ANYBLOB="247bb34a65db1725de9aebe879902e1f9e5e0a0e1026e9e9d05d4b59a4b9765630da8e3dfb5b1d637d84f12049641ed349bf287050351a3f29db177413880d81a3a6bc4fbfec7fa19f5aaf7af3099f5142045484d7b921bf982d09c196592529eca6e8a9e49c0e937c7798e7bf6ae7a7c5913c6b68e452a1e955796b176220a8ab832be71a64b69255e7f708190defd6bd02b554a6deea5decdfbd08cb2ac1beaf86993b4de4d5c364bd59c4931e52ea620a5812ef00"/193], 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400), 0x2, 0x3}}, 0x20) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfffffffffffffffe, 0x0) r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x1000000000000080, 0x0) ioctl$IOC_PR_CLEAR(r10, 0x401070cd, &(0x7f0000000000)={0x960}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r11, 0x101, 0x70bd2c, 0x0, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x8}}}, 0x61}}, 0x0) [ 179.777187] netlink: 3286 bytes leftover after parsing attributes in process `syz-executor.3'. 07:04:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2da}, 0x0, 0x9, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='syscall\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) 07:04:10 executing program 4: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000040)=""/136) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) 07:04:10 executing program 3: r0 = semget(0x1, 0x0, 0x321) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000400)={{0x8, r1, r2, 0x0, r3, 0x0, 0x81}, 0x1f, 0x80000001, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f00000004c0)=0x80000001, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) write$selinux_access(r7, &(0x7f0000000080)={'system_u:object_r:var_auth_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xffff}, 0x5a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x7, 0x7f2, 0x2, 0x8000, r5}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) [ 180.163408] IPVS: ftp: loaded support on port[0] = 21 07:04:10 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='stat\x00') r1 = memfd_create(&(0x7f00000001c0)='\xb3', 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000080)=ANY=[], 0x29) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x81, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0xa2) uselib(&(0x7f00000000c0)='./file0\x00') setsockopt$inet6_tcp_int(r2, 0x6, 0xa, &(0x7f0000000000), 0x4) sendto$inet6(r2, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) 07:04:10 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6c010000170001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000fe8000000000000000000000000000aa00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000ddff000200"/48, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000044000500ff010000000000000000000000000001000000000000000000000000fe8000000000000000000000000000aa000000000a00"/196], 0x16c}}, 0x0) 07:04:10 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="40010000100001050000000000000000ff020000000000000000000000000001ff02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000006c000000ac1414000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001800000000009ffc55bc5179fa2af60d2b1d3b9d8d1c2b385548fc"], 0x140}}, 0x0) 07:04:10 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) mremap(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000268000/0x2000)=nil) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2000, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r6, 0x0) getresgid(&(0x7f0000000400)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x40c00, 0x0) r10 = eventfd2(0x3, 0x800) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) ioctl$sock_SIOCGPGRP(r12, 0x8904, &(0x7f0000000640)=0x0) r14 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r15, 0x0) r16 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(r16, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r17, 0x0) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000240)={0x80, 0x7d, 0x2, {{0x0, 0x50, 0xfffffffffffffffe, 0x1, {0x82, 0x1, 0x5}, 0x0, 0x7630, 0x0, 0x0, 0x9, '/dev/sg#\x00', 0x0, '', 0xb, '/dev/vcsa#\x00', 0x9, 'fdinfo/3\x00'}, 0x1b, 'eth0cgroupsecurity&%fvmnet1', 0xee00, r17}}, 0x80) sendmsg$netlink(r2, &(0x7f0000000740)={&(0x7f00000001c0)=@kern={0x10, 0x0, 0x0, 0x40000800}, 0xc, &(0x7f00000003c0)=[{&(0x7f0000000200)={0x128, 0x38, 0x301, 0x70bd26, 0x25dfdbff, "", [@nested={0xb8, 0x62, [@generic="e8b40b0a39cd642bc405465935d1e0f97318b37718dd322179b376f389b8963cfa0c230b3a21d195fcfada830bec2c1bee767986fcf06a75070e6486ba34a54ce5b51c5998a5f0ccdabf314c294f5eaa8a916561d53d1deb654461933ca2d31e268a1fe35b62bf8f9c302b7a848615fabd7fc0951da1daf00920bb1420d7799a0612b943a4ced5bdb0a4c5ecb666042227fa73a358a292c105bd292073cc0b212a9b2e9f473811871a2bf967836f", @typed={0x4, 0x6}, @generic]}, @generic="f710e7110f5c6ce84a0e652e881b82b548eabbe09a0059726976589d26067f02c429bfbf7165e043677c3304cbc529c61106a7ea108f9d332a88902c7a2b625b722a62eb381b85bb1a914610564f73c8b23044d3f5e6f1a3a21cd342882b"]}, 0x128}, {&(0x7f0000000340)={0x24, 0x41, 0x1, 0x70bd27, 0x25dfdbfe, "", [@generic="77af939353e090c5cd55008546", @typed={0x4, 0x32}, @generic]}, 0x24}, {&(0x7f0000000480)={0xc4, 0x27, 0x20, 0x70bd26, 0x25dfdbff, "", [@generic="3f8d4fdb6b37ecdfbaee1d82fe7f87c1f389107e96bad285da8154c9bcacaa6bb5ab2a766c80905c6108ab18961e6b14281c331b740975a7b0aee149afc741478c7c3b4ae25ad89099e578b5e8b4db0cc752d716e9c136cd521ed66a382f50b9f137f27ab7e9cc49ffdc3f4ad4e61cf66060a3f15df307fbd17e5f68c55b0ee429508e43b9347566079d8846e4e27be90bea70a77186b69bc81ce87012e38d2e7666372617916276deed63eb593b85d9ba0ec672"]}, 0xc4}, {&(0x7f0000000380)={0x14, 0x3c, 0x1, 0x70bd27, 0x25dfdbfb, "", [@typed={0x4, 0x10}]}, 0x14}], 0x4, &(0x7f0000000680)=[@rights={{0x14, 0x1, 0x1, [r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}, @rights={{0x38, 0x1, 0x1, [r0, r1, 0xffffffffffffffff, r1, r8, 0xffffffffffffffff, r0, r9, r1, r10]}}, @cred={{0x1c, 0x1, 0x2, {r13, r15, r17}}}], 0x90, 0x20028001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x14080, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r1, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) [ 180.351360] audit: type=1400 audit(1569740650.849:59): avc: denied { map } for pid=7343 comm="syz-executor.2" path=2F6D656D66643AB3202864656C6574656429 dev="tmpfs" ino=27062 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 180.384775] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 07:04:10 executing program 0: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000001040)) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "b26d585a0e72681c", "ea15067def60d496f8b5cdbd01fcee7d", "1a577a35", "b00dbc796b361e36"}, 0x28) syz_open_procfs(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') readv(0xffffffffffffffff, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/245, 0xf5}, {&(0x7f0000000cc0)=""/146, 0x92}, {&(0x7f0000000d80)=""/228, 0xe4}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000e80)=""/94, 0x5e}, {&(0x7f0000000f00)=""/154, 0x9a}], 0x6) 07:04:11 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 07:04:11 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x4fc2, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000cd2ff0)={0x2, 0x4e21}, 0x10) recvmmsg(r2, &(0x7f0000000080), 0x4000000000001ac, 0x2040, 0x0) 07:04:11 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000800)="3b27a4b46ee92b4a59073c369a5e19f9db153c4fdbc76aa2a4bb9f3e5e1aa197a9e97d1016c01813792e50c2692c175aad715d110a892949ccc6e2e54c2d5c8f0b7932b69797f217168b0c1feb128ae34f0d", 0x52) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) [ 180.833380] IPVS: ftp: loaded support on port[0] = 21 07:04:12 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000e4e000)=0x200000000) write$vnet(r0, &(0x7f00000003c0)={0x1, {&(0x7f00000002c0)=""/207, 0xcf, 0x0, 0x1, 0x402}}, 0x68) 07:04:12 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x4, "9dca50784274d08abbb1fcd26d90a7ee5176258bac03b932ee94abb540d9629b"}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10001, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000002c0)={r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000280)=0xffffffffffffffe9) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, r4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x409}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000002000080029bd7000fbdbdf2533000000ac14141a000000000000000000000000000000000000000000000000000000014e2104284e2104010200400008000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000400feff00004e22000000000000000000000000ffff000000000c001c00", @ANYRES32=r5, @ANYBLOB="0200000030001100ac1e000100000000a85a206a490000000000000000ff02000000000000000000000a00080016"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0xb9dc7a918fd9db63) r6 = getpid() r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x570, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4000000}, 0x792fdbf82bceb6ff) sched_setscheduler(r6, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @rand_addr="9db68d65167b482bc26aed6705be1e6f", 0x1f}, r9}}, 0x30) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 07:04:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "a84db492e2736dba"}}, 0x200001c8}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000540)={0x5, 0x0, 0x0, {}, {}, {0x2}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "63c2eb669d6a5694"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "879323a8c7fdb9c0"}}, 0x48}}, 0x0) 07:04:12 executing program 2: r0 = openat$usbmon(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon0\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x0, 0x7}, &(0x7f0000000080)) r1 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)="e8", 0x1, 0xfffffffffffffffc) keyctl$link(0x8, r2, r1) socket$nl_generic(0x10, 0x3, 0x10) 07:04:12 executing program 0: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mq_notify(r0, &(0x7f0000000280)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}) 07:04:12 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000182000)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d00001400000000000000004000000800120000000300000000000000000006000000000000000000000000000000e0000001000000000000000000000000e0000001000000000000000000000000030006000020000002000000ac14ffbb0000000000000000030005000000000002000000ac14ffbb00000000000000000400030000000200000000000000000000000000000000040000000000000000"], 0xa0}}, 0x0) 07:04:12 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf64(r3, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0xd56, 0x0, 0x100000000000000}], "9e64324e3091256664503422288e39936cf082160540a7730ff420a859842812260b0f35d92b56dee50debb495b8bbc318c6d2eb475f5821af5111c9a3b0ffba5f9ef81aeb9478bbd3830f9bab3a0f3baa408dedbff0d38c0536788c78293145d37045fe9e6d53ed0eeb3efd63f5fc0ee96d20729558676b883763e814d05e895214322be8a0f96f1b", [[], [], [], [], [], [], []]}, 0x801) write$cgroup_type(r3, &(0x7f0000000000)='threaded\xa0', 0x4004) 07:04:12 executing program 2: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40046602, &(0x7f0000000280)) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000005c0)={0x7, 0x0, [{0x2, 0x4, 0x0, 0x0, @msi={0x0, 0xb6e5, 0x4}}, {0x10000, 0x4, 0x0, 0x0, @sint={0x2, 0x9}}, {0x4, 0x2, 0x0, 0x0, @adapter={0xcf09, 0x1, 0x3e, 0x6, 0x6}}, {0xff, 0x3, 0x0, 0x0, @msi={0x0, 0x0, 0x80000000}}, {0x7, 0x1, 0x0, 0x0, @adapter={0x0, 0x1, 0x100000001, 0x9e7, 0x400}}, {0x1f, 0x0, 0x0, 0x0, @adapter={0x8, 0xffffffffc74ab364, 0x2d, 0x8, 0x5}}, {0x3, 0x0, 0x0, 0x0, @msi={0x2a7f, 0x7, 0xfff}}]}) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000110}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)={0x154, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xae}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xed50}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x41}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd9ae}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd977}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4a2}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x0, @empty, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}]}, 0x154}, 0x1, 0x0, 0x0, 0x80}, 0x2000) epoll_create1(0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000000001e4c00006ba158a30367c175ab"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 07:04:12 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@dev, 0x0, 0x6c}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) 07:04:12 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0x0, 0x3, 0x0, @scatter={0x0, 0xc1, 0x0}, &(0x7f0000000040)="08bbbe", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc070d3f500000000}) 07:04:12 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000c40)="b1acd27f4fee29f36ee85916073bcc2a46cde96689133c69", 0x18, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0xffffffffffffffe6, &(0x7f0000000b00)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}, 0x0) 07:04:14 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:14 executing program 1: mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x4, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/.%v/\x11%put/event#\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000012000/0x4000)=nil, 0x4000}) 07:04:14 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_elf64(r3, &(0x7f0000000580)={{0x7f, 0x45, 0x4c, 0x46, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}], "9e64324e3091256664503422288e39936cf082160540a7730ff420a859842812260b0f35d92b56dee50debb495b8bbc318c6d2eb475f5821af5111c9a3b0ffba5f9ef81aeb9478bbd3830f9bab3a0f3baa408dedbff0d38c0536788c78293145d37045fe9e6d53ed0eeb3efd63f5fc0ee96d20729558676b883763e814d05e895214322be8a0f96f1b78a094c4", [[], [], [], [], [], [], []]}, 0x805) write$cgroup_type(r3, &(0x7f0000000000)='threaded\xa0', 0x4004) 07:04:14 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070") write(r0, &(0x7f0000000040)="fc00000048000702ab092500090007000aab6100000000000000e293210001c000000000000000000000ffff0000000000001ec28656aaa79bb94b46fe000000bc00020000036c6c256f1a272fdf0d11512fd633d44000000000008934d07302ade01720d7d5bbc91a3e2e80772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a463ae4f5566f91cf190201ded815b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1587c3b41", 0xfc) 07:04:14 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) 07:04:14 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x4, "9dca50784274d08abbb1fcd26d90a7ee5176258bac03b932ee94abb540d9629b"}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10001, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000002c0)={r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000280)=0xffffffffffffffe9) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, r4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x409}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000002000080029bd7000fbdbdf2533000000ac14141a000000000000000000000000000000000000000000000000000000014e2104284e2104010200400008000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000400feff00004e22000000000000000000000000ffff000000000c001c00", @ANYRES32=r5, @ANYBLOB="0200000030001100ac1e000100000000a85a206a490000000000000000ff02000000000000000000000a00080016"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0xb9dc7a918fd9db63) r6 = getpid() r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x570, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4000000}, 0x792fdbf82bceb6ff) sched_setscheduler(r6, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @rand_addr="9db68d65167b482bc26aed6705be1e6f", 0x1f}, r9}}, 0x30) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 07:04:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x40, 0x0, 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="14e480789685c177466b26e04b"], 0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:04:14 executing program 5: socket$key(0xf, 0x3, 0x2) socket$inet(0x2, 0x0, 0x8000) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x100000001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r1) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0//ile0\x00', 0x0) r2 = socket$inet6(0xa, 0x401000000001, 0x0) close(r2) r3 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0) ftruncate(r3, 0x2007fff) sendfile(r2, r3, 0x0, 0x8000fffffffe) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000140)=@gcm_128={{}, "b26d585a0e72681c", "ea15067def60d496f8b5cdbd01fcee7d", "1a577a35", "b00dbc796b361e36"}, 0x28) syz_open_procfs(0x0, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') readv(0xffffffffffffffff, &(0x7f0000000fc0)=[{&(0x7f0000000bc0)=""/245, 0xf5}, {&(0x7f0000000cc0)=""/146, 0x92}, {&(0x7f0000000d80)=""/228, 0xe4}, {&(0x7f00000002c0)=""/8, 0x8}, {&(0x7f0000000e80)=""/94, 0x5e}, {&(0x7f0000000f00)=""/154, 0x9a}], 0x6) [ 183.792671] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 183.806766] FAULT_FLAG_ALLOW_RETRY missing 70 [ 183.808306] FAT-fs (loop0): Filesystem has been set read-only [ 183.812059] CPU: 1 PID: 7449 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 183.828558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.838023] Call Trace: [ 183.840630] dump_stack+0x138/0x197 [ 183.844263] handle_userfault.cold+0x3c/0x50 [ 183.844284] ? find_get_entry+0x215/0x520 [ 183.852879] ? userfaultfd_ioctl+0x2fe0/0x2fe0 [ 183.852892] ? lock_downgrade+0x6e0/0x6e0 [ 183.852907] ? find_get_entry+0x23c/0x520 [ 183.852918] ? find_lock_entry+0x139/0x3f0 [ 183.852929] ? drop_futex_key_refs.isra.0+0x56/0xb0 [ 183.852943] shmem_getpage_gfp+0x203b/0x25d0 [ 183.852963] ? shmem_add_to_page_cache+0x860/0x860 [ 183.885533] ? lock_downgrade+0x6e0/0x6e0 [ 183.889882] shmem_fault+0x203/0x720 [ 183.893611] ? shmem_read_mapping_page_gfp+0x150/0x150 [ 183.898906] ? find_get_entries_tag+0x830/0x830 [ 183.903598] __do_fault+0x104/0x390 [ 183.907496] __handle_mm_fault+0x2460/0x3470 [ 183.911906] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 183.917280] ? find_held_lock+0x35/0x130 [ 183.921342] ? handle_mm_fault+0x1b6/0x7c0 [ 183.925589] handle_mm_fault+0x293/0x7c0 [ 183.929747] __do_page_fault+0x4c1/0xb80 [ 183.933807] ? vmalloc_fault+0xe30/0xe30 [ 183.937877] ? page_fault+0x2f/0x50 [ 183.941507] do_page_fault+0x71/0x511 [ 183.945314] ? page_fault+0x2f/0x50 [ 183.948939] page_fault+0x45/0x50 [ 183.952398] RIP: 0033:0x4533c0 [ 183.955579] RSP: 002b:00007f9c287f77a8 EFLAGS: 00010202 [ 183.960937] RAX: 00007f9c287f7850 RBX: 0000000000000003 RCX: 000000000000000e [ 183.968211] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007f9c287f7850 [ 183.975474] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 183.982853] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c287f86d4 [ 183.990117] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 00000000ffffffff [ 184.007648] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 184.029642] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x1 [ 184.067054] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000006 data 0x1 07:04:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2}, &(0x7f0000000040)=0x8) 07:04:14 executing program 2: [ 184.147112] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000008 data 0x1 [ 184.202453] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x4000000a data 0x1 [ 184.217216] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x4000000c data 0x1 [ 184.227462] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x4000000e data 0x1 [ 184.289502] FAULT_FLAG_ALLOW_RETRY missing 70 [ 184.294528] CPU: 0 PID: 7449 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 184.301464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.301473] Call Trace: [ 184.301496] dump_stack+0x138/0x197 [ 184.301517] handle_userfault.cold+0x3c/0x50 [ 184.301537] ? find_get_entry+0x215/0x520 [ 184.301551] ? userfaultfd_ioctl+0x2fe0/0x2fe0 [ 184.301566] ? lock_downgrade+0x6e0/0x6e0 [ 184.301580] ? find_get_entry+0x23c/0x520 07:04:14 executing program 0: [ 184.301593] ? find_lock_entry+0x139/0x3f0 [ 184.301603] ? drop_futex_key_refs.isra.0+0x56/0xb0 [ 184.301615] shmem_getpage_gfp+0x203b/0x25d0 [ 184.301635] ? shmem_add_to_page_cache+0x860/0x860 [ 184.301645] ? lock_downgrade+0x6e0/0x6e0 [ 184.301660] shmem_fault+0x203/0x720 [ 184.301672] ? shmem_read_mapping_page_gfp+0x150/0x150 [ 184.317903] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000012 data 0x1 [ 184.322363] ? find_get_entries_tag+0x830/0x830 [ 184.322385] __do_fault+0x104/0x390 [ 184.322398] __handle_mm_fault+0x2460/0x3470 [ 184.322411] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 184.322424] ? find_held_lock+0x35/0x130 [ 184.322432] ? handle_mm_fault+0x1b6/0x7c0 [ 184.322449] handle_mm_fault+0x293/0x7c0 [ 184.322463] __do_page_fault+0x4c1/0xb80 [ 184.322476] ? vmalloc_fault+0xe30/0xe30 [ 184.322490] ? page_fault+0x2f/0x50 [ 184.322500] do_page_fault+0x71/0x511 [ 184.322507] ? page_fault+0x2f/0x50 [ 184.322515] page_fault+0x45/0x50 [ 184.322523] RIP: 0033:0x4533c0 07:04:14 executing program 2: [ 184.322528] RSP: 002b:00007f9c287f77a8 EFLAGS: 00010202 [ 184.322536] RAX: 00007f9c287f7850 RBX: 0000000000000003 RCX: 000000000000000e [ 184.322540] RDX: 00000000000003ff RSI: 0000000020012fe0 RDI: 00007f9c287f7850 [ 184.322546] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 184.322550] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9c287f86d4 [ 184.322558] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 00000000ffffffff [ 184.326965] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000014 data 0x1 [ 184.501809] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000016 data 0x1 [ 184.510821] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000018 data 0x1 [ 184.520023] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:15 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 184.549698] kvm [7440]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:15 executing program 1: 07:04:15 executing program 2: 07:04:15 executing program 0: [ 184.767626] kvm [7483]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:15 executing program 4: r0 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000080)={0x4, "9dca50784274d08abbb1fcd26d90a7ee5176258bac03b932ee94abb540d9629b"}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6, 0x0, 0x10001, 0x8000}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000002c0)={r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r3 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}}}, &(0x7f0000000280)=0xffffffffffffffe9) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000740)={{0x0, r4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000480)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x409}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000002000080029bd7000fbdbdf2533000000ac14141a000000000000000000000000000000000000000000000000000000014e2104284e2104010200400008000000", @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000400feff00004e22000000000000000000000000ffff000000000c001c00", @ANYRES32=r5, @ANYBLOB="0200000030001100ac1e000100000000a85a206a490000000000000000ff02000000000000000000000a00080016"], 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0xb9dc7a918fd9db63) r6 = getpid() r7 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r7, &(0x7f0000000140), 0x570, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4000000}, 0x792fdbf82bceb6ff) sched_setscheduler(r6, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000000)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x0, @rand_addr="9db68d65167b482bc26aed6705be1e6f", 0x1f}, r9}}, 0x30) r10 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040), 0x4) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4ce]}) ioctl$KVM_RUN(r11, 0xae80, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 07:04:15 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2000006}, 0x1c) 07:04:15 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000c40)="b1acd27f4fee29f36ee85916073bcc2a46cde96689133c69bc8ffa0465eb4abce2229b44", 0x24, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0xffffffffffffffe6, &(0x7f0000000b00)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}, 0x0) 07:04:15 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x6}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xfffffffffbffffb9, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = memfd_create(&(0x7f0000000b80)='-\'\x00\x10\f\xdex\xf5\a\xd91\xc4dT\x12P\xc6\x89\x0e\x83\xe7\x1b\xbd\xa5\xb4\xc2H\r\xe1\x8e[\xd6\x11\xfb\xfe&\xd2\x18\x88\x97\xea\x8eD\"\x9a\xfbpk\x18\xcb\xb3rR`\xa4\xbbzM\x84\xfb\xbd\xe3c\xe09\xd0\xc4\t\xaf\bC\x81\xb7\x05E\x8c\x8a$\x84\xe3\x06-61\x13\xeb\xc9\xb8\xe4\xea\aSs\rqM\xbbQ\xa6o\x9e!S\x17`\x18V\xbe\xb8N\xad\r9\x15\x8f\x92\x9b\'\xb7\xf2j\xa16\x04w\xc3\f0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:15 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendto$x25(r1, &(0x7f0000000c40)="b1acd27f4fee29f36ee85916073bcc2a46cd", 0x12, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0xffffffffffffffe6, &(0x7f0000000b00)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1}, 0x0) 07:04:15 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x1b, &(0x7f0000000040)=r1, 0x52d) 07:04:15 executing program 1: r0 = semget(0x1, 0x0, 0x321) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000400)={{0x8, r1, r2, 0x0, r3, 0x0, 0x81}, 0x1f, 0x80000001, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f00000004c0)=0x80000001, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) write$selinux_access(r7, &(0x7f0000000080)={'system_u:object_r:var_auth_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xffff}, 0x5a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x7, 0x7f2, 0x2, 0x8000, r5}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 07:04:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r7, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100), 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r9 = socket(0x2, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, r8, 0x0, 0x72439a6b) r10 = socket(0x0, 0x803, 0xff) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r10, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) getresgid(&(0x7f0000000700), 0x0, &(0x7f0000001d40)) bind$x25(r5, &(0x7f0000000000)={0x9, @null='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00d'}, 0x12) dup2(r2, r5) [ 185.027974] kvm [7506]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:15 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrVex:1e', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x7f, 0x40, "c23af4ea8d77717b23a7ef83d034bc4363111425f54c1a98a68336ba2bddcbe7dfcca0e4bd95dbb98c255993a40f50202d3ef087756fb7981543c1001c0a195ad9a95a4e06bd7f0610f20a5d16717ac6165a41f5784a24a33be70927b3fd7fabbb1826a37d3c2b5d40d190e40a9c92c7759228f08d33366a027839c6ccaf94c0f294774dcc51efc6532719a780af02c08988347b1285ab8d0e0e3e7bc3dc7d52cecc98e54e9d6ae0c8029eab9c7a473315bc21136bb19fc3f418e638c39dc67cfed17e85139cf018b90b3e9df50690ab9bcc80584cb11dcf24ab5f64cfbbe7e8b3d1963ae7d099a52f772c760f5e00e0bcbb5ae61d1e2e001e7b46a25832be76", 0xf8, 0x7, 0xa9, 0x7, 0x6, 0x2, 0x2}, r2}}, 0x120) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/49}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) splice(r4, &(0x7f0000000300), r0, &(0x7f0000000380)=0x39, 0xffffffff, 0xa) 07:04:15 executing program 5: pipe(&(0x7f0000000280)={0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x2040, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) flock(r0, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f00000017c0), 0x333, 0x0) 07:04:15 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 185.272866] kvm [7537]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:16 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrVex:1e', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x7f, 0x40, "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", 0xf8, 0x7, 0xa9, 0x7, 0x6, 0x2, 0x2}, r2}}, 0x120) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/49}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) splice(r4, &(0x7f0000000300), r0, &(0x7f0000000380)=0x39, 0xffffffff, 0xa) 07:04:16 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:16 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3fd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\x06', 0xffffffffffffffff, 0x6c00}, &(0x7f0000001fee)='R\trusB\xe3cusgrVex:1e', 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x7f, 0x40, "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", 0xf8, 0x7, 0xa9, 0x7, 0x6, 0x2, 0x2}, r2}}, 0x120) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/49}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) splice(r4, &(0x7f0000000300), r0, &(0x7f0000000380)=0x39, 0xffffffff, 0xa) 07:04:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r2, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x11, &(0x7f0000000200)=@assoc_value={r4}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000000)=r4, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000380)=@ethtool_eee={0x1}}) 07:04:16 executing program 1: r0 = semget(0x1, 0x0, 0x321) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000400)={{0x8, r1, r2, 0x0, r3, 0x0, 0x81}, 0x1f, 0x80000001, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f00000004c0)=0x80000001, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) write$selinux_access(r7, &(0x7f0000000080)={'system_u:object_r:var_auth_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xffff}, 0x5a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x7, 0x7f2, 0x2, 0x8000, r5}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 07:04:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r7, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100), 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r9 = socket(0x2, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, r8, 0x0, 0x72439a6b) r10 = socket(0x0, 0x803, 0xff) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r10, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) getresgid(&(0x7f0000000700), 0x0, &(0x7f0000001d40)) bind$x25(r5, &(0x7f0000000000)={0x9, @null='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00d'}, 0x12) dup2(r2, r5) 07:04:16 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000)={0x77359400}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) fadvise64(r2, 0x0, 0x6, 0x6) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x80) accept(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) 07:04:16 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000000240)) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x161, 0x0, 0x5, 0x2, 0x0, 0x8001, 0x1, 0x0, 0x800, 0x8, 0x0, 0x7, 0x5, 0x7, 0xb42, 0x20, 0x0, 0x86b, 0x0, 0x2, 0x0, 0x4, 0x3, 0xfffffffffffffc01, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffe1, 0x9, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0}, 0x0, 0x1, 0x400, 0x3, 0x0, 0x8000, 0x1}, r2, 0x0, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000002c0)=0x9) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000180)={0xfff, 0x4, 0x1}) ppoll(&(0x7f0000000300)=[{r0, 0x200}], 0x1, &(0x7f0000000380)={r3, r4+10000000}, &(0x7f00000003c0)={0x7ff}, 0x8) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x25}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x70) ptrace$getregs(0xc, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480), 0x1, 0x0, 0x13f}, 0x0) 07:04:16 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:16 executing program 5: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000140)) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xfffff7b7, 0x1, 0xd3a, 0x3, 0x7, 0x1ed5, 0x80000001}, 0x1c) ioctl$RTC_PIE_OFF(r3, 0x7006) syz_read_part_table(0x0, 0xaaaaaaaaaaaac04, &(0x7f0000000080)=[{&(0x7f0000000000)="02000500000a00000000ff07000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) accept4(r3, 0x0, &(0x7f00000000c0), 0x1000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) readahead(r0, 0x800000000000, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 07:04:16 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:17 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x20600) fcntl$getown(0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r2 = accept$netrom(r1, &(0x7f0000000380)={{0x3, @netrom}, [@null, @default, @remote, @null, @bcast, @rose, @null, @netrom]}, &(0x7f0000000400)=0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r5, 0x821, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_hsr\x00'}}]}]}, 0x30}}, 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f00000016c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x21120c10}, 0xc, &(0x7f0000001680)={&(0x7f0000001640)={0x40, r5, 0x9d9ea8538b5d4080, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x20, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sched_rr_get_interval(0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, 0x0}, 0x4008) ioctl$LOOP_CTL_ADD(r6, 0x4c80, 0x0) timerfd_settime(r0, 0x0, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x200, 0x0) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200)='SEG6\x00') sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x88109802}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="04000000000000ea7f1503c0ea4e7b4869ab2706e57a35592908", @ANYRES16=r9, @ANYBLOB="000829bd7000fddbdf2502000000080006000700000014000100000000000000000000000000000000000800050002000000080005000400000014000100ff0100"/75], 0x3}, 0x1, 0x0, 0x0, 0x4040051}, 0x4000000) r10 = userfaultfd(0x0) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000013ff4)=@assoc_value={0x0, 0xfffffffd}, 0x0) dup2(r7, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'gre0\x00', r11}) userfaultfd(0x80400) 07:04:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r7, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100), 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r9 = socket(0x2, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, r8, 0x0, 0x72439a6b) r10 = socket(0x0, 0x803, 0xff) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r10, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) getresgid(&(0x7f0000000700), 0x0, &(0x7f0000001d40)) bind$x25(r5, &(0x7f0000000000)={0x9, @null='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00d'}, 0x12) dup2(r2, r5) 07:04:17 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 186.667493] Bearer rejected, not supported in standalone mode 07:04:17 executing program 0: openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400203) r1 = socket$inet_udplite(0x2, 0x2, 0x88) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x10031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x6d, &(0x7f0000013ff4)=@assoc_value, &(0x7f0000002000)=0x8) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000001c0)=ANY=[@ANYRES16=r6]}) r7 = dup2(r1, r6) dup3(r7, r2, 0x0) 07:04:17 executing program 1: r0 = semget(0x1, 0x0, 0x321) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000400)={{0x8, r1, r2, 0x0, r3, 0x0, 0x81}, 0x1f, 0x80000001, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f00000004c0)=0x80000001, 0x8) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) write$selinux_access(r7, &(0x7f0000000080)={'system_u:object_r:var_auth_t:s0', 0x20, '/usr/lib/telepathy/mission-control-5', 0x20, 0xffff}, 0x5a) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_EXPBUF(r4, 0xc0405610, &(0x7f0000000040)={0x7, 0x7f2, 0x2, 0x8000, r5}) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000480)=0x1, 0x4) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) 07:04:17 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 186.985381] Bearer rejected, not supported in standalone mode [ 186.996301] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 187.032124] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 187.078438] loop5: p1 < > 07:04:17 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="11dca50d5e0bcfe47bf070") r1 = socket(0x10, 0x400000000080803, 0x0) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={r2, 0xd3, 0x18}, &(0x7f0000000180)={'enc=', 'raw', ' hash=', {'nhpoly1305-generic\x00'}}, &(0x7f0000000200)="4ffc451044e1e290e52340aadeb562712204c0e5d513dcc0c6d5203a3357e4017e884b7fa26ebcc487382d9b635fd922003c4c6436724be7694e82360b81fccbb0ff4a811849cd25aad16bbf2d0f6710469ea6ec2f66a318ed341e878de975aa1124c3871b5bdea5d3e14c89559e38e2f6b4e00faa217fc866d3eca5f2ba5c5fc3fcf030c1fcdeb97270b3357fda4e6912ae7ed268fc1c713de3ef408af337eea26eca375ff253e3eaaf2d9c936613a8e82001ea4f45ecdee819299be4fb2abcdc657b5c62a495f3162b13d6148787ae0e9154", &(0x7f0000000100)=""/24) write(r1, &(0x7f0000000080)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24) 07:04:17 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:17 executing program 4: symlinkat(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000880)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x0) r1 = fanotify_init(0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) fanotify_mark(r1, 0x2000000000000011, 0x2, r0, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000440)='./file0\x00', 0x90002) sendfile(r2, r2, 0x0, 0x8800000) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) sendto(r3, &(0x7f0000000000)="3d7929f7e5a0df02f1847622318c90f62a28c14d39602d061e244b54e620b8714844c871f33f779f5b559df4ebc934055d2e7e9b6527806bc13d29ecca53e3c236a3961728b0fc1b9d042d3002920339c94ad390daa329f21c9be4c0011dcfb96f3f9e79683719ceab35330151a2dcaad59eba3c6a4a27504684ca1f392c442fdc96032b1e5f11fcb96098f9bada96333ec9b0a7b27ad78ff8cbc5a39a778009100fdcbcbd22d0063356982a4332f7831eb746b145bd48af274e9f516e88b67670a7417ed6043e0b71cf28edbc83f4b74f85afa3", 0xd4, 0x4008088, &(0x7f0000000140)=@llc={0x1a, 0x30d, 0x1, 0x91, 0x80, 0x1f, @local}, 0x80) [ 187.240454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pig=7598 comm=syz-executor.5 07:04:17 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 187.369402] audit: type=1800 audit(1569740657.859:60): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16625 res=0 07:04:17 executing program 5: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000140)) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000001c0)=@req3={0xfffff7b7, 0x1, 0xd3a, 0x3, 0x7, 0x1ed5, 0x80000001}, 0x1c) ioctl$RTC_PIE_OFF(r3, 0x7006) syz_read_part_table(0x0, 0xaaaaaaaaaaaac04, &(0x7f0000000080)=[{&(0x7f0000000000)="02000500000a00000000ff07000000000000000000000000000000000000000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) accept4(r3, 0x0, &(0x7f00000000c0), 0x1000) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) readahead(r0, 0x800000000000, 0x4) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0) 07:04:17 executing program 0: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000, 0x0) futimesat(r0, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)={{0x0, 0x7530}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) readv(r3, &(0x7f0000002580)=[{&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/214, 0xd6}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/214, 0xd6}, {&(0x7f00000024c0)=""/182, 0xb6}], 0x5) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8) ftruncate(r3, 0x200004) sendfile(r1, r3, 0x0, 0x80001d00c0d0) r4 = semget(0x1, 0x2, 0x400) semctl$IPC_INFO(r4, 0x3, 0x3, &(0x7f0000000200)=""/4096) 07:04:18 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r7, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000100), 0x0) r8 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r9 = socket(0x2, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, r8, 0x0, 0x72439a6b) r10 = socket(0x0, 0x803, 0xff) connect$inet(r10, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r10, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r11, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r11, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) getresgid(&(0x7f0000000700), 0x0, &(0x7f0000001d40)) bind$x25(r5, &(0x7f0000000000)={0x9, @null='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x80\x00\x00\x00\x00\x00d'}, 0x12) 07:04:18 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) creat(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x1000000a0160101, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x5}, 0x1c) write$binfmt_script(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0xfdef) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfffffffffffffe5d, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000931c972fdd480cad5cd1f5cf051ce9723ecd1ce24509b9b117e7a1e325b6a39329fdf43b3d6893be3997c43d27e9c3a0fb9a780c86315db132c3433abbfd5dfa74768e73aea0c31c5b163a33b152"], 0x28}}, 0x0) 07:04:18 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 187.806899] audit: type=1800 audit(1569740658.299:61): pid=7636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.4" name="file0" dev="sda1" ino=16625 res=0 07:04:18 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x12}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe0b, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) close(r1) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) write$FUSE_IOCTL(r3, &(0x7f0000000080)={0x20, 0x0, 0x8, {0x2, 0x0, 0x200, 0x2}}, 0x20) close(0xffffffffffffffff) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x2, 0x0, 0x2) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) r4 = epoll_create1(0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000000)={0xe}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8916, 0x0) close(0xffffffffffffffff) close(r0) [ 187.884715] syz-executor.4 (7636) used greatest stack depth: 24048 bytes left [ 187.964387] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 07:04:18 executing program 0: creat(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devpts\x00', 0x0, &(0x7f00000001c0)='/selinux/policy\x00') r0 = gettid() tkill(r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = getpid() open(&(0x7f0000000080)='.\x00', 0x0, 0x0) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000100)) sched_setattr(0x0, 0x0, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000900)="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", 0x107, 0xfd}]) 07:04:18 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) getresgid(&(0x7f0000000700), 0x0, &(0x7f0000001d40)) [ 188.236094] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 188.277849] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 188.289623] devpts: called with bogus options [ 188.299151] loop5: p1 < > 07:04:18 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x1aa0, 0x8003, 0x4, 0x0, 0x9, 0x5, 0x81, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="000006000100fcff00080c0007007f00"], &(0x7f0000000200)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x72439a6b) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 07:04:18 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:18 executing program 1: gettid() socket$inet6(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x6, 0xa0f}, 0xc) poll(&(0x7f00000001c0), 0x0, 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x40002) creat(0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x141480, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x11, &(0x7f0000000200)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x2, 0x20}, &(0x7f0000000280)=0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) mknodat(r7, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:04:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x1aa0, 0x8003, 0x4, 0x0, 0x9, 0x5, 0x81, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="000006000100fcff00080c0007007f00"], &(0x7f0000000200)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x72439a6b) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 07:04:19 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:19 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) sysinfo(&(0x7f0000000000)=""/22) socket$vsock_dgram(0x28, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f0000000040)=@default) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x1aa0, 0x8003, 0x4, 0x0, 0x9, 0x5, 0x81, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="000006000100fcff00080c0007007f00"], &(0x7f0000000200)=0x14) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x72439a6b) r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x89f1, &(0x7f0000000180)={'ip6gre0\x00\xeej\x01\x0f\'@\x03\x00', @ifru_flags}) 07:04:19 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xffffffffffffffd3, 0x450400) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000080)={0x6, 0xa, 0x39, "c79ec06de5551fb1e0423438e074ca401622f292b1fef3574be8c3938d2c93b5918a5f9661684fa017911b7be73d1d3d7856f51f7511dd0bd3c4be90", 0x14, "cdf8ed7a64638d34cb8a569902b01f4fc3e4e787dc30cbe90abcaf80c1c4cc20fdd41dbb8bd97394ef318321ddb5d28a8784b8b095dbf7f6ce751f88", 0x70}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@rthdrdstopts={{0x128, 0x29, 0x37, {0x16, 0x21, [], [@hao={0xc9, 0x10, @rand_addr="cb7f747e0f255997c638090855ead8aa"}, @generic={0x4, 0xfa, "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"}]}}}], 0x128}}], 0x1, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000840)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r1, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) 07:04:19 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 189.081004] devpts: called with bogus options 07:04:19 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:04:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x5, 0x6, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r5, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x5}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8, 0x1, 'htb\x00'}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x5}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0xfd08, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a80000002c00070500"/20, @ANYRES32=r4, @ANYBLOB="000000000004ffff000000002b9fdbe79197f4e552381645eec5f7b790ab0e59dbdc6829d5daafd5af3db10555996453a0e5eaf111e5d1c41f841292869b689ab0fb77cd66f2ecde825819908aad76ce382881ba4448c7b360ab69df8e56ec6745717e5085dd6e09d502d15e792675f62378b09f8344"], 0xa8}}, 0x0) 07:04:19 executing program 5: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xae, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000)) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfff, 0x431001) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.events\x00', 0x0, 0x0) fanotify_mark(r1, 0x1, 0x1, r2, &(0x7f0000000100)='./file0\x00') [ 189.403163] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:20 executing program 4: mkdir(&(0x7f0000000340)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) rename(&(0x7f0000000300)='./file1\x00', &(0x7f0000000040)='./file0\x00') r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000280)={{0x5}, 0x0, 0x5, 0x0, {0x3e, 0x5}, 0x9, 0x9}) socket$unix(0x1, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='fuse\x00', 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f0000000480)=""/164, 0xa4}], 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ptrace$poke(0x4, r2, &(0x7f0000000080), 0x81) mknod$loop(&(0x7f00000001c0)='./file0/file1\x00', 0x0, 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000001780), 0xfffffffffffffe9e) 07:04:20 executing program 1: gettid() socket$inet6(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x6, 0xa0f}, 0xc) poll(&(0x7f00000001c0), 0x0, 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x40002) creat(0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x141480, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x11, &(0x7f0000000200)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x2, 0x20}, &(0x7f0000000280)=0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) mknodat(r7, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) [ 189.474089] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. 07:04:20 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 07:04:20 executing program 0: gettid() socket$inet6(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0x6, 0xa0f}, 0xc) poll(&(0x7f00000001c0), 0x0, 0x5) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x20, 0x0, 0x40002) creat(0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r1) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x141480, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r4, &(0x7f0000d83fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x11, &(0x7f0000000200)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={r6, 0x2, 0x20}, &(0x7f0000000280)=0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x9f) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) r7 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x10) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) mknodat(r7, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 07:04:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) 07:04:20 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:04:20 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x408000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000100)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="24000000210007041dfffd946f610500020000e8fe0200000001080008000c000400ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 189.714557] kvm_hv_set_msr: 255 callbacks suppressed [ 189.714568] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000004 data 0x1 [ 189.774431] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000006 data 0x1 [ 189.786363] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000008 data 0x1 [ 189.796127] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x4000000a data 0x1 [ 189.798721] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 189.809186] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x4000000c data 0x1 07:04:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x660c, 0x0) socket$key(0xf, 0x3, 0x2) [ 189.822893] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x4000000e data 0x1 [ 189.833238] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000012 data 0x1 [ 189.852334] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000014 data 0x1 [ 189.874862] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000016 data 0x1 [ 189.885475] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000018 data 0x1 [ 189.894551] kvm [7786]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:20 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:04:20 executing program 5: ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)="416623d45414ab4beb8860474d0f44cc5077c945307e121952cafeeef4a83d5caea9e3aaa9a0472dee505430e9ccad09e507af1cdf5ac1045f084057f4018b0a5e7d4c5a53065fbe8607e983ce0249c30aa99cc609b305d469b374") perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10) mremap(&(0x7f0000282000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000268000/0x2000)=nil) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r0, &(0x7f0000000140)="7c0d111317b1ff8ec8f29f81319ec5b10d0d000000efd9448dbef1ffb4e3a6af87131512da528f6235fe35d3053b5cb4877c1b89bbf83f6d749d5b00679601a3abdc204cf1ad797252bb0c7b43e3e9763221cb2c8d76f824f4bea338f53aa75703f465e50e434e2193900c39ab79d37cc0ce7a", 0x2fdf442dff3bb63, 0x401c005, 0x0, 0xffffffffffffff36) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f00000000c0)) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x0) socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda060200000000e85500dd0000040d000600ea110200000500", 0x27}], 0x1) [ 190.099391] kvm [7804]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:20 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:04:20 executing program 4: syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r0 = syz_open_dev$sndtimer(&(0x7f0000000340)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r2 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x200, 0x1e5) r3 = openat$cgroup_ro(r2, &(0x7f0000000480)='Cpuacct.@tE\xae\x00', 0x275a, 0x0) r4 = creat(&(0x7f00000001c0)='./bus\x00', 0x160) fallocate(r4, 0x0, 0x0, 0x2000002) read$eventfd(r4, &(0x7f00000003c0), 0x8) poll(&(0x7f0000000300)=[{r3, 0x20}, {r3, 0x400}, {r3, 0x4000}, {r3, 0x4000}, {r1, 0x100}, {r1, 0x5000}, {r3, 0x200}, {r0, 0x100}], 0x8, 0x9) fallocate(r1, 0x800000000000002, 0x6, 0xffffffff) r5 = creat(&(0x7f0000001c00)='./bus\x00', 0xa1) r6 = socket$inet6(0xa, 0x400000000001, 0x0) accept4(r5, &(0x7f0000000240)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f00000002c0)=0x80, 0x80000) r7 = dup(r6) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r6) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f0000000640)={{{@in=@rand_addr=0x8001, @in=@broadcast, 0x4e22, 0x8, 0x0, 0x7f, 0x2, 0x0, 0x80, 0x32}, {0x0, 0x1, 0x100, 0x800, 0x8, 0xffff, 0x8, 0xffffffffffffff7f}, {0x0, 0x0, 0x1, 0x2}, 0x5, 0x6e6bb5, 0x2, 0x1, 0x3, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0xc}, 0x0, 0xff}, 0x2, @in=@multicast2, 0x0, 0x1, 0x0, 0x1, 0x3, 0x2}}, 0xe8) ftruncate(r5, 0x800fe) setsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000580)={0x0, 0xee01}, 0xc) getsockname$inet(r5, &(0x7f0000000080)={0x2, 0x0, @empty}, &(0x7f0000000380)=0x10) sendfile(r7, r8, 0x0, 0x8000fffffffe) sendmsg$nl_netfilter(r8, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x10cb}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfa\x81\x00\x00\x00\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7.\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) [ 190.445755] kvm [7817]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:21 executing program 0: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000240)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f0000000140)) openat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x80000, 0x20) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0x76656f) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@local}}, {{@in=@multicast1}}}, &(0x7f0000000280)=0xe8) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x670, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000180)=0x0) io_submit(r4, 0x732, &(0x7f0000000540)=[&(0x7f00000000c0)={0x900000000000010, 0xc00000000100000, 0x80000000000000, 0x1, 0x0, r3, &(0x7f0000000000), 0x377140be6b5ef4c7, 0xe0000}]) 07:04:21 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:04:21 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0x6, 0x8) r2 = socket$inet(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x50, r4, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, '\nblcr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x50}}, 0x0) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x54, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffe1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8001}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x1880) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$TIOCLINUX5(r6, 0x541c, &(0x7f0000000080)={0x5, 0x7, 0x1, 0xed1}) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) shutdown(r2, 0x1) r7 = openat$cgroup_ro(r5, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r8 = geteuid() write$FUSE_ENTRY(r7, &(0x7f0000000380)={0x90, 0x0, 0x4, {0x5, 0x3, 0x80, 0x3f, 0xffffffff, 0x400, {0x6, 0x3, 0x6d3f, 0x6, 0x1, 0x5f2, 0x10001, 0x43fb, 0x6, 0x1, 0x7, r8, 0xffffffffffffffff, 0x4, 0x8000}}}, 0x90) dup3(r0, r2, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) fchmod(r9, 0x4) 07:04:21 executing program 1: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8, 0x438000) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x0, r2}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) r4 = dup2(r3, r3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000480)=0x0) ioprio_set$pid(0x1, r5, 0xaf) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af21, &(0x7f0000000380)={0x0, r3}) r6 = dup3(r4, r0, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x7, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x100, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x80}, [@NDA_DST_MAC={0xc, 0x1, @random="01e90c293636"}]}, 0x28}}, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000003c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000300)={0xffffffffffffffff}, 0x2, 0xffffffffffffffff, 0x1c, 0x1, @ib={0x1b, 0x8000, 0x0, {"d02eda231e116d9b7b943dd0d35fbd18"}, 0xb368, 0x0, 0x1000}}}, 0xa0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r9, &(0x7f0000000340)={0x11, 0x10, 0xfa00, {&(0x7f00000002c0), r10}}, 0x18) ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f0000000200)={0x2, 0xa12, 0x2, 0x0, 0x0, [{r7, 0x0, 0x4}, {r8, 0x0, 0x3}]}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x724, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r11, 0x6, 0x91af, 0x7}, &(0x7f00000001c0)=0x10) 07:04:21 executing program 4: perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400000, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) recvmmsg(0xffffffffffffffff, &(0x7f00000079c0)=[{{0x0, 0x0, 0x0}, 0x100000000}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000440)=""/193, 0xc1}], 0x2}, 0x4}, {{&(0x7f00000005c0)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f00000002c0)}, {0x0}, {&(0x7f0000000800)=""/47, 0x2f}, {&(0x7f0000000840)=""/104, 0x68}, {0x0}], 0x5}, 0x9}, {{0x0, 0x0, &(0x7f0000001a40)=[{0x0}, {&(0x7f0000001540)=""/241, 0xf1}, {&(0x7f0000001640)=""/24, 0x18}, {0x0}, {&(0x7f0000001880)=""/214, 0xd6}, {0x0}], 0x6}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005680)=[{&(0x7f00000055c0)=""/162, 0xa2}], 0x1, &(0x7f00000056c0)=""/160, 0xa0}, 0x8001}, {{0x0, 0x0, &(0x7f00000078c0)=[{0x0}, {&(0x7f0000005840)=""/58, 0x3a}], 0x2}, 0x1}], 0x7, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="ae0f6625968aea9c74fe44544a8d3f871aef9592c40136e109934c00005d01f367f2db759e01e26816b04f08c571ad206fdd4080016244acb72d267cbde9406d0fd5b347608bb08803ab263ce150730d637e75673a36b58134e27b79fdba834eb3ea3da6eea15283a3978ae895d0", 0x6e) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000ec0)=@nl=@proc, 0x34e, &(0x7f0000001180)=[{&(0x7f0000001080)=""/251, 0xfb}], 0x11, &(0x7f00000011c0)=""/157, 0x9d}}], 0x1500, 0x0, &(0x7f0000001380)={0x77359400}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) 07:04:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r10, 0x660c, 0x0) [ 190.753939] kvm [7829]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 [ 190.793277] IPVS: Scheduler module ip_vs_ [ 190.793277] blcr not found 07:04:21 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:04:21 executing program 4: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 190.995656] kvm [7852]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:21 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:04:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 191.196613] kvm [7861]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 [ 191.210884] kvm [7863]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:21 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:21 executing program 4: r0 = socket$unix(0x1, 0x1, 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x2001001, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) ioctl$VIDIOC_S_HW_FREQ_SEEK(r2, 0x40305652, &(0x7f0000000040)={0x7, 0x2, 0x6, 0xfffffffa, 0x400, 0x9, 0x2}) r3 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x28001, 0x2) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x40000) write$P9_RLOPEN(r3, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x80, 0x8, 0x5}, 0x9}}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_mcast\x00') r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x6f0a77bd) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x800, 0x1, 0x6, 0xffff0000, 0x2}) [ 191.431240] kvm [7870]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 [ 191.508770] audit: type=1804 audit(1569740661.999:62): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir933721823/syzkaller.nnhh90/25/file0" dev="sda1" ino=16642 res=1 [ 191.628492] audit: type=1800 audit(1569740662.069:63): pid=7831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed" comm="syz-executor.0" name="file0" dev="sda1" ino=16642 res=0 07:04:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @bcast, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') pivot_root(&(0x7f0000000340)='./file2\x00', 0x0) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="000010200000c20419018304010801070000e063cbf631ca0b41c9b977fa0c37707273000000062f62851cbc5f1aeb37ac93d3b060"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000fc752f792aa20b3dc2e2aca5ae3dbfb07d36530e5ff1dac716bf15b5"], 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x242, 0x2efd1b25e9e7a65a) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000500)=""/175) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000440)={r3, 0xc000000}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/115, 0x73}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000b80)=""/47, 0x2f}, {&(0x7f0000000bc0)=""/90, 0x5a}, {0x0}], 0x3, &(0x7f0000002e00)=""/178, 0xb2}}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003200)=""/4096, 0x1000}, {0x0}], 0x5, &(0x7f0000004440)=""/2, 0x2}}, {{0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f00000069c0)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006d00)=""/179, 0xb3}], 0x5}, 0xfffffffffffffffd}, {{0x0, 0x0, &(0x7f0000007500)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}}], 0x7, 0x1, &(0x7f0000008b40)) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') setxattr$security_ima(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000007580)=@v2={0x0, 0x0, 0x1, 0x6e27, 0xe00, "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"}, 0xe0a, 0x2) 07:04:22 executing program 5: mknod(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./bus\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472cc6e733d7463702c706f72743d3078303030eeb0be9c3030303030303030302c70726976706f72742c00"]) 07:04:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x591601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040)="11ee791a805ee066a85db4095b36e218e7cbdb8c1e308dc69462007706cf1924ed6f7a", 0x23) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xffff1e77}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:04:22 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) [ 191.822894] 9pnet_virtio: no channels available for device 127.0.0.1 [ 191.855631] 9pnet_virtio: no channels available for device 127.0.0.1 07:04:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4cb]}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000080)=0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33c9c523f3a42703, @perf_bp={&(0x7f0000000400), 0x1331045151d1a20f}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 07:04:22 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) geteuid() socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000040)=0xffffffffffff0001) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000a73ff0)='/dev/sequencer2\x00', 0x8002, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x2, 0x9, 0x40, 0x5, 0x5, 0x0, 0x1f, 0x7e, 0x0, 0x3}, 0xb) dup2(r3, r2) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) [ 191.875253] kvm [7887]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 07:04:22 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:22 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) write$9p(r0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x124) write$P9_RREAD(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="0486700420b7732f040000000000000035ad0030fd4f1b18ee647a0076ad082ae637aecdce667e4877e25c903b1605b0a8af631a696c8cdf8c28ec88e18264c1b741308b8c0a5518efc0f99d93a6ee5d4d8ec0ccdaca21f405f9804681cc8715f2c11b55d0dcb138773e46c5c19f7e95faf80a1c9327dc24eb172a44149f326a9a00709a"], 0x1) fallocate(r2, 0x0, 0x40000, 0x4) fallocate(r1, 0x0, 0x0, 0x110001) fdatasync(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) fstat(r4, &(0x7f00000002c0)) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r6 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r2}) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) ioctl$sock_netrom_SIOCADDRT(r7, 0x890b, &(0x7f0000000340)={0x0, @null, @bpq0='bpq0\x00', 0x8, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, 0x8, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) [ 192.104890] kvm [7913]: vcpu0, guest rIP: 0xcc Hyper-V uhandled wrmsr: 0x40000020 data 0x1 [ 192.134946] overlayfs: './file0' not a directory 07:04:22 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @bcast}, [@bcast, @bcast, @bcast, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}, 0x48) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') pivot_root(&(0x7f0000000340)='./file2\x00', 0x0) socket$caif_stream(0x25, 0x1, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="000010200000c20419018304010801070000e063cbf631ca0b41c9b977fa0c37707273000000062f62851cbc5f1aeb37ac93d3b060"], 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0000fc752f792aa20b3dc2e2aca5ae3dbfb07d36530e5ff1dac716bf15b5"], 0x1) r2 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x242, 0x2efd1b25e9e7a65a) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000500)=""/175) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000440)={r3, 0xc000000}) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000008880)=[{{&(0x7f00000000c0)=@generic, 0x80, &(0x7f0000000380)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1, &(0x7f00000003c0)=""/115, 0x73}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=""/71, 0x47}}, {{0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000b80)=""/47, 0x2f}, {&(0x7f0000000bc0)=""/90, 0x5a}, {0x0}], 0x3, &(0x7f0000002e00)=""/178, 0xb2}}, {{0x0, 0x0, &(0x7f00000043c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000003200)=""/4096, 0x1000}, {0x0}], 0x5, &(0x7f0000004440)=""/2, 0x2}}, {{0x0, 0x0, &(0x7f0000006dc0)=[{&(0x7f00000069c0)=""/160, 0xa0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000006d00)=""/179, 0xb3}], 0x5}, 0xfffffffffffffffd}, {{0x0, 0x0, &(0x7f0000007500)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4}, {{0x0, 0x0, 0x0}}], 0x7, 0x1, &(0x7f0000008b40)) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') setxattr$security_ima(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000300)='security.ima\x00', &(0x7f0000007580)=@v2={0x0, 0x0, 0x1, 0x6e27, 0xe00, "16dc33065e4310b8ee7a8cfe0e3371406e9a1f70c4b96e09694e47e7777f3ad13fd8e5e7f622bb1f5412741b76458aadd7ceeac042ae242d95a7baf70c5c619eace7ddbb384a0c7e70f5eb66fa4b6a422c512765a8d543a3282bd2e89c0e53c56584c100d9111edbab45e8c1bcc68fa0003d0d8321deff6c83592645382f7e60a13105b3f4d89d48a3b2ca7de6e23b34d7344d0a1347315949ccd6741d6750f3c65c6fd6d5d0eeea9310e9862edcdf18ae8e6dbdbce5719f0cfaa0f2c8f6f9d841877499f9bca94f12f6b2dc7b9e787e30be0471b418f8766a75c830abf9388a0992204f70e1cc3dfd35ffa83690dd6b4f17d5368e04b2d2617da95ec5a8e521a45ad7c3f3770a8aed0d27d88ff1c70d68e9872bf4a0d86471adcfd03b10382f6a291c1c4fdd45a571f6d47f33950168ab68a8c60c61098cc32a80063f472466b6df9dff27f2dc988d8e43f54b0fff679d0ec13f243344ba52b287553aea1a7a033dc8b6a96a18fa56dd5185206bafb61d19357b35d1a33a43f139afd9f7824f13ac950fd6cb90c9650f24c2dd2d97d153074a1df1a4bf707e66ed7f42f4dc3540c9f6176885e7d60a5ea3089789070dd8b75eaad5551ce2c84d2cb963a5f71370c8a2da494460328388d1064aed9c72f810a2a08f14d58944e52cae96161e4eecc784506557a335f063a5c53455950b66cfed8fe2f44b324a881f6cabf3dd8ae1544cc20530feb288b7b7a4f874ba961ba6701fbf9b43d677430824c7bd264da801bf29f4b1df74b4e9ca4b1e474d18a52171c68ceb230404e6a6d13df7296598fcd28341c4bc84021001a08dea5f2f78986af49c7951adc858be7a371bfe1643d1151f8334eb3234dfb19588ac2a891523ad8c6f187481499dc5c8045a3def8f02012b9df0f0f84db70db0f463a45a1dfd6cd7befbf826701f06311e3ecb43b830c38368fd222f6669cce8caac370887672e9eedab290f02dd463f16ea4f6d919ab738bcf330c728b10ee980f346f7507e4bc4b848b0e38caace0935c94e3da4fec497792c5c783b0e631391d14af58339d1989896b1ed01c7d7c22c85485c68d6a6c360d1dfdf42340f4e498b0c8c184e1209a777d00bad28a9809bf24dfb1e8f3f6adb69ea56cc292084c2403b570cac737341ed274aea7d1a764557d256aac571e2a759282039048fdc611b62797d6d326187f3961d01ac6ec648720b03894f5b5d6ca6043ebbef314e6cff286600cbfd09c05c995de003b0eca5c0db94b2313ffc69b5bee5781d1df95e05c3e95737c80d8da77db422cebd4cf819ca5b39bafd93ca9b9485b5b41552401ea568517970e8b6acb775e2edbf07d2e5273b46501ed70906a680ed546367abc6a16c86c615ed09602e74b86261e8e0034359a3e68e228f491216f2b16cab36cc9aa145ef1bb53b389ddade298da5086d078bbe79513a1d806dbc4ba4cf6f4c34922113c7817b187cb4a72d6fed72f4409e7c54bb285b4d08a954937e2ef36e3765450cc02fcf7eb0f32e3cf9d8b79be18f281e91fdd9cbe52217ad90424ecbdb623926985553d7f38c73a859703bd03fa544cdca30389286a61ed4b851673b030926aafa6f1bf8af7c7b82c414f80b934dd068bff4f1ba9fd04d47aa4fcf34f3d881b623f8cce88db9c2cc1eee5af0876b5be529bb0ad1492b7fc4246e4b36574842f3a3af9a0d1b495cde742e4d6d3e35e93a6799f31ca2dfeb55938347b3fc6e3c5ff3dc8ef07d87ef1eb21c67c1e9b5306e87f2b3defa587b2bc612564c855d605710be4c1d886f8336f8e28bea021052d2097384b35e670344ab12585240768ff3ed183fe5478f709992e4e65a9ca123bbcbff3e6f4943dc593b586e653a37effaa080e1a4feeb36fe628764bcbc750a43d058a9fcdb292f3c9f0d6989e5d71262f02995707dd224df85526ed41437cb0fcc5bb524b6d3cea7b8a7b9c6dcccbe92e0d3d8af629154477e39ec5988fe27b6ea644a85e20549a5a348d63947ea5a7ddb3336dee2eabbca61219426064a83462706a02511adf3c75cfb50755300e8c9188b43fe67662d2c33ebb7be415bd2924f001b40125a044c0fc29b4c96a535b53770594fb500c0ef057f29088f91206e9fef4643ae63000d3bab7a6d85d20c6837957f5a5bae7b4ae9120a6f16e0971b55a488e7b10d24374b4b23aa906a62cc43f129306ad44af004b2e43d797bbcdf12c521458cc77dc5fdf990acfb0828ead0b8099e9dbdfc3eba243971a894dbd588c20f2ab614dee76b0dbe31575ebbf95f8694e199b60858c94415d79071968cb42a4716de391ec9aef49fa366354b9291487432d95e003e942a9bfa6558207abb3b21e059b625d27672a724bfce0be7e5b9e3fb781141427d5ae3b8c97009eb7ab5ff1c01fa974b0db0ec6f8840711c9c7bdd93b184564c3797cb901b98ceb2f9501dc9a5863be57d9a26bac76806cd016bf9cabd8edcc86008cd2e9a670df5aa282bf92003476a3ed4b31ce1104844676bd8d3fc71301efc959c02d8e0b836234267c886da729fb8344862b758d43acaefb1a4300eec986698b861e079a5c965370ecc105629dd744c66e1abb6daafbca0b59fcd7be62fe164bb79612c77b0dd849603f719e9c2511070becf09eceb94d5e097993a4ad7c9f7f7c041a931c46de33af3499cfbb36b2296554d1f6583a4f3108fa54ed3b0ad954e3b458af11692cfb7be76b5b73b970390d6315553c0fa9ce01fcb8fb5875ada2f6399c911db408fb5be24a74de14fe7e3c98fdbd2f91510257cef25d91c9e7c8400a7534f3d7752a09366802b0ef4f15da85cd92bae85d1ff7f5af9ceba1e69f4aeb9ee1ef0314cf0dcd007347f1137421519f4e4e928e1070ee3dbcda88cd3faba6765576f4a0791e980f0388c1a4c0bf003c1a9d0c16640cf2fb307a58a70f38abe8aeb243be630c4fe355afc5a01e54e06152fdc3abe87c4ccd0452e5c9d54f573cc257a9f02e36303cd8921db5cd2404c6d95af465cdef2b27263d2d55c7f869f6625428f1cbc92a5be719622eca2872ba37674b69714a4c7938dff66505f10d10afe7748c6399c572214d0a93e414a446d75c2cf9b6d547b73f3715fd074396b0d2bdc8309c79634aa762195190c86c254c37162d4714f752cff172565bf743b256886235c2603b60dee88113d1fea36f2e6e185ec8479f167bec03990ebc3017c53e6eaa6b1583680cc442dc58eb37cc4d604aa144768ed1249b2daf5ef0b8522e05f9e27fd09087b27da59784283fad881f4eb279b426dd63c7023e5dc2689d174a320de30e6556b998440b02abaf3c457ec8f34b1ee53dbfdba0528307fb5140ad90565b8a7c7133b840310ba3606bb108ce578d6e0d533ec85b7785fab2104a3b8f1ad2564cc24111c071ebe37df74a0f03241c1eda09257d82eda4e8201d06ddbacc56324fbf171014bcc310bc6acbabb17fd6606183d52f53565b7a376bc1e5246669e656e64364482d08f434358f9bfb163a161d17f813f198cd94d30f31930559cc7baec70e06a39bcbb0d93a1a90c7a33eccc5289be9c1d5f796475280978b03daafb2ea9a256c3ca661d18543d4d83cac67de7ec07271f5c29277c8ea0169360d36c0f3af39999bdbf7fe7581bf66fc4a3ed2ee298c556dd79ead74a16f9468bbb02c299e53161818e39ffb47ff974205e8bdf2325b8ee345fe4a912b58938801081f5875b0ff2473d49749afd32ba0d749b8395bcc757fdca219c5e2b5a94766157d00dc006d2c269626ccbd4651f327c5418d3ca9b8cfaa97dc2ca98dcd66206c022fa8eb2d91429559830aca79a338930f4411fcd9ea0c1a5d7eb265abdfb6169d3a15e2e5207a504110c6b64ae255851d7d2370ba001572ea9699a88dc6ef5471f4215a32cbb1405f1a668d0c769418e4e797046ba99cd8c179218f2d3b3d043ef665a68da5faabed2eaead8131e92266e221a02263803d22b4331c1574b61fa275e0d9c402be3ec7c3f0002ea04af49990f5219ff5831fba54fde3f5396c759fb1d6aa90376c8b0dcbd2b9ce6cb05ac6981591ec14d448fb6539b6aa02679950bac68527d7ce7dca87f165f9e80e8fd943f393504e253c36c55f99c5ab8167c16aa6f153f9a80c5fa1d5217822fb9ce2d0d7de4ecafe8f233e06ef5445018d2c0b1580b4cb7b59c4219b728118750599b20b594db0a93df69a20ab20d52db50432fc522de58d7c861e7780cd294dc379dbf2615a7b2b2c608b5c55d12d3892575e8ee3f2a5f3936a24a59ccca9d5b95d9771b447d7a3e16d55e8214952a8d3c7fbf7bbc12eca49338d14d30ef39b9e880425c90cd9202217af13c303eb283008ba4679dd3b57b472a2402e325f8ac3279a89e2729197913df956f559fb1bf9bb9797a8cd6ba65c59c4e5c59733f621ae3b9ba87097ddb3dd8e535dcd990c634560cd71de8286a5ce4f4a01e3467a4618112d387afa7a4646b4895aac072ecf83888d8d3f2c4623b1b884b6960fea5455eaf70c6f3b984570f101799a33d327c67133edf657ae8e8a7b3dae316a2dbf8f5e569463fab9b5eaef7a3f0a8210945e0f62fa7dc1854087967d5c5bf81ee5fe500f61c20a87a73268c420c8333ebac445dc6f9d811141e91dd1ae58f8e28a1f940847b3ad3ddfb013b26302fd05e7d906829f558a7d0d64782051c481e5a817d9f8d1a5cd4927b7f5e2b0b2b51a38d89de70af977296132de555eb5597035ad2c2b0089e2ae425b1c4addf511b40cb758f4ccbe23e1e6bb9486636bee1400d152ac03526a3467d58b440300c438252813e2295e7b33bad27c2be48fa6cb73457710ffe55ecfa95a015b5f7699561ccbf8faf13b2929320a46b4b80af6fbb86088ba1d82c24bf078afac89eff2857a163c958743dbb6961143badfd64a8ea9bfec131002ca9099e3b421d7b098f38e6a45d38e7c3278844dec5574170911f9e851a2c348a2fdcc05e7303307dd5fd050a551636b6a16e749179a3c53b3c0219bac241b2a8c00448ffffd25e35a860e853514bd033f0701f14b96337b87f2afa9d45fd04ffec8639795134"}, 0xe0a, 0x2) 07:04:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) write$cgroup_pid(r10, &(0x7f0000000080), 0xfffffe38) 07:04:23 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$setlease(r0, 0x400, 0xc3bb64d03972d022) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000a21000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000cdf000)=@routing, 0x8) writev(r2, &(0x7f0000f7ffe0)=[{&(0x7f0000357000), 0x1023c}], 0x1) 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = dup(r0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="280091df9c0c00", @ANYRES32=0x0, @ANYBLOB="000000000c0001002a52f74d95170000"], 0x28}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$FUSE_ATTR(r3, &(0x7f0000000080)={0x78, 0x0, 0x6, {0x6, 0xbc}}, 0x78) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r3, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCSREP(r4, 0x40084503, &(0x7f0000000200)=[0x1, 0x4]) ioctl$FS_IOC_GETFLAGS(r3, 0xc020660b, &(0x7f0000000000)) 07:04:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000080)={0x54, 0x72, 0x8a4, {0x7, 0x7f}, {0x2551, 0xfff9}, @rumble={0x0, 0x8}}) ioctl$VIDIOC_G_MODULATOR(r3, 0xc0445636, &(0x7f0000000000)={0x6, "5ba9be8329120733022f1b8c3d7b8090c49a8ef06c7a666124af2acd49a123e8", 0x400, 0x9, 0x4, 0x4, 0x3}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x39, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001400090500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="1400060000000000ffffffff00000000000000000800080040000000078f682a4567a9e18ac60085a25a3c7ce706663c33973c1404e17af668932df8e40e40a349410ab5bf023c69af6e0b41b96b2f3953f43e19936215360ba3a30eea4c80b88baad876ae86272c00025933300c578d31115ff8ecff092ae4b6e4f68f867a59cc9f35fd4d"], 0x34}}, 0x0) [ 192.556583] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3228 sclass=netlink_route_socket pig=7935 comm=syz-executor.1 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:23 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = getpid() sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) capget(&(0x7f0000000200)={0x20071026, r0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7f, 0x37b4bc7d, 0xac}) chdir(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x530, 0x2d0, 0x0, 0x1b8, 0x3b8, 0x3b8, 0x498, 0x498, 0x498, 0x498, 0x498, 0x6, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x18}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@ip={@broadcast, @multicast2, 0xff, 0xff, 'syzkaller1\x00', 'syz_tun\x00', {0x80}, {0xff}, 0xff, 0x0, 0x40}, 0x0, 0x98, 0xd0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff, 0x2, 0x1}, {0x2, 0x81}, {0x7f, 0x22, 0xd1}, 0x2, 0xff}}}, {{@ip={@multicast1, @loopback, 0x0, 0xffffffff, 'yam0\x00', 'ip6tnl0\x00', {0x7f}, {0xff}, 0xe1, 0x0, 0x2}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x2, 0x40}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x8}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x5, 0x3f, 0x8}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00'}}, {{@uncond, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, 0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x8f) r2 = creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0x4}}, 0x20) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKIOMIN(r3, 0x1278, &(0x7f0000000100)) r4 = syz_open_dev$vivid(0x0, 0x0, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000280)={0x0, @raw_data="e2c07d6cf34bf7373565792741030de9a1e6aed734cf96219aef2e7161b85c9bcef026dd8b9ed964f27968e1ae04e4d670f21d37430ba4a233cb3210be29d673e331782805750fb60d88599cb98b2fdfb5c8d37b2d44b2670d24b2cff3eeb345da7557447501fd0b92c09a9f1dda3cf986ccfdc0c44cd457c286c7d9e167854fe4c2da327c794b44d6d17d0b6d6a14ba1d6ad70966091586e5db2b4c3f4f50e18fabe3d3a5eda11b4052545e8ed7aecc0acc3e9a6bdd565d51eed7bab197e5747bdc554a61b0dacc"}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f00000003c0)={0x0, 0x7fffffff}) chdir(&(0x7f0000000180)='./file0\x00') pivot_root(&(0x7f0000000340)='./file2\x00', &(0x7f0000000440)='./file1/file0\x00') link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) socket$netlink(0x10, 0x3, 0x2) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r5, 0xc0184900, &(0x7f0000000380)={0xa927, 0x13a}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x40000012, 0xffffffffffffffff, 0x0) 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:23 executing program 5: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000640)='/dev/dlm-monitor\x00', 0x2900, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) accept4$rose(0xffffffffffffffff, &(0x7f0000000140)=@short={0xb, @dev, @bcast}, &(0x7f0000000180)=0x1c, 0x0) listen(r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5, 0x800) unshare(0x40000000) setrlimit(0x8, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000280)={{0x5, 0xa1, 0x2, 0x8, 0x8, 0xf9}, 0x4}) r2 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x3, 0x101c00) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000100)={0x800100f, 0x9}) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000500aaaaaaaaaaaaaaaaaaaaaabb01c5a4e20a9e3e1b382e8015386ab18a13d7822cd8f0f3d2708aa358e9cd03c05f4e594f8f22fc0700000000000000151537575c2e4c4bebd0fd00790decba5f54af7b6d9174ef0d161f0314185aae9d7b5b4bcd6b6b72c1914403b17273bd57b5137443451d1857da3fbad0570317b5d764a16ac5e641adef3417e3226d721ad4"]) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x1) r4 = accept(r0, 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x3, 0x3, 0x0, 0x40, 0x227, 0x40, 0xcec, 0x38, 0x1, 0xc48}, [{0x4, 0x1022, 0xfff, 0x0, 0x80000001, 0xff8000000002, 0x1, 0x8003}], "", [[], []]}, 0x278) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x1000, 0x0) [ 192.725147] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000740)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\a\xd2\x8f(.\xf6\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e\xab\x8d\xed\xa6\\\x1c\xc3\x97\x94\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\x15v$\xc5\xbc\x11N\t\x9ej5)\x00\x00\x009\x8c4\xc4\x88C\xa2B\x8b\x81\v\xea\t\xf0\x8fw\a\f\x15\xe2\xd0q\xbb\t\xbf\x85\x98~\v\xd8D\xab9(\xf6.\x15\xcd2-\xf2\xc4\xd8\x00a\xd5\xd9\xb5Z\xd7\xb4\xac\x1d_+k\xd6\x8ag\xdceHE\xd5\x1c\x8a\xbd#\xcc\x82\xc2\xc2(\xb6\xe1\x99p\x9b\xa3D\xd2\x91\x96\xef\x05\fv\x16\x14\xcc\xea\x9d\x11w\x1e\xb5VG\x9ad\x9a`=^h\x8c8\xc9\"\x1eO\xb5vk\xc9\v\x17\x95\xf7\x19\x99\x99\x92\xc3\xc0\x8a\x18\xc7\"g\xd7B\x8f\x85\x18\xf3\x02\xa7\xb6\x83\x92\xefY\xef\x85\x92\x10E\x18\xbc\xacy\xd6\xa7Wh\xcd\xd0\xfa\xcc\x01\xeb\xdf\xad\xfd\xb0\xee\xfb\xc2(\x8cj\xd0uj{4\xb2\xe1p\x88u6\x9a;\xaa\x9f+J\x9e\xe3\xcc\xc7O\xad\x84\x8c;\x92~,\x15\xb2\x97\f~\xa0W\x16\x8b\a\x88\xaa\xe4C\xaf\x90\xdf\x7f\xe51\x00/n\xb5f\x1a\x8c+\xea<\xe3N@\x9e\xec\xbe{\x90x\xc6\xd7\xeeI\x1d\xcbY\xe1\x01\xd2d\xae\xd1(>\xa3\xa9\x93\x16\xc6G\x94|\x00\x00\x00\x00\x00\x00\x00\x00\x91\x00+/pF\xfa]\xc4\xb3\xfc~\x13\xc3\x8aV\xa5\n\xe9H\xad\xf5\xa7{\x90\b\x9bb\xb8gY\xdb', 0x2761, 0x0) 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:23 executing program 4: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) unshare(0x40000000) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) r1 = accept(r0, 0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x0, 0x108600) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000240)={0x0, "6c79096e7e3797766f9e6610f02eff495227d1a565319ac7b8d57d3a7962eb40", 0x0, 0x1}) write$binfmt_elf64(r1, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4800) 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 193.042510] audit: type=1400 audit(1569740663.539:64): avc: denied { write } for pid=7950 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=socket permissive=1 [ 193.151646] IPVS: ftp: loaded support on port[0] = 21 07:04:23 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 193.336184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3228 sclass=netlink_route_socket pig=7935 comm=syz-executor.1 07:04:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu\x00\x97\xebH\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9b~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\xf2\xcf`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x2, 0x524cf40c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x10080) sendfile(r3, r1, 0x0, 0x1) 07:04:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) getsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000000)={{{@in6, @in=@multicast2}}, {{@in6=@initdev}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000100)=0xe8) 07:04:24 executing program 1: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) wait4(r3, 0x0, 0x80000000, 0x0) clone(0x1fffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = getpid() r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(r5, &(0x7f00000009c0)='threaded\x00', 0xd4b9e1e) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x9) 07:04:24 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x13, 0x0, {0x2}}, 0x14) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 07:04:24 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup.cpu\x00\x97\xebH\x88N\x81CxA\xdb\xa6\xfd*\xb6mY\xb8\xac\xc3\x94TD\xb3\xca\x135\xcf7\xab\xb9\xee\x8e\x89\x94#\x83\xb3\xfcC\x80\xc38\'\x12\')\xb3\x19\x18\x11\xceD\a\xf2\xe1\x86\x84F\x88O\xf5V\x90_\x10$o;\xa9[\x185\x92{/\x99\x8d*<\x98 \xb2G\xf4?g3.\xb9\v\x96\x9b~\x90B*\x0f\x93y\n\xd8-\xc11\xa2\t\x00\x00\x00\x00\x00\x00\x00\xa8\xef\x17\x83vY\x82\xa62V\x87(\x8c\x8c4[\x1c\x99\x98\x96\x89\xf4\x861\xb9\x8e\xf2(\x8dC\xb3pd\xda\xcbK\xcaz\xcd\xa3\x88dH\x8a\xf3m\xad\x9e\xd9\x1d@r\xc2\x95w\x80\x83:\x8e \x10\x15\xc4\xcf\xefPT.[\xb5\xf9\x86/pD\b\xcf;n+\rxi\x91\xc1\fw\x95\xc7>\x8d\xb7\xafY\x9a\x06\x87;G\xbc\xd2\x01\x00\x00\x00C\xb9\xcc\"\xe5\x91E\xe9\xfd\x86`\xf8\xd3\xbd\xe4\xa2>=Z\xa5\x9fU6cf\a\xb1\xbd\x8a\xcf\x13\x03\x87[(\x95\xf7\xcf\xf0\xabJ\x85a:\'ah\x7f\xf0\x8b\xf5\xf2\xcf`g\xa7>\xb2\xf8ND;e\x06y@\xc3\xb5\xb3\xef\xa8=f\xf11\xddGL\x18s\xb3$\xa9\xc8s\b0\xc6{\x8b\x18o/\x7f\xa2\x87', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080)=0x2, 0x524cf40c) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8000, 0x10080) sendfile(r3, r1, 0x0, 0x1) 07:04:24 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x28001, 0x1c1845) r1 = socket(0x11, 0x80a, 0x0) r2 = dup(r1) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x107100, 0x0) ioctl$SIOCNRDECOBS(r3, 0x89e2) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x2004) 07:04:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r9, 0xffffffffffffffff, 0x0, 0x72439a6b) [ 194.011996] IPVS: ftp: loaded support on port[0] = 21 07:04:25 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x816) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e00000000000000000938110008f9ffff0b00000010000200000000000000000100000002", 0x69, 0x1400}], 0x0, 0x0) 07:04:25 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a05000/0x400000)=nil, 0x400300, 0x1000002, 0x8012, r0, 0x0) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x1000) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000080)={0x1a, 0x16, 0xf, 0x10, 0x6, 0x0, 0x2, 0x97, 0xffffffffffffffff}) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x3) 07:04:25 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:25 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="85000000130000005d0000000000000095bfdc0a00e9bfde51afe9c711bd7be5e655c1c2e63487d70c028dcde58e4796e2b7185a"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r2 = dup(0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r4, 0x4, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2}, [@jmp={0x5, 0x1, 0x8, 0x1, 0x6, 0xfffffffffffffffa}, @map={0x18, 0x4, 0x1, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0xa, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3f, 0xc2, &(0x7f0000000280)=""/194, 0x40f00, 0x0, [], r3, 0x9, r4, 0x8, &(0x7f0000000440)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0x4}, 0x10}, 0x70) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000100)={@loopback, r3}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x103, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) 07:04:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) r9 = socket(0x0, 0x803, 0xff) connect$inet(r9, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) 07:04:25 executing program 4: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = syz_open_dev$midi(0x0, 0x10001, 0x20cd00) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x2, "2e777722e35c7035f926b5946a5d4674adfc269eab62d5431bf01589581aa2f0", 0x21, 0x81, 0x430, 0x2, 0x4}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r4 = syz_open_dev$vivid(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000400)={0x2, @output={0x1000, 0x1, {0x2, 0x8}, 0x5, 0x200}}) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000380)={0x101, 0x0, 0x81, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21013500}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x60, 0x0, 0xc00, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40004044) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0xffffff5f) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d0801179406fea8d87c321289e58edd", @ANYRES32=0x0, @ANYBLOB="000000000c0001002a52f74d95170000"], 0x28}}, 0x0) fcntl$setstatus(r6, 0x4, 0x800) [ 194.956542] audit: type=1400 audit(1569740665.429:65): avc: denied { map } for pid=8022 comm="syz-executor.5" path="/dev/usbmon0" dev="devtmpfs" ino=763 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usbmon_device_t:s0 tclass=chr_file permissive=1 [ 194.964533] [ 194.984924] ====================================================== [ 194.991225] WARNING: possible circular locking dependency detected [ 194.997791] 4.14.146 #0 Not tainted [ 195.001400] ------------------------------------------------------ [ 195.010405] syz-executor.5/8025 is trying to acquire lock: [ 195.016188] (&rp->fetch_lock){+.+.}, at: [] mon_bin_vma_fault+0x6f/0x280 [ 195.024778] [ 195.024778] but task is already holding lock: [ 195.031698] (&mm->mmap_sem){++++}, at: [] __mm_populate+0x1e5/0x2c0 [ 195.039860] [ 195.039860] which lock already depends on the new lock. [ 195.039860] [ 195.048243] [ 195.048243] the existing dependency chain (in reverse order) is: [ 195.056108] [ 195.056108] -> #1 (&mm->mmap_sem){++++}: [ 195.061663] lock_acquire+0x16f/0x430 [ 195.065969] __might_fault+0x143/0x1d0 [ 195.070368] _copy_to_user+0x2c/0xd0 [ 195.074594] mon_bin_get_event+0x10a/0x430 [ 195.079416] mon_bin_ioctl+0x9b4/0xb50 [ 195.083815] do_vfs_ioctl+0x7ae/0x1060 [ 195.088297] SyS_ioctl+0x8f/0xc0 [ 195.092861] do_syscall_64+0x1e8/0x640 [ 195.097338] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.103023] [ 195.103023] -> #0 (&rp->fetch_lock){+.+.}: [ 195.108727] __lock_acquire+0x2cb3/0x4620 [ 195.113390] lock_acquire+0x16f/0x430 [ 195.117691] __mutex_lock+0xe8/0x1470 [ 195.121993] mutex_lock_nested+0x16/0x20 [ 195.126640] mon_bin_vma_fault+0x6f/0x280 [ 195.131292] __do_fault+0x104/0x390 [ 195.135417] __handle_mm_fault+0xde1/0x3470 [ 195.140237] handle_mm_fault+0x293/0x7c0 [ 195.144824] __get_user_pages+0x465/0x1220 [ 195.149560] populate_vma_page_range+0x18e/0x230 [ 195.154902] __mm_populate+0x198/0x2c0 [ 195.159290] vm_mmap_pgoff+0x1be/0x1d0 [ 195.163684] SyS_mmap_pgoff+0x3ca/0x520 [ 195.168159] SyS_mmap+0x16/0x20 [ 195.171939] do_syscall_64+0x1e8/0x640 [ 195.176347] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.182033] [ 195.182033] other info that might help us debug this: [ 195.182033] [ 195.190154] Possible unsafe locking scenario: [ 195.190154] [ 195.196188] CPU0 CPU1 [ 195.202600] ---- ---- [ 195.207355] lock(&mm->mmap_sem); [ 195.210899] lock(&rp->fetch_lock); [ 195.218502] lock(&mm->mmap_sem); [ 195.224734] lock(&rp->fetch_lock); [ 195.228426] [ 195.228426] *** DEADLOCK *** [ 195.228426] [ 195.234467] 1 lock held by syz-executor.5/8025: [ 195.239133] #0: (&mm->mmap_sem){++++}, at: [] __mm_populate+0x1e5/0x2c0 [ 195.248845] [ 195.248845] stack backtrace: [ 195.253453] CPU: 1 PID: 8025 Comm: syz-executor.5 Not tainted 4.14.146 #0 [ 195.261840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 195.271696] Call Trace: [ 195.274274] dump_stack+0x138/0x197 [ 195.277884] ? vprintk_func+0x65/0x159 [ 195.281773] print_circular_bug.isra.0.cold+0x1cc/0x28f [ 195.287117] __lock_acquire+0x2cb3/0x4620 [ 195.291248] ? trace_hardirqs_on_caller+0x400/0x590 [ 195.296322] ? trace_hardirqs_on+0x10/0x10 [ 195.300559] ? kasan_slab_alloc+0xf/0x20 [ 195.304616] ? kmem_cache_alloc+0x12e/0x780 [ 195.309042] ? ptlock_alloc+0x20/0x70 [ 195.312865] lock_acquire+0x16f/0x430 [ 195.317875] ? mon_bin_vma_fault+0x6f/0x280 [ 195.322281] ? mon_bin_vma_fault+0x6f/0x280 [ 195.326599] __mutex_lock+0xe8/0x1470 [ 195.330584] ? mon_bin_vma_fault+0x6f/0x280 [ 195.334897] ? save_trace+0x290/0x290 [ 195.338852] ? mon_bin_vma_fault+0x6f/0x280 [ 195.343305] ? mutex_trylock+0x1c0/0x1c0 [ 195.347351] ? ptlock_alloc+0x20/0x70 [ 195.351136] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 195.356580] ? rcu_read_lock_sched_held+0x110/0x130 [ 195.361602] ? kmem_cache_alloc+0x611/0x780 [ 195.365904] ? __lockdep_init_map+0x10c/0x570 [ 195.370428] mutex_lock_nested+0x16/0x20 [ 195.374486] ? mutex_lock_nested+0x16/0x20 [ 195.378705] mon_bin_vma_fault+0x6f/0x280 [ 195.382863] __do_fault+0x104/0x390 [ 195.386707] __handle_mm_fault+0xde1/0x3470 [ 195.391029] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 195.395795] ? check_preemption_disabled+0x3c/0x250 [ 195.401409] ? handle_mm_fault+0x2bf/0x7c0 [ 195.405635] handle_mm_fault+0x293/0x7c0 [ 195.409813] __get_user_pages+0x465/0x1220 [ 195.414039] ? follow_page_mask+0x1560/0x1560 [ 195.418545] ? memset+0x32/0x40 [ 195.421833] populate_vma_page_range+0x18e/0x230 [ 195.426572] __mm_populate+0x198/0x2c0 [ 195.430623] ? populate_vma_page_range+0x230/0x230 [ 195.435540] vm_mmap_pgoff+0x1be/0x1d0 [ 195.439943] ? vma_is_stack_for_current+0xa0/0xa0 [ 195.444778] ? __fget+0x237/0x370 [ 195.448220] SyS_mmap_pgoff+0x3ca/0x520 [ 195.452195] ? find_mergeable_anon_vma+0x2c0/0x2c0 [ 195.457124] ? do_syscall_64+0x53/0x640 [ 195.461093] ? align_vdso_addr+0x60/0x60 [ 195.465138] SyS_mmap+0x16/0x20 [ 195.468400] do_syscall_64+0x1e8/0x640 [ 195.472290] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 195.477117] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 195.482287] RIP: 0033:0x459a29 [ 195.485474] RSP: 002b:00007f9815156c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 195.493160] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000000459a29 [ 195.500503] RDX: 0000000001000002 RSI: 0000000000400300 RDI: 0000000020a05000 [ 195.507752] RBP: 000000000075bf20 R08: 0000000000000003 R09: 0000000000000000 [ 195.515001] R10: 0000000000008012 R11: 0000000000000246 R12: 00007f98151576d4 [ 195.525462] R13: 00000000004c5f27 R14: 00000000004dab78 R15: 00000000ffffffff 07:04:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) 07:04:26 executing program 0: r0 = gettid() getpriority(0x2, r0) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) socket(0x4, 0x804, 0x81) socketpair(0x20, 0xa, 0x80, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="50000000ac66ee8681a7091b4902eb03bb83c04d12f58e0b4a023d4a24f13b199db25dc582e01fe84cde5c67835cc8d4905b", @ANYRES16=r3, @ANYBLOB="01010000000000000000010000003c0001000c00070000000000000000000c0006000a626c637200000008000800000000000800090000000000080001000a0000000800050000000000"], 0x50}}, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4000, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000540)={&(0x7f00000003c0)=@deltaction={0x118, 0x31, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1d, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x1c, @TCA_ACT_INDEX={0x8, 0x3, 0x202a}}, {0x10, 0x19, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0x1, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x11, @TCA_ACT_KIND={0xc, 0x1, 'pedit\x00'}}, {0x18, 0x12, @TCA_ACT_KIND={0x10, 0x1, 'connmark\x00'}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x80, 0x1, [{0x10, 0x15, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'gact\x00'}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x20, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0x14, 0x6, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}, {0x10, 0x13, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x404}, 0x77898cc4207ad243) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r6 = accept(r5, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f00000001c0)=0x80) setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000240), 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r3, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x20000000) 07:04:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) [ 195.577061] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 195.590105] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 195.600142] protocol 88fb is buggy, dev hsr_slave_0 [ 195.600179] protocol 88fb is buggy, dev hsr_slave_1 07:04:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) [ 195.658633] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 195.661853] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2077 sclass=netlink_route_socket pig=8037 comm=syz-executor.4 [ 195.692238] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 07:04:26 executing program 0: mkdir(&(0x7f0000000300)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='\x00', 0x14103e, 0x0) ftruncate(r1, 0x200003) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='\x00\x00\x00\x00\x00') r4 = openat$cgroup_ro(r3, &(0x7f00000001c0)='mem\x00\x01y/\x06\x00\x00\x00\x00\x00\x00\x00\x16\xd4B\xab\xe3\xfarent\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 195.713253] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 195.725469] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 195.750598] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env 07:04:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) [ 195.751233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2077 sclass=netlink_route_socket pig=8040 comm=syz-executor.4 [ 195.779851] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' 07:04:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) [ 195.813039] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 195.841321] kobject: 'rx-0' (ffff8880a124d310): kobject_cleanup, parent ffff888099ab1148 [ 195.849597] kobject: 'rx-0' (ffff8880a124d310): auto cleanup 'remove' event [ 195.859420] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 195.872901] kobject: 'rx-0' (ffff8880a124d310): kobject_uevent_env [ 195.886350] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 195.895408] kobject: 'rx-0' (ffff8880a124d310): kobject_uevent_env: uevent_suppress caused the event to drop! [ 195.907987] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 195.924447] kobject: 'rx-0' (ffff8880a124d310): auto cleanup kobject_del [ 195.934080] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 195.940940] kobject: 'rx-0' (ffff8880a124d310): calling ktype release [ 195.947614] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 195.959259] kobject: 'rx-0': free name [ 195.964101] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 195.972851] kobject: 'tx-0' (ffff8880a60fccd8): kobject_cleanup, parent ffff888099ab1148 [ 195.981220] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 195.992740] kobject: 'tx-0' (ffff8880a60fccd8): auto cleanup 'remove' event [ 195.999890] kobject: 'tx-0' (ffff8880a60fccd8): kobject_uevent_env [ 196.013967] kobject: 'tx-0' (ffff8880a60fccd8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.053914] kobject: 'tx-0' (ffff8880a60fccd8): auto cleanup kobject_del [ 196.067803] kobject: 'tx-0' (ffff8880a60fccd8): calling ktype release [ 196.076897] kobject: 'tx-0': free name [ 196.080915] kobject: 'queues' (ffff888099ab1148): kobject_cleanup, parent (null) [ 196.089371] kobject: 'queues' (ffff888099ab1148): calling ktype release [ 196.098466] kobject: 'queues' (ffff888099ab1148): kset_release [ 196.104556] kobject: 'queues': free name [ 196.108881] kobject: 'ip6gre0' (ffff888080ec8770): kobject_uevent_env [ 196.117362] kobject: 'ip6gre0' (ffff888080ec8770): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.128933] kobject: 'ip6gre0' (ffff888080ec8770): kobject_cleanup, parent (null) [ 196.145812] kobject: 'ip6gre0' (ffff888080ec8770): calling ktype release [ 196.151910] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 196.154642] kobject: 'ip6gre0': free name [ 196.159691] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 196.174090] kobject: 'rx-0' (ffff8880a904ee50): kobject_cleanup, parent ffff8880a628f748 [ 196.184521] kobject: 'rx-0' (ffff8880a904ee50): auto cleanup 'remove' event [ 196.192302] kobject: 'rx-0' (ffff8880a904ee50): kobject_uevent_env [ 196.198725] kobject: 'rx-0' (ffff8880a904ee50): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.209102] kobject: 'rx-0' (ffff8880a904ee50): auto cleanup kobject_del [ 196.221500] kobject: 'rx-0' (ffff8880a904ee50): calling ktype release [ 196.228176] kobject: 'rx-0': free name [ 196.232436] kobject: 'tx-0' (ffff8880912957d8): kobject_cleanup, parent ffff8880a628f748 [ 196.241380] kobject: 'tx-0' (ffff8880912957d8): auto cleanup 'remove' event [ 196.248535] kobject: 'tx-0' (ffff8880912957d8): kobject_uevent_env [ 196.254917] kobject: 'tx-0' (ffff8880912957d8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.265016] kobject: 'tx-0' (ffff8880912957d8): auto cleanup kobject_del [ 196.272066] kobject: 'tx-0' (ffff8880912957d8): calling ktype release [ 196.278638] kobject: 'tx-0': free name [ 196.282757] kobject: 'queues' (ffff8880a628f748): kobject_cleanup, parent (null) [ 196.291313] kobject: 'queues' (ffff8880a628f748): calling ktype release [ 196.298060] kobject: 'queues' (ffff8880a628f748): kset_release [ 196.304059] kobject: 'queues': free name [ 196.308418] kobject: 'ip6tnl0' (ffff88808b921470): kobject_uevent_env 07:04:26 executing program 5: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = syz_open_dev$midi(0x0, 0x10001, 0x20cd00) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x2, "2e777722e35c7035f926b5946a5d4674adfc269eab62d5431bf01589581aa2f0", 0x21, 0x81, 0x430, 0x2, 0x4}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r4 = syz_open_dev$vivid(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000400)={0x2, @output={0x1000, 0x1, {0x2, 0x8}, 0x5, 0x200}}) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000380)={0x101, 0x0, 0x81, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21013500}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x60, 0x0, 0xc00, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40004044) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0xffffff5f) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d0801179406fea8d87c321289e58edd", @ANYRES32=0x0, @ANYBLOB="000000000c0001002a52f74d95170000"], 0x28}}, 0x0) fcntl$setstatus(r6, 0x4, 0x800) 07:04:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) 07:04:26 executing program 4: timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r1 = syz_open_dev$midi(0x0, 0x10001, 0x20cd00) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000280)=0x32, 0x4) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000040)={0x2, "2e777722e35c7035f926b5946a5d4674adfc269eab62d5431bf01589581aa2f0", 0x21, 0x81, 0x430, 0x2, 0x4}) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r4 = syz_open_dev$vivid(&(0x7f00000003c0)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_PARM(r4, 0xc0cc5615, &(0x7f0000000400)={0x2, @output={0x1000, 0x1, {0x2, 0x8}, 0x5, 0x200}}) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000380)={0x101, 0x0, 0x81, 0x1}, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x21013500}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0x60, 0x0, 0xc00, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x40004044) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) connect$inet(r5, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0xffffff5f) sendmmsg(r2, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000100)) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001d0801179406fea8d87c321289e58edd", @ANYRES32=0x0, @ANYBLOB="000000000c0001002a52f74d95170000"], 0x28}}, 0x0) fcntl$setstatus(r6, 0x4, 0x800) 07:04:26 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) 07:04:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) r0 = syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308) [ 196.315026] kobject: 'ip6tnl0' (ffff88808b921470): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.341077] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env [ 196.347588] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 196.360175] kobject: 'ip6tnl0' (ffff88808b921470): kobject_cleanup, parent (null) [ 196.368871] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 196.381608] kobject: 'ip6tnl0' (ffff88808b921470): calling ktype release [ 196.399991] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 196.422125] kobject: 'ip6tnl0': free name [ 196.425899] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2077 sclass=netlink_route_socket pig=8077 comm=syz-executor.5 [ 196.434801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2077 sclass=netlink_route_socket pig=8086 comm=syz-executor.4 [ 196.462222] kobject: 'rx-0' (ffff8880a904e850): kobject_cleanup, parent ffff8880a628f448 07:04:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) [ 196.470729] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 196.474711] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 196.477177] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 196.485242] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 196.504061] kobject: 'rx-0' (ffff8880a904e850): auto cleanup 'remove' event [ 196.513966] kobject: 'rx-0' (ffff8880a904e850): kobject_uevent_env 07:04:27 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xda120e60cccb8b63) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(r2, 0x0, 0xffffffffffffffe7, 0x7, 0x0) close(r2) 07:04:27 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:27 executing program 4: syz_mount_image$gfs2(&(0x7f00000000c0)='gfs2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6c6f636b70726f74b483a1f9e6fae1c38bcd46356f3d6c65a6af9782b24d99dbffdeeb215215eed136c85edc3e1e61fc868393aa1a45bb00f447e923fd7fa1d4a40b8857f6d19b2583095e0f4e1488d1855a2bb2784c9b6cad8f1c4a76ba34480cfc82430472b6fbd31f3a78350706390ffd27fcff63981bcfc10ef7ae2b9a868bd52dfac1cccf2d8331d2bd413f0cab494039934d19e2b9381da51d83cf484bf2686c48f1a51c9a67e163c80013b3c5f4bc45c9e1ad41c3c1ff7ffabf2e1b74cd6c60d7abab068eef994c10"]) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) [ 196.546577] kobject: 'rx-0' (ffff8880a904e850): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.560744] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env [ 196.567371] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 196.573432] kobject: 'rx-0' (ffff8880a904e850): auto cleanup kobject_del 07:04:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.591436] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 196.606447] kobject: 'rx-0' (ffff8880a904e850): calling ktype release [ 196.608505] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 196.621556] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 196.627744] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 196.632452] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 196.650629] kobject: 'rx-0': free name [ 196.654848] kobject: 'tx-0' (ffff8880a4be32d8): kobject_cleanup, parent ffff8880a628f448 [ 196.664779] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 196.674781] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 196.675397] kobject: 'tx-0' (ffff8880a4be32d8): auto cleanup 'remove' event [ 196.691627] gfs2: invalid mount option: lockprot´ƒ¡ùæúáËÍF5o=le¦¯—‚²M™ÛÿÞë!RîÑ6È^Ü>aü†ƒ“ªE» 07:04:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.696409] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 196.710793] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 196.717713] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.717837] kobject: 'tx-0' (ffff8880a4be32d8): kobject_uevent_env [ 196.739234] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 196.741847] gfs2: can't parse mount arguments 07:04:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) 07:04:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.754097] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.757649] kobject: 'tx-0' (ffff8880a4be32d8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.771823] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 196.775705] kobject: 'tx-0' (ffff8880a4be32d8): auto cleanup kobject_del [ 196.783933] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.794714] kobject: 'tx-0' (ffff8880a4be32d8): calling ktype release 07:04:27 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.802117] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 196.803466] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 196.809749] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.818578] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 196.837677] kobject: 'tx-0': free name [ 196.841901] kobject: 'queues' (ffff8880a628f448): kobject_cleanup, parent (null) 07:04:27 executing program 1: syz_open_dev$dspn(0x0, 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.856505] kobject: 'queues' (ffff8880a628f448): calling ktype release [ 196.867078] kobject: 'queues' (ffff8880a628f448): kset_release [ 196.875561] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 196.884099] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 196.897523] kobject: 'queues': free name 07:04:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000035c0)) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0xa, 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) socket(0xa, 0x80001, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x7) socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0xa, 0x80001, 0x0) socket(0xa, 0x80001, 0x0) socket(0xa, 0x80001, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0x10, 0x802, 0x0) socket(0xa, 0x80001, 0x0) socket(0xf, 0x3, 0x0) socket(0xa, 0x80001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r1, r0, 0x0) 07:04:27 executing program 1: syz_open_dev$dspn(0x0, 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.901910] kobject: 'sit0' (ffff888094cc9270): kobject_uevent_env [ 196.908843] kobject: 'sit0' (ffff888094cc9270): kobject_uevent_env: uevent_suppress caused the event to drop! [ 196.918700] gfs2: invalid mount option: lockprot´ƒ¡ùæúáËÍF5o=le¦¯—‚²M™ÛÿÞë!RîÑ6È^Ü>aü†ƒ“ªE» [ 196.932154] gfs2: can't parse mount arguments [ 196.942071] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 196.945381] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env 07:04:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) sendfile(r8, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) 07:04:27 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xda120e60cccb8b63) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r2 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(r2, 0x0, 0xffffffffffffffe7, 0x7, 0x0) close(r2) 07:04:27 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:27 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) ioctl$KDADDIO(r0, 0x8910, 0x70e000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x622102, 0x40) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000040)={0x2, 0x0, {0x0, 0x101, 0x4, 0x1}}) 07:04:27 executing program 1: syz_open_dev$dspn(0x0, 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 196.951630] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 196.969427] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 196.970483] kobject: 'sit0' (ffff888094cc9270): kobject_cleanup, parent (null) 07:04:27 executing program 5: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 197.020135] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 197.021741] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 197.030752] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 197.033923] kobject: 'sit0' (ffff888094cc9270): calling ktype release [ 197.051546] kobject: 'sit0': free name [ 197.055624] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' 07:04:27 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 197.068869] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 197.075980] kobject: 'rx-0' (ffff8880a904e790): kobject_cleanup, parent ffff8880a628f148 [ 197.090963] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.092870] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env [ 197.110763] kobject: 'rx-0' (ffff8880a904e790): auto cleanup 'remove' event 07:04:27 executing program 0: mount$fuseblk(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x0, 0x3f, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) write$binfmt_script(r0, &(0x7f00000004c0)=ANY=[@ANYRES16], 0x1) sendfile(r0, r1, 0x0, 0x20000102000007) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x4, &(0x7f0000000040)=0x20, 0x4) ioctl$MON_IOCG_STATS(r2, 0x80089203, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = shmget(0x2, 0x1000, 0x78000000, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000140)=""/47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe101}, [@IFLA_LINKINFO={0x20, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0x14, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @local}]}}}]}, 0x40}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 07:04:27 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) 07:04:27 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x2, 0x24000) [ 197.122280] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 197.128555] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.139488] kobject: 'rx-0' (ffff8880a904e790): kobject_uevent_env [ 197.145877] kobject: 'rx-0' (ffff8880a904e790): kobject_uevent_env: uevent_suppress caused the event to drop! [ 197.156247] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' 07:04:27 executing program 0: pipe(0x0) io_submit(0x0, 0x1, &(0x7f0000002700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xf0024100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2fba4fad0e3b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d3277020000001fb054d54ac45a333c28785d6382fa7776ea267d32109aa4c1a2d23999eb00ea368db25633657b52877baca05a5b587ec8eaf0132a4824ff352777825bff9dd256f453d6823a6593853de952b51f4462d98d016c3dac872a9ebaef04c2e848f2b4bc3e8e8bd50099d9de23f8e43bedb5cd90cee679a01222ddb3f391e8de59746bdab8fa4fdeb9b5bff59ee90ac09576b74ea256f5ca2d42cb5b46ca121faaa86de48c314d56d5382b717aed0803cca7be176d7b89129e94a671ca6cf8dfbde94b3d6714", 0xf6}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xa1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x5}, 0xffffffffffffffff, 0x1ff}}, 0x48) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x20, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="030000003dbdd035b1a4e840c9d409e3af5f77947ab1fe53d11560130ce921e42efd29aafc5000b07ccaf1160dfd619fee9e45562342924a00d44fb0a06aa0ddfadb5c766682b26b1b43c1bf659a20264071994214518e94e32d92f09977140de4554b02dae5c73857da3581bd12f2f50ecd6cfb277158030ea45c4c7a2d04dc234b2b2d00e5896fabab6aea7fc4b100"/165, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) [ 197.166112] kobject: 'rx-0' (ffff8880a904e790): auto cleanup kobject_del [ 197.174041] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 197.180522] kobject: 'rx-0' (ffff8880a904e790): calling ktype release [ 197.187154] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.199476] kobject: 'rx-0': free name [ 197.203658] kobject: 'tx-0' (ffff88809bbea358): kobject_cleanup, parent ffff8880a628f148 [ 197.213683] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env 07:04:27 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x24000) [ 197.220151] kobject: 'tx-0' (ffff88809bbea358): auto cleanup 'remove' event [ 197.227340] kobject: 'tx-0' (ffff88809bbea358): kobject_uevent_env [ 197.233979] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.240871] audit: type=1400 audit(1569740667.729:66): avc: denied { sys_admin } for pid=8164 comm="syz-executor.0" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 197.247370] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env [ 197.275712] kobject: 'tx-0' (ffff88809bbea358): kobject_uevent_env: uevent_suppress caused the event to drop! [ 197.292550] kobject: 'tx-0' (ffff88809bbea358): auto cleanup kobject_del [ 197.300865] kobject: 'tx-0' (ffff88809bbea358): calling ktype release [ 197.307504] kobject: 'tx-0': free name [ 197.311497] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 197.321120] kobject: 'queues' (ffff8880a628f148): kobject_cleanup, parent (null) [ 197.330439] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 197.336947] kobject: 'queues' (ffff8880a628f148): calling ktype release [ 197.336952] kobject: 'queues' (ffff8880a628f148): kset_release [ 197.336965] kobject: 'queues': free name [ 197.345415] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 197.369415] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 197.369759] kobject: 'ip6_vti0' (ffff88808c55f070): kobject_uevent_env [ 197.376482] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 197.391026] kobject: 'ip6_vti0' (ffff88808c55f070): kobject_uevent_env: uevent_suppress caused the event to drop! [ 197.416579] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env 07:04:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) sendfile(r8, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) 07:04:27 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) [ 197.420208] kobject: 'x25asy0' (ffff8880529a6670): kobject_add_internal: parent: 'net', set: 'devices' [ 197.427503] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' 07:04:27 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 197.468868] kobject: 'x25asy0' (ffff8880529a6670): kobject_uevent_env [ 197.482690] kobject: 'x25asy0' (ffff8880529a6670): fill_kobj_path: path = '/devices/virtual/net/x25asy0' [ 197.501999] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 197.509895] kobject: 'queues' (ffff888099b17148): kobject_add_internal: parent: 'x25asy0', set: '' [ 197.514613] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 197.522560] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.526713] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.541672] kobject: 'queues' (ffff888099b17148): kobject_uevent_env [ 197.556945] kobject: 'queues' (ffff888099b17148): kobject_uevent_env: filter function caused the event to drop! [ 197.568047] kobject: 'rx-0' (ffff888080a4e010): kobject_add_internal: parent: 'queues', set: 'queues' [ 197.577925] kobject: 'rx-0' (ffff888080a4e010): kobject_uevent_env [ 197.586467] kobject: 'rx-0' (ffff888080a4e010): fill_kobj_path: path = '/devices/virtual/net/x25asy0/queues/rx-0' [ 197.598716] kobject: 'tx-0' (ffff88808019a058): kobject_add_internal: parent: 'queues', set: 'queues' [ 197.617260] kobject: 'tx-0' (ffff88808019a058): kobject_uevent_env [ 197.623871] kobject: 'tx-0' (ffff88808019a058): fill_kobj_path: path = '/devices/virtual/net/x25asy0/queues/tx-0' [ 197.637105] kobject: 'ip6_vti0' (ffff88808c55f070): kobject_cleanup, parent (null) [ 197.648546] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 197.655473] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 197.663947] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.681993] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.682763] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 197.695715] kobject: 'ip6_vti0' (ffff88808c55f070): calling ktype release [ 197.700763] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 197.710780] kobject: 'ip6_vti0': free name 07:04:28 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) 07:04:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) sendfile(r8, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) 07:04:28 executing program 5: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:28 executing program 4: r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) fallocate(r2, 0x10, 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x2000000000011, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x2, 0x0, &(0x7f0000000080)=0xfffffffffffffe66) 07:04:28 executing program 1: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x0) 07:04:28 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 197.719267] kobject: 'rx-0' (ffff8880a124d250): kobject_cleanup, parent ffff88807d9c9148 [ 197.735584] kobject: 'rx-0' (ffff8880a124d250): auto cleanup 'remove' event [ 197.766337] kobject: 'rx-0' (ffff8880a124d250): kobject_uevent_env [ 197.771893] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 197.776602] kobject: 'rx-0' (ffff8880a124d250): kobject_uevent_env: uevent_suppress caused the event to drop! [ 197.792208] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 197.792256] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 197.804277] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env 07:04:28 executing program 1 (fault-call:1 fault-nth:0): syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x24000) [ 197.818801] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.818990] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env [ 197.831659] kobject: 'rx-0' (ffff8880a124d250): auto cleanup kobject_del [ 197.841394] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 197.844504] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 197.865766] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 197.867664] kobject: 'rx-0' (ffff8880a124d250): calling ktype release [ 197.874582] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 197.890814] kobject: 'rx-0': free name [ 197.895609] kobject: 'tx-0' (ffff8880a60237d8): kobject_cleanup, parent ffff88807d9c9148 [ 197.905515] FAULT_INJECTION: forcing a failure. [ 197.905515] name failslab, interval 1, probability 0, space 0, times 1 [ 197.909542] kobject: 'tx-0' (ffff8880a60237d8): auto cleanup 'remove' event [ 197.916716] CPU: 1 PID: 8218 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 197.916723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 197.916726] Call Trace: [ 197.916746] dump_stack+0x138/0x197 [ 197.916761] should_fail.cold+0x10f/0x159 [ 197.916776] should_failslab+0xdb/0x130 [ 197.916790] kmem_cache_alloc+0x47/0x780 [ 197.924183] kobject: 'tx-0' (ffff8880a60237d8): kobject_uevent_env [ 197.930906] ? lock_downgrade+0x6e0/0x6e0 [ 197.930919] ? kstrtouint+0xf8/0x140 [ 197.930931] __sigqueue_alloc+0x1da/0x400 [ 197.930942] __send_signal+0x1a2/0x1280 [ 197.941175] kobject: 'tx-0' (ffff8880a60237d8): kobject_uevent_env: uevent_suppress caused the event to drop! [ 197.943637] ? lock_acquire+0x16f/0x430 [ 197.943650] send_signal+0x49/0xc0 [ 197.943659] force_sig_info+0x243/0x350 [ 197.947310] kobject: 'tx-0' (ffff8880a60237d8): auto cleanup kobject_del [ 197.951393] force_sig_info_fault.constprop.0+0x1c6/0x2b0 [ 197.951402] ? is_prefetch.isra.0+0x350/0x350 [ 197.951409] ? 0xffffffff81000000 [ 197.951417] ? trace_raw_output_x86_exceptions+0x140/0x140 [ 197.951429] ? __fsnotify_update_child_dentry_flags.part.0+0x300/0x300 [ 197.955448] kobject: 'tx-0' (ffff8880a60237d8): calling ktype release [ 197.959432] ? __mutex_unlock_slowpath+0x71/0x800 [ 197.959439] ? 0xffffffff81000000 [ 197.959447] __bad_area_nosemaphore+0x1dc/0x2a0 [ 197.959455] ? wait_for_completion+0x420/0x420 [ 197.965817] kobject: 'tx-0': free name [ 197.969871] ? 0xffffffff81000000 [ 197.969881] bad_area_nosemaphore+0x34/0x40 [ 197.969887] ? 0xffffffff81000000 [ 197.969894] __do_page_fault+0x196/0xb80 [ 197.969904] ? SyS_read+0x230/0x230 [ 197.974411] kobject: 'queues' (ffff88807d9c9148): kobject_cleanup, parent (null) [ 197.977724] ? vmalloc_fault+0xe30/0xe30 [ 197.977736] ? page_fault+0x2f/0x50 [ 197.977744] ? 0xffffffff81000000 [ 197.982213] kobject: 'queues' (ffff88807d9c9148): calling ktype release [ 197.991744] do_page_fault+0x71/0x511 [ 197.991757] ? page_fault+0x2f/0x50 [ 197.991764] page_fault+0x45/0x50 [ 197.991770] RIP: 0033:0x45362f [ 197.991774] RSP: 002b:00007f9c287f77a8 EFLAGS: 00010283 [ 197.991781] RAX: 00007f9c287f7850 RBX: 00007f9c287f7c90 RCX: 0000000000000000 [ 197.991791] RDX: 00000000000003ff RSI: ffffffff81000000 RDI: 00007f9c287f7850 [ 197.995861] kobject: 'queues' (ffff88807d9c9148): kset_release [ 197.999287] RBP: 000000000075bf20 R08: 00000000000003ff R09: 0000000000000000 [ 197.999292] R10: 0000000000000064 R11: 0000000000000000 R12: 00007f9c287f86d4 [ 197.999297] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 0000000000000004 [ 197.999308] ? 0xffffffff81000000 [ 198.021849] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 198.026920] kobject: 'queues': free name [ 198.061281] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.067215] kobject: 'ip_vti0' (ffff88805aa98ff0): kobject_uevent_env [ 198.116304] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 198.122182] kobject: 'ip_vti0' (ffff88805aa98ff0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 198.175387] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.204393] audit: type=1400 audit(1569740668.699:67): avc: denied { map } for pid=8206 comm="syz-executor.4" path="socket:[32854]" dev="sockfs" ino=32854 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_route_socket permissive=1 07:04:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(0xffffffffffffffff, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) 07:04:28 executing program 0: pipe(0x0) io_submit(0x0, 0x1, &(0x7f0000002700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xf0024100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2fba4fad0e3b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d3277020000001fb054d54ac45a333c28785d6382fa7776ea267d32109aa4c1a2d23999eb00ea368db25633657b52877baca05a5b587ec8eaf0132a4824ff352777825bff9dd256f453d6823a6593853de952b51f4462d98d016c3dac872a9ebaef04c2e848f2b4bc3e8e8bd50099d9de23f8e43bedb5cd90cee679a01222ddb3f391e8de59746bdab8fa4fdeb9b5bff59ee90ac09576b74ea256f5ca2d42cb5b46ca121faaa86de48c314d56d5382b717aed0803cca7be176d7b89129e94a671ca6cf8dfbde94b3d6714", 0xf6}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xa1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x5}, 0xffffffffffffffff, 0x1ff}}, 0x48) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x20, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="030000003dbdd035b1a4e840c9d409e3af5f77947ab1fe53d11560130ce921e42efd29aafc5000b07ccaf1160dfd619fee9e45562342924a00d44fb0a06aa0ddfadb5c766682b26b1b43c1bf659a20264071994214518e94e32d92f09977140de4554b02dae5c73857da3581bd12f2f50ecd6cfb277158030ea45c4c7a2d04dc234b2b2d00e5896fabab6aea7fc4b100"/165, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) 07:04:28 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = gettid() move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x1000000000000235) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r8) write$FUSE_LK(r7, 0x0, 0x0) eventfd(0x7) r9 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmsg(r11, 0x0, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r9, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) ioctl$VIDIOC_OVERLAY(r9, 0x4004560e, &(0x7f0000000000)) [ 198.273946] kobject: 'ip_vti0' (ffff88805aa98ff0): kobject_cleanup, parent (null) [ 198.278276] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.296376] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.298566] kobject: 'ip_vti0' (ffff88805aa98ff0): calling ktype release 07:04:28 executing program 1 (fault-call:1 fault-nth:1): syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x24000) [ 198.334151] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.339839] kobject: 'ip_vti0': free name [ 198.366239] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.373255] FAULT_INJECTION: forcing a failure. [ 198.373255] name failslab, interval 1, probability 0, space 0, times 0 [ 198.390976] CPU: 0 PID: 8240 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 198.397932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.407376] Call Trace: [ 198.410544] dump_stack+0x138/0x197 [ 198.414161] should_fail.cold+0x10f/0x159 [ 198.418296] should_failslab+0xdb/0x130 [ 198.422260] kmem_cache_alloc+0x2d7/0x780 [ 198.426406] getname_flags+0xcb/0x580 [ 198.430186] ? 0xffffffff81000000 [ 198.433626] getname+0x1a/0x20 [ 198.436800] do_sys_open+0x1e7/0x430 [ 198.440512] ? filp_open+0x70/0x70 [ 198.444034] ? SyS_read+0x230/0x230 [ 198.447659] SyS_open+0x2d/0x40 [ 198.450937] ? do_sys_open+0x430/0x430 [ 198.454811] do_syscall_64+0x1e8/0x640 [ 198.458677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 198.463503] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 198.468681] RIP: 0033:0x413911 [ 198.471850] RSP: 002b:00007f9c287f77a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 198.479538] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413911 [ 198.486820] RDX: 0000000000000000 RSI: 0000000000024000 RDI: 00007f9c287f7850 [ 198.494083] RBP: 000000000075bf20 R08: 00007f9c287f77b0 R09: 000000000075bf20 [ 198.501337] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9c287f86d4 [ 198.508587] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 0000000000000004 [ 198.517667] kobject: 'batman_adv' (ffff8880a4c29280): kobject_uevent_env [ 198.521850] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env 07:04:29 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(0xffffffffffffffff, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) [ 198.527025] kobject: 'batman_adv' (ffff8880a4c29280): kobject_uevent_env: filter function caused the event to drop! [ 198.534920] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.551614] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 198.558144] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 198.573535] kobject: 'batman_adv' (ffff8880a4c29280): kobject_cleanup, parent (null) [ 198.589607] audit: type=1400 audit(1569740668.879:68): avc: denied { map } for pid=8233 comm="syz-executor.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=33953 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 198.611462] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.621999] kobject: 'batman_adv' (ffff8880a4c29280): calling ktype release [ 198.629249] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 198.634840] kobject: (ffff8880a4c29280): dynamic_kobj_release [ 198.646517] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.653370] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.661628] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 198.662703] kobject: 'batman_adv': free name [ 198.674160] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.678930] kobject: 'rx-0' (ffff8880998a9010): kobject_cleanup, parent ffff888098e55b48 [ 198.694219] kobject: 'rx-0' (ffff8880998a9010): auto cleanup 'remove' event [ 198.701474] kobject: 'rx-0' (ffff8880998a9010): kobject_uevent_env [ 198.707956] kobject: 'rx-0' (ffff8880998a9010): kobject_uevent_env: uevent_suppress caused the event to drop! 07:04:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = gettid() move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x1000000000000235) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r8) write$FUSE_LK(r7, 0x0, 0x0) eventfd(0x7) r9 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmsg(r11, 0x0, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r9, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) ioctl$VIDIOC_OVERLAY(r9, 0x4004560e, &(0x7f0000000000)) 07:04:29 executing program 5: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 198.743466] kobject: 'rx-0' (ffff8880998a9010): auto cleanup kobject_del [ 198.750611] kobject: 'rx-0' (ffff8880998a9010): calling ktype release [ 198.760747] kobject: 'rx-0': free name [ 198.763669] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 198.768750] kobject: 'tx-0' (ffff888082eb6798): kobject_cleanup, parent ffff888098e55b48 [ 198.787718] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 198.793420] kobject: 'tx-0' (ffff888082eb6798): auto cleanup 'remove' event [ 198.816484] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.827408] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env 07:04:29 executing program 1 (fault-call:1 fault-nth:2): syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x24000) [ 198.842738] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.855783] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 198.856739] kobject: 'tx-0' (ffff888082eb6798): kobject_uevent_env [ 198.877146] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 198.890374] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 198.895710] FAULT_INJECTION: forcing a failure. [ 198.895710] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 198.911640] CPU: 0 PID: 8267 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 198.913851] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.918573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 198.918576] Call Trace: [ 198.918595] dump_stack+0x138/0x197 [ 198.918616] should_fail.cold+0x10f/0x159 [ 198.943383] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.944772] __alloc_pages_nodemask+0x1d6/0x7a0 [ 198.944783] ? kasan_check_read+0x11/0x20 [ 198.944796] ? copy_fpstate_to_sigframe+0x355/0x480 [ 198.944808] ? __alloc_pages_slowpath+0x2930/0x2930 [ 198.944825] cache_grow_begin+0x80/0x400 [ 198.974737] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 198.976784] kmem_cache_alloc+0x6a6/0x780 [ 198.976803] getname_flags+0xcb/0x580 07:04:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = gettid() move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x1000000000000235) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r8) write$FUSE_LK(r7, 0x0, 0x0) eventfd(0x7) r9 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmsg(r11, 0x0, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r9, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) ioctl$VIDIOC_OVERLAY(r9, 0x4004560e, &(0x7f0000000000)) [ 198.991388] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 198.991889] ? 0xffffffff81000000 [ 199.004338] getname+0x1a/0x20 [ 199.007536] do_sys_open+0x1e7/0x430 [ 199.009631] kobject: 'tx-0' (ffff888082eb6798): kobject_uevent_env: uevent_suppress caused the event to drop! [ 199.011243] ? filp_open+0x70/0x70 [ 199.011252] ? SyS_read+0x230/0x230 [ 199.011261] SyS_open+0x2d/0x40 [ 199.011268] ? do_sys_open+0x430/0x430 [ 199.011277] do_syscall_64+0x1e8/0x640 [ 199.011292] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.011305] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.011310] RIP: 0033:0x413911 [ 199.011317] RSP: 002b:00007f9c287f77a0 EFLAGS: 00000293 [ 199.022673] kobject: 'tx-0' (ffff888082eb6798): auto cleanup kobject_del [ 199.024876] ORIG_RAX: 0000000000000002 [ 199.024882] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413911 [ 199.024887] RDX: 0000000000000000 RSI: 0000000000024000 RDI: 00007f9c287f7850 [ 199.024891] RBP: 000000000075bf20 R08: 00007f9c287f77b0 R09: 000000000075bf20 [ 199.024898] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9c287f86d4 [ 199.028557] kobject: 'tx-0' (ffff888082eb6798): calling ktype release [ 199.031772] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 0000000000000004 [ 199.091609] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.099018] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 199.108397] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.130799] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:04:29 executing program 1 (fault-call:1 fault-nth:3): syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x24000) 07:04:29 executing program 0: pipe(0x0) io_submit(0x0, 0x1, &(0x7f0000002700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xf0024100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2fba4fad0e3b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d3277020000001fb054d54ac45a333c28785d6382fa7776ea267d32109aa4c1a2d23999eb00ea368db25633657b52877baca05a5b587ec8eaf0132a4824ff352777825bff9dd256f453d6823a6593853de952b51f4462d98d016c3dac872a9ebaef04c2e848f2b4bc3e8e8bd50099d9de23f8e43bedb5cd90cee679a01222ddb3f391e8de59746bdab8fa4fdeb9b5bff59ee90ac09576b74ea256f5ca2d42cb5b46ca121faaa86de48c314d56d5382b717aed0803cca7be176d7b89129e94a671ca6cf8dfbde94b3d6714", 0xf6}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xa1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x5}, 0xffffffffffffffff, 0x1ff}}, 0x48) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x20, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="030000003dbdd035b1a4e840c9d409e3af5f77947ab1fe53d11560130ce921e42efd29aafc5000b07ccaf1160dfd619fee9e45562342924a00d44fb0a06aa0ddfadb5c766682b26b1b43c1bf659a20264071994214518e94e32d92f09977140de4554b02dae5c73857da3581bd12f2f50ecd6cfb277158030ea45c4c7a2d04dc234b2b2d00e5896fabab6aea7fc4b100"/165, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) [ 199.155405] kobject: 'tx-0': free name [ 199.159394] kobject: 'queues' (ffff888098e55b48): kobject_cleanup, parent (null) [ 199.164244] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.177590] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env [ 199.183557] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.185260] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.204712] kobject: 'queues' (ffff888098e55b48): calling ktype release [ 199.208385] FAULT_INJECTION: forcing a failure. [ 199.208385] name failslab, interval 1, probability 0, space 0, times 0 [ 199.213094] kobject: 'queues' (ffff888098e55b48): kset_release [ 199.230071] CPU: 0 PID: 8277 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 199.237021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.238622] kobject: 'queues': free name [ 199.246891] Call Trace: [ 199.246911] dump_stack+0x138/0x197 [ 199.246925] should_fail.cold+0x10f/0x159 [ 199.246937] should_failslab+0xdb/0x130 [ 199.246947] kmem_cache_alloc+0x2d7/0x780 [ 199.246954] ? save_stack+0xa9/0xd0 [ 199.246964] get_empty_filp+0x8c/0x3f0 [ 199.246972] path_openat+0x8f/0x3f70 [ 199.246984] ? trace_hardirqs_on+0x10/0x10 [ 199.252926] kobject: 'erspan0' (ffff888059f90df0): kobject_uevent_env [ 199.253606] ? trace_hardirqs_on+0x10/0x10 [ 199.257274] kobject: 'erspan0' (ffff888059f90df0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 199.261959] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 199.261967] ? __alloc_pages_nodemask+0x3ae/0x7a0 [ 199.261973] ? kasan_check_read+0x11/0x20 [ 199.261982] do_filp_open+0x18e/0x250 [ 199.261990] ? may_open_dev+0xe0/0xe0 [ 199.262002] ? do_dup2+0x3c0/0x3c0 [ 199.331634] ? lock_downgrade+0x6e0/0x6e0 [ 199.335789] ? _find_next_bit+0xee/0x120 [ 199.339851] ? _raw_spin_unlock+0x2d/0x50 [ 199.344026] ? __alloc_fd+0x1d4/0x4a0 [ 199.347829] do_sys_open+0x2c5/0x430 [ 199.351542] ? filp_open+0x70/0x70 [ 199.355087] ? SyS_read+0x230/0x230 [ 199.358718] SyS_open+0x2d/0x40 [ 199.362005] ? do_sys_open+0x430/0x430 [ 199.367225] do_syscall_64+0x1e8/0x640 [ 199.371121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.375989] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.381181] RIP: 0033:0x413911 [ 199.384634] RSP: 002b:00007f9c287f77a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 199.392556] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413911 07:04:29 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = gettid() move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x1000000000000235) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r8) write$FUSE_LK(r7, 0x0, 0x0) eventfd(0x7) r9 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmsg(r11, 0x0, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r9, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) ioctl$VIDIOC_OVERLAY(r9, 0x4004560e, &(0x7f0000000000)) 07:04:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(0xffffffffffffffff, r7, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) [ 199.400072] RDX: 0000000000000000 RSI: 0000000000024000 RDI: 00007f9c287f7850 [ 199.407580] RBP: 000000000075bf20 R08: 00007f9c287f77b0 R09: 000000000075bf20 [ 199.414963] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9c287f86d4 [ 199.422241] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 0000000000000004 [ 199.431750] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 199.435057] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.438414] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' 07:04:29 executing program 1 (fault-call:1 fault-nth:4): syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$evdev(0xfffffffffffffffd, 0x0, 0x24000) [ 199.458750] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.463923] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.465728] kobject: 'erspan0' (ffff888059f90df0): kobject_cleanup, parent (null) [ 199.487345] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.499099] kobject: 'erspan0' (ffff888059f90df0): calling ktype release 07:04:30 executing program 5: write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 199.516385] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 199.525582] FAULT_INJECTION: forcing a failure. [ 199.525582] name failslab, interval 1, probability 0, space 0, times 0 [ 199.543217] kobject: 'erspan0': free name [ 199.553249] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 199.566229] kobject: 'batman_adv' (ffff888080ddcd00): kobject_uevent_env [ 199.574346] CPU: 1 PID: 8288 Comm: syz-executor.1 Not tainted 4.14.146 #0 [ 199.577204] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.581300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 199.581306] Call Trace: [ 199.581323] dump_stack+0x138/0x197 [ 199.581337] should_fail.cold+0x10f/0x159 [ 199.581351] should_failslab+0xdb/0x130 [ 199.581363] kmem_cache_alloc_trace+0x2e9/0x790 [ 199.581375] ? wait_for_completion+0x420/0x420 [ 199.581387] snd_card_file_add+0x51/0x310 [ 199.581395] ? mutex_unlock+0xd/0x10 [ 199.581406] snd_pcm_oss_open.part.0+0x12f/0x1120 [ 199.581417] ? trace_hardirqs_on+0x10/0x10 [ 199.581430] ? snd_pcm_oss_release_file.part.0+0xa0/0xa0 [ 199.581438] ? trace_hardirqs_on+0x10/0x10 [ 199.581450] ? trace_hardirqs_on+0x10/0x10 [ 199.581460] ? avc_has_perm_noaudit+0x420/0x420 [ 199.581471] ? trace_hardirqs_on+0x10/0x10 [ 199.660274] ? lock_downgrade+0x6e0/0x6e0 [ 199.664425] ? snd_pcm_oss_open.part.0+0x1120/0x1120 [ 199.669533] snd_pcm_oss_open+0x37/0x50 [ 199.673526] soundcore_open+0x3f3/0x5a0 [ 199.677486] ? sound_devnode+0xe0/0xe0 [ 199.682312] chrdev_open+0x207/0x590 [ 199.686011] ? cdev_put.part.0+0x50/0x50 [ 199.690075] ? security_file_open+0x89/0x190 [ 199.694654] do_dentry_open+0x73b/0xeb0 [ 199.698628] ? cdev_put.part.0+0x50/0x50 [ 199.702686] vfs_open+0x105/0x220 [ 199.706132] path_openat+0x8bd/0x3f70 [ 199.709920] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 199.714575] ? kasan_check_read+0x11/0x20 [ 199.718705] ? copy_fpstate_to_sigframe+0x355/0x480 [ 199.723713] do_filp_open+0x18e/0x250 [ 199.727588] ? may_open_dev+0xe0/0xe0 [ 199.731374] ? _raw_spin_unlock+0x2d/0x50 [ 199.735499] ? __alloc_fd+0x1d4/0x4a0 [ 199.739306] do_sys_open+0x2c5/0x430 [ 199.743000] ? filp_open+0x70/0x70 [ 199.746520] ? SyS_read+0x230/0x230 [ 199.750142] SyS_open+0x2d/0x40 [ 199.753399] ? do_sys_open+0x430/0x430 [ 199.757286] do_syscall_64+0x1e8/0x640 [ 199.761157] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 199.766156] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 199.771336] RIP: 0033:0x413911 [ 199.774507] RSP: 002b:00007f9c287f77a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 199.782196] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 0000000000413911 [ 199.789793] RDX: 0000000000000000 RSI: 0000000000024000 RDI: 00007f9c287f7850 [ 199.797053] RBP: 000000000075bf20 R08: 00007f9c287f77b0 R09: 000000000075bf20 [ 199.804335] R10: 0000000000000064 R11: 0000000000000293 R12: 00007f9c287f86d4 [ 199.811689] R13: 00000000004c8e02 R14: 00000000004dff48 R15: 0000000000000004 [ 199.825308] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.828474] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.841027] kobject: 'batman_adv' (ffff888080ddcd00): kobject_uevent_env: filter function caused the event to drop! [ 199.852573] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env 07:04:30 executing program 3: write$P9_RMKNOD(0xffffffffffffffff, &(0x7f0000000080)={0x14}, 0x14) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r3, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 07:04:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f00000000c0)=r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000240)=""/116) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000100), 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x26f0a49c370f96af) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x260080, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) getsockname$ax25(r6, &(0x7f00000002c0)={{0x3, @rose}, [@rose, @netrom, @netrom, @bcast, @netrom, @default, @null, @rose]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100), 0x0) r7 = socket(0x2, 0x803, 0xff) connect$inet(r7, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r7, 0xffffffffffffffff, 0x0, 0x72439a6b) socket(0x0, 0x803, 0xff) [ 199.859144] kobject: 'loop1' (ffff8880a4a05760): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 199.865583] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.868972] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.885247] kobject: 'batman_adv' (ffff888080ddcd00): kobject_cleanup, parent (null) [ 199.889813] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.897592] kobject: 'loop5' (ffff8880a4b4ea20): kobject_uevent_env [ 199.910305] kobject: 'batman_adv' (ffff888080ddcd00): calling ktype release 07:04:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = gettid() move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x1000000000000235) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r8) write$FUSE_LK(r7, 0x0, 0x0) eventfd(0x7) r9 = openat$cgroup_ro(r5, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r11 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmsg(r11, 0x0, 0x100) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r9, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) [ 199.917815] kobject: (ffff888080ddcd00): dynamic_kobj_release [ 199.924030] kobject: 'loop5' (ffff8880a4b4ea20): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 199.928053] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 199.942996] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 199.949373] kobject: 'batman_adv': free name [ 199.959972] kobject: 'rx-0' (ffff8880961c03d0): kobject_cleanup, parent ffff888098e55748 [ 199.972623] kobject: 'loop2' (ffff8880a4a697e0): kobject_uevent_env [ 199.984676] kobject: 'rx-0' (ffff8880961c03d0): auto cleanup 'remove' event [ 199.994826] kobject: 'loop2' (ffff8880a4a697e0): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 200.004648] kobject: 'rx-0' (ffff8880961c03d0): kobject_uevent_env [ 200.004766] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 200.015971] kobject: 'loop3' (ffff8880a4a9f1e0): kobject_uevent_env [ 200.023567] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 200.024676] kobject: 'rx-0' (ffff8880961c03d0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 200.043564] kobject: 'loop3' (ffff8880a4a9f1e0): fill_kobj_path: path = '/devices/virtual/block/loop3' 07:04:30 executing program 0: pipe(0x0) io_submit(0x0, 0x1, &(0x7f0000002700)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0xf0024100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="a4ab12f728db4b2b4d2f2fba4fad0e3b1ea3e46f905080af4c90ccb170e60b3a8bf56db763e3a227deb6999d3277020000001fb054d54ac45a333c28785d6382fa7776ea267d32109aa4c1a2d23999eb00ea368db25633657b52877baca05a5b587ec8eaf0132a4824ff352777825bff9dd256f453d6823a6593853de952b51f4462d98d016c3dac872a9ebaef04c2e848f2b4bc3e8e8bd50099d9de23f8e43bedb5cd90cee679a01222ddb3f391e8de59746bdab8fa4fdeb9b5bff59ee90ac09576b74ea256f5ca2d42cb5b46ca121faaa86de48c314d56d5382b717aed0803cca7be176d7b89129e94a671ca6cf8dfbde94b3d6714", 0xf6}], 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f0000a1cffc)) r1 = syz_open_procfs(0x0, &(0x7f0000dec000)='smaps\x00') madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) mlock2(&(0x7f0000a4f000/0x4000)=nil, 0x4000, 0x0) sendfile(r0, r1, 0x0, 0x320f) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xa1f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, {0xa, 0x4e21, 0x0, @loopback, 0x5}, 0xffffffffffffffff, 0x1ff}}, 0x48) socketpair(0x5, 0x6, 0x7, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000001c0)={0x0, 0x1, 0x20, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)=ANY=[@ANYBLOB="030000003dbdd035b1a4e840c9d409e3af5f77947ab1fe53d11560130ce921e42efd29aafc5000b07ccaf1160dfd619fee9e45562342924a00d44fb0a06aa0ddfadb5c766682b26b1b43c1bf659a20264071994214518e94e32d92f09977140de4554b02dae5c73857da3581bd12f2f50ecd6cfb277158030ea45c4c7a2d04dc234b2b2d00e5896fabab6aea7fc4b100"/165, @ANYRES32=0x0], &(0x7f000095dffc)=0x8) [ 200.067575] kobject: 'rx-0' (ffff8880961c03d0): auto cleanup kobject_del [ 200.090228] kobject: 'rx-0' (ffff8880961c03d0): calling ktype release [ 200.096894] kobject: 'rx-0': free name [ 200.101133] kobject: 'tx-0' (ffff888098afb318): kobject_cleanup, parent ffff888098e55748 [ 200.103063] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 200.109418] kobject: 'tx-0' (ffff888098afb318): auto cleanup 'remove' event 07:04:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f00000f0000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) memfd_create(0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getpgrp(0xffffffffffffffff) r1 = gettid() move_pages(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_SHOW_STATS(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000cfc000/0x18000)=nil, 0x0, 0xfffffffffffffefd, 0x1, &(0x7f0000000180), 0x1000000000000235) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) recvmsg(r7, 0x0, 0x40000000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r7, 0x4e8bac3582ef6a0c, 0x200000000000003}, 0x10) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getpgrp(r8) write$FUSE_LK(r7, 0x0, 0x0) eventfd(0x7) openat$cgroup_ro(r5, &(0x7f0000000380)='memory.events\x00', 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_MAC={0xc, 0x1, @random="2a52f74d9517"}]}, 0x28}}, 0x0) recvmsg(r10, 0x0, 0x100) [ 200.124821] kobject: 'tx-0' (ffff888098afb318): kobject_uevent_env [ 200.132511] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 200.134088] kobject: 'tx-0' (ffff888098afb318): kobject_uevent_env: uevent_suppress caused the event to drop! [ 200.158716] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 200.159670] kobject: 'tx-0' (ffff888098afb318): auto cleanup kobject_del [ 200.170241] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 200.176009] kobject: 'tx-0' (ffff888098afb318): calling ktype release [ 200.189151] kobject: 'tx-0': free name [ 200.195257] kobject: 'queues' (ffff888098e55748): kobject_cleanup, parent (null) [ 200.213329] kobject: 'queues' (ffff888098e55748): calling ktype release [ 200.242800] kobject: 'queues' (ffff888098e55748): kset_release [ 200.257743] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 200.266279] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 200.270381] kobject: 'queues': free name [ 200.286627] kobject: 'gretap0' (ffff88805a220bf0): kobject_uevent_env [ 200.311613] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 200.318254] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 200.329890] kobject: 'gretap0' (ffff88805a220bf0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 200.345648] kobject: 'loop4' (ffff8880a4b16120): kobject_uevent_env [ 200.354473] kobject: 'loop4' (ffff8880a4b16120): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 200.365978] kobject: 'kvm' (ffff888219f7b690): kobject_uevent_env [ 200.376365] kobject: 'kvm' (ffff888219f7b690): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 200.384849] kobject: 'loop1' (ffff8880a4a05760): kobject_uevent_env 07:04:30 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0,