[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 31.862936] random: sshd: uninitialized urandom read (32 bytes read) Debian GNU/Linux 7 syzkaller ttyS0 syzkaller login: [ 32.204245] kauditd_printk_skb: 10 callbacks suppressed [ 32.204254] audit: type=1400 audit(1575872351.094:35): avc: denied { map } for pid=6977 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 32.259194] random: sshd: uninitialized urandom read (32 bytes read) [ 32.889781] random: sshd: uninitialized urandom read (32 bytes read) Warning: Permanently added '10.128.15.230' (ECDSA) to the list of known hosts. [ 38.522798] random: sshd: uninitialized urandom read (32 bytes read) 2019/12/09 06:19:17 fuzzer started [ 38.724382] audit: type=1400 audit(1575872357.614:36): avc: denied { map } for pid=6987 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 39.531240] random: cc1: uninitialized urandom read (8 bytes read) 2019/12/09 06:19:19 dialing manager at 10.128.0.105:37073 2019/12/09 06:19:19 syscalls: 2666 2019/12/09 06:19:19 code coverage: enabled 2019/12/09 06:19:19 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument 2019/12/09 06:19:19 extra coverage: extra coverage is not supported by the kernel 2019/12/09 06:19:19 setuid sandbox: enabled 2019/12/09 06:19:19 namespace sandbox: enabled 2019/12/09 06:19:19 Android sandbox: /sys/fs/selinux/policy does not exist 2019/12/09 06:19:19 fault injection: enabled 2019/12/09 06:19:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/12/09 06:19:19 net packet injection: enabled 2019/12/09 06:19:19 net device setup: enabled 2019/12/09 06:19:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2019/12/09 06:19:19 devlink PCI setup: PCI device 0000:00:10.0 is not available [ 41.982574] random: crng init done 06:21:41 executing program 0: perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='clear_refs\x00g\xff\xca\x02\x8a\xf0\xe1ZM\xfa@\x1bS0\x11\xbe\xdc\xdc\xdd\xc1\x17~\x18\xd6\xa5\x88Cd**\xde\xae\xaf\xcf\t\xec0\x04\xe7\xf3\"\b9\xb5\x96VR+\xbb\xa0a\xbb\xc8') dup2(r2, r0) 06:21:41 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xe}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6810890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d0265a8220e0b301f45542d83e05d01a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x0) 06:21:41 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "f3"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "7794b9"}]}, {0x2}}, &(0x7f0000000380)=""/249, 0x36, 0xf9, 0x8}, 0x20) 06:21:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000000003, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x0, 0x4}]}) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000300)=@rc={0x1f, {0x0, 0x4, 0x38, 0x2}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000780)="13d8b4f87382c53186808cf7273b28003d7d26dd4d61c04fd62b14702ddfc98df0350918dfce3029900283ab5e7c9053d5ef7ef0e2358e5ebc18e2620a743a723e043ae633617c0e77dba38fd3de2560af51a4619719df81", 0x58}, {&(0x7f0000000900)}, {0x0}, {0x0}, {&(0x7f0000001c00)="4513c9215d05efd9f5c53fd8fb68b3598fc3617fb3470dab5fb7accf8c24911739a3b8340db1278e836882eed62e1e1e63b32f01ce4bb8c247d728cdf70f1938799d8ff07c9e7d72d4aa319f559dcc5b08a1f618ea089d3578042f030f92e35d", 0x60}], 0x5, &(0x7f0000001e80)=ANY=[]}, 0x800) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='veth0\x00') close(r2) write$cgroup_int(r1, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='veth0\x00') sendmsg$sock(r3, &(0x7f0000000940)={&(0x7f0000000800)=@nfc={0x27, 0x1, 0x0, 0x6}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="f93ff4262e5a20c103a6b80a8d07d9f6ea6a59bc", 0x14}, {&(0x7f0000000880)="4e347fb7e6aae3dd075192602f81432fb1af5645312340647f08f0947f1394bc8c0e747626dc12d8e3d66264baec", 0x2e}], 0x2}, 0x80000c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000700)={'gre0\x00', 0x400}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:21:41 executing program 3: unshare(0x20600) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) r1 = openat(0xffffffffffffffff, 0x0, 0x108000, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x56, 0x0, 0x3ff, {0x8, 0x9}, {0x0, 0x4}, @ramp={0x4, 0x4, {0x81, 0xff8, 0x19, 0x8}}}) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\f\xea\xff\xff\x80\x00\x1c\x00\xff', @ifru_names='bond_slave_1\x00'}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\f@'}) creat(&(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) creat(&(0x7f0000000200)='./file1/file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000000)='./file0/f.le./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000002c0)=0xc) execve(&(0x7f0000000300)='./file0/f.le.\x00', &(0x7f0000000380)=[&(0x7f0000000340)='\x00'], 0x0) 06:21:41 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x5, 0xd, 0x4000000000000800, 0x1}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000001c0)=""/4096}, 0x18) geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) [ 182.357829] audit: type=1400 audit(1575872501.244:37): avc: denied { map } for pid=6987 comm="syz-fuzzer" path="/root/syzkaller-shm717943354" dev="sda1" ino=16495 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 [ 182.403766] audit: type=1400 audit(1575872501.294:38): avc: denied { map } for pid=7005 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 182.741671] IPVS: ftp: loaded support on port[0] = 21 [ 183.533220] chnl_net:caif_netlink_parms(): no params data found [ 183.564306] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.571338] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.578301] device bridge_slave_0 entered promiscuous mode [ 183.585467] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.591930] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.599012] device bridge_slave_1 entered promiscuous mode [ 183.599516] IPVS: ftp: loaded support on port[0] = 21 [ 183.625458] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.635688] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.662740] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.669941] team0: Port device team_slave_0 added [ 183.677430] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.685741] team0: Port device team_slave_1 added [ 183.692934] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.702440] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.719708] IPVS: ftp: loaded support on port[0] = 21 [ 183.782617] device hsr_slave_0 entered promiscuous mode [ 183.850346] device hsr_slave_1 entered promiscuous mode [ 183.932660] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.967649] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.991521] chnl_net:caif_netlink_parms(): no params data found [ 184.013564] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.019980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.026933] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.033328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.079533] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.087354] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.094738] device bridge_slave_0 entered promiscuous mode [ 184.095295] IPVS: ftp: loaded support on port[0] = 21 [ 184.114484] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.121673] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.128574] device bridge_slave_1 entered promiscuous mode [ 184.151234] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.161540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.211219] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.218270] team0: Port device team_slave_0 added [ 184.228374] chnl_net:caif_netlink_parms(): no params data found [ 184.236285] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.244018] team0: Port device team_slave_1 added [ 184.269348] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.285588] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.312137] IPVS: ftp: loaded support on port[0] = 21 [ 184.342952] device hsr_slave_0 entered promiscuous mode [ 184.410430] device hsr_slave_1 entered promiscuous mode [ 184.463957] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 184.470457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.505728] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 184.515085] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 184.540641] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.547052] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.554765] device bridge_slave_0 entered promiscuous mode [ 184.582210] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.588347] chnl_net:caif_netlink_parms(): no params data found [ 184.602982] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.609913] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.617156] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 184.636398] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.642838] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.649722] device bridge_slave_1 entered promiscuous mode [ 184.670573] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.693167] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.701230] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.719100] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.739657] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.746895] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.765535] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.772873] team0: Port device team_slave_0 added [ 184.792602] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.799650] team0: Port device team_slave_1 added [ 184.805985] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.806017] IPVS: ftp: loaded support on port[0] = 21 [ 184.815403] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.830821] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.837165] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.844123] device bridge_slave_0 entered promiscuous mode [ 184.850937] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.857271] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.864494] device bridge_slave_1 entered promiscuous mode [ 184.872364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.899412] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.907176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.927631] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.938057] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.951244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.958902] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.966500] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.972842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.980828] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.062215] device hsr_slave_0 entered promiscuous mode [ 185.100377] device hsr_slave_1 entered promiscuous mode [ 185.141274] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.149028] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.156178] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.164110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.171701] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.178028] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.206868] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 185.219212] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.232460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.240481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.248265] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.256390] team0: Port device team_slave_0 added [ 185.262167] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.269163] team0: Port device team_slave_1 added [ 185.276837] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 185.284000] chnl_net:caif_netlink_parms(): no params data found [ 185.295251] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.306102] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.319938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.327765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.335868] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.345781] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.369713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.376357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.384370] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.399730] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.443509] device hsr_slave_0 entered promiscuous mode [ 185.500483] device hsr_slave_1 entered promiscuous mode [ 185.541262] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.566222] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 185.574530] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.609090] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.616967] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.626628] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.640987] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.647393] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.654396] device bridge_slave_0 entered promiscuous mode [ 185.661599] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.667948] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.675020] device bridge_slave_1 entered promiscuous mode [ 185.696013] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 185.706690] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.726240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.734461] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.742394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.749150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.762764] chnl_net:caif_netlink_parms(): no params data found [ 185.772173] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.778168] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.786878] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 185.793676] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.800881] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 185.811333] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.824469] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.841900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.849620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.857271] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.863643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.871290] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.879097] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 185.902077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 185.909114] team0: Port device team_slave_0 added [ 185.935564] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.943070] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 185.951224] team0: Port device team_slave_1 added [ 185.961315] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 185.967515] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.973972] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.981098] device bridge_slave_0 entered promiscuous mode [ 185.988208] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.996387] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.004042] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.010414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.025478] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.032689] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.041717] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 186.050527] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.056866] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.064031] device bridge_slave_1 entered promiscuous mode [ 186.078474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.085122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.095457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.102154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.108999] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.122370] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.182286] device hsr_slave_0 entered promiscuous mode [ 186.241749] device hsr_slave_1 entered promiscuous mode [ 186.281092] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 186.288255] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 186.300693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.307858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.318482] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.334439] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 186.344216] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.355538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.363560] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.380219] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.389026] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.397759] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 186.422908] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.429241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.438155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.445992] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.454682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.462246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.469507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.476888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.486510] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.499987] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 186.508101] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 186.515555] team0: Port device team_slave_0 added [ 186.523519] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.529584] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.537755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.545800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.558750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.567005] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 186.573374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.583541] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 186.597116] team0: Port device team_slave_1 added [ 186.604363] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.618016] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.630423] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 186.638847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.646967] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.654899] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.661282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.668644] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.677785] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 06:21:45 executing program 0: [ 186.688005] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 186.697322] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.709209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.728688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 06:21:45 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/124, 0x7c}], 0x1}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00505) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r2, r3) setsockopt$sock_timeval(r1, 0xffff, 0x1006, &(0x7f0000000080)={0x5}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r3, 0x0) [ 186.735649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.750609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.758515] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.764910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.778912] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.785843] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.807178] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.817277] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.827025] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 186.836110] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.884281] device hsr_slave_0 entered promiscuous mode [ 186.920496] device hsr_slave_1 entered promiscuous mode [ 186.960693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.968365] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.976395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.984342] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.992618] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.998977] bridge0: port 1(bridge_slave_0) entered forwarding state 06:21:45 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0xe}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a680f890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe0fc1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d01a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x68}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000480)="92", 0x20000481}], 0x1}}], 0x2, 0x0) [ 187.008034] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.018221] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.035396] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.046464] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.054697] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 187.062513] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.069661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.077956] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.085696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.094298] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.102080] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 06:21:46 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000390700083fffffffda060200000039e80001040000040d001400ffff0903846d41964e", 0x29}], 0x1) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924924924926c0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 187.108760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.127566] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.135408] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.143282] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.149623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.156691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.173889] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 187.185674] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.197060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.206097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready 06:21:46 executing program 0: syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60d8652b00142100fe8000000000000000000d00000000aafe8000000000000000000000000000aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="1fc8b164a67e3605"], 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) [ 187.219609] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.238199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.265241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.274977] dccp_invalid_packet: P.Data Offset(68) too large [ 187.277610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.284372] dccp_invalid_packet: P.Data Offset(68) too large [ 187.295976] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready 06:21:46 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'lo\x00\x00\xe7\xff\x03\x00\x00\x00\x00\x06\x00', 0xfd}) sendto$packet(r0, &(0x7f0000000340), 0xfffffffffffffd72, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 187.311455] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.326625] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.336894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.357682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.365618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.374794] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 187.386417] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.392851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.402905] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.418790] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.429508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.437075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.445060] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.452862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready 06:21:46 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, @perf_config_ext={0x2}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 187.471054] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 187.477119] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.483200] audit: type=1400 audit(1575872506.364:39): avc: denied { map } for pid=7077 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=28760 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 187.516184] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.533515] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 187.536836] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 187.539755] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.564240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.576219] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.599843] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 187.609079] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.628614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.661392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.669818] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.682879] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.689283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.703151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.713820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.723912] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 187.737189] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.748041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.758748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.768441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.777581] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.785788] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.792200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.799363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.807065] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.816986] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 187.827404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.834842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.843030] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.852767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.862685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 187.874626] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 187.886304] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.896832] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.905211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.918983] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 187.928534] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.940751] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 187.946897] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.954558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.962350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.969856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.977396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.984236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.003680] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.017861] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 188.025925] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.037355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.044984] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.058120] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 188.064552] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.076309] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.085404] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.096848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.103710] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.110432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.117812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.128152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.137224] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 188.146548] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.153908] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.163759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.172412] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.180947] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.187290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.197022] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 188.214795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.223345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.236530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.240031] hrtimer: interrupt took 29023 ns [ 188.244366] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.254599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.256066] audit: type=1400 audit(1575872507.124:40): avc: denied { create } for pid=7111 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 188.286342] audit: type=1400 audit(1575872507.164:41): avc: denied { ioctl } for pid=7111 comm="syz-executor.3" path="socket:[27976]" dev="sockfs" ino=27976 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 188.325498] bond0: Releasing backup interface bond_slave_1 [ 188.327650] audit: type=1804 audit(1575872507.214:42): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.3" name="/root/syzkaller-testdir516624162/syzkaller.eAIM9d/0/file0" dev="sda1" ino=16532 res=1 [ 188.406142] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 188.415036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 188.423357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.432959] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.446948] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 188.453992] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.462752] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.469395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.498466] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 188.510935] audit: type=1804 audit(1575872507.394:43): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.3" name="/root/syzkaller-testdir516624162/syzkaller.eAIM9d/0/file0" dev="sda1" ino=16532 res=1 [ 188.539705] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 188.548142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.557462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.568448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.578657] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 188.586668] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.593877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.602662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.627292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 188.638145] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 188.646247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.657078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.665094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.672783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.682424] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 188.688537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.721267] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 188.728384] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 188.737607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.744431] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.755543] 8021q: adding VLAN 0 to HW filter on device batadv0 06:21:48 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x4d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(0x0, 0x0, 0x0) fcntl$getflags(r0, 0x401) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(0x0, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x800) sched_setattr(0x0, &(0x7f0000000400)={0x30, 0x1, 0x0, 0x0, 0x5}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x10000000) recvmmsg(0xffffffffffffffff, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) 06:21:48 executing program 0: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9}, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000080)='./bus\x00', 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='smaps_rollup\x00') sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)) dup(0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001d00)='/selinux/policy\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) 06:21:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x100000000000003, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{0x0, 0x4}]}) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f0000000300)=@rc={0x1f, {0x0, 0x4, 0x38, 0x2}}, 0x80, &(0x7f0000001dc0)=[{&(0x7f0000000780)="13d8b4f87382c53186808cf7273b28003d7d26dd4d61c04fd62b14702ddfc98df0350918dfce3029900283ab5e7c9053d5ef7ef0e2358e5ebc18e2620a743a723e043ae633617c0e77dba38fd3de2560af51a4619719df81", 0x58}, {&(0x7f0000000900)}, {0x0}, {0x0}, {&(0x7f0000001c00)="4513c9215d05efd9f5c53fd8fb68b3598fc3617fb3470dab5fb7accf8c24911739a3b8340db1278e836882eed62e1e1e63b32f01ce4bb8c247d728cdf70f1938799d8ff07c9e7d72d4aa319f559dcc5b08a1f618ea089d3578042f030f92e35d", 0x60}], 0x5, &(0x7f0000001e80)=ANY=[]}, 0x800) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='/gro<#\xfbW\xe6\xc6\x0f\x1fKE\xb7M\x99\x9a\x9a\x8c,\xe1[&\xe5\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ}\xb7\xf3\xfe\xf6\xe0.+\xe3\x89\xde\x139E\xa3\x85\xbd\x81\xe9\xbd\xee\xee\x03\x00\x00\x00\x00\x00\x00\x00[T\aE\xdfK\x1d\xeeH;\x15v$\xc5\xbcq\x9a\t\x9ej5\t\x00\x00\x009\x8c4', 0x2761, 0xfffffff5) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f00000001c0)='veth0\x00') close(r2) write$cgroup_int(r1, 0x0, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f00000001c0)='veth0\x00') sendmsg$sock(r3, &(0x7f0000000940)={&(0x7f0000000800)=@nfc={0x27, 0x1, 0x0, 0x6}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000740)="f93ff4262e5a20c103a6b80a8d07d9f6ea6a59bc", 0x14}, {&(0x7f0000000880)="4e347fb7e6aae3dd075192602f81432fb1af5645312340647f08f0947f1394bc8c0e747626dc12d8e3d66264baec", 0x2e}], 0x2}, 0x80000c0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000700)={'gre0\x00', 0x400}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) 06:21:48 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x6, 0x1b, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) [ 189.745967] audit: type=1804 audit(1575872508.634:44): pid=7170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.0" name="/root/syzkaller-testdir596594120/syzkaller.gofUk4/8/file0/file0" dev="loop0" ino=4 res=1 06:21:48 executing program 4: 06:21:48 executing program 1: r0 = socket$kcm(0x2b, 0x8000000000001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r3 = gettid() write$cgroup_pid(r2, &(0x7f0000000080)=r3, 0x12) 06:21:48 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @dev}]}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r1}, 0x8) 06:21:48 executing program 2: ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000440)={"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"}) r0 = socket(0x2000000011, 0x4000000000080002, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, 0x0}}, {{&(0x7f0000000800)=@caif=@dgm, 0x80, 0x0}}], 0x2, 0x0) 06:21:48 executing program 0: 06:21:48 executing program 5: 06:21:48 executing program 4: 06:21:48 executing program 0: 06:21:48 executing program 5: 06:21:48 executing program 4: 06:21:48 executing program 1: 06:21:48 executing program 0: 06:21:48 executing program 3: 06:21:48 executing program 5: 06:21:48 executing program 2: 06:21:48 executing program 4: 06:21:48 executing program 3: 06:21:48 executing program 5: 06:21:49 executing program 2: 06:21:49 executing program 3: 06:21:49 executing program 1: 06:21:49 executing program 4: 06:21:49 executing program 0: 06:21:49 executing program 5: 06:21:49 executing program 1: 06:21:49 executing program 2: 06:21:49 executing program 3: 06:21:49 executing program 4: 06:21:49 executing program 5: 06:21:49 executing program 0: 06:21:49 executing program 1: 06:21:49 executing program 5: 06:21:49 executing program 4: 06:21:49 executing program 0: 06:21:49 executing program 3: 06:21:49 executing program 1: 06:21:49 executing program 2: 06:21:49 executing program 0: 06:21:49 executing program 4: 06:21:49 executing program 3: 06:21:49 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) inotify_init() perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r4 = creat(&(0x7f0000000300)='./bus\x00', 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x200a00}]) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3, 0x0, 0xfffffffff7fffffb, 0x4}, 0x0) r6 = socket$inet(0x2b, 0x1, 0x0) r7 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r7, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000340)}}], 0x400000000000023, 0x0, 0x0) ioctl$FICLONE(r6, 0x40049409, r7) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000240)=0x4) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7e}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xc, 0xffffffffffffffff, 0x0) getrlimit(0x3, &(0x7f0000000100)) 06:21:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, [], @bt={0x5, 0x0, 0x5, 0x6, 0x5, 0x5, 0x1, 0x4}}) mount(&(0x7f0000000000), &(0x7f00000000c0)='.', 0x0, 0x23080, 0x0) 06:21:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000000)=""/112) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x4e20, 0x2, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x48, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:21:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c6531d1e47ba314cd2329cac32d8429bc02cc8bd55f887e37ce57abd2be9749e3451e096c097b0b4799aa2322e15936"]) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) lsetxattr$system_posix_acl(0x0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB], 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x406, r0) renameat(r2, &(0x7f0000000240)='./file1\x00', r4, &(0x7f0000000280)='./file0/f.le.\x00') 06:21:49 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x401000000001, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bind$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10) close(r0) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r2 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r3, 0x208200) sendfile(r0, r2, 0x0, 0x8000fffffffe) socket$inet_udp(0x2, 0x2, 0x0) 06:21:49 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) write(r2, &(0x7f0000000180)="efcb3028429a37057ac2e7f191e1e7eafefe57840df508a4bd4dda94d186f0a087c9dff0626d29606cc01a8ac8082b6781d0277e6fab1cc58bf1d147899ef8a5045bb355771a4d832be91a8060ddf91f81d02578f522a460d7d8d68d30fd11d73d2ea53de59f856d75d82902c73e5d40fe5b767ebff66325a7dccf8b24b764d02f9280f0ffe6ca287f8f76421e9d5edabdc87671369cb82d85c3cd0e350f6ef76931aaa426adf742de2c068c2689adf848fdc70963a79fcd1ab5b180f497b1021f2bf1093c8ff0c758e5a8ec02491304eead1592e357a50ed03c19b38c53469dbd", 0xe1) ioctl$sock_bt_hci(r1, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup2(r3, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$HCIINQUIRY(r0, 0x800448f0, 0x0) [ 190.622859] sg_write: data in/out 87530014/177 bytes for SCSI command 0x62-- guessing data in; [ 190.622859] program syz-executor.1 not setting count and/or reply_len properly [ 190.640459] audit: type=1400 audit(1575872509.514:45): avc: denied { create } for pid=7263 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:21:49 executing program 4: mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r0 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) utimensat(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) [ 190.707254] audit: type=1400 audit(1575872509.534:46): avc: denied { write } for pid=7263 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 190.708749] overlayfs: failed to resolve './file1Ñä{£Í#)ÊÃ-„)¼Ì‹Õ_ˆ~7ÎW«Ò¾—IãE l { G™ª#"áY6': -2 06:21:49 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xc00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) splice(r1, &(0x7f00000000c0)=0x1f, r0, &(0x7f00000002c0)=0x8, 0x10001, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x4080) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000340)) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000240)={0x1, "dd40f0773d2671cf702a2dff08a5252e183eb1f96ba9b46c567daa86516b3141", 0x3, 0x8000, 0x3, 0xe0, 0x400, 0x86363db251589ae2}) semget$private(0x0, 0x4007, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x3f, 0xf8, 0x9}, 0xc) r3 = shmget(0x1, 0x4000, 0xc0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/207) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1c5, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 06:21:50 executing program 3: ustat(0x6ba3, &(0x7f00000000c0)) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) getresgid(0x0, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000300)='127.0.0.1\x00', &(0x7f0000000340)='./bus\x00', 0x0, 0x0, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x9, 'syz1\x00'}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$RNDADDENTROPY(r3, 0x40085203, &(0x7f0000000240)={0xe1, 0x2d, "14806d2c1a87f475d6304143fc6eb4e0c7d71d8645e8f3d2beb13143832dcf41dbfa2efffc91ea8f396a8676b2"}) write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x5, {0x4}}, 0x18) write$P9_RREADLINK(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="3a2582ed412f48067d647d8911f663a7724bdef64346ef8234cdf781d1d3abf9d1a51c4bfce1e77551a8bd678625f508300200000040847bc2fdffe8cd918b0350412915d8a5c51817c3ff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b88117e669c6e3203053a6a05995f5ed199fcf8722be75fa42c080601d48e7081161161a2793d1429196b4d9182f7c46359a074285b251aca195af3b2887cc79d0cedcc0b7e7f95c7d70472"], 0xc3) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000180)={0x6, &(0x7f0000000100)=[{0x8, 0x2}, {0x7f, 0x2}, {0x2f0, 0x3}, {0x8, 0x4}, {0x5, 0x1}, {0x80, 0x6}]}) [ 191.142077] overlayfs: failed to resolve './file1Ñä{£Í#)ÊÃ-„)¼Ì‹Õ_ˆ~7ÎW«Ò¾—IãE l { G™ª#"áY6': -2 [ 191.153708] audit: type=1804 audit(1575872509.564:47): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/7/bus" dev="sda1" ino=16566 res=1 [ 191.246892] audit: type=1400 audit(1575872509.564:48): avc: denied { read } for pid=7263 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 06:21:50 executing program 5: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) writev(r1, &(0x7f0000000780)=[{&(0x7f0000000000)="c0cbcfcd3cffc6cecd7a87e109750439d125388837d3d69f230ab785d651f5ff0676275877d8ceaf786fc07e5e093596a32c21d80b22ef2070e916ef07ba651dfd00e44504549afb5cd58b9a9068ae0cfce0b048dfccf7c337997d28d4f2022b3ea044a7f85bb3ca926c0e699aa601de2dc69baf919434c345f7a5f94afc6ec27d4bcc98ffd0bc0c", 0x88}, {&(0x7f0000000180)="3b9f9fa1374917434a2e66d10a0c4d2aec9b2b635c0a11fee6802a86cc74575b78508e822f1e1a9491e223b5b51f6def294e87eee5fe7d368ed6e9cf3ea9e4bca13285c23d821135e22517757c77ed19c06a794846f661ee6ad00d1029c3bf6ac670f943a4148c0de96b90deed9c3a4c1bb0cdc1df51961e9dca1bc2d2fd03d0453d2cdbfd0b5c64d700e3fc7149b4b080154ab2c4b0982351893b840f5d6b1b7c", 0xa1}, {&(0x7f0000000240)="12146d0500ac9f5e74d40ef1137a3329420df9c078895d41d94c0f6646efd115da6fe536828777b200fb3265bb897a2560285df8123012f35e2f725e83b19adf06978b872a1119cdd8584d844cf273f3e6d51c5c3c2ec6675fe483524ce65db72a5e5ee9786b7f0bff8304", 0x6b}, {&(0x7f00000002c0)="622c0000214e1238e9d9f29d9c116a47dc6aa796a49e2641b433f17ed20b7d4ac47dedc650cc13c6e90808f1755968380e49682412a0e17f4283351600872f5037973e69d9b880be8532ca0827eded979c52790a0803556df4d5c8ce67485edf20f6ece4da084b31a3361e6656d6f6b873aec335e1296a79b96c497b1f98589cfd4c16c4f9441c3d0c23e79531939226d97c5a69db7783cefec8c01cd37b344bd5ac", 0xa2}, {&(0x7f0000000400)="e9996ef2dadde62355d35b10d2af715d3158149c8447664f4257e4875ad5a63fb372824e45807a83146f308eb3f78661e52fe506b11768e6f735d4a699e57cbfe4fe02e0c9464818cbe35528099712f6f5675e1de6d848fa7259064b7ab42a43a4edcd057b68d50e9fc017516e29e1b1692dde2fac118b1ac5e55c4a07a847db4c9682f47ec55d8c3ca5244ba3aab461ff5da8faad4eff966fa364a7d0c7b3f1aba0b23b4fc737b73b26cff26fe055ac23e6e68f8f3f1833138819faf95c8b08ef8380f4c14a2029df98ec62501507796b", 0xd1}, {&(0x7f0000000500)="59558b557f247da758ac416b70005449f8152e38c0cbde5f3acf27fadb6a34b3889bd4aff1fd0c6e1f73bc57454790de288b7f8799ec2e8f7ac1b6d0bb552a4cdf7718323f06a11cef24468ffbfb73d66f814a36957f84bf8465310a16b3567fbf8f342b0329bae353648faab26e6b6a150f82836395b73fb9ad5381bf919e61559d543a2b45177e6b1690d26f7fc59ff733e8af41612b1b25ea9a60c52c647f06769a3bca293a3db29786d9c49940d28ddc83ea9e77803c509f34cf055db04fcdd713e2d82f18183278c7109e2d23105a92d151e255011cd12f269d6a161fbe3bd2cc6667de", 0xe6}, {&(0x7f0000000600)="6f01a3be5cd0c0822ddc299d5b6583a28f01292f3038b3e53f1d2ba62a5d6a501665d38c32d477ee4acbe5bdb733c60f7cbfe14df042d87f0f15b5671102759da4a9df7a9af0677e91c2c29c899a5ee82a7cbfacb33c65a7f6f3c7e5790d247b5e9bbe1becf8606b46cdee28f7794fe025066ffa75b5df20eaa1e38f317dd1d5495f762654c07a6655c0c8be2903373dbc3f072d806d332a32e2feb8af6a64697c7f3c1b2d84793f3bc1aa0d8756e92edc74c12b841b49e75d822a0726e885f0cc294ed3477aaaff81f9aeabfbb8ee3438f96b08a9a0f1e9f6c27b1f721d1a21cc5e19cd083e799516f0dec52e5821af456fbc", 0xf3}, {&(0x7f0000000700)="0ae9a38c43abe9a07bd1fb72ca8a371c9a2611e16c277f2ff725d4216bd19d8b7dd10e48a20ffaa56d2cea6a4dc0b125b77842cb59d1ca75001504786431352c82c5ede03a89225f038ec3", 0x4b}], 0x8) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) pwrite64(r2, &(0x7f00000003c0)='6', 0xfffffee5, 0x83dc) fallocate(r0, 0x8, 0x0, 0x8000) 06:21:50 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000380)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iyn\ft:\xe1\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8o\xe4\x9b\x8cO;<\xad]\x90+[-l\xfd\n\xbc\xf5\xd7\r\xf3\xfd5.\x8dD<\x88\xc6\x0f\xd7\x14\x0f\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4N') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) gettid() r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000040)) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x802}) socketpair(0x2, 0x3, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r3, 0x40044160, &(0x7f0000000000)=0xfffffff7) perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) 06:21:50 executing program 2: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x1000, 0x5000, 0x7fff, 0x3, 0x2}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x2000, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000003500)='/dev/adsp1\x00', 0x3cd883, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) read(r3, &(0x7f0000003540)=""/4102, 0xd8) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)=ANY=[@ANYBLOB="01000050000000000000000000005f399edbfbe0be6f04"]) timer_create(0x5, &(0x7f00000013c0)={0x0, 0x33, 0x1, @thr={&(0x7f00000011c0)="aa86fff1058424db450002bdbd20cbfc7c4a9a1ed17d89998bcd4ced2810c772017048eca34dcfee20dc13e6e6fe8c49e7ad575ea268fd21798b3e4ad76d16ce8638411862b98a95b30059396e53b063fb576270b01ce0e37be54df7a954257b25b4cf5e40a1d8c1e98c9f78f655161db4b3035601f9800729c3a0abc62fe980e8046897cdb378716f1f7170dee5dcd4f93ccf7334473145f39ac33874892202ce7c2c330c58647db2c2d6eafb976273776eafdeb98e6aaeb54d3f9553db1f4d745589", &(0x7f00000012c0)="00ac9312d5ef725485d0c1c14fc64a31d896609fdae57df082a6a17c2d7bb26a248372c52e8d868e49da377b81eb21ea6b6d2c501a4a8a784dcef080581fd980fa70ce0c7ea19bd1f17e996ff717c4af0a07dedf8a90202f4aaed41e64e2bade115cd18a9dc01f73480ce5913e164e4db378e25fa03feb1c3ca04dc43cb6455eef349455a7e4b8f0714b56a605fa0f58c8708cef30f8c08e6a8937338a3b142b8f76567317c6a69791338c794957133401c06a839384f69edb593cbc2b03cb0a61fdb19b74b15d18a6a4e926274667312adc89a6283c342def12c48dde371b"}}, &(0x7f0000001400)=0x0) timer_gettime(r4, &(0x7f0000001440)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000100)=0x5) 06:21:50 executing program 1: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xc00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) splice(r1, &(0x7f00000000c0)=0x1f, r0, &(0x7f00000002c0)=0x8, 0x10001, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x4080) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000340)) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000240)={0x1, "dd40f0773d2671cf702a2dff08a5252e183eb1f96ba9b46c567daa86516b3141", 0x3, 0x8000, 0x3, 0xe0, 0x400, 0x86363db251589ae2}) semget$private(0x0, 0x4007, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x3f, 0xf8, 0x9}, 0xc) r3 = shmget(0x1, 0x4000, 0xc0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/207) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1c5, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) 06:21:50 executing program 4: r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0xc00000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x8020000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) splice(r1, &(0x7f00000000c0)=0x1f, r0, &(0x7f00000002c0)=0x8, 0x10001, 0x4) r2 = syz_open_dev$mouse(&(0x7f0000000300)='/dev/input/mouse#\x00', 0x0, 0x4080) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000340)) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000240)={0x1, "dd40f0773d2671cf702a2dff08a5252e183eb1f96ba9b46c567daa86516b3141", 0x3, 0x8000, 0x3, 0xe0, 0x400, 0x86363db251589ae2}) semget$private(0x0, 0x4007, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x3f, 0xf8, 0x9}, 0xc) r3 = shmget(0x1, 0x4000, 0xc0, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000000140)=""/207) semtimedop(0x0, &(0x7f0000000000)=[{}], 0x1c5, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) [ 191.556780] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 191.645055] FAT-fs (loop3): Filesystem has been set read-only [ 191.662601] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 191.697893] device nr0 entered promiscuous mode 06:21:50 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000593000)={0x2, 0x4e1d, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @local, @local}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet_mreqn(r0, 0x0, 0x14, 0x0, 0x0) io_setup(0x1000, &(0x7f0000000000)=0x0) io_cancel(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xc8, r1, &(0x7f0000000100)="b2636b44bdfc3502d4bd8291495745aba5a739be6bffef323cd331cda3690909330c6a7ffb52bbdf948d738b6325d45c661e1bf17a67d001c9248fc09e73c82dde1bfd8812d3a90ae73564590aa594c9787ca6cdf940e14867e358a653e7e5afb9de88ad5ff9f572954f9e724d5b87", 0x6f, 0xff, 0x0, 0x1}, &(0x7f0000000180)) 06:21:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000300)='./file0\x00', 0x140, 0x100) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000000240)=ANY=[]}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f000033efc8)={0x0, 0xffffff7f, &(0x7f0000aa8000)}, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {0x20, '/vboxnet1@selinuxGPL-/em1em0cgroupvboxnet1+ppp0#GPL'}, {0x20, '/dev/bus/usb/00#/00#\x00'}, {}], 0xa, "2c4bb144c46f923c141d3967c92e3ec13ad6dde007a5b11ad5b02ad88d568f30d1f4ad98f2052526d34951084eb34d79acea365b9b1e26edf2f03ebda6d571e1767baceb5f188db826182c"}, 0xe3) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r7, &(0x7f0000000100)={0x11, 0x0, r9}, 0xffffffffffffff7c) syz_open_dev$usbfs(&(0x7f0000000240)='/dev/bus/usb/00#/00#\x00', 0x4, 0x402) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="205f00000000ff0400000000000000000000001e", @ANYRES32=r10, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0xc40c94d75fb102d0, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) pivot_root(&(0x7f0000000380)='./file0\x00', &(0x7f0000000340)='./file0\x00') 06:21:50 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff78, &(0x7f0000000040)=[{&(0x7f00000002c0)="2e00000029008151e00f80ecdb4cb904034865161a000700050000000089a108b555e75486cd5edc2976d153b4b6", 0xfffffffffffffd12}], 0x1}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000001c0)={0x44, @time={0x0, 0x1c9c380}, 0x2, {0x81, 0x6}, 0x20, 0x0, 0x5e}) syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb81002900000c01001ee0000000002bd1081d76a1e1108a335ec011667ffee6e9897b1f4411b75f6b3c8aa8572ac3847b332d1dbcbb9f95488fee6c3368f427e083ad2f7bb8b4d594e036402e97ad9f6cedf380dc0896d69b01cc75d0aa4c0bbc3bf8db30aa09ae5cb0a4d3a6b49d2cc223cf88f1f4471e3d73b4f1888e3ded06dfb0d8e39367f3240c47e4116e309885f676d58b5efd30be4dc0818f"], 0x0) [ 192.006626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7357 comm=syz-executor.4 06:21:51 executing program 0: syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_vs_stats_percpu\x00') r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x3d, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x18}, 0x0, 0x0, 0x200001, 0x0, 0x0, 0xf52}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffb, 0x10102) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xf17) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000640)={0x0, @reserved}) unshare(0x40040400) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[]}}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000002c0)='/dev/admmidi#\x00', 0x8531, 0x511800) mkdirat(r1, 0x0, 0x100) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, 0x0) semget$private(0x0, 0x0, 0x200) semctl$GETZCNT(0x0, 0x1, 0xf, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) creat(0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) msgget(0x0, 0x300) pipe(&(0x7f0000000400)) sendmsg$nl_netfilter(r2, &(0x7f00000014c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10a10c0c}, 0xffffffffffffff46, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="746d959390433c1f507d55364c2c31fe36ef9308000000c4cdc5f8ffffff00000000009f000000f5a6f03893f533828f8e948bc5f1223ac91ef6bfddf7ec5a5b9304af0d6453ad728d6bd5b58fd9cbe908606979ab9e996e5b93ea901c55e945179cd3e61bd8c34ae2331f6b4991454dd54f78f6be4c2c45438e55aa6a91a06b8c0c86790c0b38cdc5d833c6a400"/155], 0x9b}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004850) rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000200)=@v3={0x3000000, [{0x9, 0x2}, {0x101, 0x3}]}, 0x18, 0x2) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x40100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x8}, 0x10100}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x9, 0x1401, 0x0) write(r4, &(0x7f00000000c0)="1c00000016009b8a14e5f407000904240a000003ff00000000000000", 0x1c) r5 = socket(0x200000000000011, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) bind$packet(r5, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000500)={0x11, 0x0, 0x0}, &(0x7f0000000540)=0x100000421) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1d8, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000005e000700000000000069aa0000000000", @ANYRES32=r7, @ANYBLOB="4c439ea030079c050000000000000d00000000b8a2622061f0c22b241af631fdeed5c71372f78bfaddee58c3376bfac81d7eea7df100333d216a69648d12b792f4e3b6f093b7b35926de250c29ca14566f026848ecdedea47639ecb1853a8f5a8ad92e5d201d1f1dc10eca6fc5897e3a89ee851aabaa60bb81bda844c42b1ec776915ae1716a35cbfb24f630cf8b910bf9a8169393008a64ebc2f938f6a318697bd3b5553c7127ee20244ffe4a362ac3104d2c3f7799e86b83366dbe7e534065be52b5009d15305130721087bd56f92bea33865b182f5bdc8ea00d2071fd9b38d9afda963d5db043cc6bc6da4db5a12034dd00ffadc9d4ca0318e7c6b2a6eb0f53e21a9de1ea84d99378b1603c53db8ec538e65246bb1302a291a9c8bfac8c020749ac428b05a09074619b709b0621c436b7a0623e7a5cda69bb6d38de1bce33ff395d07991829d0c37af45cfbac7b8ed93ee57af201847aa033e023dd"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'veth1\x00', r7}) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @dev}, 0x14) 06:21:51 executing program 1: open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000040)={0x9, 0x20000000001, '\v'}, 0x6b7b6b00) socket$pptp(0x18, 0x1, 0x2) 06:21:51 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="640000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000a002e00003c0012000c000100697036677265567b499546a885814c00002c00020014000600149ef0e1be118746bbbf83fb842f55121400070032c6e6b6cb33cabacf7306000000db13"], 0x3}, 0x1, 0x0, 0x0, 0x8000}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x1, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 192.346098] IPVS: ftp: loaded support on port[0] = 21 [ 192.390146] protocol 88fb is buggy, dev hsr_slave_0 [ 192.395497] protocol 88fb is buggy, dev hsr_slave_1 06:21:51 executing program 2: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000002c0)={0x0, 0x7fffffff, 0x7, 0x80000001}) openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x281, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) sendto$inet(r0, 0x0, 0xd1, 0x200007fd, &(0x7f0000e68000)={0x2, 0x2000000004e23, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) dup2(r0, r1) getpid() r2 = add_key$keyring(&(0x7f0000000980)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffc) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/udplite6\x00') setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000040)={0x2f}, 0x2) keyctl$invalidate(0x15, r2) sendto$inet(r0, &(0x7f0000000400)="f62ab313949355e0273e65d3abda21f068933ec46b1fdf41a833e981e7de5b6aa4a1b65d8ec8094ee099d8271d26428366e221fc061208889c5686a4dc0c2d3d4fd66741cc11c4c833102fc156857f99a8b799636ea87c35b0283036520e5953baf9c51316d8d93aa5096030bd0d0dfbbdf445006af75ad33303c89c2de7ee8ac49a59a6605f3343c51ee399b1977da2e34ffbe0425866c7b7ad499ab8611286d60c0f27a1e62be4fb4b9e41eabec273531810fb81d733a5ea29408c19aba4587f9da5920ad564ad6bb89ac4565194535c7f6f54993deceb58a75e137be85d7600", 0xffffff90, 0x60, 0x0, 0x127) [ 192.471288] protocol 88fb is buggy, dev hsr_slave_0 [ 192.476406] protocol 88fb is buggy, dev hsr_slave_1 06:21:51 executing program 1: getpid() r0 = syz_open_dev$sndseq(&(0x7f0000000880)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x200000000bd}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) timer_create(0x1, &(0x7f0000000100)={0x0, 0x13, 0x0, @tid=r1}, &(0x7f00000001c0)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000003c0)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000440)=0x0) prlimit64(r2, 0xe, &(0x7f0000000480)={0x9, 0x8d}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = socket$inet6(0xa, 0x0, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendmsg(r7, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e22, @local}}, 0x7}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000000000000a7, 0x10344, 0x0) r8 = socket$inet(0x10, 0x2, 0x0) sendmsg(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="24000000520007031dfffd946fa2830081200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) socket$inet(0x10, 0x2, 0x0) 06:21:51 executing program 5: inotify_init() perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0xa04d09a93cf596e6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000ac0)='/dev/audio\x00', 0x101000, 0x0) ioctl$SOUND_MIXER_READ_RECMASK(r0, 0x80044dfd, &(0x7f0000000b00)) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000100)='}\xc4&cpuset#\x00', 0x5) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0xb, &(0x7f0000000040)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r3 = creat(0x0, 0x0) sync_file_range(r3, 0x0, 0x0, 0x4) r4 = syz_open_procfs(0x0, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x21000000108) pwritev(r4, &(0x7f0000000340)=[{&(0x7f0000000400)="0bfeebf3fce6bb92c5238eef8d94d73eedf18974c5e2cdcad14eab5c01683ab8d873a82f200d8ef3ff6cf3714a6ebdbf0602df5084e048b6baca7c2ea2ebf691cf59b77b23d8bf3ffd1fed292aad3cc5d87f1d3019350c5500eb4ca6b34a3dc0f1ca2ad87f13b774e59a5c9f8af98ad0464ec6df59adf389c44f58459dc3e80b97e834a21d01514672071762d6efd7ec5bf192e7cf80724c", 0x98}, {&(0x7f0000000680)="17a1a2e7af96e4d3ee628e28954ca80c933c0d110e0692f157cb40b16e53015d02bb95cebda3f69ac5e08fb82b5871ef5529cac47a205a73441e7a46bde471dc8b949aa240e721b4c50343516321061e779653ddf8b762b2ffd96a7d0ca8cf2ca5f87288fa31d862593799cfa82a35b7a99d542ddbba0b48016d1214340f34012c41829fe32651f1d751ba48f28233c3ca0e986bc39897cfb7", 0x99}, {&(0x7f00000007c0)="0133be11ade8203d010fc5ccbf0b21e3737d0cbcec90f8fa80e5314c737fec36c5663a29f63cae8eed013c502209b499fde0fdcfb5ef1d7d4e10552db5ed5a0feaa9f0c447565cb69fdae458608a1ddf9dd0893eba23441dfb41e6140ebaebd491075968cdbad04f994227b890fc3d0a9190b0f300d20a2610a5a8bafaf90e8ae79ccc34005dd2a2", 0x88}, {&(0x7f0000000180)="bc49efdee377e2e0b8efe7c15e38ea6c603b39bca9e9a95fa4a566a628664e1f95b9624616aa3e86c6ea48cb26c98b548ac5508c6338de566de267291977ad51c41848bc75645f9a9b5404428e8f06c20691410a8647ca24d816", 0x5a}, {&(0x7f0000000000)="49aae462af5ccc37406d93e00d0c849d74493880170b02b80022df887a649a88", 0x20}, {&(0x7f0000000280)="8741daa66740cef5ae31007bb93d0979dfa37980eb0c717040b03ab0ad7a156be2c894c0", 0x24}, {&(0x7f00000018c0)="7440f7ea83a7afe31f4f1e13d038a7bf903e5aab7ed3e029ef8d0aebbb21960c4a3e1b67eb14f6ed8243dbcf537d7273df8b998b7e054e16d3cc0d096f0731fb2668", 0x42}], 0x7, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x10, 0xffffffffffffffff, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./bus\x00', 0x8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x200000, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="e1d3000011000d04000000000000200000000000", @ANYRES32=r8, @ANYBLOB="000000001a000000"], 0x20}}, 0x0) pipe2(&(0x7f0000000740)={0xffffffffffffffff}, 0x4000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={r1, 0x10, &(0x7f00000009c0)={&(0x7f00000008c0)=""/250, 0xfa, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0xa, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbff2, 0x0, 0x0, 0x0, 0x4}, [@alu={0xc792dc5fd5481846, 0x0, 0x5, 0xc, 0x8, 0x30, 0xfffffffffffffff0}, @map_val={0x18, 0x3, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x73}, @call={0x85, 0x0, 0x0, 0x52}, @generic={0x2, 0xc, 0x8, 0x401, 0x8}, @generic={0x1, 0xf, 0xc, 0x3, 0x7}]}, &(0x7f00000003c0)='syzkaller\x00', 0xff, 0xe6, &(0x7f0000000580)=""/230, 0x41000, 0x2, [], r8, 0xd, r9, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xf, 0x9, 0x5}, 0x10, r10}, 0x78) sync_file_range(0xffffffffffffffff, 0x0, 0x0, 0x4) [ 192.682767] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7389 comm=syz-executor.4 [ 192.711060] protocol 88fb is buggy, dev hsr_slave_0 [ 192.716379] protocol 88fb is buggy, dev hsr_slave_1 06:21:51 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x70, 0x3, 0x0, 0x3f, 0x1f, 0x0, 0x3ff, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40005, 0x80d6}, r4, 0x0, r1, 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x202, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, r5}, 0x3c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000c88000)={r6, &(0x7f0000847f95), &(0x7f000089b000)}, 0x20) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0xa, 0x1ff, 0x4, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r7, &(0x7f0000000340), &(0x7f0000000400)}, 0x20) write$cgroup_subtree(r4, &(0x7f0000000600)=ANY=[@ANYRES64=r3, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES32=r1, @ANYRES16=r6, @ANYBLOB="26654421a8eff7dd35707c4a7b1f7ce80bdca2d59c8c292ec58f13d4ef92a01e1d7e73f613a67c70549fd894aa37d0c180eb7f2dcaa1d8751cf59425dc"], @ANYPTR, @ANYBLOB, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES16=0x0]], 0x20) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x40000, 0x0) openat$cgroup_ro(r8, &(0x7f0000000580)='cpuacct.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000000900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x7, 0x4, 0x8, 0xf1a}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r9, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r10}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x20f) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={r10, 0x6, 0x10}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x10}, 0x10) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x1a0ffffffff) perf_event_open$cgroup(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x7fff, 0x5, 0x0, 0x7f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8ab, 0x5}, 0x24800, 0x480, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x667a}, r0, 0x1, r11, 0x0) r12 = openat$cgroup_ro(r11, &(0x7f00000001c0)='memory.evenvs\x00', 0x7a05, 0x1700) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[], 0x32600) r13 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCADDRT(r13, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @remote}, {0x2, 0x2, @broadcast}, {0x2, 0x4e24, @empty}, 0x8, 0x0, 0x0, 0x0, 0x27, &(0x7f0000000300)='caif0\x00', 0xffffffffffffffe1, 0x2, 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) 06:21:51 executing program 4: open(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x9}, 0x0, 0xe, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) write$P9_RSYMLINK(r2, &(0x7f0000000180)={0x14}, 0xffd6) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) mount(0x0, 0x0, &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) [ 192.933391] IPVS: ftp: loaded support on port[0] = 21 06:21:51 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000100)) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x12) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000001c0)=0x14) syz_open_dev$binderN(0x0, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000140)=0x7fffffff) connect$llc(r5, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10) sendmmsg(r5, &(0x7f0000001380), 0x40003ad, 0x2000000) dup2(r5, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000ac0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6b0, 0x160, 0x160, 0x0, 0x0, 0x0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x5e0, 0x6, &(0x7f00000002c0), {[{{@ipv6={@mcast2, @empty, [0xff000000, 0xff000000, 0x0, 0xffffff00], [0xff, 0x0, 0xff000000, 0xff], 'sit0\x00', 'veth0_to_bridge\x00', {0xff}, {0x101}, 0x3a, 0x40, 0x6, 0x22}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x2c}}, @inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={[], [], @remote}, @ipv4=@multicast2, 0x1f, 0x3b, 0x988}}}, {{@ipv6={@remote, @local, [0xff, 0xffffff00, 0x0, 0xa76e7871e35851eb], [0xff, 0x8412de5d03850142, 0xffffff00, 0xff000000], 'bond_slave_1\x00', 'bpq0\x00', {0xff}, {}, 0x2f, 0x81, 0x3, 0x6c4d07fe09016a31}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x4}}}, {{@ipv6={@ipv4={[], [], @remote}, @empty, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffff00, 0x0, 0xffffffff, 0xffffffff], 'yam0\x00', 'vxcan1\x00', {0xff}, {0x7f}, 0x5, 0x6, 0x6, 0x52}, 0x0, 0xc8, 0xf0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x4}}}, {{@uncond, 0x0, 0x118, 0x188, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xa}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x7}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x7, 0x1200, 0x1, 0x0, "400a00c78409e70c16efacc4914e827dac1eca61f4441af0cf35f2b62cc33c14ff700c5912e5ff6c4d1ec2c8d8de6e9a46bebd7a3aa93e83ecc3e4b361569b9e"}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@inet=@socket1={0x28, 'socket\x00', 0x1, 0x1}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x710) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x35d, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 06:21:51 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x542, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/hwrng\x00', 0x100, 0x0) bind$isdn(r1, &(0x7f0000000a80)={0x22, 0x3, 0x20, 0x9b, 0x5}, 0x6) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='#! ./file0I'], 0x1a030) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) 06:21:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000015c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffc0, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x1, @perf_bp={&(0x7f0000000500), 0x8}, 0x4, 0x401, 0x0, 0xd, 0x1, 0x72f1eaa5, 0xb33}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_AUDIO(0xffffffffffffffff, 0x40345622, &(0x7f0000000140)={0x5, "3eb5843796f7013047de16cb37b04c37627fc1a8c7ed766c5a86adb687d8ba79", 0x0, 0x1}) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000100)=0x2) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x20000000000000}, 0x0) unshare(0x2040400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000180)={0xff, 0x1000}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='\xfbJE\n\xc8z\xf8W\x8bmemory.e6ents\x00#3\x13i\xa3\xb9\"\xf8\xab\x82w\xb9.\x998Y\xf7\xf3\aJ\xc2\xbf\xf5Y\xce\t\x1d\xf9\x0f\x8cy\xf1\xcfTh\xf85z\x9d>\xb5\xd3\xcf\x84=\x19\n\x1fi\xd4\x0e\x00\x84\xd7\xd8\xfd\xd3f!\xc4Z/\xbe\xb6x\xdaV\xc9\x96\x83p\x83\x10\x7fe\xfe\xe4\xd5\x19\xba\x9f\xd4\xaf\x8b\xc4\xe6#?\x940.\x87]\xe0\xdd\xd9\xd0\xeb1\x96\xed7\x1bt\xb6\x99\x04\xcf\xd1X\x01\x87\xf8\xa3[8\xd2\xc2\x15\xa8\xc7:\x7f\x12\x16\x1d\x89\xca\xe4s\x06\x12;\xc0\xfc\xab\xc8\x9fY\x1a\x91\xb4U\xeb|\t`E\xf0\xd3\xc5\xc4\xef\ann\x0f!\xc3\xa3&\a\xf0\x13\x05\xd3M\\ \xcd\x1e\xeb\x95F{\xf4\xd4\xb4D\xbe\x8e\xab\x95\x16l^\x96n\xa5\x9c\x101\xf3\x87\x9f\xc6dHD4\x05\xc1&y\x89,\xfby~x\x1cs\xf1Y?o\x05V\xa2\xb4\xb1\x8c\xb8\xd8\xd3zkV,\xdb\xcaE\xb3\xb4\x909\t\xb46EG0\x96\x7f\xbdC\xe9\x18W\x9b\xd9\xc7\xec|\xf4\x1d)w\xcf\xd5\b+|\xb5\xbf\x18\xb0q\xc2G\xd3#\xfeZ\xf0\xb4\x00\xa4\x7fsqk\x1d\xb0*', 0x26e1, 0x0) ioctl$sock_ifreq(r4, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) r5 = socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000200)) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000001c0)=0x3) ioctl$sock_ifreq(r4, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) 06:21:52 executing program 4: openat$vsock(0xffffffffffffff9c, 0x0, 0x400000, 0x0) ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000036e000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = dup3(r1, r2, 0x0) dup2(r4, r3) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup(0xffffffffffffffff) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000100)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xffffffffffffff31) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2000000011000d04000000000000000000000000812b27843f2ad9f7b89b865cf614aff6c3e14f4ac630a9f6344f5d6382b9f7ce3bfba62e590c0124ef70cb5d384bc1e07dee3e7981578ff5ab0699121578dca58f96897a2d536acee6a5811a1e2aa2800106d9e6b20c45d5d83db123ade4667f0589bdc6a6ec4202dfec8fafbaf036e2b3833ed3e82bd68eb72478924bc0b9993db47eed84aafc129449b000f07960396b41407fc473d2a11057fcdb93169f0c5c6a7ce337ad49192fec652bfe8f6e2dd9793a028f06fde643e37d7bb8d73afc471abac82c2e00", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x20044400) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r9 = dup(0xffffffffffffffff) recvmmsg(r9, 0x0, 0x0, 0x0, 0x0) r10 = dup(0xffffffffffffffff) ioctl$VIDIOC_ENCODER_CMD(r10, 0xc028564d, &(0x7f0000000040)={0x1, 0x0, [0x4, 0x0, 0x8000, 0x1, 0x3c, 0x4, 0x8, 0xfffffff7]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 06:21:52 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$tipc2(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_rose_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"/294, @ANYRES16=r0], 0x2}}, 0x0) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) socket$alg(0x26, 0x5, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=""/4096}) socket(0x10, 0x2, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="9169b2d637e415500818f591d69eeefe975322a5adb7c50af365f0f0412749ca35b211b07360a0a3681a9cc04a80f85fee155c8118eb10b83d7d2ea702099d937983f93bf5be38dd47484757c14e6846e10389a3b235fda4a1bdc144eede2e84ec594351fa306cc1a9b1b582"], 0x1, 0x0) renameat(r2, &(0x7f0000000180)='.//ile0\x00', r2, &(0x7f00000007c0)='./file0/f.le.\x00') 06:21:52 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xacc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r3], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r3, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)=ANY=[@ANYRES32=r4, @ANYBLOB="e9000000dcb663568acb44d7c392333c2dc2a56e5800da0f49a0128a52f79f7556c2fd43f02b2ee788a12344507533162470cfe706a2912d33c4278784e3785632060361a05908be8e3cd06811b26e886b94c71738f8b6e2054e623156a0923aeb7db777c3820cbb28c73a8de5b38dd16bf4d7f6b8efe8171fca83c0be9ee80fe41e6fa20a67df0d4c3f2398aeed0bc2dccfb25671747d4d7ef2e565205bccd873c5f12de3bd4b25f36a9892bf54934593429fa661c97bfbdcb1c3c5b6129b1dcc98ebcc67d2dc75365fdfd9484401d86fb6b49b03f54ac3d7ecfe125edc52b7e9fa1491c9a0a025e2da18a3a7"], &(0x7f0000000200)=0xf1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000002c0)='comm\x00') r5 = open(&(0x7f0000000400)='./bus\x00', 0x1141042, 0x0) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x800, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @remote}, {0x2, 0x4e20, @broadcast}, 0x20, 0x0, 0x0, 0x0, 0x1ff0, &(0x7f0000000280)='veth0\x00', 0x8d, 0x6, 0x7f}) r7 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(r7, 0x208200) sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe) 06:21:52 executing program 1: r0 = socket(0x10, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x72, &(0x7f0000000100)="e56f82041a385fd315709edd17001344290be57a3fd08dcbabb995a306a3c89b240ee44cd5f6f8b5a927c7800caea82f92dd19d7f5eaba7f56a92dc130c7167467537d692a0300e704a4ae094dd02b254872c3121c381cf1ab238c4f42d327e85c035921fe22b8a96d370b62fa12c3008c28af0806d76b41f9c26a7bbf7ad004ac436bf575634680916ebe83d779784ac9cd93d4f87e600208d82b609e42960f1a931b6977fee76706c820dbcf8997dc734c48496251007b87b9e27fd0ff33635a0ff40f947da426338496dca544352c95b3319412b17be9eee815925578ac678e6f5c810a99a11efc3692c1591eb82be5b0b7f1d36ff0", 0xf7) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@ipv6_delrule={0x5c, 0x21, 0x11, 0x0, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10015}, [@FRA_DST={0x14, 0x1, @local}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @remote}}, @FRA_SRC={0x14, 0x2, @ipv4={[], [], @loopback}}]}, 0x5c}}, 0x0) 06:21:52 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0xa1, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x2}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8007f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x9c1, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) mknodat(0xffffffffffffffff, 0x0, 0x0, 0x9fde) fchdir(r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) r6 = accept4$x25(r5, &(0x7f00000001c0), &(0x7f0000000240)=0x12, 0x80000) lseek(r6, 0xb, 0x7) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) utime(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000140)={0x12f431f8, 0x7}) umount2(&(0x7f0000000540)='./file0\x00', 0x0) ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000180)=0x80) syz_genetlink_get_family_id$tipc(0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) 06:21:52 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x4000) r0 = syz_open_procfs(0x0, 0x0) read(r0, 0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(r2, 0x0, 0x0) r3 = getpid() rt_tgsigqueueinfo(r3, r3, 0x16, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={&(0x7f00000003c0)='./file0\x00', 0x0, 0x10}, 0x10) ptrace(0x10, r3) ptrace$getregset(0x4204, r3, 0x0, &(0x7f0000001100)={0x0}) r4 = gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) write$FUSE_BMAP(r1, &(0x7f00000002c0)={0x18, 0x18bff55ad913ac82, 0x3, {0x2}}, 0x18) ptrace$cont(0x11, r5, 0x0, 0x338) r6 = accept(r2, 0x0, &(0x7f0000000080)) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f00000000c0)=0x84) fcntl$addseals(r7, 0x409, 0x4) perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x8, 0x4, 0x18, 0x4, 0x0, 0x4, 0xedacaca571b79215, 0xd, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4400fbead48344e4, @perf_bp={&(0x7f0000000440), 0x6}, 0x20000, 0x6, 0x9, 0xd, 0x101, 0x400, 0x4}, r4, 0x5, r7, 0x3) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f00000000c0)={0x8, 0x6}, 0x6) fdatasync(0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') ptrace(0x11, r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r9, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r11, 0x23f, 0x0, 0x0, {{}, 0x0, 0x410c, 0x0, {0x418834432a2d4f96, 0x14, '\x00\x00\x10\x00'/15}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, 0x0, 0x400d00c) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffd, 0x7ff, 0x0, 0x4e, 0x5}, 0x14) [ 194.155441] overlayfs: filesystem on './file0' not supported as upperdir 06:21:53 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0xfffffffffffffeb2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[]}}, 0x0) write$evdev(r0, &(0x7f0000000040)=[{}, {}], 0x52a) 06:21:53 executing program 2: r0 = memfd_create(&(0x7f00000001c0)='-B\xd5NI\xc5j\xbappp\xf0\b\x84\xa2m\x00:)\x00\xbb\x8d\xac\xacva}knh#\xcb)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8bCc\xad\x89\x9ck\xde\xc5\xe96\xddU\xa9=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93?\x88Q\xf7\xd6\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xab\xb6\xa5$4\xd6\xfe7\x0f\xe7\xd9$\xce \xabN\xae\xc9\xbd\xd3g@\xe1\'s\x0e\x90\xf2\xcdr\xb8(', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000040)=0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket(0x9, 0x2, 0xfe) setsockopt$EBT_SO_SET_ENTRIES(r4, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000000000000000000000000000002008000000000000140400000c000000000000000aaaaaa90000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f0000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009abde2255a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a33729f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000000000006e666c6f670000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) [ 194.551686] kauditd_printk_skb: 2 callbacks suppressed [ 194.551695] audit: type=1400 audit(1575872513.444:51): avc: denied { map } for pid=7454 comm="syz-executor.2" path=2F6D656D66643A2D42D54E49C56ABA707070F00884A26D202864656C6574656429 dev="tmpfs" ino=28498 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 06:21:53 executing program 5: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x208100, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="00400000000000000086fd3ec3494412c1f16c7d5818ee"]}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x1ee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x80100, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x40, @mcast2, 0xffff}, {0xa, 0x4e22, 0x8, @loopback, 0xf0e}, 0x9, [0x2, 0x0, 0x931, 0x6, 0x6, 0x10001, 0x1f, 0xfffff9bb]}, 0x5c) rt_sigqueueinfo(0x0, 0x0, 0x0) getrandom(&(0x7f0000000180)=""/40, 0x9db3ff6336c4215d, 0x2) syncfs(r3) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r6, 0x0, r5) r7 = accept4(r5, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @reserved}, &(0x7f0000000240)=0x80, 0x800) getsockname$packet(r7, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) prctl$PR_GET_TIMERSLACK(0x1e) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0) ioctl$RNDADDTOENTCNT(r4, 0x40045201, &(0x7f0000000280)=0x1f) socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.usage_ir_bytes\x00', 0x275a, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f0000000080)) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x7ffd}) [ 194.604372] device bridge_slave_1 left promiscuous mode [ 194.617039] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.689090] device bridge_slave_0 left promiscuous mode [ 194.705553] bridge0: port 1(bridge_slave_0) entered disabled state 06:21:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCMBIS(r3, 0x5416, &(0x7f0000000100)=0x41f) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_GET_VCPU_MMAP_SIZE(r4, 0xae04) recvmsg(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff31, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r6 = syz_open_pts(r2, 0x84881) ioctl$TIOCSSOFTCAR(r6, 0x541a, &(0x7f0000000180)=0x7) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000080)) ftruncate(r5, 0x5) sendmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000010000000100aa007d91cdea2a1d37819c734c36820a0300000003000001"], 0x18}, 0x0) [ 194.946305] device hsr_slave_1 left promiscuous mode [ 194.988858] device hsr_slave_0 left promiscuous mode [ 195.035910] team0 (unregistering): Port device team_slave_1 removed [ 195.060630] team0 (unregistering): Port device team_slave_0 removed [ 195.083552] bond0 (unregistering): Releasing backup interface bond_slave_1 06:21:54 executing program 5: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) restart_syscall() fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000540)={r0, &(0x7f0000000300)="a6cc48906bcd02a36fbe4296a7ee3301137020330eabde8c83c18156c0d40c5305d744b21e38f42a63e6120eb85f9383b696e57a3ce7e40cbd4ab0be1e93357ff0c7ccbb019a657ae1b280ebcbc40a9234f79fccfb81b1a12953ac9446feedbe0e53ae2a6ee6d43b758e4efbf75181aef97140a0e2872235846d9b1001c99878d1945a81f68b29683805e760a373d42f561170b138462d64216fa6fd76e162da33decc24c69701f7b01700fa27a8fb231b4ba068bb96593c42017ffb9637ea19fe4456f96c45f8cffcd48994f1712960447c491cee7373fb83a69cd2e586ab56eae8b697dd2d217630ac15e7a2bd676e02faf2", &(0x7f00000004c0)=""/67, 0x4}, 0x20) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x804000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000240)={0x7, 0x0, 0x7, 0x1, 0x1000}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d0400"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000fc42bf5d19b99b4871d7e94f191e368a18"], 0x20}}, 0x0) [ 195.155086] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 195.251964] bond0 (unregistering): Released all slaves [ 195.350135] protocol 88fb is buggy, dev hsr_slave_0 [ 195.355322] protocol 88fb is buggy, dev hsr_slave_1 06:21:54 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x247, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380)}, 0x4000, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0), 0x0) getresgid(0x0, &(0x7f0000000480), 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000000)={'lo:\x05\xe6\r\x00\t\x02\x00', {0x2, 0x0, @empty}}) fstat(r1, &(0x7f0000000540)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f00000002c0)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f00000000c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup2(0xffffffffffffffff, 0xffffffffffffffff) setregid(0x0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', 0x0, 0x0, 0x0, 0x2) getgroups(0x40000000000002cc, &(0x7f00000007c0)) getresgid(&(0x7f0000000800), 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x4000, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8914, &(0x7f0000000000)={'lo:\x05\xe6\r\x00\t\x02\x00', {0x2, 0x0, @empty}}) setregid(0x0, 0xffffffffffffffff) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000740)={{}, {0x1, 0x4}, [{0x2, 0x0, r3}, {0x2, 0x1}, {}], {0x4, 0x1}, [{}, {0x8, 0x4}, {0x8, 0x7}, {}, {0x8, 0x1}, {0x8, 0x4}, {}], {0x10, 0x2}}, 0x74, 0x2) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000040)={'lo:\x05\xe6\r\x00\x00\x85\x01\x00\x00\x00\x10\x03\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000280)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fec68cb7d18ad181867514fe60077d4dd90123d27e7cf43548ee85857ad4a77cb56e07dfbdfd4e7540ebec677d6ac14c2c794f72cbf5fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf0000000000000000000000000000000000000000000000000000790ae2fd45d54b107c8c247f195e32f17799d6707432ff48bc085763314166443ce72c74f3db890e1ff15a10d91f67e9a232fe2238fff867ba8fd41b29caad2a986e0e244bd117252e47ffda1a869db7e632df4de8572344b419c45c2170fe873692d8255170c16822bdffd3135480dae93c7e33bdef00000000d8fd8c6e62d0967ab7e43686b4d1e03e326beea7905ef7de375ef8bc8143df20d13c37db2699f1210fab7071cc3094078a044777aab9d86cf50afefd7b72a0950d389bc9cb43aa607b7269561dd50b22bd2491331818a10f2ac8c3249582a20d4e04fd1ab7883f656b84137d5f7a6edba86a7b9a4c2f3bdff53a8abf93b280ea53ce01dcc2d30f4310e8281b0cdc017f9759060ea88a2f6597e966a85c9a74ca196700218f9197e7a5513c13e79d46bb4b84c16fd56ee450e411d75ab7613b644ba7580b2a0942394ed1737517eed1c892422f54d5a2e1cf1a60fe2dcc1a465aa8d54cb400000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x24f}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r6, 0x1800000000000060, 0xffffffffffffff32, 0x0, &(0x7f0000000100)="0000003f0000007e5bc5795ecaa29a16f291d36a48e93100ffff81", 0x0, 0x100, 0xf2ffffff, 0x0, 0xbf, &(0x7f0000000000), &(0x7f0000000840)="0be872f3e145932f888893c9affa7ff46318bcc4ba044b730d035a417eeddbafeb51fd7226471aa55a912bd9e7b44e2a2935047b59cb99c32d975ffc3a8f95a108485f7fa62e7e95c6868d28469f39f9c9683e66add432599a7125861cbbeadef1f7c20183bd8e42dde75185b7d42fb261bcc475d76e35d330bb953c7c37bb787ff59d75c50e16bd876bd613ec97bbb301e18c3257d68f0fcec7a02daa8f0b53593641c88e7f54097b2aa54f57dcaafd81a2477dc712349c6a5a4f7b98a7e3"}, 0x40) [ 199.470408] device bridge_slave_1 left promiscuous mode [ 199.475918] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.521401] device bridge_slave_0 left promiscuous mode [ 199.526895] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.652827] device hsr_slave_1 left promiscuous mode [ 199.692678] device hsr_slave_0 left promiscuous mode [ 199.753585] team0 (unregistering): Port device team_slave_1 removed [ 199.764710] team0 (unregistering): Port device team_slave_0 removed [ 199.774271] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 199.814334] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 199.889884] bond0 (unregistering): Released all slaves [ 201.991487] IPVS: ftp: loaded support on port[0] = 21 [ 202.807443] chnl_net:caif_netlink_parms(): no params data found [ 202.839335] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.846001] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.852927] device bridge_slave_0 entered promiscuous mode [ 202.859567] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.866080] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.872995] device bridge_slave_1 entered promiscuous mode [ 202.888794] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 202.897841] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 202.914714] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 202.922677] team0: Port device team_slave_0 added [ 202.928049] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 202.935255] team0: Port device team_slave_1 added [ 202.940823] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 202.948122] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 203.003155] device hsr_slave_0 entered promiscuous mode [ 203.050398] device hsr_slave_1 entered promiscuous mode [ 203.101066] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 203.108215] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 203.121662] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.128081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.134847] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.141274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.168060] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 203.174669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.183593] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 203.192512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 203.199503] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.206285] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.216891] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 203.223077] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.232074] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 203.239589] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.245974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.260495] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 203.268014] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.274385] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.282407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 203.291367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 203.298234] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 203.312093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 203.322881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 203.335122] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 203.342313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 203.349785] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.357708] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.371484] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 203.380950] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.387598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.395934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.810477] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 06:22:03 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000002680)='/dev/snd/midiC#D#\x00', 0x2, 0x108801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) writev(r0, &(0x7f0000002500)=[{&(0x7f0000000400)="2589ae3caca9da555ffe822202ef6acbfaa81eb73cd532b7262f8807a9a511cd65fe0ad94bef922c5679c89fd745bb9566186bfd6ce3c851fa66f6d2c03dbf8062e10d40947330222d2edeea5107c17c2ad92c34a6b272d3c297d567b55aa0c147ad2821eb5c19093a356f3410997d25bb16f5acfe3f376cf9733e69b9a6914aec6a15fa", 0x84}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000040)) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) 06:22:03 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) close(r0) close(r1) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup2(r4, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r2, 0x0, 0x800000006d55, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0xffffff31) r6 = perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x200000000000}, 0x0, 0x81, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="7ddf0000eae6c0c652db0f000046a0e8460f3d7bbd130f2647255c565156da77171cc0861deaf09bb88cb03ed0142cec5809e4a2d9f5bd1781a00c23a072081e255fe423281d01db01dc01d2a28af3bd75c080ed4db892b364df7819fb9525b1ce4c4409d755c0729ffbf705008d9fcd7be58006ae0faa124423dd5ab40c8fdca27f8746b46d9154ff5610a3ae9e47f001b2f024a75b3b6217952c0049f4fdd4fb6447f95b4b1a36b625d4f0dda801"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x154, r9, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x4, 0x3}}]}, 0x154}, 0x1, 0x0, 0x0, 0x2008c80}, 0x240040c0) r10 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xc489b304597f86a1) ioctl$DRM_IOCTL_ADD_CTX(r10, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r6, 0x4008642a, &(0x7f0000000140)={r11, 0x20}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r11, 0x1}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f0000000040)={r11, 0x2}) 06:22:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000100)=0x2, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$USBDEVFS_GET_SPEED(r5, 0x551f) r6 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x44) 06:22:03 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000140)=""/30, &(0x7f0000000180)=0x1e) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x0, r1}) listen(r0, 0x10001) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000000080)={@bcast, @null}) r3 = socket$inet6_sctp(0xa, 0x800000000000001, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e20, 0x8000, @loopback}], 0x1c) 06:22:03 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000cd335a0700100001280c00"/24, @ANYRES32=0x0, @ANYBLOB="00000000108900001400140076657468315f746f5f6873720000000008001b00000000009c1149da00f53964bf16ec5976e110c191568578766f941c087875ad9f46530d4e62711858ff280e2297299c4758f989c068daaa0231bb18eeec59b07d7ec89d87d79e1c725dd39a64b52fb068ed160e8a2e2ef92fe0d05c5fd2914399514825edd15edda61634f7159f52f75e"], 0x3c}}, 0x0) 06:22:03 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/309]) write(r0, &(0x7f0000000000)="56ca22817b8739739fcd86de47b9af64d5b0dac0f4da", 0x16) syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000400)={0x0, 0x80000, r5}) poll(&(0x7f0000000500)=[{r2, 0x8000}, {r1, 0x32}, {r3, 0x10000}, {r4, 0xa043}, {r6, 0x2080}], 0x5, 0x6) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000480)={0x0, @ipx={0x4, 0x800, 0xffffffff, "4bc40891a400", 0x2}, @nl=@kern={0x10, 0x0, 0x0, 0x8000000}, @can, 0x695, 0x0, 0x0, 0x0, 0xfc00, &(0x7f00000001c0)='nr0\x00', 0x40, 0x1, 0x9}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_QUERYBUF(r10, 0xc0585609, &(0x7f0000000380)={0x20, 0xc, 0x4, 0xe000, {}, {0x5, 0x1, 0xff, 0x0, 0xfe, 0x6, "09f34ae4"}, 0x6ee6, 0xa, @userptr=0x2, 0x4}) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) ioctl$sock_inet_SIOCSIFBRDADDR(r7, 0x891a, &(0x7f0000000180)={'eql\x00', {0x2, 0x4e20, @multicast1}}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r11+30000000}, 0x0) [ 204.929664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23091 sclass=netlink_route_socket pig=7516 comm=syz-executor.1 06:22:03 executing program 0: r0 = getpid() perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa041, 0x0, 0x0, 0x0, 0x0, 0xfd9}, r0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, 0x0, 0x20000000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000d00)='net/igmp\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000100)={0x0, 0xffffffff}) ioctl$TCSETS(r3, 0x40045431, &(0x7f00003b9fdc)) r4 = syz_open_pts(r3, 0x4000000000000002) sendfile(r4, r2, 0x0, 0x6f0a77bd) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSW(r5, 0x80045439, &(0x7f0000000100)) get_robust_list(0x0, &(0x7f0000000380)=&(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f0000000400)=0xc) connect(0xffffffffffffffff, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(0xffffffffffffffff, r6, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000985ff8)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x0, 0x0, 0x3, 0x0, {0xa, 0x4e20, 0x3ff, @mcast1}}}, 0x80) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x24e23, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000140)=0x80000000, 0x4) recvmsg(r7, 0x0, 0xd10c) socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect(r9, 0x0, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) connect(r10, &(0x7f0000985ff8)=@un=@abs={0x1}, 0x8) sendfile(r10, 0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(0xffffffffffffffff, r11, 0x0, 0x0) socket$unix(0x1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1}, 0xd10c) socket$unix(0x1, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') sendfile(0xffffffffffffffff, r12, 0x0, 0x0) r13 = inotify_init1(0x0) fcntl$setown(r13, 0x8, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000740), 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000000200)=""/20, 0x14}, 0x0) socket(0xa, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) 06:22:04 executing program 0: syz_mount_image$gfs2(&(0x7f0000000600)='gfs2\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0xfffffffffffffd80, 0x0, 0x0, &(0x7f0000000080)=ANY=[]) uselib(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x3, 0x100) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) 06:22:04 executing program 0: bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000340)={0x0, 0x2, "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"}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f0000000240)={0x7, 0x5, 0x29}) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xaf, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x96FR\bR\t\x12\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0W\xdfuE\xfe\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6J\x81W!\xf0\\\xa1O\x9f\x93\x19C\xceQCV\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1fM\xeba_\xa9\xcd\x10\xcd\x0e~\xc6\xed\xb6\x82\xf6\xee\x9aK\xdd\x86\xf8\x0f\x15Y-\xb8A1\x1bb\xff\xf0\xd2M\xf7)\xaa\x8a\x18\xb9_\x83>\xeb\xfc\xc18^\x1d\xb3Y\xdc#\xde\xdb\x89\x90L\x99o\x02\xb6\x98e\xc6b\xce\xb7\x99k3&\xaf\v\xc6\x80\xff\xdb\xb7\x0e\xb4K\xf8\x17\xba\xf8\xee\fe\xed]\x93\x13\xbc\xf5\xe2<\xa2\xaf\x83\xa3\xaabc\x95\x00\t:\xcc\xe1\t]\x84\x90\x17l\xd3\xa7M\xdb\x02J\x90\xe8\xe8\xb3\xc9\xf6\xea\xb2\xdeI\xe4\x0f\xd4\xca(\xcd\xfa\xb2\xb8@\xca\x17u\x02Rb\xad\xd0\xf7\x9bz#\xb8\x1d\x88\xf6?3,\x89\xb1-p\x8a\r\xdb\xd6,\xa4\x01y\x1bc\xb7\x19\xcey\xb5\xae\xc4\xe3\xc4\xe9=\x1e\x8c\xec\xfe\x05b\x7f`Y k\xc4\xa8 \xc3\x9b\v\xbbE\x8c\xb8\xe6\x8a\xa0s\b\xcb\xbb\xfa\xde\xf0\n`\x8az<\f\xf1\xbe\x85\xd1Wk\x17\xbc1q\x8b\x93Y|\x9e\xe2\xc9Ms/A\x98\xf2\x88\n\x92?7\xb1\xe0\xee\xe8yo\xb7\xb2p\xc5O~\x87\x17F\b\xb5\xd6\xdc\xe4u:$>\xd1\xaf\x1a\xcb\x18\x8a\x0e$\xbd\x94N\xc84}_\x06\x11\xd2\xdd7\xe0\b\x0f\xd0\xb0WZ\xfc\xb1\xc3\tS\x13\a6\xc0\xbc\vG\xe4p\x1b\xee\x89_=\xb8\x12\xddpk\x860\x03\xfd\xde\x0f\x9c\xc2\xe5.\xfe\xaf\x8f\xe2\x16\x8c\xdbS\xe6\xc26\xde\xf4I\x9f\x003P\xb5\x9fg\x82!\xf2\x82 \xc1Os\xd7C\\\xad\xb3n}t\xba|\x10\x05,rk\xd1\t|\x1e\x00\x9e\xfa\"\x85\xdd\xb7O\a\xfc\x14\xa8\x00\x1f6M\xb00\xbd\xb7\xd6\xa8\xffe\xb2\xcb\'', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000000)=0xffffffffffffffff) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x10, 0x1000, &(0x7f0000000040)="56a836e0d0a5b52897065a0875eba77f", &(0x7f0000000780)=""/4096, 0x3, 0x0, 0x77, 0xae, &(0x7f00000000c0)="33a3e289f97247fce74a0c12c6bebaaa64f4424c405ae94fdda2643f12996aa5189d7dffd82a6fd9a19e16a5701f797e6a03f47cf5c627be3ba7cb4be200617c76cf6b8a0f4eeb1c9a1eb65e860c6f9e4779a47f58645d2f89d1ade4bd6edbdd91f577a70075b5a989ecc26222dc81ac4814a7ca4b5d53", &(0x7f0000000180)="eba5f28993981b60d864ead49abe2d9922fb145c373e54baf04fcca120d542616fc029ed33aa57888bed80ac158963bd83c9417d8f54d0f8ce23ca1105721dcf0c9a14c0722ff1fd063eea4dfe81eaa91cce6fbb90ba429c21af62783fc1db5e473fbbba7374eaafb86f669440bcc01c9b34b34758ce84012a457d4af990eaf07f4b5a9d2ac43e6fa65e1ebb3fdafa7734a7ca92a5f6c014c0ec5fb45a2936631628ea13970e12cfb2561fd35168"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') 06:22:04 executing program 1: rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffa}, 0x0, 0x8) r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x32, 0x4, @tid=r0}, &(0x7f00000002c0)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r1, 0x0) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000280)={0xfffffffffffffdac}, 0x8, 0x0) read(r2, &(0x7f00000003c0)=""/150, 0x96) io_setup(0xedd, &(0x7f0000000100)=0x0) r4 = socket$isdn_base(0x22, 0x3, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x0, 0x0) io_cancel(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2, 0x1, r4, &(0x7f0000000180), 0x0, 0x80000000, 0x0, 0x2, r5}, &(0x7f0000000240)) 06:22:04 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x7d465534b81b1fd1, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = creat(&(0x7f0000000500)='./bus\x00', 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001580)}], 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/de\x98/^equencer\x00', 0x2a00c0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(0xffffffffffffffff, r4, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) dup3(0xffffffffffffffff, r6, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) 06:22:05 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x6d) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYRESHEX=r3, @ANYRES32=0x0, @ANYBLOB="e6d2759622f87074763ef8c3c6b0915ec1d32cd4fd6367e4d59c98610ebbf4ba2eb2a35308ff338832ca84b13a719c053724c5666747ea779d15dcb44508ed4fcff4d7e852ee9b3ce469c2a538e65fc994c45b"], 0x5}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x37c, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) [ 207.551527] IPVS: ftp: loaded support on port[0] = 21 [ 208.512324] chnl_net:caif_netlink_parms(): no params data found [ 208.545451] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.551936] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.558771] device bridge_slave_0 entered promiscuous mode [ 208.565660] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.572124] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.578937] device bridge_slave_1 entered promiscuous mode [ 208.597356] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 208.606386] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 208.623008] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 208.629994] team0: Port device team_slave_0 added [ 208.635892] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 208.643051] team0: Port device team_slave_1 added [ 208.648315] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 208.655859] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 208.723614] device hsr_slave_0 entered promiscuous mode [ 208.760416] device hsr_slave_1 entered promiscuous mode [ 208.800961] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 208.808039] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 208.821234] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.827590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.834227] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.840601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.869638] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 208.876001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.884883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 208.893382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.901560] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.908157] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.917393] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 208.923586] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.931996] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 208.939501] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.945874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.961247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 208.968778] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.975147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.982989] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.991571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.000977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.012944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.022953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.033861] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 209.040367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.040788] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.055035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.066745] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 209.074565] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.081432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.092791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.500386] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 06:22:10 executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDCTL_DSP_NONBLOCK(r4, 0x500e, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) open(0x0, 0x301800, 0x4c) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) unlink(&(0x7f0000000040)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 06:22:10 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x3) syz_open_procfs(0x0, 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x101, 0x100) r0 = socket(0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001b40), 0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bind(r1, &(0x7f0000000040)=@can, 0x80) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r2, &(0x7f0000000900)="ba", 0x1, 0x0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000002600)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6}}, {{@in6=@dev}, 0x0, @in6=@empty}}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) 06:22:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x80045430, 0x2070e000) r1 = socket$netlink(0x10, 0x3, 0x6181cd9e1a1a2351) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1b0, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa0, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf8000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x70c4b5e3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x180000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc82}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1010000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000}, 0x80) restart_syscall() 06:22:10 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)='proc\x00', 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = dup(r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x40, r5, 0x101, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x40}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20008010}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x74, r5, 0x100, 0x4, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7f}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x33}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}]}, 0x74}, 0x1, 0x0, 0x0, 0x41000}, 0x40) getdents(r2, &(0x7f00000004c0)=""/102400, 0x19000) 06:22:10 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x42100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x500, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}]}, 0x1c}, 0x1, 0x0, 0x0, 0xdb0b915f4c3b75ff}, 0x20005040) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c0000600900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) 06:22:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x2343a726) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000001540)='/dev/sequencer\x00', 0x2202, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000001580)=0x8) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000002480)=[{{&(0x7f0000000400)=@nfc, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/167, 0xa7}, 0x86}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000680)=""/176, 0xb0}, {&(0x7f0000000740)=""/125, 0x7d}, {&(0x7f00000007c0)=""/230, 0xe6}, {&(0x7f00000008c0)=""/159, 0x9f}], 0x4, &(0x7f00000009c0)=""/9, 0x9}, 0x3f}, {{&(0x7f00000014c0)=@ethernet={0x0, @remote}, 0x80, 0x0}, 0x9}, {{&(0x7f0000001d00)=@un=@abs, 0xffffff53, &(0x7f0000001e00), 0x0, &(0x7f0000001e40)=""/181, 0xb5}, 0x9}, {{0x0, 0x0, &(0x7f00000023c0), 0x0, &(0x7f0000002440)}, 0x7}], 0x5, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) recvmmsg(r4, &(0x7f0000002ec0)=[{{&(0x7f0000002980)=@tipc, 0x80, &(0x7f0000002b80), 0x2, &(0x7f00000003c0)=""/28, 0xfffffffffffffe90}, 0x1e4c}, {{&(0x7f0000002c00)=@tipc=@id, 0x80, &(0x7f0000002e00), 0x2, &(0x7f0000002e40)=""/106, 0xfffffffffffffe90}, 0x6}], 0x177, 0x10000, &(0x7f0000002f80)={0x77359400}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000500)}, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, &(0x7f0000000100)='trusted.overlay.origin\x00', &(0x7f00000002c0)='y\x00', 0x2, 0x1) clock_gettime(0x3, &(0x7f0000000480)) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x100800, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r7, 0x800442d2, &(0x7f0000000300)={0x0, 0x0}) ioctl$IOC_PR_CLEAR(0xffffffffffffffff, 0x401070cd, &(0x7f0000000340)) r8 = shmget(0x0, 0x3000, 0x100, &(0x7f0000006000/0x3000)=nil) shmctl$IPC_INFO(r8, 0x3, &(0x7f00000004c0)=""/4096) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/user\x00', 0x2, 0x0) 06:22:10 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="020700090200000000000000d80000003c05771373ae0aacf74da4822e1b6b8c2de40fdd1c63bc6d5ff51295b74207f92525aa8a8f013c8b6b34e759c7eb63242717d3f3854e69d62747c5f75c01e55f9e0fd0f5048ec4e53401d04af8fa8103a9fb7a3c50952bfc8c4c3d92d7fb26404ed0dd87ab7d1f5ed43fa5f301d3b8f5765e1b913da6cc27129465062263e3b07f90118bda5841a2cfb8526a8d22f0f18a6d6ced226cd79d135934e7b8c5dc43406ab6e3d675b51e7bae49afa654c2a19d67e72ef8447d2a50ffff00002545a0bee704ed1da53d5d3ff50e"], 0x10}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x80, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00002ff000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000688000/0x2000)=nil) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', r2}, 0x10) ioctl$CAPI_GET_SERIAL(0xffffffffffffffff, 0xc0044308, &(0x7f0000000040)=0x47c) r3 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0) ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, &(0x7f0000000080)={0x1, 0x8, 0x3}) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) signalfd4(r4, &(0x7f0000000180)={0x7}, 0x8, 0x0) [ 211.187099] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 211.198539] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock 06:22:10 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071730a04b6768315f23e00"]) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100980300"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', r6}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r8}, 0x10) [ 211.247307] attempt to access beyond end of device [ 211.269684] loop0: rw=12288, want=8200, limit=20 [ 211.281816] F2FS-fs (loop0): invalid crc value [ 211.293337] attempt to access beyond end of device [ 211.312848] loop0: rw=12288, want=12296, limit=20 [ 211.330552] F2FS-fs (loop0): invalid crc value [ 211.370745] F2FS-fs (loop0): Failed to get valid F2FS checkpoint 06:22:10 executing program 5: perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x372, 0x2, 0x52e}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60101616c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) [ 211.413059] audit: type=1400 audit(1575872530.304:52): avc: denied { block_suspend } for pid=7604 comm="syz-executor.1" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 211.451862] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 211.498399] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 211.550785] attempt to access beyond end of device [ 211.587764] loop0: rw=12288, want=8200, limit=20 [ 211.625426] F2FS-fs (loop0): invalid crc value 06:22:10 executing program 2: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={@multicast2, @local}, 0xc) close(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm_plock\x00', 0x400000, 0x0) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000280)=0x4, 0x4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x005\n\xff\xd9\x15\xc1m\xd6\xcc\x05\xed\xac\xb3\xfe\x13\xadD\x1ai\xfck\x948\xcfT\xa4Q8\xcb\x9d\x80\x01V\xea\x8a\x112\xd8\xfe\x7f\x0f\"pX\xa4>\xf9\x00r\x14+\x1e\xdc\xb3]N\b\x00\x00\x00 +\xf4\xe1.\xb6\xde\xce\xe7`\xb2{\xeeu\x88b\xd7j`\xa8z\x89H\xcb\xfb\xc0\x06\xf8.\aA\xcf', 0x200002, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(0xffffffffffffffff, 0x80184132, &(0x7f0000000040)) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) sendfile(r3, r2, &(0x7f0000000000)=0xc000ffb, 0x100003) [ 211.655134] attempt to access beyond end of device [ 211.673817] loop0: rw=12288, want=12296, limit=20 [ 211.682190] syz-executor.2 (7620) used greatest stack depth: 23904 bytes left [ 211.719422] F2FS-fs (loop0): invalid crc value 06:22:10 executing program 2: syz_mount_image$reiserfs(&(0x7f0000000180)='reiserfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[{@jdev={'jdev', 0x3d, './file0'}}], [{@fscontext={'fscontext', 0x3d, 's\x02\v\xb1ysdm_u\x00\xbc\xc0\xf0\'(\xf7\x05\x17\xf36\xd1;\x94\xeb\xdf\xd7\x10\x7f8wNl\xc7`\x87$i\xe1\xeaj6\x92R\xd8~G\v\x141\xa2\x99\x0f~\x1d\xf7\x81bL\xe5>\xb9\xcd$;\xb9\xfd\xea\xb3\x83\xfcz\xc0\x1b\x85\xfd\xf3\f\xb9&\x9a\xd8\xfd\tT\x9b\xa2v\xad\xf6#\xad\xd7\xa2\xa2\x80\xe1X\x1c-'}}]}) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x18100) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000300)={0x718, [[0xffffffff, 0x1000, 0x1, 0x800, 0x2c88164a, 0x4, 0xfffffffe, 0x4], [0x8, 0x1, 0x2, 0x958, 0x2, 0x4, 0x4, 0x3], [0x2, 0x139, 0x4, 0x5, 0x5, 0x8, 0xffffff35, 0x7]], [{0x401, 0xfff, 0x10001}, {0x1f, 0x4, 0x400}, {0xff, 0x7, 0xffffb26e}, {0x8000, 0x8, 0x8072}, {0x3, 0x8, 0x4}, {0x5, 0x80000001, 0x80}, {0x793, 0x7f, 0x4}, {0x9, 0x7, 0x7fff}, {0xfffffffc, 0x6c, 0x7f}, {0x7, 0xfff, 0x3}, {0x0, 0x0, 0x10001}, {0x7f07, 0x8, 0x2}], 0x1f}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x5) [ 211.754037] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 211.822671] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 211.858389] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 211.877309] attempt to access beyond end of device [ 211.884199] EXT4-fs error (device loop5): ext4_iget:4712: inode #2: comm syz-executor.5: root inode unallocated [ 211.892664] loop0: rw=12288, want=8200, limit=20 [ 211.918479] attempt to access beyond end of device [ 211.920687] EXT4-fs (loop5): get root inode failed [ 211.928088] loop0: rw=12288, want=12296, limit=20 [ 211.939575] EXT4-fs (loop5): mount failed [ 211.944537] REISERFS warning (device loop2): sh-2021 reiserfs_fill_super: can not find reiserfs on loop2 [ 211.946660] attempt to access beyond end of device 06:22:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xed7cc9cc24c912fd}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fedbdf250100000000000000024000000018001369623a76657468315f746f5f7465616d00000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x428080, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="ee00000010002000000000000000000003000000ac360494b720879546847045c598c6d41d754da3d35e95968e882ed31eb7a229c459cf7c7caa4de18d4ada702ed8eca8974aa54f3e21514ce7ce0d3225da454d05a8dfa9a2949ca9f775dafcb58f5a816ba30649a370e9c237b14920f214ff1d6d850585696acad154ed099054be97c5e6bcedb3ecef9679082eac3fae27036714bd77818e0f8ddc46cd7ca13f452ca700003000", @ANYRES32, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0xd}}, 0x0) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000140)=0xc, 0x4) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @ioapic={0x2, 0x400, 0x0, 0x40, 0x0, [{0x7, 0x8, 0x10, [], 0x81}, {0x3f, 0x85, 0x1, [], 0x3}, {0x2, 0x81, 0x7f}, {0x4, 0x81, 0xce, [], 0x8}, {0x3, 0x4, 0x1f}, {0x4, 0x9, 0xc1, [], 0x5}, {0x20, 0x1, 0x8, [], 0x2c}, {0xe3, 0x0, 0x20, [], 0x40}, {0x81, 0x6, 0x7}, {0x2, 0x81, 0x0, [], 0x2}, {0x9, 0x0, 0x1, [], 0x2}, {0x1f, 0x6, 0x6, [], 0x70}, {0x7, 0x9, 0x7}, {0x3, 0x47, 0xf9, [], 0x6}, {0x3, 0x9, 0x6, [], 0x20}, {0x7, 0x1f, 0xdb, [], 0x5}, {0x5, 0x1b, 0xff, [], 0x1}, {0x2, 0x9, 0x3, [], 0x7}, {0x7, 0x0, 0x2d, [], 0xad}, {0x3f, 0x8, 0xbd, [], 0x8}, {0x2a, 0x0, 0x4, [], 0xff}, {0x5, 0x1b, 0x81, [], 0x7}, {0x1, 0x1, 0xfd, [], 0x8}, {0x8, 0xa8, 0x3f, [], 0x6}]}}) [ 211.990122] protocol 88fb is buggy, dev hsr_slave_0 [ 211.995224] protocol 88fb is buggy, dev hsr_slave_1 [ 211.998398] loop0: rw=12288, want=8200, limit=20 [ 212.009930] attempt to access beyond end of device [ 212.017609] loop0: rw=12288, want=12296, limit=20 06:22:10 executing program 4: ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000000)={0x0, 0x20}) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x9, @local, 0x387}}}, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0, 0x0, &(0x7f00000012c0)=ANY=[@ANYRES32=0x0, @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRESDEC, @ANYBLOB="26da2db326b7b17a9ed010cba8990b86a3a0f3e651439499d24fb4b326a469e45d7c747abc315906d70a1d198d769595d7a627d7fcb033550d730bda2d5ed6dafc97e3366f6d26f7ee6e7d6e1faed9d1229f28896709e7b2a648c758f9b3972506c01283ca90039a7832ec550c326adb4ca5382208c87fb1b374e53360fa4f1719b0d9e3e5d0de60b5a02558e28757"]], @ANYRES32=r1], 0x10}}], 0x1, 0x0) 06:22:10 executing program 3: syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="747970653d050000002c00"]) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@multicast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000440)={0x14, 0x1}) write(r3, &(0x7f00000001c0), 0xfffffef3) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='setgroups\x00') close(r5) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr="80a7d70dd0e860c96ae5a8b1b1294b95"}, r7}}, 0x38) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000480)={0x14, 0x88, 0xfa00, {r7, 0x10, 0x0, @in6={0xa, 0x4e21, 0x3f, @mcast2, 0x264}}}, 0x90) ioctl$VIDIOC_S_EDID(r3, 0xc0285629, &(0x7f0000000400)={0x0, 0x9fad, 0x7fff, [], &(0x7f00000003c0)=0x22}) mount$9p_tcp(&(0x7f0000000040)='127.0.0.1\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x20000, &(0x7f0000000280)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid={'afid', 0x3d, 0x9}}, {@fscache='fscache'}, {@version_9p2000='version=9p2000'}, {@cache_fscache='cache=fscache'}, {@msize={'msize', 0x3d, 0x6}}], [{@euid_gt={'euid>', r1}}, {@permit_directio='permit_directio'}, {@smackfsfloor={'smackfsfloor', 0x3d, 'type'}}, {@pcr={'pcr', 0x3d, 0x14}}, {@permit_directio='permit_directio'}, {@pcr={'pcr', 0x3d, 0x1c}}, {@measure='measure'}, {@uid_eq={'uid', 0x3d, r2}}, {@dont_measure='dont_measure'}]}}) 06:22:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0) sched_setattr(r0, &(0x7f0000000240)={0xfffffffffffffea9, 0x3}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='map_files\x00') getdents64(r4, &(0x7f0000000080)=""/83, 0x39f) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept(r5, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030300900fc9cd866b42938ab0142624904b40d651a9b3672476a814ac42843aa88e1db60ba47b6bb30407402000000349f062e4624400100000000000000e03a80b9374275d0f7b100237209ffe467ab1296c3c5085a515cf18151210b8615d54f1c7f3e9ef2ec1577c935216a586171a0aca46a1b561565ffefd7652e6c949d9a7f95f42d36d892d4b30cc1fc50434686595553e6f3381cf655df317fe9ca3533e7afcaced5c006e691b4999cf6c0aae1178e256baacb07e6f80b9f8e6bc4f3b57d528930399f5c7903c06e4298f2d6774ba4d327c8c4c783340d84b8252dc0961fdc1816a67772058c027c491d1761cd867b446e1d09fc35834cb3e8e0ed7bde47964dc091ec1ce2dd7bfa8c430600000000000000ce550d9645db0c58473350fa101f5aae17559fcfd2bd00000000c2621a68b48ccc39235cdf20d22060d3c8f352e3416380e4aab0ca0aaad9d953e0a7dd37de2bfc4fc5d81bfa4264c89a612bf74868309f69425da0e6840cc82f1cb4a4eaa8728c3425a50c9ffb680f44aff1e913a7f5b3158696196345a4caebc08e692861bbd2304b31f7fc5c5685c58fe55f668b9420ea754930458873cec2e3869c70cc78c2a06f70c33a4c09e6195262ae96eec759aae838435429bd039f8ffde4c529d7dc83c298a16cd17d01d46e41ebfeef9fc6f935e8f745bdf808d4d5b226eff70000000000000000000000000000000000e417e7d0406cc80f9246d72b19d1789318cf9088074e1872469b35f5d5d26a62a503778f2f892d2243bba8e123d37403b7f9f541bf07a72032791295afdfbc122901dff7dc439b325ae993ea829c9d805ebdd10782abb9e43c61dbdaa1ed7acdd80d13341259b2be34aa5b5b6327965e9a538e46fcc0c5b565f977a1f191b0fdf5fc344e823ac43dbac71d0630b4d41d05d7746e064e07d9bf21d864e7387a50c21b27fe7c642fff2e868ff1b26ba8c9591e54d92741c9059b0c2b529d5f693cb072343d59a094142d0afe5b16276085c9136183ccd9ffe88d49fb2b682825aa3e3327861fc77100236c596aae528887ecc01e99efb0ba2632e278a350fc5cc739fa22a6538d902b823611335cf2e9e6fca1bee557e65ed92bb60808268b2b9ab2fce0e2458f9951a90b39e13090ad46c5808e1296f04a9b2a42c316c447708e921f2844f65aa7b80b7daad912d72aec622e4877a6c4296b69241315c54d0b2d60bed7"], 0x15) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f00000001c0)) write$P9_RAUTH(r7, &(0x7f0000000040)={0x14, 0x67, 0x1, {0x0, 0x5}}, 0x14) write$P9_RGETATTR(r7, &(0x7f0000000500)={0xa0, 0x19, 0x1, {0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xa0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000180), 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB="2c7766646e6f3d0ff50575ac2550fb074d65d0996858e293af9d90284ef1e1760d994380c48663bc2b841da022c6eb2b3a0c70af9c22af48f4d20ef95f180cf256d9da8d2063cfbae86709f5d0913af1f494c037e87594d7b592fea42e87b30a4d83af4bcea6223bc3f54ccdf9978124660dc192a8da813d6d2c6816bbaa07f3171f2fb1cb6edb4e5fb3b1321b1e9641de2aea50875a1d17b9aa9901af26ee4b41e66d2ae1f6d949dc2e9e3f58024add5a25789471faf4e09e839c81778cdb39eaf30da191a760bba8a5a2c2055e4ca7a47f7737ae38", @ANYRESHEX=r7]) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 06:22:11 executing program 5: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3, 0xffffffffffffffe1}, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x800000000000013, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000840)) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000180)='/contrf\xe9\xd8\\\xfa\xff\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) ioctl$FITRIM(r5, 0x82307202, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xffffffffffffffb0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x8, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000380)={0x6d94, 0x0, 0xed9, 0x69}, &(0x7f0000000400)=0x9cc, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=0x1f}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xf8, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r6}, 0x78) syz_genetlink_get_family_id$team(&(0x7f00000003c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x705, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r9}]]}}}]}, 0x38}}, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) [ 212.070170] protocol 88fb is buggy, dev hsr_slave_0 [ 212.075275] protocol 88fb is buggy, dev hsr_slave_1 [ 212.135278] hfs: type requires a 4 character value [ 212.145444] hfs: unable to parse mount options 06:22:11 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = epoll_create(0xfff) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r3, 0x1, 0x6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0xa0000012}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) epoll_wait(r2, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000071730a04b6768315f23e00"]) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100980300"/20, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00', r6}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r8}, 0x10) [ 212.177660] audit: type=1400 audit(1575872531.064:53): avc: denied { getopt } for pid=7683 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 212.351421] 9pnet: Insufficient options for proto=fd 06:22:11 executing program 2: recvmmsg(0xffffffffffffffff, &(0x7f0000008780)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000000380)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='limits\x00\x80\xa8\xdb\x02\xffC\xd2p\xa5W\x14\xa2\xc0+\xfc \x84YN\xff\x1a\x7f\x85\xf1\xa7(q|\xe3\xed8\x15\x18,?\x06\x86\xc9\x80\x86\x1b\xa8\xc4J\xcb\x7f`\xa3\xf2\xb5\x03l\xc1~cK8\xf3\xe1;JG\xed\x0f\xb3\x95\xb2\x14z{d\x1d\xff\xc5\xcd\xe0\xae\xd6\xbdS-\xc0\x90m\xa0\rq]K\xe3\xff\xff\xe1Q\xeb7V\xfe\x17\xef9.5\xafc\t\x13\xde\xc7\x8e\xebn_Q\xeb*w\xa7\x9e\x8ab\xdcS\xf0\xd4\xcb\x06`v\xc8\x01\xac`AqDS%S\xaf\x98\xb0\x02{\\\x9f1%\xf0\xf0\xd2a\x91\f\x153\xad{\f2\x90`bz\x14\x901R\xdd\x11\xd7\xc9\x10\x85\a\xd7\xf0|\xccW&\xe9\x81Eu\xa2db\xd6JJ$\xe1_fH') syz_mount_image$xfs(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="e96e6f646533322c00ba7503439c8c1549f95761dadfe1238c5b57411e0c8390603d162c40232107a0c79931c6239e884bc70ed4db1529972111d9c457513ea059da0e0514ff566a4e5b187bd950a2173dc66677064154d105ff311d6f886414d5a86ad6332b36435b97367cbd36c0c3748455ada86dfd5b54924f7e286d94577cdcd897f32afc7897a85d38d7894bc8e1cb4153"]) 06:22:11 executing program 4: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') r0 = creat(&(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x102) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x1, 0x1, 0x0, 0x0, 0x7f, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000000000}, 0x0, 0x0, 0x0, 0x0, 0xffffffff7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) unlink(&(0x7f0000000200)='./file0\x00') sendmsg$tipc(r0, &(0x7f0000000500)={&(0x7f00000002c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}, 0x3}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000800)="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", 0x1000}, {&(0x7f00000003c0)="65def5df982df7a930fd0400000000000000724835ec96f2218b4320e8eaabb94f13ec875e3e6ab1acfe075dad1519e1f8fe0f7efe6b5dddf7a3003628e97bd2ab00"/78, 0x4e}, {&(0x7f0000000440)="856eaaf53e42d4102f02fff8d3d71d781a1ade08743e9d9b70d36ddd7cdddc5738858e146aec4ed55f20f32c78a74f8c086fc8cf262a51521c8ef43eb37cb424ce", 0x41}, {&(0x7f0000000580)="72a002e2c20cd16648e0b4bdc055884132ead33bf042804034a1e275a5439018235f355dfe65b8147c3bbcc6b2a9ba1a15641c341a3af7a7c225f314fdaaac224cfc5215e988282860893bc3cdf399ccd4c43e0f24ad0a1cbb65738b1db5a63e771673e62f898d41b9fc5af36bff445510642d5cee27af2890c3fa7c3c446bb5d3ddb98e1d8c46bc", 0x88}], 0x4, &(0x7f0000001b40)="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", 0x11d, 0x4014022}, 0x4000000) ioctl$TCSETXF(0xffffffffffffffff, 0x5434, &(0x7f0000000000)={0x9, 0x8, [0x7, 0x5, 0x1f, 0x5, 0x401], 0x400}) getuid() setitimer(0x3, 0x0, &(0x7f0000000540)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000001940)=0x1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2, 0x3, 0x3) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000001a00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r3, 0x400, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040010}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x0, 'veth0_to_bridge\x00', {0x2}, 0x9}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vga_arbiter\x00', 0x2000, 0x0) chdir(&(0x7f0000001980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00') ioctl$USBDEVFS_BULK(r4, 0xc0185502, &(0x7f0000001900)={{0xd}, 0x2, 0x7bd, 0xfc, 0x0, &(0x7f0000001800)="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"}) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ocfs2_control\x00', 0x0, 0x0) socket(0x10, 0x2, 0x0) [ 212.698589] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 212.719586] XFS (loop2): unknown mount option [énode32]. 06:22:11 executing program 2: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, 0x0) r1 = socket(0x2, 0x803, 0xff) connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r1, r0, 0x0, 0x72439a6b) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x3c, &(0x7f0000000080)=[@in={0x2, 0x4e20, @rand_addr=0x200}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e23, 0x78, @mcast1, 0x1f}]}, &(0x7f0000000140)=0x10) socket$netlink(0x10, 0x3, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)) 06:22:11 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x200000000000}, 0x0, 0x81, 0x0, 0x0, 0x3b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_LOCK(r1, 0x4008642a, &(0x7f0000000140)={r2, 0x20}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r2, 0x1}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000080)={r2, &(0x7f0000000140)=""/225}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x801}, 0x20}, 0x1, 0x0, 0x0, 0x40195}, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) [ 212.790705] protocol 88fb is buggy, dev hsr_slave_0 [ 212.795826] protocol 88fb is buggy, dev hsr_slave_1 06:22:11 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f0000000040)={0x1, 0x0, {0x2d, 0x0, 0x0, 0x800001f, 0x2, 0xaa, 0x0, 0x0, 0xc103290a10879759}}) 06:22:11 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f00000000c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x9) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000100)={0x100, 0x7, 0x7fffffff, 0x4, 0x80, "397eb687bc69fcef2af44869f79374cecdc0ac", 0x1}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x2711, @reserved}, 0x10) [ 213.016011] 9pnet: Insufficient options for proto=fd 06:22:11 executing program 3: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x2a) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='net/dev_mcast\x00') sendfile(r6, 0xffffffffffffffff, 0xfffffffffffffffe, 0x2000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0xad2b3e1254f22aae}, 0x200000000, 0x2, 0x5, 0x3, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) syz_open_dev$loop(0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) keyctl$search(0xa, 0x0, 0x0, &(0x7f0000000140)={'syz', 0x2}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x3a, &(0x7f0000d06000)=0x1, 0xffffffffffffff4c) connect$inet(r7, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) shutdown(r7, 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0x4000000000014, &(0x7f0000000000)=0x80000000002, 0xe3) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x680, 0x0) fcntl$dupfd(r2, 0x0, r5) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x10000000013, &(0x7f0000d06000), 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) getgroups(0x2, &(0x7f0000000740)=[0x0, 0x0]) dup2(0xffffffffffffffff, 0xffffffffffffffff) r9 = creat(0x0, 0x0) io_setup(0x0, &(0x7f0000000300)=0x0) io_submit(r10, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x3, 0x1, 0x0, r9, &(0x7f0000000000), 0x10000}]) recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{&(0x7f00000064c0)=@caif=@dgm, 0x80, &(0x7f0000006700)=[{&(0x7f0000006540)=""/244, 0x95}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000006680)=""/67, 0x43}], 0x3, &(0x7f0000006740), 0xffffffffffffff0c}, 0x3}, {{&(0x7f0000006780), 0x80, &(0x7f0000006980)=[{&(0x7f0000006800)=""/9, 0x9}, {&(0x7f0000006840)=""/65, 0x41}, {&(0x7f0000000580)=""/183, 0xb7}], 0x3, &(0x7f00000069c0)=""/191, 0xbf}, 0x8c2}, {{&(0x7f0000006a80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000006d00)=[{&(0x7f0000006b00)=""/55, 0x37}, {&(0x7f0000006b40)=""/128, 0x80}, {&(0x7f0000006bc0)=""/81, 0x51}, {&(0x7f0000006c40)=""/97, 0x45}, {&(0x7f00000003c0)=""/20, 0x11}], 0x5, &(0x7f0000006d80)=""/4096, 0x1000}, 0x5}], 0x3, 0x80, &(0x7f0000007e40)={0x77359400}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000007e80)={0x0, 0x5, 0xfffe, 0x1, 0x3, 0x1, 0x8}, 0xc) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000480)='system.posix_acl_default\x00', &(0x7f0000000a40)=ANY=[@ANYRESDEC=r11, @ANYBLOB="24806865ef53a0b4b269735d2a688680ca9fec61f5ebbf28d30ef5e2fe5818423402f92defdee5d63f411a532745d5e35573d6d07eb4935a11582dcb2ae05e9bef96acbccc2f224adb6cec05d3e3a34e0870a115b9b93f346e2ceb15e95f488fc552752c31a2c185e6d507b12fa0e0af3f14f28c510063d1bbb788451e6954cb487573fd358503b1756d3fe2632a538acc04fe69208764bd05ce66cdcbb2c521b9469a79498874f9c0303f394d8440ce6e9291ca651f496e27e2d60166eee5", @ANYBLOB="8ae291c61c478a110e9446c32cc57e6b726efc86ead0af6b9e96b2d26a0973422d3fa701665f7e65d87f71dd5ad64ae989d451bdccff126d66b20b44d5034e3235c5c0038eb2ddaee7bf945bbaf59f0fc3589978ceedf8d7ef129b1258f2945d357279726a79f19f1bd3b3e2e8eb419cd717d01348073395ee55d9fbc27149f6b2d11f00000002993c63e2824baa5ab4668b4803620f26a0c15ec8af421ee0b55723ad21e3566633694a25f86f4ac6ac0846d768acc3c7d4d8cf7212cf35ddeee21c1e6d909df2393790ea2bc144603b80330f95185518f8e15ef1e1d8d4e9dd0d7d79c64b2837a4f1ef8e8f42f4561ba8b6", @ANYBLOB="1000738a0000000020001033df090000003799695a69286a5f060003000000fe30a7e58023a1279649887935118823df12b77ddb0e1e3b193782a596427c3ed2216abe35d104b1e079e72876a48cd9bfde1927c45baf7f41ad06d3153b711bace3c334a4eec5d9b10f21efb9a536b469db730f87cd00853d01936f8c86a848c7a7a62f4341709c6b01f88b60ae93f56bfe7bb280b8b60663f6575045b963ca6cd995d144a90a6055a5b8295e4891d22c91d282768e856ebc28d31baa1c210ec848"], 0x4, 0x0) 06:22:12 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr="bb40dd13d1ce83e5b5513cf17f0235bb"}]}}}]}, 0x48}}, 0x0) 06:22:12 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x2000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) r1 = gettid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x0, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000000c0)="b9ff03c6630d698cb89e0bf088ca1fffffff0e000000631477fbac14140ce0", 0x0, 0x9}, 0x28) close(r2) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0xe, &(0x7f0000000600)={r1, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 06:22:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x80001000008912, &(0x7f0000000000)="0805b5055e0bcfe847f5cf4f840bf894354071") r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000ff0ffc)=0x8000000000004, 0x9c) sendto$inet(r1, &(0x7f0000865000), 0x0, 0x4000018e, &(0x7f0000fd9ff0)={0x2, 0x4e20}, 0xffffffffffffff5e) 06:22:12 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800028001", 0x21) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x86, 0x0, &(0x7f0000000040)="313c85060e86ca632e822bf64f20465257186c53267f944482fe2e1d932071bb6d32a6fbe98efc89ded067cceec19876cadbaf6693e624f13777ba2b478a1d05db1a8bba78bcebd6cba0ffe477f778627236d89e1c4ffa576d7ed71a839fe1447708592ee3bd63107c048b84bfb46fa0acba1763c091b3c2914d329d97a51ff182c956fda2e9"}) 06:22:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(0x0, 0x0, 0x0) write(r1, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000180)={0x0, 0x43}, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000), 0x1ae, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xc0, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0xfffffffe}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)) ioctl$sock_inet6_SIOCADDRT(r5, 0x89a0, &(0x7f00000005c0)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @ipv4={[], [], @loopback}, @remote, 0x2, 0x0, 0x0, 0x0, 0x0, 0x42}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r8], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f00000001c0)={r8, 0xfffd, 0x4933, 0x1, 0x14f2deba, 0x98}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={r9, 0x0, 0x4, [0x0, 0x1, 0xff60, 0x9]}, 0x10) [ 213.427624] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.445482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.465528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.477915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.491222] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.503581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 06:22:12 executing program 4: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=0xc816, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x6, 0x4}, 0x0, 0x0, &(0x7f0000000080)={0x5, 0x10, 0x8, 0x4}, &(0x7f00000000c0)=0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x80000001}}, 0x10) syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x7fff, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0/f.le.\x00', 0x0, 0x0, 0x0, 0x0) [ 213.517401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.530437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.542626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 [ 213.555100] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=7776 comm=syz-executor.1 06:22:12 executing program 2: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x80000000, 0x427, 0x1ff, 0x8, 0xfd, "9cee3ad54a5d4da660ba1e21243d246f9d2ab3", 0x2, 0x5}) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x1fe, 0x0) write$binfmt_aout(r2, &(0x7f0000000440)=ANY=[@ANYRES64], 0xfffffd96) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000001e00)='./bus\x00') sendfile(r2, r2, &(0x7f0000000000), 0x8080fffffffe) creat(&(0x7f0000000200)='./bus\x00', 0x0) 06:22:12 executing program 5: socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@fwd={0x9}, @func={0x10, 0x0, 0x0, 0xc, 0x4}, @volatile={0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x4}}, @restrict={0x8, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x61, 0x3e, 0x2b965fda7b4103b1, 0x30]}}, &(0x7f00000009c0)=""/148, 0x66, 0x94, 0x1}, 0x20) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000640)={'raw\x00'}, &(0x7f0000000180)=0x54) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000880)='./file0\x00', 0x100) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x10000000005, 0x84) r5 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000100)=0x6, 0x4) bind$packet(r5, &(0x7f0000000300)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @random="65ed59501ed8"}, 0x14) sendmmsg(r5, &(0x7f0000000d00), 0x400004e, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x8e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) connect$nfc_raw(r2, &(0x7f0000000740)={0x27, 0x1, 0x2, 0x7}, 0x10) 06:22:12 executing program 4: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'}) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000940)}, 0x0) r0 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000040)=r0) r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r2 = socket$inet(0x10, 0x2, 0x0) ioctl$sock_ifreq(r2, 0x6ed6d6259ab0360, &(0x7f0000000180)={'ip6gre0\x00', @ifru_hwaddr=@remote}) 06:22:12 executing program 4: socket$inet6(0xa, 0x10000000003, 0x6) r0 = socket$inet(0x2, 0xb, 0x3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a000000b7289908e41c4301889c91ff7f000000001600aa0000cad7cb69050046b6e50e067f000000000009c1374611"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20401, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9f2}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r4 = socket(0x10, 0x3, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0x12c, 0x33) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)) fadvise64(r2, 0x5, 0x8, 0xe) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 06:22:12 executing program 5: socket$inet(0x15, 0x7fffc, 0x6) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x25c004, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x357], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f0000000240)='./file0\x00', 0x2ce) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r4 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r2, r4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000000)=0x79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x44c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xe4e, &(0x7f00000001c0)) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 06:22:13 executing program 1: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)="240000005a001f00ff03f4f9002304000a04f51108000100020100020800028001", 0x21) close(r2) socket(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000), 0x86, 0x0, &(0x7f0000000040)="313c85060e86ca632e822bf64f20465257186c53267f944482fe2e1d932071bb6d32a6fbe98efc89ded067cceec19876cadbaf6693e624f13777ba2b478a1d05db1a8bba78bcebd6cba0ffe477f778627236d89e1c4ffa576d7ed71a839fe1447708592ee3bd63107c048b84bfb46fa0acba1763c091b3c2914d329d97a51ff182c956fda2e9"}) 06:22:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000400), 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfff}, 0x0, 0x3, 0xffffffffffffffff, 0x1) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) open$dir(0x0, 0x4002, 0x0) setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000001c0), 0x4) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r2 = semget(0x3, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32, @ANYBLOB="19000000000000001c0012000c00010062726964676500000c0002000800050001000000"], 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r4) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000300)={&(0x7f0000000280)={0x2, 0x0, 0x28, {}, {0x0, 0x2710}, {0x4, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x2c, 0x0, 0x0, 0x0, "0c39b29e098e15881239f0d986a9d3e6aa5ec6bffadfc94180939f591964a6208f36f0154f093ef117a2fe105aeae21341ba12cf01300ce5c5e1e247daf64cbe"}}, 0x80}, 0x1, 0x0, 0x0, 0x20040c4}, 0x20000000) accept4$x25(r0, &(0x7f0000000340), &(0x7f0000000380)=0x12, 0x80800) setreuid(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000040)) setreuid(0x0, 0x0) setgid(0x0) semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000200)={{0x1, 0x0, 0xee01, 0x0, 0x0, 0x120, 0x1}, 0x2000000000, 0x8, 0x3000}) fchdir(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) sendto(0xffffffffffffffff, &(0x7f0000000000)="120000001200e7", 0xfffffffffffffd66, 0x40001, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0), 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'hsr0\x00'}) [ 214.252141] input: syz1 as /devices/virtual/input/input5 06:22:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) r5 = syz_open_dev$sg(&(0x7f0000000c00)='\x00\x00e\x92/s\x8a#\x00', 0x7, 0x31da8b4be86db002) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000080)) r7 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000080)) r8 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f0000000080)) r9 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5387, &(0x7f0000000080)) r10 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5387, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) r13 = getegid() r14 = getpid() sched_setattr(r14, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r18, 0x5387, &(0x7f0000000080)) r19 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r19, 0x5387, &(0x7f0000000080)) r20 = syz_open_dev$media(&(0x7f0000000740)='/dev/media#\x00', 0x2, 0x0) r21 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r21, 0x5387, &(0x7f0000000080)) r22 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) stat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getpid() sched_setattr(r25, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}}}, &(0x7f00000009c0)=0xe8) getresgid(&(0x7f0000000a00), &(0x7f0000000a40)=0x0, &(0x7f0000000a80)) sendmsg$unix(r3, &(0x7f0000000bc0)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000100)="cc19c08a4a265e64f1baf4fe1c61794bc74f89550535c74ee48b0e1252e4834ad3cf1e313129db49aa7cfcb7a947a78751dc590f3c204e83a9bcdc3c26ca47a9138f0a0215c2", 0x46}, {&(0x7f0000000180)="684a285c290941a191eada1ee11da01740f3f2c6d1b6a2358210a68eb48a3561df0364a358a675bc7bf82b7728c39bd9e42cd8d6aaa3853fe750e2d1820ca106fe1f163df7e7750b3c13dfe30b60a5c4d24ea093f518363867fe7d60b639639422f1d2494d896f975695728cfb4c70bb2b576e1912599d178abb70d50a984b3f667e68557ec1dd8463249f7f", 0x8c}, {&(0x7f0000000240)="531651a5edd9c03b9c5779efe67959e60cfd87e4932d7f76f0994f47ea140e2b7a1ce969dc8ef50583bab825337b880ecfadb7c5a0284b8c8d831e605473c62f3f47d9", 0x43}, {&(0x7f00000002c0)="25ac048e6b330647cf9e8cbb2e7c699ce02d09597165a78bf448d1f9e4dd2248c220fe638962985ad9563d6c4b39f7d53f5ccdfdbd066f31cb32252f443ffc11e91a6d05bd78ec846437a8564e12186beed69b0b0e6a62278080c1e539701c5947acf79e6e52b29e92434d15b5958320f5e49950c31137401802024c2093c45ef4f964786840a3fc6ba928a72d0becc080e10d47b187a9f94626d57a07e8834d92e4d3491bdb6c5e8e195133d8e842288760b958fb69097272e5aa4d36325642a75b44befd404911141e7c23083e45a8235355258e54bbc2246e63f45d8d10af599e2521fa280da6b2a2c1168d4ada5983f54005b3c009", 0xf7}, {&(0x7f00000003c0)="22c82618601c8bcf2e240f6f7862ae81deeabf60a5a27f7bab59d488439ed53f25645651432b18aa1baad4b4d2642bc54eb68c5c11c2e4ba0e9bc447c879900d59280f3350381b0b768d87072dce96bcec192d60a1755db06af75bc3aeb3d349c3", 0x61}], 0x5, &(0x7f0000000ac0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r4, r5, r6, r2, r7]}}, @rights={{0x28, 0x1, 0x1, [r8, r0, r1, r9, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r16, r17}}}, @rights={{0x24, 0x1, 0x1, [r18, r19, r20, r1, r21]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r23, r24}}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r27}}}], 0xf8, 0x8000}, 0x4010) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0xe2, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 214.416999] IPv6: ADDRCONF(NETDEV_UP): bridge1: link is not ready [ 214.476663] input: syz1 as /devices/virtual/input/input6 06:22:13 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0xa0000, 0x0) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x9b5, 0x10000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) write(r1, &(0x7f0000000340)="183e2d7b36e20e1d2636571ae1e9fbf61fc6d0712f04af38ba18914848567cf3331d2f448a3be3f0ff15e789f2537c672dc9484c2bd50438b9d7169ff165cef1e34220cbbcaabdb97e399e23a7f76123a9a8334b74ad5a", 0x57) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x40000000000000d) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x0, 0x80a, 0x4, &(0x7f0000000180)) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 06:22:13 executing program 5: socket$inet(0x15, 0x7fffc, 0x6) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x25c004, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x40000000806, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x357], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getuid() getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001040)={{{@in=@loopback, @in6=@ipv4={[], [], @remote}}}, {{@in=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000f00)=0xfffffffffffffd81) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) creat(&(0x7f0000000240)='./file0\x00', 0x2ce) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r4 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x0) dup3(r2, r4, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$int_in(r1, 0x800000c0045002, &(0x7f0000000000)=0x79) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x44c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) perf_event_open(&(0x7f0000c86f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xe4e, &(0x7f00000001c0)) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000040)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)}}, 0xfffffea9) 06:22:13 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() semget$private(0x0, 0x2, 0x0) r0 = eventfd(0x7) ioctl$CAPI_NCCI_GETUNIT(0xffffffffffffffff, 0x80044327, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc08c5102, &(0x7f0000000240)={{}, {}, 0x0, 0x0, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) io_cancel(0x0, 0x0, &(0x7f00000003c0)) ftruncate(0xffffffffffffffff, 0x0) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f00000001c0)=""/163) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x1001000004e23, 0x4, @rand_addr="6b1fcfbe883cd33ca4b67e9942d11199", 0xffffffff}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)={0x2, 'veth1\x00', {0xffff0000}, 0x689}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) write(0xffffffffffffffff, 0x0, 0x0) shutdown(r2, 0x2) sendto$packet(0xffffffffffffffff, &(0x7f0000000040)='u', 0x1, 0x0, 0x0, 0x0) [ 214.777485] input: syz1 as /devices/virtual/input/input7 06:22:13 executing program 3: bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) unshare(0x20600) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffff0a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfff5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r0 = getpid() tkill(r0, 0x9) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x400000000803, 0x5f) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x400000001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'nr0\x01\x00', 0x1}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000006c0)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6\xf23F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0_\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\xa9\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&k\x80K\xd1>\xa6\xff(\xb1\x01\xe7\xa5\xce-A\xb0\xec\x190r-q\x83\xb3mN\x91\'\xc5\xf8\xfe\x18\x16\xb7R6\xa9R\xf4H\xa7\x84\x98\xfc\xf9\xa6\xd6\x8d\xa7\xd5_\xc0\x93\xde\x1f`\xff\xcf\xe1)N\x85&\x8b\x06I\xa2\x13\x02\x00\x00\x00\x00\x00\x00\x00[\xae5\x82}\xb7h!\xd9\xce\xe9\x06\b\rs^\x8d\x14\xc1\x97m@6\x1d\xfc\x92@-\xb6\xe5N\x84\xbc\xc0\x1f\xfbI\'M\xdd\xc6*\x06&\f\b\xa6\x92)D}\x87\x80\xea\xb9l\x80H\xea\x82o6\xfa)\x15\xdc@\xf4\x86\xd6_\xf9+/Q\xd5\x8a;\x8b\xe1\x1d\xd0\xec\x8ek\xdb\xa8\xf3Ir\xdb1`B&\xe8A\xd1\xea\xb4$5%aL\xc1\xbd\x91\xc3\x90\x06i <1\xaa\"\xd5\xbb\xe9\xc7SX\xbfm{>\xd4\xc3(E[\xb0J13\xbbG\x8a\xb4\x8aMs\x9f\xcf\xb8g\xab\x12\x8cj\x95}\xb1\bc\xc4u\xf4\xe2\x88\xfa\xde\xec\xdf\xb9\x98\x84\x028\xd9_n\x9f\x86\x88\xe6\x15b\x01]\x01a\xe7\xb9\xb0\xbdk\xaa\xa1\xc1') socket$packet(0x11, 0x3, 0x300) r4 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) write$FUSE_LSEEK(r3, &(0x7f0000000040)={0x18, 0x0, 0x2, {0x2}}, 0x18) ftruncate(r4, 0x200004) sendfile(r2, r4, 0x0, 0x80001d00c0d0) gettid() ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f00000000c0)={0x1}) r5 = openat(0xffffffffffffffff, 0x0, 0x80040, 0x118) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240)='devlink\x00') sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0xa4, r6, 0x67d256230ec71f33, 0x0, 0x3, {}, [@nsim={{0x0, 0x1, 'netdevsim\x00'}, {0x0, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0xfffffeb4, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:\x00\x95\b\x00'}}, @nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r7 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x1, &(0x7f00000004c0)={0x2a0, 0x0, 0x0, "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"}) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000200)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="9c000000", @ANYRESHEX, @ANYBLOB="00012dbd7000fddbdf2506000000100001006e657464657673696d000000100002006e657464657673696d300000080003000300000008000400020000f5eeb4604b911f80df7400080001007063690014000200303030303a30303a31302e300000000008000300030000000800040001000000080001007063690014000200303000303a30303a31302e3000c3ce7c5a000300020000007500040003000000e9ea0d07a3a87170a3725cebf24b79105a72ed8877b84db6961869c5bde853a455f698b0bb3be6fcdee2f933ed9e032c6871485d58ac8be50e851a88e11cb70bc1d0d927917f757d17dcc192765134d8e78166a831ac1840bc6c0a29db14e44a6a97792913beac92979ebc7d362612db9d066664ece339c80e58a53d4f7c2853a0c1bd61c3ab82b1d02671e59dbb3ad99dc3a2775119ae8c3c8df35f35d53d86b36cf7b7f317ae4a99a3b04d8fab2764acb9d3d41550c7f95051ea07b55d186ea3df1fdfb4622b9561c8366b2dc94c7c174f4cc73ee200c34f0efd0dc51ed027f437c3ec1fc7087281bf0d370b37ccf7e521fcb39880984a2d34d3657648c9c06743e3e57af267d6a199bc857d24e7d72e7b41b360c98717602565bb3246d35e3a93dd082dfdb1349758c3d18b6344b142ff4a8c4b3add31156386127922692dd15236444c6307db60892f50cf1f985893b235a0a4cd8cb7c7d979b2f8595575936cf83b0197ba601449302a5aadef8b43359474a5f9282d63f09b0fc3c07dec8e03b6918b955a8463924bf9cdc62767b011ec0a2f77fa5d6155a6a47de5c81f21b8681f38bae900079f5c0fc9ff88f198530af30cc3012e9c0792b19c5bbc6e5ebb045c272c82ddfbabde93e57d1fb5b6bf466e19a0871c45e88fea0544036763605dfb02c90abc5ab53e6c5c1e885398bd6d45cc7ae01506ec41b256678b3194572b5f97dba0525d9c9d478242de5e71344dac9d77c45149c9"], 0x3}, 0x1, 0x0, 0x0, 0x40004800}, 0x80) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000080)=0x4) [ 214.875903] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 214.886177] FAT-fs (loop2): Filesystem has been set read-only 06:22:13 executing program 4: socket$inet6(0xa, 0x10000000003, 0x6) r0 = socket$inet(0x2, 0xb, 0x3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a000000b7289908e41c4301889c91ff7f000000001600aa0000cad7cb69050046b6e50e067f000000000009c1374611"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20401, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9f2}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r4 = socket(0x10, 0x3, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0x12c, 0x33) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)) fadvise64(r2, 0x5, 0x8, 0xe) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 06:22:14 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42479, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe]}, 0x45c) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000700)={0x27, 0x1, 0x0, 0x0, 0xfe, 0x20, "fdfcfec25def0a437ea0cf70c401dff625b53d7b7b9e7af3cf06803e4804d6a98e1c020477fc1516d942fe2bd33b69e14c3efc6f376f8019c04a18d983e85f"}, 0x60, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="5000000000000000120100000700000021dd8049badf2392cda3e4ece4481ec453f1ca1615ad218937b2ead0f9ec70cb5854cfffc5cb7b83248e4c94c41d6cfa4813d0258dca88fd450425"], 0x4b, 0x80808}], 0x1, 0x40) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/133, 0x85}], 0x2, &(0x7f0000000580)=""/115, 0x73}, 0x2}, {{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000042c0)=[{0x0}, {0x0}, {&(0x7f0000004000)=""/80, 0x50}, {&(0x7f0000004140)=""/85, 0x55}], 0x4, &(0x7f0000004340)=""/144, 0x90}, 0x4}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x2400000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000240)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x2100022, &(0x7f00000003c0)='sh\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r6, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) 06:22:14 executing program 2: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x102c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@dev={0xfe, 0x80, [], 0xc}, @rand_addr="11e3956e57cfece4c8e3f19de561a97b", @rand_addr="3a2c0db032ebc1ab8fc8dc9a32c5c216", 0x4, 0x8001, 0x7ff, 0x0, 0x1, 0x0, r5}) bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10) r6 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x8000, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r7, 0xc034564b, &(0x7f0000000040)={0x7, 0x38303553, 0x10001, 0x4, 0x2, @discrete={0x4}}) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@fadd={0x58, 0x114, 0x6, {{}, &(0x7f0000000080), 0x0}}], 0x58}, 0x0) 06:22:14 executing program 0: openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0xc7203ea1ce9cbc97, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0xfffffffffffffed7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000e40)={0x4, 0x1, @raw_data=[0xf39, 0x2, 0x9, 0x6, 0x8, 0x7, 0x4, 0x256, 0x8, 0x4, 0x1000, 0xa10, 0x8, 0xc14, 0xffff0000, 0xffffffc1]}) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000300)=""/133, 0x85}], 0x1, &(0x7f0000000580)=""/115, 0x73}, 0x2}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/156, 0x9c}, {&(0x7f0000000740)=""/59, 0x3b}], 0x2}, 0x55f}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}, 0x7}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f0000002dc0)=[{&(0x7f0000002c80)=""/149, 0x95}, {&(0x7f0000002d40)=""/12, 0xc}, {&(0x7f0000002d80)=""/7, 0x7}], 0x3, &(0x7f00000000c0)=""/36, 0x24}, 0xfffffff7}, {{&(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000002ec0)=""/206, 0xce}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000003fc0)}, {&(0x7f0000004000)=""/80, 0x50}, {&(0x7f0000004080)=""/146, 0x92}, {&(0x7f0000004140)=""/85, 0x55}, {&(0x7f00000041c0)=""/246, 0xf6}], 0x7, &(0x7f0000004340)=""/144, 0x90}, 0x4}, {{&(0x7f00000045c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000004740), 0x0, &(0x7f0000004780)=""/58, 0x3a}, 0x9}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000e00)=""/27, 0x1b}, {&(0x7f0000000480)=""/171, 0xab}, {&(0x7f00000003c0)=""/98, 0x62}, {&(0x7f0000000ac0)=""/141, 0x8d}, {&(0x7f0000000b80)=""/174, 0xae}, {&(0x7f00000007c0)=""/76, 0x4c}, {&(0x7f0000000c40)=""/140, 0x8c}, {&(0x7f0000000d00)=""/109, 0x6d}], 0x8, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x8, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xa3fe) fcntl$setpipe(r5, 0x407, 0x7) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x182102, 0x0) ioctl$TIOCSCTTY(r6, 0x540e, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x1, 0x0, {0x900000000003}}, 0x349) mkdir(&(0x7f0000000440)='./file0/file0\x00', 0x111) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000540)='./file0\x00', 0x0, 0x1807202, 0x0) socket$inet6_sctp(0xa, 0x3, 0x84) setxattr$trusted_overlay_upper(0x0, &(0x7f0000000100)='trusted.overlay.upper\x00', &(0x7f0000000ec0)=ANY=[@ANYBLOB="00fbbc03030c1413270e2cd3ac57e9fc8bf4eaef96422169258c5ed37577f788ca835218e7c956609a6dfc9b299c0e2a7880833590a92d0038b62a6e489e871b24eeafcdff0cf4da5c6ca9f806df17b739cfa4c2b75e35a4398f6bacb13f55e278c7be5af62b323822a79d8d8c3c1c4c362c75900a2a77729aa9e4c57d8745b1544f8ef40088cc7dc8e4af6867f2185c141a1f8ab1727d39e60eff785d518f7c4299cd02fcb43149b9aff954d5dbf47294c9eaee44986020d8954632ed180bbf0b5f35082e1f09f90a1bf1978de4474b3acf309b8f1dad7737c6d8f3e22cfbd8492d3ad7ff61d12f"], 0x1, 0x0) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) socket$caif_seqpacket(0x25, 0x5, 0x0) r7 = open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) r8 = openat$cgroup_procs(r7, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000340), 0x12) [ 215.273660] device bridge_slave_1 left promiscuous mode [ 215.297880] bridge0: port 2(bridge_slave_1) entered disabled state 06:22:14 executing program 2: syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000480)={0x1, 0x9a71, 0xfbf, 0x87c, 0x0, 0xc7}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0x12, 0x4f, 0x10000, 0x7}) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6242, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfsd\x00', 0x1000, &(0x7f0000000300)='md5sum}nodevvmnet0\x00') clone(0x8000000101, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000000)=ANY=[@ANYBLOB="2e1515747f0df88ba1a18ecf"], &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='f2fs\x00c\x9b\xec\xe8Dv\xff\xd2\xd6\xc9LR\x12Df6\x1dA\xbc@\x1c\xf7\r\xfb4\xe2\n\x91\x91\xeb\x8d]\xbcy\xf7\xe0o\x1a%\x9e\xd6%\xdf\x85\x11-$\x8c9\x84\x0f\xe45=\x85\xa1\xa3\xa5\x87\xfa\xb5\xa5\x18\xda\xe0\xc53\xb1\\^\x12.\x03\x1a\xef\x00\x8f\x8d\xa8,\xe8\xc6\x8a\xdd\xee\x05#\x1d\rI^,\xe6\x80\x8aY\xa0\x8cB\x1d\xfa\xe3*\nWk\xcd\xd5y\xb4u\x7f\xc4\x8eP\x1dT\xbf\n\x1b\xe1\x01\xaa\xf3\xebu\xb8\xa8(\xb6\xf2\x1a\x86\x17\n\x8d\x82\x1a{q\xb1X&\xae\xf6\x15M\xff\x86&\xd2n~\xdd\xcft{xD.L1\x8c\xf19E\xdf\xe5\x80\xbb)\xfd)l\xb6\xfa\x1eP\x90:\xe4\xb3-B\xe4,\xed}\x10\x1b\xb7^\xcc\xeb\x91\xd4\x05B6\xcaC\xad!\x9aG\x8b\x04Z\x1es\xa1\x85\x0e\xed\xc3\x99', 0x0, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000340)="2d7ce78b4529782c89a6d480a05419126bca3af4a39ac0f56685661423dbc55e8213566b912d1dce654fe9ecc5a26cfc73a77d14d8e59726e1abc789fb6e0552ac0dc7f9a597ef8fee", &(0x7f0000000400)="b16534f38be317ddbf2423a2a10c8f37c0ea7e56844826a776abe0a5b13a5a7ae2e6ab2c1579c2b204f714d7e0887287cb6e6e4c9b746082298b5146", 0x1}, 0x20) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp1\x00', 0x13402, 0x0) syz_open_pts(0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) 06:22:14 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42479, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe]}, 0x45c) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000700)={0x27, 0x1, 0x0, 0x0, 0xfe, 0x20, "fdfcfec25def0a437ea0cf70c401dff625b53d7b7b9e7af3cf06803e4804d6a98e1c020477fc1516d942fe2bd33b69e14c3efc6f376f8019c04a18d983e85f"}, 0x60, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="5000000000000000120100000700000021dd8049badf2392cda3e4ece4481ec453f1ca1615ad218937b2ead0f9ec70cb5854cfffc5cb7b83248e4c94c41d6cfa4813d0258dca88fd450425"], 0x4b, 0x80808}], 0x1, 0x40) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/133, 0x85}], 0x2, &(0x7f0000000580)=""/115, 0x73}, 0x2}, {{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000042c0)=[{0x0}, {0x0}, {&(0x7f0000004000)=""/80, 0x50}, {&(0x7f0000004140)=""/85, 0x55}], 0x4, &(0x7f0000004340)=""/144, 0x90}, 0x4}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x2400000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000240)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x2100022, &(0x7f00000003c0)='sh\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r6, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 215.395661] device bridge_slave_0 left promiscuous mode [ 215.407298] bridge0: port 1(bridge_slave_0) entered disabled state 06:22:14 executing program 1: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x100000000, 0xa18c88eaf0ac65b) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xffffffffffffff62, &(0x7f0000000080)=[{&(0x7f0000000200)="1b00000018008100e00f80ecdb4cb9040a4465ef0b007c05e87c55", 0x1b}], 0x1}, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r0], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={r0, 0x5}, &(0x7f0000000100)=0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) bind$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x6a, 0x0, 0x8, 0x7, 0x8, 0x6c}, 0x80}, 0xa) [ 215.666250] device hsr_slave_1 left promiscuous mode 06:22:14 executing program 5: accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz1\x00', {}, 0x0, [0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42479, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x8000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffe]}, 0x45c) sendmmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000700)={0x27, 0x1, 0x0, 0x0, 0xfe, 0x20, "fdfcfec25def0a437ea0cf70c401dff625b53d7b7b9e7af3cf06803e4804d6a98e1c020477fc1516d942fe2bd33b69e14c3efc6f376f8019c04a18d983e85f"}, 0x60, 0x0, 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB="5000000000000000120100000700000021dd8049badf2392cda3e4ece4481ec453f1ca1615ad218937b2ead0f9ec70cb5854cfffc5cb7b83248e4c94c41d6cfa4813d0258dca88fd450425"], 0x4b, 0x80808}], 0x1, 0x40) recvmmsg(r1, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=""/199, 0xc7}, {&(0x7f0000000300)=""/133, 0x85}], 0x2, &(0x7f0000000580)=""/115, 0x73}, 0x2}, {{&(0x7f0000000600)=@caif=@rfm, 0x80, &(0x7f0000000780), 0x0, &(0x7f00000007c0)=""/100, 0x64}}, {{&(0x7f0000000840)=@nl=@proc, 0x80, 0x0}, 0x10001}, {{0x0, 0x0, &(0x7f0000002b40), 0x0, &(0x7f0000002b80)}}, {{0x0, 0x0, &(0x7f0000002bc0)}, 0x8}, {{&(0x7f0000002e40)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f00000042c0)=[{0x0}, {0x0}, {&(0x7f0000004000)=""/80, 0x50}, {&(0x7f0000004140)=""/85, 0x55}], 0x4, &(0x7f0000004340)=""/144, 0x90}, 0x4}, {{&(0x7f00000047c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f0000004840), 0x0, &(0x7f0000004880)=""/39, 0x27}, 0x6}], 0x7, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0xa, 0x2400000002, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) r5 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$RTC_ALM_READ(r5, 0x80247008, &(0x7f0000000240)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x2100022, &(0x7f00000003c0)='sh\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmsg(r6, &(0x7f000001afc8)={&(0x7f0000006000)=@in={0x2, 0x4e20, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f00000001c0)='*', 0x1}], 0x1}, 0x0) [ 215.827001] device hsr_slave_0 left promiscuous mode [ 215.948434] team0 (unregistering): Port device team_slave_1 removed 06:22:15 executing program 5: r0 = creat(&(0x7f0000000680)='./bus\x00', 0x7ed1e105794cbd9b) ftruncate(r0, 0x8200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x101002, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) madvise(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x9) open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) lsetxattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)=',keyringeth0wlan0\x00', 0x12, 0x2) openat$snapshot(0xffffffffffffff9c, 0xfffffffffffffffe, 0xa840, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x20200, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd54e8785b8463c8, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f000036e000/0x18000)=nil, 0x0, 0x0, 0x59, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$FBIOGET_CON2FBMAP(r6, 0x460f, &(0x7f00000001c0)={0x11, 0x2}) madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8) r7 = socket$inet6(0xa, 0x4, 0x7f) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180)=0x2729, 0x4) 06:22:15 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f02000000000000000001000000000000000b000000000c001473797a31000000bbc41f27ad468a35f5849980452474ddb8349b61ec3f44fdbd092677d2210936901bcb03ce6695b57c4ba4bb4f285eead605e7d648837c6cc14e12b75145b1b94f7021f284c644d9b6aced887e186054a2eb0ec966adda0bad00c34cc6226a411160a04ac10b82aac08fbe012cb6fea280020b20e30fd7ebc295e01cd2a6b67eebcf3ae7fd63889d755676a4d10d00"/189], 0x28}}, 0x0) prctl$PR_GET_FP_MODE(0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x485}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x400e000}, 0x0) [ 216.088302] team0 (unregistering): Port device team_slave_0 removed [ 216.144981] bond0 (unregistering): Releasing backup interface bond_slave_1 06:22:15 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000030c0)=""/207, 0xcf}], 0x3}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0xfe91, 0x40000042, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r7 = open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r7, 0x0, 0x0) r8 = open(0x0, 0x0, 0x8) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='$ddl\x05-control\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r5, 0x0, 0x0) preadv(r8, 0x0, 0xfffffffffffffeb2, 0x10400003) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9c9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0xfffffffffffffdfd, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1c1042, 0x0) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, 0x0, 0x0) [ 216.189195] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 216.313518] bond0 (unregistering): Released all slaves [ 218.283740] IPVS: ftp: loaded support on port[0] = 21 [ 218.365080] chnl_net:caif_netlink_parms(): no params data found [ 218.398379] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.405029] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.412265] device bridge_slave_0 entered promiscuous mode [ 218.418902] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.426058] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.433023] device bridge_slave_1 entered promiscuous mode [ 218.451156] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 218.459937] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 218.479077] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 218.486299] team0: Port device team_slave_0 added [ 218.491814] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 218.498804] team0: Port device team_slave_1 added [ 218.504376] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 218.511765] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 218.532659] device hsr_slave_0 entered promiscuous mode [ 218.538341] device hsr_slave_1 entered promiscuous mode [ 218.544578] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 218.551838] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 218.565218] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.571595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.578155] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.584542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.614146] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 218.620907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.628788] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.637837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.645857] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.652650] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.662938] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 218.669182] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.678475] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 218.686060] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.692447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.702237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 218.709865] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.716286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.732946] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 218.741247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 218.762354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 218.769989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 218.780693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 218.789581] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 218.796093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.810440] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 218.817798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.824982] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.836738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.919708] device nr0 entered promiscuous mode [ 219.020117] protocol 88fb is buggy, dev hsr_slave_0 [ 219.025262] protocol 88fb is buggy, dev hsr_slave_1 [ 219.047774] audit: type=1400 audit(1575872537.934:54): avc: denied { getattr } for pid=7976 comm="syz-executor.3" path="socket:[31442]" dev="sockfs" ino=31442 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 06:22:18 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e002d6) 06:22:18 executing program 2: ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) r0 = socket(0x22, 0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0xd0, 0x4) setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000240)=0x3, 0x4) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/_bi_ctrlJ', 0x599641, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="23000000030000000000000036924def18a557ba5c2cfd438218f03b000000000002000000000000005b2b00"], 0x23) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getpeername$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x1c) write(r2, &(0x7f0000000240), 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000080)=""/121) 06:22:18 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000007c0), 0xc, &(0x7f0000001480)={&(0x7f0000000000)={0x14}, 0x14}}, 0x0) ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000740)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}) pipe(&(0x7f0000000000)) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000100), &(0x7f00000000c0), 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000700)={0x0, r1}, 0xc) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0xf17) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYPTR64, @ANYRES32, @ANYBLOB="269416b78d7277917b5fbbb6c70e53d4ed80e3f89ec15386d13f0970ff1fa6eecb014ada4790272e1c065968556e48cee22a22bbec79783b5d240eb65e7aac99a2880b3b650e0319d77f79dd34d37fb400e3f0edd90b256dfddb1f528c75cad45d78b78550a78f07272e6d579ace0554a7424bb9125dd9d6b4b0c6d0fa964d455a557a35e1f69d4785ad48b3f5a457a2bacbb9", @ANYPTR64, @ANYRESDEC, @ANYRES32=r2, @ANYRESOCT, @ANYBLOB="40b8127e9e344750a400003119181478ad379caeaaa59774d2205444d2f05bda6ac3c93ee3922af328e54cb97576ebb9d0917be2ab4a0171d4f5d313c13e69e471c2cac1ebefea77faaad5919e70b72c5193eb5c39904ef7960dbbba"], 0x132}, 0x1, 0x0, 0x0, 0xc0}, 0x40004000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="03268a927f1f6588b967481241ba7860f46ef65ac623ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a92825a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x104eb, 0x91, 0x0, 0xffffff23) 06:22:18 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001480)="d09a", 0x2}], 0x1}, 0x0) r2 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r2, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) fsetxattr$security_evm(r3, &(0x7f0000000340)='security.evm\x00', &(0x7f0000000380)=@md5={0x1, "df4a5a596b158de2a4068afc2adf0437"}, 0x11, 0x2) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000200)=""/10, 0xa, 0x10040, 0x0, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x40800, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r4, 0x4010ae68, &(0x7f0000000180)={0xb000, 0x102000}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000240)={0x10003, 0x0, [0x157, 0x2, 0x7f, 0x5, 0x0, 0x3, 0x5, 0x2]}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000140)=0x8, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r6 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) sendto$inet(r6, &(0x7f0000004000), 0xffec, 0x0, &(0x7f0000002000), 0x10) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r7, 0x641e) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$KDSKBMODE(r5, 0x4b45, &(0x7f00000003c0)=0x4) signalfd(r8, &(0x7f0000000300)={0x80000001}, 0x8) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0x3) 06:22:18 executing program 4: socket$inet6(0xa, 0x10000000003, 0x6) r0 = socket$inet(0x2, 0xb, 0x3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a000000b7289908e41c4301889c91ff7f000000001600aa0000cad7cb69050046b6e50e067f000000000009c1374611"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20401, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9f2}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r4 = socket(0x10, 0x3, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0x12c, 0x33) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)) fadvise64(r2, 0x5, 0x8, 0xe) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) 06:22:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x15555895, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140), 0xc, 0x0}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) mq_timedsend(r3, &(0x7f0000000380)="f5c4f38e70469b677d9c6ae2a8e6ade7c3487c7db0e9cadcba04e08616e62a5b46b25a2902c292cdb3d408e93bf73431a68583abcd4bd99234b7965e76652b65a8a4db3fd40b6c18076010649cc79accb92de42763b0a7ca195f619a43293c3d4b76b0d904e1f0f0e92ba9a53423f7", 0x6f, 0x7, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x9, 0x8, 0x4cb]}) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(0xffffffffffffffff, 0x8250aea6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0}, 0x0) ioctl$USBDEVFS_RESETEP(r2, 0x80045503, &(0x7f0000000080)={0x8}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) writev(r4, &(0x7f0000000240)=[{&(0x7f0000000400)="41a2d03ba8a37fcc6b6bf728044b0f1f55078e8e8745a1e339a968db6b7b85b32d2be29e7a15bc5e7d57c23665afb4d6f3a93368b04812fb9f8bad4495c8338194454d7f3d2c85c66a2d8ee310b7b1afdccb5bbd6add4354f681d2825c20089dbe47c86e2a59a3d06f56ada43a3510723355967be94f7e72", 0x78}, {&(0x7f0000000480)="312f909414d11bff9c917b7672d875c6d56ed0f93ce1dba52f0c1b9690c7357ede5fc50a657638906a90f697f6a71ff29fb6d08ff125b979a4f3df985ca97e53f76113406194ac0065cc35d31f4f35fb40ada85008317a3c848aded852659f7f6630ead28a9e708e023d39426b3ac39f2e043167465443bf6741269c805871322b487b42cb", 0x85}], 0x2) 06:22:18 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x48}}, 0x0) 06:22:18 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, 0x0, 0x0) [ 219.350980] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 06:22:18 executing program 1: r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) close(r0) fcntl$setown(r0, 0x6, 0x0) 06:22:18 executing program 1: r0 = socket(0x10, 0x800000000000802, 0x0) write(r0, &(0x7f0000000480)="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", 0xfc) 06:22:18 executing program 1: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) r0 = creat(&(0x7f0000000040)='./bus/file0\x00', 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000140)={0xa, 0x4}, 0xc) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) link(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000200)='./bus/file1\x00') mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) unlink(&(0x7f00000002c0)='./bus/file0\x00') [ 219.552513] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. 06:22:18 executing program 4: socket$inet6(0xa, 0x10000000003, 0x6) r0 = socket$inet(0x2, 0xb, 0x3) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="020700090200000000008000bd5a000000b7289908e41c4301889c91ff7f000000001600aa0000cad7cb69050046b6e50e067f000000000009c1374611"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x20401, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x100000001) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x9f2}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/tcp\x00') r4 = socket(0x10, 0x3, 0x0) sendfile(r4, r3, &(0x7f0000000080)=0x12c, 0x33) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f00000000c0)) fadvise64(r2, 0x5, 0x8, 0xe) syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r2, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 219.640290] audit: type=1400 audit(1575872538.524:55): avc: denied { associate } for pid=8020 comm="syz-executor.1" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 219.675972] overlayfs: upperdir is in-use by another mount, mount with '-o index=off' to override exclusive upperdir protection. 06:22:19 executing program 3: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x20fe, 0x0) mmap(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) write$P9_RFLUSH(r0, &(0x7f00000000c0)={0x7}, 0x7) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x1000)=nil, 0x1000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000012000/0x1000)=nil, &(0x7f0000013000/0x1000)=nil, 0x1000}) 06:22:19 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x6a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) dup3(r0, r1, 0x0) 06:22:19 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x18, 0x1, 0x1) recvfrom(r0, 0x0, 0x0, 0x2302, 0x0, 0x0) 06:22:19 executing program 4: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sendmsg$sock(r0, 0x0, 0x0) 06:22:19 executing program 5: openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2c24a9c29c079f8c, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {}, r2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000580)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @rand_addr="f40a25158aec7455e37b00"}, {0xa, 0x0, 0x0, @local}, r2}}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000540)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc0fc4110, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) 06:22:19 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) close(r1) 06:22:19 executing program 3: socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="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", 0x109}], 0x4, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x3c) ptrace$cont(0x18, r3, 0x0, 0x0) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r3, 0x0, 0x0) 06:22:19 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) 06:22:19 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000040)=""/66, 0x42}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xccf3, 0x0, 0x0, 0x800e0053d) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r3, &(0x7f0000001800)=[{&(0x7f0000000140)=""/62, 0x3e}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xccf3, 0x0, 0x0, 0x800e00545) shutdown(r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) readv(r5, &(0x7f0000000540)=[{&(0x7f0000000440)=""/241, 0xf1}, {0x0}], 0x2) shutdown(r4, 0x0) shutdown(r2, 0x0) [ 220.169925] audit: type=1400 audit(1575872539.054:56): avc: denied { write } for pid=8045 comm="syz-executor.0" path="socket:[31566]" dev="sockfs" ino=31566 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 06:22:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000001c0)}, {0x0}], 0x2) recvfrom$inet(r0, 0x0, 0x207c, 0x2, 0x0, 0x800e008b8) shutdown(r0, 0x0) 06:22:19 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast=0xe0000001}, @icmp}}}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {0x0}], 0x2) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x800e00470) 06:22:19 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[], 0x0, 0xc9205}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 06:22:19 executing program 4: syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) 06:22:19 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg(r0, &(0x7f0000005c00)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e20, @multicast1}, 0x80, 0x0}}], 0x1, 0x0) [ 220.389551] *** Guest State *** [ 220.395225] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 220.406368] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 220.415813] CR3 = 0x00000000fffbc000 [ 220.419615] RSP = 0x0000000000000000 RIP = 0x0000000000000000 [ 220.425938] RFLAGS=0x000c9207 DR7 = 0x0000000000000400 06:22:19 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/59, 0x3b}, {0x0}], 0x2, 0x0, 0xfffffffffffffe17}, 0x2) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0xfd1d, 0x0, 0x0, 0x800e00525) shutdown(r1, 0x0) shutdown(r2, 0x0) [ 220.433546] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 220.440867] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 220.448968] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 220.468946] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 06:22:19 executing program 4: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x6c, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x28}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001e005f", 0x7) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 220.485644] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 220.496356] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 220.508145] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 220.516469] GDTR: limit=0x0000ffff, base=0x0000000000000000 06:22:19 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xff) close(r0) sendto$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) [ 220.533494] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 220.543351] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 220.551575] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 220.560120] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 220.566763] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 220.576709] Interruptibility = 00000000 ActivityState = 00000000 [ 220.587353] *** Host State *** [ 220.592993] RIP = 0xffffffff8117a490 RSP = 0xffff88809fcbf998 [ 220.605976] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 220.613078] FSBase=00007f82b4b6d700 GSBase=ffff8880aec00000 TRBase=fffffe0000034000 [ 220.621114] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 220.627265] CR0=0000000080050033 CR3=000000008f83b000 CR4=00000000001426f0 [ 220.635896] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff868018e0 06:22:19 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) [ 220.651940] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 220.660718] *** Control State *** [ 220.677365] PinBased=0000003f CPUBased=b6a1edfa SecondaryExec=000000e3 [ 220.688430] EntryControls=0000d1ff ExitControls=002fefff [ 220.702412] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 220.709415] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 220.717258] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 220.732163] reason=80000021 qualification=0000000000000000 [ 220.738497] IDTVectoring: info=00000000 errcode=00000000 [ 220.744370] TSC Offset = 0xffffff876c6c4b70 [ 220.748702] TPR Threshold = 0x00 [ 220.752414] EPT pointer = 0x00000000a38f701e [ 220.756825] Virtual processor ID = 0x0001 06:22:22 executing program 3: 06:22:22 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x50000}]}) r0 = epoll_create1(0x0) writev(r0, 0x0, 0x0) 06:22:22 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:22 executing program 5: 06:22:22 executing program 1: 06:22:22 executing program 2: 06:22:22 executing program 5: 06:22:22 executing program 1: 06:22:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={0x750, {}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x100, 0x0, 0x2, 0x46a}) 06:22:22 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:22 executing program 3: 06:22:22 executing program 5: 06:22:22 executing program 1: 06:22:22 executing program 0: 06:22:22 executing program 2: 06:22:22 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:22 executing program 3: 06:22:22 executing program 5: 06:22:22 executing program 2: 06:22:22 executing program 1: 06:22:22 executing program 0: 06:22:22 executing program 5: 06:22:22 executing program 3: 06:22:22 executing program 4: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:22 executing program 2: 06:22:22 executing program 1: 06:22:22 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 06:22:22 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000640)=""/4096, 0x1000}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x6}, 0x0) r1 = dup(r0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r3, 0x0, 0x1014a, 0x0, 0x0, 0x800e00515) shutdown(r2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/61, 0x3d}], 0x1) r5 = dup(r4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r6, 0x0, 0xccf3, 0x0, 0x0, 0x800e0050e) shutdown(r5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r7, &(0x7f0000000640)=[{&(0x7f0000000240)=""/129, 0x81}, {0x0}, {0x0}], 0x3) shutdown(r6, 0x0) shutdown(r3, 0x0) 06:22:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362de3cb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="001fbeecdb15f000"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0x10}]}, 0x28}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) socket$netlink(0x10, 0x3, 0xe) ioctl(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) shutdown(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) socket$inet_sctp(0x2, 0x800000000000001, 0x84) shutdown(0xffffffffffffffff, 0x1) r6 = socket$inet(0x2, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(r6, r7, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x1f}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:22:22 executing program 4: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:22 executing program 2: process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net,\x03\x00\x00\x00\x00\x00\x00/drop_entry\x00', 0x2, 0x0) 06:22:22 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000fe8000000000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x138}}, 0x0) [ 223.708100] audit: type=1400 audit(1575872542.594:57): avc: denied { module_load } for pid=8177 comm="syz-executor.0" path=2F6D656D66643A5B73797374656D202864656C6574656429 dev="tmpfs" ino=32827 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 223.719625] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. 06:22:22 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b0b, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x20000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev\xdd\x12\x9a\xc7\x00', 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r6, r5) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x82) ioctl$KVM_SET_LAPIC(r10, 0x4400ae8f, 0x0) r11 = dup3(r8, r9, 0x0) dup2(r11, r10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r4, @ANYRESHEX=r5, @ANYBLOB="06ecfaeb00c8956d168f3a33b6080efdfcb90c3865a88a4ad4f9dfb17b9a37e91de5b7574ec6cfca66b150dde2f0bb47006fd414b919a2cc95f3c44aeb9c7135c5c0943168c5f4f709c812cec605ec0778e4", @ANYPTR=&(0x7f0000000980)=ANY=[@ANYRES16=0x0], @ANYBLOB="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", @ANYRESHEX=r7], 0x6) ioctl$sock_inet_SIOCRTMSG(r6, 0x890d, &(0x7f0000000340)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e23, @multicast2}, 0x180, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='erspan0\x00', 0x1, 0x7, 0xbd}) openat$cgroup_type(r3, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='cpuset\x00', 0x0, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r12, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='fd\x00') dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 06:22:22 executing program 2: perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000380)={{0xa, 0x4e23, 0x8, @rand_addr="6aadd1a6b9d240afdf78cb77bc64ebc8", 0x8001}, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0x1f}, 0xfffffff8}, 0x20, [0x7b8f, 0x9, 0x3f, 0x1, 0x7, 0x7ff, 0x4, 0x2ce1e9b2]}, 0x5c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = semget(0x0, 0x3, 0x41a) semctl$GETZCNT(r2, 0x2, 0xf, &(0x7f0000000000)=""/55) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_G_PARM(r3, 0xc0cc5615, &(0x7f0000000400)={0x6, @raw_data="48ef93ddffab581447586f6336d36444dd8da12a90130ee8e0f4e7b827f2f92d3121854e9ed274a4cad4772630ce638bb6aca3eccd8d15dd70a85badd38f8e47f3426580da60c55acc6d2269e5716dc6216a49608f4b6882b47fa7b91accf29cc199017571b08f4399d53df046fdde9874896a68e89b7db029b4d85de085e1a906d63ad2cb15d8a157b6c71de0ddd55d7675ea523d34fc57d01a4b0e2ede4bafd4145633fb3c1cb596c80301aec7959cfa25469fe52a270a482712505faaedf35539b85ef389dae7"}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000180)=0x78) 06:22:22 executing program 4: ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) [ 223.922802] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 223.929739] team0: Port device veth3 added 06:22:22 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:22 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) [ 224.098885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 224.117452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 06:22:23 executing program 4: r0 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) [ 224.163559] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.249949] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.257217] bridge0: port 1(bridge_slave_0) entered disabled state 06:22:23 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) [ 224.349833] team0: Port device veth3 removed [ 224.357912] IPv6: ADDRCONF(NETDEV_UP): veth3: link is not ready [ 224.366297] team0: Port device veth3 added 06:22:23 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='\x00\x00\x00\x00\xec\xff\xff\xff', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="75707065726469723d2e2f66696c65302c6c6f7765726469723d2e3a66696c65302c776f726b6469723d2e2f66696c65313b54fecac06742c242414105d33476642775df5ba5ac93f7082438896c54ffc103cad1c1249d949088a71622fe"]) r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="d2661e9d5755c77d96b882786cd3b7ab120caa6509a2bc8768cb59bc3e103ee01f655150ef313bfdace7fc71f278f886a4dd5ac0e3a4eca6a66b9825862575f86a7c9ed20beee89f0f65a95a58d15e044e6f48b0b71441c59801b63f125a40a933a3d33b6b564dc2007bb6d7f16af8457335c149f2081f322fcfc81f29e2f77d511deab522a4b13847ed48db098112245b18ea90fa36b206df43dcd44c64f6a51ec439938e584cc37f3da00000000000"], 0x1, 0x0) renameat(r1, &(0x7f0000000180)='.//ile0\x00', r1, &(0x7f00000007c0)='./file0/f.le.\x00') 06:22:23 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000340)=""/24) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0xfdb27fe17552d3a5, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_IPPROTO={0x8}, @FOU_ATTR_PEER_PORT={0x8}]}, 0x2c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4040028}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)={0x44, r3, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x8}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xc}}, @FOU_ATTR_IPPROTO={0xfffffffffffffeee, 0x3, 0x2c}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e24}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x21) write(r1, &(0x7f0000000000)="b6", 0xfffffe7e) r4 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000240)={0xffff, 0x401, 0x1000}) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0xb0180, 0x0) write$FUSE_BMAP(r7, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x9}}, 0x18) getsockopt$inet_dccp_buf(r1, 0x21, 0x9, &(0x7f0000000140)=""/120, &(0x7f00000002c0)=0x78) write(r6, &(0x7f0000000340), 0x41395527) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0xa, 0x1b0, 0x0, 0x33}, {0x3fde27fc, 0x7fffffff, 0x0, 0x0, 0x5, 0x7, 0x4, 0xfd56}, {0x0, 0x2286, 0x1000000007ff, 0x5}, 0x0, 0x6e6bbd, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x0, 0xb8, 0x3, 0x4e9, 0x7}}, 0xe8) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x9, {0x85, 0x0, 0x8, 0x81, 0x1, 0x4}, 0x8, 0x6f}, 0xe) fchdir(r8) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:22:23 executing program 5: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) recvmmsg(r1, &(0x7f0000000140), 0x41d, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00', 0x20, 0x7, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x0, &(0x7f00000003c0), &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000fdff000000000000000000000500"/143]}, 0x107) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) lchown(0x0, 0x0, 0x0) prctl$PR_GET_NO_NEW_PRIVS(0x27) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) fsetxattr$trusted_overlay_redirect(r0, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, 0x0, 0x0) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) ftruncate(r2, 0x80003) sendfile(r0, r2, &(0x7f00000000c0), 0x8000fffffffe) 06:22:23 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:23 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 06:22:23 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:23 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:23 executing program 2: sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, 0x0, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_gettime(0x0, 0x0) r0 = open(&(0x7f0000000340)='./bus\x00', 0x40000141042, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0x323) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x9d9cb000) r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8fff) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, &(0x7f0000000340)=""/245) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000840)=0x0) getpgid(r2) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000500)) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000027c0), 0x0, 0x604d041) 06:22:23 executing program 5: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) write$P9_RAUTH(r1, &(0x7f00000001c0)={0x14, 0x67, 0x2, {0x0, 0x2, 0x1}}, 0x14) r2 = socket$inet6(0xa, 0x802, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000200)=""/37, 0x25}, {&(0x7f0000000240)=""/211, 0xd3}], 0x2, 0x3) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=[@dstopts={{0x1a8, 0x29, 0x37, {0x8, 0x31, [], [@generic={0xf1, 0xe2, "9c204ec039a648b05ec9c97135d9943921efa05b8b96c20684122d5b351f7eb1cf9c6814427efdde0cd394aae54c4b5330526ef3b6ffdc662fa98bd74ab13fa5cba3f27f153dc92ac20c9b05df2e17a185f592d5a89ec8bbfbb3b9a1505ded81fef5a3ed245996af48555730c0485d4857ea555fe9ea83842b69b0d5b564403d0c4f67cbac45a9d180366116eda3d7674693a85570af15ed1e44a1066e58ab50187288ff5455ef48eb162070c068c424a254b5bfd16c3e7cfc2f056cb8c423678271055dcb624f57dcf477f82697528803c12bef47efa3fa9b01b42c3cdc3ef2d26c"}, @calipso={0x7, 0x28, {0x7, 0x8, 0x81, 0x2, [0x100000000, 0x401, 0x1, 0x9]}}, @calipso={0x7, 0x35, {0xe65a, 0xc, 0x7, 0x5, [0x4, 0x6, 0x6, 0x2, 0x2, 0xb2c]}}, @generic={0x8, 0x22, "78d0199b7ffdd6c6b78e160b74e795b48f83fac124c501715ed2c7815463740a87bb"}, @pad1, @jumbo={0xc2, 0x4, 0xfff}, @calipso={0x7, 0x18, {0x4, 0x4, 0x4, 0x1, [0x800, 0x8]}}]}}}], 0x1a8}}], 0x1, 0x48401) 06:22:23 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) [ 225.017768] audit: type=1804 audit(1575872543.904:58): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/39/bus" dev="sda1" ino=16740 res=1 06:22:24 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fffffff, 0x400002) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x28, 0x7ff, 0x20, 0x3, 0x1bb4, 0x63f, "6cf861c875bc4b5855534a552003be9345f726dfccbd2a44ba7d2a23ee3c65c9df70524ef44835a8"}, 0x140) creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x1008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(0x0, &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5412, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 06:22:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) [ 225.172861] audit: type=1804 audit(1575872544.064:59): pid=8284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/39/bus" dev="sda1" ino=16740 res=1 06:22:24 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x40c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x3ffe, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 06:22:24 executing program 1: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x5eb, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @random="b0ade929fd39", [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0xffffffffffffff13, 0xffffff3a, 0x0, @remote, @mcast2, {[], @icmpv6=@time_exceed={0xffffff80, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}, @rand_addr="0bc9a4cba2af8b0c2523e5b86381d286", [@dstopts={0x0, 0x20000000000001b5, [], [@generic={0x0, 0xfffffffffffffec6, "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"}]}], "917b2d2f6b1afddf822bb9921ce3efba56b7000000000000b204bd474d03efeb2b6c70ff9345cfd7a63a16b3ad254af9b4dc7c8d18817bc087fbce8d46adfc4234750a534e1edbdb6502ba4974d4116b12762694b2e3cbf0debadaab0d8873087edefaa8cfa8339a31010acf554b4b98957ad4ae80fdde27f7e103d9b2239555324f0000000000000000e3ecba38cd6e50db63eb86925675ccc59790e2025d8fc99046160b7829983c4650fbf94b9c9cad50000e5757e5798ab74df43c42efca7ec14f3ed9424a1d4ee8ae6dbd"}}}}}}}, 0x0) sysfs$3(0x3) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000080)) 06:22:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, 0x0) 06:22:24 executing program 3: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7fffffff, 0x400002) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0x28, 0x7ff, 0x20, 0x3, 0x1bb4, 0x63f, "6cf861c875bc4b5855534a552003be9345f726dfccbd2a44ba7d2a23ee3c65c9df70524ef44835a8"}, 0x140) creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x9, 0x1008d}, 0x0) getpid() sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) symlink(0x0, &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x14) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r2, 0x5412, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) 06:22:24 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) 06:22:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)) 06:22:24 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000480)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) read$dsp(r4, &(0x7f0000000800)=""/4096, 0x1000) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0) open(0x0, 0x301800, 0x4c) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="48000000100005e8ffffff00000000000000f900", @ANYRES32=r7, @ANYBLOB="006cacf0317d70bf140000007665746800000000180002001400010020000a788d820a94427b000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x48}}, 0x0) unlink(&(0x7f0000000040)='./file0\x00') 06:22:24 executing program 3: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r0 = syz_open_procfs(0x0, 0x0) open(0x0, 0x141042, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000004c0)={{0x9, 0x0, 0x9, 0x0, 'syz0\x00', 0x9}, 0x0, [0x0, 0x8, 0x3, 0xffff, 0x6, 0x3, 0x1, 0x1, 0x380000000000, 0x9, 0x4b96, 0x4, 0x5, 0x2, 0x5, 0xfffffffffffffffa, 0x8, 0x3207, 0x0, 0x1, 0xfff8000000000000, 0xfffffffffffffffd, 0x5b6b, 0xf9ce, 0x5, 0xfffff00000000000, 0x7125, 0x8, 0x8, 0x205e, 0x3, 0x401, 0xff, 0x6, 0x4, 0x401, 0x19cd, 0x9, 0x80, 0x1800, 0x4, 0x100000000, 0x8, 0x1, 0x3, 0x3, 0x6, 0x5, 0x200, 0xbc, 0x200, 0x6, 0x6, 0x1, 0xffff, 0x4, 0x80000001, 0x1, 0x8, 0x3, 0x1, 0x4, 0x6, 0x8, 0x5, 0x102c000000, 0x6, 0x20, 0x3ff, 0x8b, 0x3, 0x100000000, 0x8, 0x6, 0xb650, 0x6, 0x63, 0xfffffffffffffc00, 0x0, 0x2, 0x200, 0xffff, 0x2, 0x6, 0xffffffffffffffff, 0xc5, 0x0, 0x8000, 0x80000001, 0x1ff, 0xb0df87c, 0x4, 0x7fffffff, 0xd60, 0x0, 0x70, 0x8, 0x5, 0x3, 0x9, 0x4, 0x7, 0xffffffffffffff99, 0x7, 0x2, 0xfffffffffffffff7, 0x1, 0xff, 0xd9, 0x81, 0x9, 0x83fd, 0x3, 0x401, 0x100000001, 0x6, 0x6, 0x1000, 0x100, 0xcc4a711, 0x3, 0x0, 0x523, 0x0, 0x8, 0x9, 0x4, 0x2], {0x77359400}}) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(0xffffffffffffffff, 0xfffffffffffffffd) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) 06:22:24 executing program 2: r0 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000840)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050600000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f477253994", 0xc1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000480)="02", 0x1, 0xfffffffffffffffb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r4], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000180)={r4, 0xff5a}, 0x8) keyctl$dh_compute(0x17, &(0x7f0000000580)={r1, r0, r0}, &(0x7f0000000740)=""/243, 0x336, &(0x7f0000000300)={&(0x7f0000000700)={'crc32c-generic\x00\x000\x16\xc7\xec\x91\x05\x0e\xbb\x7f\x11\x97\xa9\x1a\xb4\x00'}}) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x5c, "0d7630a74981931f4870a0fbaa271ef64fea605d664f37e000c53e6472594e56d73401150ecbb4af1a5504f9a9dd468d0ff8cb6aff3017884f192f7c7ab35015575d189d6331ccfeb90025e21e1f0661e1d9c0e9798fcc01cba88abc"}, &(0x7f0000000100)=0x80) 06:22:24 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)) 06:22:25 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)) [ 226.371156] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.5'. [ 226.438342] syz-executor.3 (8370) used greatest stack depth: 22992 bytes left 06:22:25 executing program 4 (fault-call:1 fault-nth:0): r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:25 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0xa2de77867020c923, &(0x7f00000000c0)={@local, @multicast2, r4}, 0xc) 06:22:25 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@window={0x3, 0xe34, 0x1}, @sack_perm], 0x2) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000180)=@gcm_128={{0x304}, "6e13f33fa2764f41", "76a635563bdd7a100ba4c5ac2f4f2728", "9aea01c2", "7f008a981c47e122"}, 0x28) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000000)={0x1}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 06:22:25 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492557, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000000ac0)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000180)="6beb159701076aed5694a47f39c583dff841c578de3ef8e651e8f2ef99b4c4c7bc2d5ac26981b040bf28b6f386fc22c24b2f0410d08614c3c600466e102230bf60a63ae769a908480055e6042f46ed2075841cf396162bb545abb8acab5182b743bd6a1e5f4013c7ed454219405c3c65eda73e5a1556c816567f4fb7ab3a6a027c87ab42e86767fb11f2ea5576", 0x8d}, {&(0x7f0000000340)="b4c7fab919f93d0d0fd8e613f03abbf2149358f3ab92ef362522c91b131b01bb845c913257d2039fc48aa9b4030c5fe5a84c4135c076d41575695bcee4fd441adc4352074c15ed19f112f64c1e1424dde5fc3fe2f4f75753a64fa256cbb244611a55e41c955583ac8fa7658050c3b5124e3c1076f701ae876e3f7d79c5f5fd86e4db7a6daae868fc45318f19f49be7b697fde82952eb1e9500ac665d5e7ccf3c8c947c3756fdedf296ae0221d35d156d3011f904531581", 0xb7}], 0x2, &(0x7f0000000500)=[@rights={{0x1c, 0x1, 0x1, [r2, r3, r0]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r7}}}], 0x40, 0x814}, {&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a40)=[{&(0x7f00000005c0)="61c862d70a28e26e3fb20141d656ae0643856c149f3face5", 0x18}, {&(0x7f0000000600)="636fad024ab6777a5574ac31837eb717e61438eb6a68d0c0d8bdf1c05ea587d608ecff3e3b7a829b9b0c4d6c6e48c44e50f97eeeba197a5314d0b3790a8f21057a52dc", 0x43}, {&(0x7f0000000680)="c6969351b8099f9773a18ef2a451c8203a472f0b44873492d01a2a977609daa1ca0a01d516e0ea76135030a5be60ff561e9e5eba7073e1ba347484a38681c4226e1248dd476ef1c14235d657eb022d7f9217aeff16f3960ccb522e963c5d8fbaccc2ad92acbf8b6561b7c0a6e59982ca620e5a621de4063dafadd2794e96c102753141324d4f7e790107b0ac475f52756baf9aa54f5eacfe914ae1705cd24f9712f5e089e77ed1f65af41fd00a07652932574e4c", 0xb4}, {&(0x7f0000000740)="fe83affa4c1746d143ac6d6a30e51851c43ad2da6f229ac15a4d377145eb462eb1dd1991bd59cbc13f35db5c16a1eba4e7486fdb30ec38d3bc6b5f98f10c74ca951d27c80f5284ef079aa7b6e55373ba1a4b021673098d419cf41de4ad28ef8a461237cc89b370b5f7e970a9191521f13feb808fde6f38f05a3283bca3f1d3470eb5264ab7fb6b914bd7e8e7b890e1a6011046fd27230d0671d14ef8da80cb57e96e7ba38801c638257dc1a267e64e58960722740402f94e6a8869e6653b2d37", 0xc0}, {&(0x7f0000000800)="6b94be845138aa72555245b470b32231648807a355d8e6cd960cfa2d1a09de760f256057bcb24c62554a516ceefdd96fd5de4ef98b6bad6dd8426244fe843ce057fe8ee9715d032be08b6d97857b1b9df5527f185727385cf2a2bb22099e81f3f4c0c664d6ce82b242a92707edf0afaf4573047aefa0d544b7ada083441a683e76badf049a9b1f436ac0d37ab47d965efd1fbe58c77474af47f6923961ff5eaf71c3765343b8174a9190deab6d415ef84b04741ed885b8c12d9bda73c77816f46c8f1caab373f6cd900a10601b0c5c061fc9a6b5840c9fecb89b319b70c8068b99d90614c2cd07649fb1e42063", 0xed}, {&(0x7f0000000900)="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", 0xfd}, {&(0x7f0000000a00)}], 0x7, 0x0, 0x0, 0x40010}], 0x2, 0x5010) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r10, &(0x7f00000001c0), 0xfffffef3) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) r11 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r11, 0x5387, &(0x7f0000000080)) write(r11, &(0x7f0000000240)="ff30c6fda6ffcdc2a93d0994a81b376507000000000000003c9b5ce620538c0aec4ee5154ebb8ec4cb13d78c1a329fc7277648279de19f166e0fa8a3a5b7a5003d5ca9701c781d133a5499ac27273fdb433807378406d2177530e6df5be866dd07134eb26234cfe77a91b6349e37ac6793a26de9627c9516a68d8c1f51fb6252122e54b53d3ea4b4175393fd85d30a4689e622609eac1c1559c2826c9ef5efa84393126bc3afd8283326306127e459b4a4ae785a4c6c827ebc9174a6eb615ca37669390feac2d4ff34377b1f44d8e37056189647a1ab2a", 0x35) syz_open_pts(r9, 0x200) 06:22:25 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 06:22:25 executing program 5: r0 = open(&(0x7f0000002000)='./bus\x00', 0x8000, 0x120) ftruncate(r0, 0x88001) write$P9_RXATTRCREATE(r0, &(0x7f0000000040)={0x3ba}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r3, 0x0) read(r3, &(0x7f0000000180)=""/19, 0xfffffe47) 06:22:25 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000440)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x7f, 0x3, &(0x7f00000003c0)=[{&(0x7f0000000200)="7af6785e42732c0b55270c06b501213be7322c84ddb6fb5d9c7c7b2537225c1efe84f7d37178e1609cb164ab4af6a52f38a4b4a2a52b4d72d9e45822c2d7bfa01461a329c0a286600f6ac3fda2463471362752cb3090beac378730a4679923eea512fef66c4bd895df52c2ad03b83e7a85a74fbb45ead2efb5cee1eb28bd88c7f5b2a97f470bf1f2ec3cad2805fe7a8eae30470db0084abc4cdfc9b83ad900d0a0c48189553cb1480496f2009afd24087fe80a6acd2e48db03fe2e1e74d83f0c03c8252d8403eaa07a4bca6fdc2bf55ccd91046628046261d945a59ade91e7f242caad3041bbc5", 0xe7, 0x2}, {&(0x7f0000000100)="782431d75cb52be9457484032302f4cc06712472424f563049af049f4771f9381771f20a73560cc34ec9bb04c643c4143c503ae31ced56f0cf4ef7b8a6c03caa8616c520fa4eff6cbb8cbc6a8e9838535b66b5a27a6ff293b25776b6ee001036a4de0dfaa2f4a7fd2c9d855142c60d0c2953580976b62805c55fb6e8e89d2ee795ab324f6709ad43cedfbc", 0x8b, 0x81}, {&(0x7f0000000300)="48b9a7792c7bccac26799d0871c2730ed9d316720dde6a86e97b0ab49bb63263fed19548947d13dcacbdb58697ccec9e5741c67fa274fb59f76d287fd74cbe22ae9d45faa9d096c2ea0c84c8345590cadc929377a49f05e329af57f68761d40a781bb9116f238edece2e013625e412917dca1f014ec8e7bae7928e1034e87c790a204303cb718ea58133610e17", 0x8d, 0x7bb}], 0xd22ca776e2d9ad5f, &(0x7f0000000580)={[{@nomblk_io_submit='nomblk_io_submit'}, {@acl='acl'}, {@noload='noload'}, {@data_writeback='data=writeback'}, {@errors_remount='errors=remount-ro'}, {@grpid='grpid'}, {@noload='noload'}, {@dax='dax'}, {@sb={'sb', 0x3d, 0x800}}, {@mblk_io_submit='mblk_io_submit'}], [{@hash='hash'}, {@dont_measure='dont_measure'}, {@hash='hash'}, {@smackfsdef={'smackfsdef', 0x3d, '/vbi#\x00'}}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fowner_lt={'fowner<', r4}}, {@measure='measure'}, {@subj_user={'subj_user', 0x3d, '/vbi#\x00'}}]}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)={@broadcast, @rand_addr=0x4, 0x1, 0x4, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @multicast1, @broadcast]}, 0x20) 06:22:25 executing program 5: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000600)='/dev/rfkill\x00', 0x101012, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/dsp\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00bf18020003"], 0x6) write$binfmt_aout(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="9a"], 0x1) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400200, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffe, 0x8000000000000002) 06:22:26 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000002c0)={0x5, 0x5, 0x4, 'queue0\x00', 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r4], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x4e23, 0x7fffffff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x9667}}, 0x4, 0x7fff, 0x1f, 0x3f, 0x8}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r5, 0xb0, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e20, 0x3, @ipv4={[], [], @empty}}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x40, 0x0}}, @in6={0xa, 0x4e24, 0x8, @empty, 0xfff}, @in6={0xa, 0x4e22, 0x0, @rand_addr="cab871f74977e6bf9034eac5d7db037c", 0x3}, @in6={0xa, 0x4e21, 0xffffff21, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x9}]}, &(0x7f0000000280)=0x10) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 06:22:26 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 227.394612] IPVS: length: 40 != 8 06:22:26 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) 06:22:26 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x48080) accept$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @remote, @netrom, @default, @default, @null, @bcast, @rose]}, &(0x7f0000000100)=0x48) 06:22:26 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/unix\x00') ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000040000000000000000006600000000000000", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000003d9811e40a2ba9d3d65dd8e23dcfc160b453116c6247ba967d80dcc40c070b8a483cc114c13bb3391b3e4ea79146c1ea495e45c1b1d3b2df27f7668d761ee83e19019aef86896d0c437a81b5570193dccb26a4d367aafdf6d2e0ee106f6e9bd1bebe6f6ef830e42af7b67f66869d6a32a331f7d4f9fd1a330f94d522e42a2cbdb7d4d0d3819b4f18817f90c6f9e5f8340630443232b785c5fd0cfaa162ba20bfd6345218c27852cb99c34d", @ANYRES32, @ANYBLOB='\x00'/28, @ANYRES32, @ANYBLOB='\x00'/28]) 06:22:26 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) 06:22:26 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c0000002400070500"/20, @ANYRES32=r3, @ANYBLOB="52218075ffffffff000000000a0001006e6574656d0000003c0002"], 0x3}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket(0x10, 0x80002, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r4, 0x0, 0x4ffe0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x80, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000280)) ioctl$SOUND_MIXER_INFO(r5, 0x805c4d65, &(0x7f0000000040)) 06:22:26 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x20}) 06:22:26 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x400, 0xffffffff}) [ 227.922218] selinux_nlmsg_perm: 148 callbacks suppressed [ 227.922231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 [ 227.957328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 06:22:26 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x9) syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x80c02) [ 228.034704] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 06:22:27 executing program 5: openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x26e7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000002c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x1, 0x8) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000080), 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=@can={{0x1ffffffd}}, 0x10}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000080)={0x10}) close(0xffffffffffffffff) [ 228.080659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 06:22:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) fsync(0xffffffffffffffff) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)) [ 228.149803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 06:22:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2000}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x400}) [ 228.194722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 06:22:27 executing program 5: perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) lseek(r0, 0x800000, 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="fd"], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read$fb(r1, &(0x7f0000000240)=""/248, 0xf8) fallocate(r0, 0x3, 0x0, 0x8020001) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000200)="e5", 0x1}], 0x1) lseek(r0, 0x0, 0x3) 06:22:27 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) 06:22:27 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$IOC_PR_REGISTER(0xffffffffffffffff, 0x401870c8, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) io_setup(0x4, &(0x7f00000004c0)=0x0) io_submit(r1, 0x8, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x1, 0x0, r0, &(0x7f0000000000)="98", 0x3e80000000}]) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x48080) accept$ax25(r2, &(0x7f0000000180)={{0x3, @netrom}, [@remote, @remote, @netrom, @default, @default, @null, @bcast, @rose]}, &(0x7f0000000100)=0x48) [ 228.235332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 [ 228.309125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 [ 228.339485] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 [ 228.352044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8453 comm=syz-executor.2 06:22:27 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:27 executing program 2: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f00000000c0)) 06:22:27 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:27 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x8f) creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000003c0)={0x0, 0xdb39}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000000c0)='./file1\x00', 0x20) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') 06:22:27 executing program 3: sched_setattr(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$binfmt_misc(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1924a1f42bad5b433d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd06d4026ed7360627ec"], 0xa5) r4 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000080), 0x4) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x4) memfd_create(&(0x7f0000000200)='\x00', 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', &(0x7f00000002c0)='./file0\x00') perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) keyctl$link(0x8, 0x0, 0x0) 06:22:27 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:27 executing program 0: ftruncate(0xffffffffffffffff, 0xa00000) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 06:22:27 executing program 0: ftruncate(0xffffffffffffffff, 0xa00000) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) [ 228.957064] sd 0:0:1:0: [sg0] tag#8037 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 228.967863] sd 0:0:1:0: [sg0] tag#8037 CDB: Test Unit Ready [ 228.974423] sd 0:0:1:0: [sg0] tag#8037 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 228.983821] sd 0:0:1:0: [sg0] tag#8037 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 228.993593] sd 0:0:1:0: [sg0] tag#8037 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.002963] sd 0:0:1:0: [sg0] tag#8037 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.012411] sd 0:0:1:0: [sg0] tag#8037 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.021672] sd 0:0:1:0: [sg0] tag#8037 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.030820] sd 0:0:1:0: [sg0] tag#8037 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.040052] sd 0:0:1:0: [sg0] tag#8037 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.049303] sd 0:0:1:0: [sg0] tag#8037 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.058521] sd 0:0:1:0: [sg0] tag#8037 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.067731] sd 0:0:1:0: [sg0] tag#8037 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.076971] sd 0:0:1:0: [sg0] tag#8037 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.086231] sd 0:0:1:0: [sg0] tag#8037 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.095482] sd 0:0:1:0: [sg0] tag#8037 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.104791] sd 0:0:1:0: [sg0] tag#8037 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:22:28 executing program 5: r0 = open(&(0x7f0000000300)='./bus\x00', 0x2401, 0x40) mmap(&(0x7f0000008000/0x600000)=nil, 0x600000, 0x800002, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000080)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:mount_exec_t:s0\x00', 0x22, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) fcntl$addseals(r1, 0x409, 0x195a0166b1051320) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x200000, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) write(r4, &(0x7f0000000240)="91228ad302e6e07bf53460d00112ffa4da6d98f2045f57112fbeaeda9294bbcfd0ddbceec0e0c4dd5469fbcb75c0badbc134b9b7af05dafd21670970fe61b2947155ab85866c44d072e9d682b07c98dd7eeb9b845acfc29bf1a345fb27a71ca5c977f723579af39df092e6ad9232901e631cb1cae3c026049cd3f12bb53feb54b8f343d8354ff535d55f7786799a6897ec126cb08ccb0600acaf97c7d0fc651c67aa8871fb60410151b65bd0e14a64706ce74e5400", 0xea) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000003c0)={{0xa, 0x4e21, 0x1, @rand_addr="09a352ed6633a413387e2a7b8a844a21", 0x3}, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x27}, 0x2}, 0x1, [0x2, 0x3, 0x7, 0x9, 0xde4, 0x1, 0xcc, 0x1]}, 0x5c) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x0, 0x0, [0x93, 0x80000000, 0x6, 0x81, 0x6, 0x2, 0x8, 0x5]}) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x40000, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000380)={0x1, 0x7, 0x2, {{}, 0x10001}}, 0xfffffffffffffff1) 06:22:28 executing program 0: ftruncate(0xffffffffffffffff, 0xa00000) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 06:22:28 executing program 0: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 229.221966] sg_write: data in/out 2078336478/188 bytes for SCSI command 0xc0-- guessing data in; [ 229.221966] program syz-executor.5 not setting count and/or reply_len properly 06:22:28 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x1004, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000200)={{0x1, 0x7, 0x3, 0x2, 0x1f, 0x7f}, 0xfff, 0x1ff, 0xfff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_PARM(r2, 0xc0cc5615, &(0x7f00000000c0)={0x7, @raw_data="2a271f08bfc9419aa13c6b78672ec0104005fc1445be36ac87627b1c246a94c5802742b45c2a29a596a5dc400c82c7512a218c8e8dd80a6cf639a53f43c6197e7b772bdefa372f28ad4c0bb9881fe8b2794145fc24e52f5169032d15a1633cb47d7923be9bf98540766f03dafdb42c3dca54cc67f47049d2784b73b524a7910af88fdf03114ccedfc7d38919be218c38e0c36cc134605a825ba0dc7ea773d8c2dbb61ed519d2e6be992b459b97db8b05d686108e6441175fb6f393c197f1f3c875f71e1608b08981"}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) bind$bt_rfcomm(r3, &(0x7f00000002c0)={0x1f, {0x5, 0x80, 0x4, 0x2, 0x80, 0x8d}, 0x9}, 0xa) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), &(0x7f0000000500)=0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x81}, &(0x7f0000000340)=0x8) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000380)={0x0, 0xa048, 0x81}, &(0x7f00000003c0)=0x8) r8 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f0000000080)) fcntl$setsig(r8, 0xa, 0x2a) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000400)={r5, 0x8, 0x200, 0xff, 0x1, 0x6ad, 0xfff9, 0x7ff, {r7, @in={{0x2, 0x4e20, @remote}}, 0xfffffffd, 0x0, 0x2, 0x8, 0x80000001}}, &(0x7f00000004c0)=0xb0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7ff, 0xffff, 0x40}, &(0x7f0000000280)=0x10) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x40, 0x0, 0x0, 0x2}) [ 229.288446] overlayfs: './file0' not a directory 06:22:28 executing program 0: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:28 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f00000002c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0x2, 0x0) syz_genetlink_get_family_id$tipc2(0x0) mkdir(&(0x7f0000000700)='./file1\x00', 0x8f) creat(&(0x7f0000000000)='./file1/file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000000)=0xffffffffffffffff) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000003c0)={0x0, 0xdb39}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000008b80)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) chdir(&(0x7f0000000180)='./file0\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000000c0)='./file1\x00', 0x20) link(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file1\x00') [ 229.342969] Unknown ioctl -2147204141 06:22:28 executing program 0: r0 = memfd_create(0x0, 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:28 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(0xffffffffffffffff, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 229.634716] sd 0:0:1:0: [sg0] tag#7939 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 229.643620] sd 0:0:1:0: [sg0] tag#7939 CDB: Test Unit Ready [ 229.649383] sd 0:0:1:0: [sg0] tag#7939 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.658541] sd 0:0:1:0: [sg0] tag#7939 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.667471] sd 0:0:1:0: [sg0] tag#7939 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.676393] sd 0:0:1:0: [sg0] tag#7939 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.685325] sd 0:0:1:0: [sg0] tag#7939 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.694248] sd 0:0:1:0: [sg0] tag#7939 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.703168] sd 0:0:1:0: [sg0] tag#7939 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.712087] sd 0:0:1:0: [sg0] tag#7939 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.721017] sd 0:0:1:0: [sg0] tag#7939 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06:22:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"/751], 0x15) write$P9_RAUTH(r3, &(0x7f0000000040)={0x14, 0x67, 0x1}, 0x14) write$P9_RGETATTR(r3, &(0x7f0000000500)={0xa0, 0x19, 0x1}, 0xa0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 06:22:28 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(0xffffffffffffffff, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:28 executing program 2: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0xfffffdaf) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x2a) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x77359400}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='attr/sockcreate\x00') r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f0000000100)=""/246) ioctl$EVIOCGREP(r4, 0x40047452, &(0x7f0000d1df52)=""/174) r5 = getpid() timer_create(0x7, 0x0, &(0x7f00000002c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(r5, 0x5, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000003c0)='/selinux/policy\x00', 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000580)={0xf3, 0x1, 0x3f, "537a9662caa6709f12ba9b5163e265d1ed93da8a086395b015ec18f3c1b54db84e192435c88576cf84a049ba2196b381ad9b0e5279f3a7635d4cdca9edf95a4fb83289c0674d3497035387d5dcf4342e1abda16118d7018216dc80fe69a7883f8b171042dc282261115a5d7a64c6e1466858f33036395dc6d721765c5dd6e84ef168c59b2ae6501dc9b1d7ae8e14e836b5c4666b88ea5716d5f6b6e0f989"}) [ 229.729890] sd 0:0:1:0: [sg0] tag#7939 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.738833] sd 0:0:1:0: [sg0] tag#7939 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.747736] sd 0:0:1:0: [sg0] tag#7939 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.756643] sd 0:0:1:0: [sg0] tag#7939 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.765539] sd 0:0:1:0: [sg0] tag#7939 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 229.774439] sd 0:0:1:0: [sg0] tag#7939 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00 06:22:28 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(0xffffffffffffffff, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 230.026580] sg_write: data in/out 2078336478/188 bytes for SCSI command 0xc0-- guessing data in; [ 230.026580] program syz-executor.5 not setting count and/or reply_len properly 06:22:29 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x284200, 0x0) sendmsg$tipc(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)="a4288e67c12cfaadb0d50cdc4282d4262683401c0ae26c7dde1618cfa8b276366b77b7579fcaabf65fe67cc7feedfb5c763093761e2b4d1fbc2b085de9f5b5a33cc2f7502ac610a1447a9613cbc171d9223b758bd8178ca1584faea01e555599913532", 0x63}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="3ae3edad05c1d278caff1beb561ee633e500b51f099d1c06d11d65db6c197e8bd115a4b1eb89719667ba54ba3573106ba831e81cd8232ff1966c0cddf1bbfb4abf9190d71f004232cad084a884d0c30066a009cd28074225c9c3a22fd00a6abf4c75359ab42d3d3ec427075e471f4a682b58ed45d999baaf8f0c9f94ac71d646d25f74c3f5c0259465ec486f81e2b1df6a1ecfb3821fbef0b1d96193ca5dbae7d18b41d959ca84b2", 0xa8}, {&(0x7f0000000040)="f8b923f2d98f329791178ce035ed0bbb90c111dde3730cd5f79cf99aaae11f960dcaf06db5d928ff7ba684ab994a099d76df00d3bd554c6249add116d2a4e5aa", 0x40}, {&(0x7f00000012c0)="2ec1ca04a454b56a9f5dd49e5bcac1fe3e1628573fc89b62b5a6afc33e36a42be72669162660271bf8f530f056d3fa063447966b65cd036f2de6925faac6995d22defa26fa78cf030707728036bcbbcbb1ffbad7acb6a8007419da446ce687deeef868597425812b581123d4f3ce86eb73f27709095263e4b82ac5b670add9af24c2f16de86795404bab111a931ec9b40d2b1e228863f58a80d1b1e521c02b28d9a19880cc7d9c3bb94c3ff0b201adbbd5442151071ec9a53cb2d52738f66dd689e6d20b979ff3580aebce27e0", 0xcd}, {&(0x7f0000000140)="6fec8e5c391e1a2cd1ca6001d537d53654b50cbcfcf329dd759b95b494b24001067f66e2e5e87d1e2221753edc4da5b0d41d82e391bcba6535e80c4f2c500a6f39ddfabeed4307f4934874db3f660e39ff", 0x51}], 0x6, &(0x7f0000001440)="1b707b71403175765b65ee4ab9fd8517a58c309d165d99eeb6e81ceb17ab0bd01ae428902436701c3981fe5e33aa71aabb4941b9f941dc4d84d2ad987b9ada45457d070ccc7ef4f62037f78729dc560679e753a322103ec049ec6d1e59f22d2812ef7feb89472b91dcc6573af5d7951ed4f107d6b36665d5c992da1fb55d073e6186257c163ebdc2127c277299322958ec7ddf6d841cc39937d270bc3be42a1e30260bca067677570801d896d65b07a64ccc3096cf13d68527fd08b99b457ba113b7d5db60d6ff9581a9ac7c27148180f1b34e71db88dd231694f1e171", 0xdd, 0x880}, 0x800) 06:22:29 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0x0) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:29 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x42) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01\xd8\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\xff\xff\xfd\xfd\x00\x00\x00z', 0xfff7ffffffffffdb}) 06:22:29 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0x0) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:29 executing program 5: write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6]}, 0x45c) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r1], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x2}, &(0x7f0000000100)=0x8) ioperm(0x5, 0x2, 0x0) 06:22:29 executing program 4: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xff, {0x1, 0x1, 0x20, 0x8, 0x9, 0x40}, 0xffc4, 0x20}, 0xe) r0 = socket(0xa, 0x6, 0xc0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) r1 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:29 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0x0) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 230.359164] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing 06:22:29 executing program 3: socketpair(0x3, 0x4, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r0) [ 230.400648] BFS-fs: bfs_fill_super(): Inode 0x0000000f corrupted 06:22:29 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/\x00\x00\x00\x00\x1d\x00~\xcb\x00', 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:29 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:29 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:29 executing program 2: ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000480)='./bus\x00', 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000001c0)={{0x0, 0x1, 0x0, 0x3, 0x4}, 0xfff, 0x4}) ftruncate(r0, 0x208200) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) read(r2, &(0x7f0000000180)=""/19, 0xfffffe47) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000240)=0xe8) lsetxattr$security_capability(&(0x7f0000000000)='./bus\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x7fff, 0x6}], r3}, 0x18, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@ipmr_delroute={0x5c, 0x19, 0x400, 0x70bd27, 0x25dfdbfc, {0x80, 0x20, 0x40, 0x8, 0xfd, 0x3, 0x0, 0x6}, [@RTA_PREFSRC={0x8, 0x7, @broadcast}, @RTA_METRICS={0x38, 0x8, "d8cef733819eb32a0cda22e1bf4ed09ede8e5e290137bf0108ff844f89172522409ca7b76bf533f9f88405b6bc94ab78a8"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 06:22:29 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x6, 0x2, 0x0, 0x0, 0x4000000, 0x0, 0x8}) [ 230.889662] audit: type=1804 audit(1575872549.774:60): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/49/file0/bus" dev="sda1" ino=16770 res=1 06:22:29 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000000)={0x5, {0x4, 0x1ff, 0x1f, 0xd20f}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) [ 231.033110] audit: type=1804 audit(1575872549.834:61): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/49/file0/bus" dev="sda1" ino=16770 res=1 [ 231.194882] audit: type=1804 audit(1575872549.844:62): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/49/file0/bus" dev="sda1" ino=16770 res=1 06:22:30 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(0xffffffffffffffff, 0x0, 0x0) finit_module(r0, 0x0, 0x0) 06:22:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@security={'security\x00', 0xe, 0x4, 0x3e8, 0x0, 0xc0, 0x0, 0x0, 0x1f0, 0x350, 0x350, 0x350, 0x350, 0x350, 0x4, &(0x7f0000000140), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'lo\x00', 'sit0\x00', {0x928425f03d2afcf3}, {}, 0x5e, 0x0, 0x3}, 0x0, 0x98, 0xc0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x1, 0x3, 0x1}}}, {{@ip={@broadcast, @local, 0xffffff00, 0xff000000, 'vlan0\x00', 'gre0\x00', {0x101}, {}, 0x73, 0x0, 0x12}, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@statistic={0x38, 'statistic\x00', 0x0, {0x1, 0x1, 0xc93f, 0x2, 0x8, 0x10000}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={[], 0x23}, 0x7, 0x5, [0x1d, 0x17, 0xff2d, 0x4, 0x2f, 0x4, 0x19, 0x35, 0x3, 0x23, 0x2b, 0x26, 0x37, 0x2d, 0xe, 0xa], 0x1, 0x7, 0x7}}}, {{@ip={@multicast2, @broadcast, 0xff, 0xff, 'veth1_to_team\x00', 'eql\x00', {0x7f}, {}, 0x33, 0x4, 0x5}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x2}}, @common=@set={0x40, 'set\x00', 0x0, {{0x2, [0x800000, 0x6, 0x3, 0x7, 0x3, 0x1], 0x9, 0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x7, 0xc, [0x11, 0xe, 0x30, 0x20, 0x15, 0x37, 0x3b, 0x10, 0x32, 0x40, 0x6, 0x2c, 0x3a, 0x13, 0x6, 0x20], 0x1, 0x6b5, 0x8}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x69a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c000100766574680000000018000200fd0001000000000023c0306554362dddcb892ef8051404bde5bf296e3c566a03d724f7ead1ef33adfdbe08b8c5236b93b9797b4409f6e370d1515d2e1fa63259e6d4bd05772981", @ANYRES32=0x0, @ANYBLOB="001fbeecdb15f000"], 0x5}}, 0x0) socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000001d00001f00", @ANYRES32=r3, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x825, 0x0, 0x0, {0xa, 0x0, 0x0, r5, 0xf0ffffff}}, 0x20}}, 0x0) 06:22:30 executing program 4: socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x80}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000000)={0x2, 0xf1e, @name="4025726b6d4823f378fd021d266c4874f46175e191696dafab4c8fbbc1502e1b"}) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) prctl$PR_GET_FP_MODE(0x2e) 06:22:30 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 06:22:30 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 06:22:31 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) 06:22:31 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x0) r0 = creat(&(0x7f0000000240)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) fallocate(r0, 0x0, 0x0, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) readahead(r2, 0x3, 0x10001) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000002c0)=0x4) io_setup(0x40000100000003, &(0x7f0000000200)=0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x30300, 0x0) syz_open_procfs(0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580)='TIPC\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvme-fabrics\x00', 0x404000, 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000300)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1038400}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x20, 0x70bd25, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x7, 0x6, 0x6aa808dc, 0x4}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) io_submit(r3, 0x331, &(0x7f0000000100)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) 06:22:31 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = socket$inet(0x2, 0xa, 0x7f) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xd8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)=' ', 0xffffff86, 0x4000002, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, &(0x7f0000000580)={0x0, {{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}}, 0xfffffffffffffe60) r2 = getpid() sched_setattr(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r4, 0x4c80, r5) recvmmsg(r3, &(0x7f0000008880), 0x62a, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f00000001c0)={0x0, 0x8, 0x1000, 0xffffffffffffffc9, 0x8000, 0x6}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x0, 0x0, 0x0, 0x3}, 0x0) shmat(0x0, &(0x7f0000fed000/0x1000)=nil, 0x0) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x200, 0x0) getsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f0000000140)=0x1, &(0x7f0000000240)=0x2) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r10) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 232.251270] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) 06:22:31 executing program 5: prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x0, 0x7, 0xfffffffffffffffb}, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x8}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="230228efb4a24fe846892bc04b26c4d8d21d5d6fe003000000ba4784466ebedbcc3e2a012ecdb76658b7e06c0ec1f37b9c352ef8586e8100000008000000b7d9f6e66d4c0a596ee41f32cf359a30a74dc68c37cfbef5c16f3e648864faf8228bf63bb3bf08000000961ca375725da07225aa0f59a1ff67650d301e754a45983032198385f8a69b42102d97acbc64e6a48b780a3d991c2c25c93536a71d6c4ca0cf2911ad4952ac1606c24177a8489da188cd78e57d04e9787e3eed6a75d8183e16c482a0e2c56426e40f3b3666d4783a7fe682753cbdcd48906bd3d6322345da3743f6f0a7a3e8f40abadde6ea5aa6a0340d501d24ce4f37d421f3ce4e2d1a0a77b94411c6fd5ad25ddfea2cbdbf2bd82a9b98be4d9e50efe2eed2a2997561260ca3bf6b85ea189fa5f71ee8714f60faccb830ed17b4a767adac5be81821c54e98ef591c280c8ee17d34c30f1a55a7011308d7c100bfcd33f11a0591edc33e74bfafbc1f1640214971ecf9a436ab672360c63809a1c8428f299d5a3827d852e1fa8a32ac503836ebb3c67fdc74571b6b524bca757b164f9f0a6a97cbd3b332d154ed7fad8e1c636f7cf4fca437e2a12739d8099b164130b6c39d02034d3e7776f755e6b517f266a68ae17b814a424da263c16fa836958102008000fc2fc025bd21c31cfc0d4b0d1f653cb2a8086dc4415bbfc4ca4c312e5f1d53a8caff85ad4d317aa8d3f397dd40e388b728d91895a002017165d30fc98f487247c78a77f1b21a2725cdec425ac1ab519f56c8959c880d9cdbd6aa5cb040facbf1f7ee82ac32a5b3e86b5fc92b9250fdccdc726613f003faac37dae21e9e97e93e1a7280667a0aeca8c833639f3a3dd850190536f36f6504fb07057e91bbc6c2c5921c5c1befc8d2cd0f650f6fa6da848aff2bd8fbf480e84b06f204130c13f78a6501c0f5f5101fb8cda919cdfda3d78a5f4b8fae054e744343e35ae4a1ea65bda5d3c35c289bcc98d6aac586717ee11b767b8d75f02932469516112aa911f6322d6da340fbb956d2abbaaa73d2ed81e718b2cc95bbe5ece71ae034eb3707ec1cc13c7478be2fa09f247d2125cb5ed38bf56eefbb1b56b9e28377065cac41a4e9e1ff3cfc82470fec2aa5a26a71f741c4e86f117a15093a80d66a11660f7f2b4699ec9a3207bfb77f5746998f9a8a32156a37c4ef23cb"], 0x2f5) prctl$PR_SET_PTRACER(0x59616d61, r2) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r4 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r4, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) ioctl$VIDIOC_STREAMOFF(r4, 0x40045613, &(0x7f0000000f00)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x200, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000780)=ANY=[], 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000140)) ptrace$setopts(0x4206, r2, 0x0, 0x0) 06:22:31 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$CAPI_GET_ERRCODE(r2, 0x80024321, &(0x7f00000000c0)) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2301, 0x0) symlinkat(&(0x7f0000000140)='./file0\x00', r3, &(0x7f0000000240)='\x00') ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) ioctl$VIDIOC_SUBDEV_S_EDID(r0, 0xc0285629, &(0x7f0000000040)={0x0, 0xffffffff, 0x6, [], &(0x7f0000000000)=0x7}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) 06:22:31 executing program 0 (fault-call:3 fault-nth:0): r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) [ 232.485869] audit: type=1804 audit(1575872551.374:63): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir913104819/syzkaller.8ECgLV/32/file0" dev="sda1" ino=16787 res=1 [ 232.516566] FAULT_INJECTION: forcing a failure. [ 232.516566] name failslab, interval 1, probability 0, space 0, times 1 [ 232.564366] CPU: 0 PID: 8685 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 232.572253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.581618] Call Trace: [ 232.584225] dump_stack+0x142/0x197 [ 232.587878] should_fail.cold+0x10f/0x159 [ 232.592045] should_failslab+0xdb/0x130 [ 232.596031] kmem_cache_alloc_node_trace+0x280/0x770 [ 232.601153] __get_vm_area_node+0xf0/0x340 [ 232.605388] __vmalloc_node_range+0x9f/0x6a0 [ 232.609900] ? kernel_read_file+0x37a/0x520 [ 232.614238] vmalloc+0x46/0x50 [ 232.617434] ? kernel_read_file+0x37a/0x520 [ 232.621758] kernel_read_file+0x37a/0x520 [ 232.625916] ? get_user_arg_ptr.isra.0+0xa0/0xa0 [ 232.630679] ? __fget_light+0x172/0x1f0 [ 232.634662] kernel_read_file_from_fd+0x54/0x90 [ 232.639348] SYSC_finit_module+0xda/0x160 [ 232.643504] ? SYSC_init_module+0x1d0/0x1d0 [ 232.647836] ? wait_for_completion+0x420/0x420 [ 232.652427] ? __sb_end_write+0xc1/0x100 [ 232.656504] ? do_syscall_64+0x53/0x640 [ 232.660487] ? SyS_init_module+0x10/0x10 [ 232.664572] SyS_finit_module+0x9/0x10 [ 232.668473] do_syscall_64+0x1e8/0x640 [ 232.672366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.677223] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 232.682413] RIP: 0033:0x45a6f9 [ 232.685602] RSP: 002b:00007fde47469c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 232.693314] RAX: ffffffffffffffda RBX: 00007fde47469c90 RCX: 000000000045a6f9 [ 232.700584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 232.707856] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 232.715128] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde4746a6d4 [ 232.722401] R13: 00000000004c11ff R14: 00000000004d5220 R15: 0000000000000004 [ 232.738257] syz-executor.0: vmalloc: allocation failure: 10485760 bytes, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 232.749190] syz-executor.0 cpuset=syz0 mems_allowed=0-1 [ 232.760466] CPU: 0 PID: 8685 Comm: syz-executor.0 Not tainted 4.14.158-syzkaller #0 [ 232.768277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 232.777631] Call Trace: [ 232.780226] dump_stack+0x142/0x197 [ 232.783863] warn_alloc.cold+0x96/0x1af [ 232.787844] ? zone_watermark_ok_safe+0x2b0/0x2b0 [ 232.792704] ? __get_vm_area_node+0x27f/0x340 [ 232.797212] __vmalloc_node_range+0x3c3/0x6a0 [ 232.801714] vmalloc+0x46/0x50 [ 232.804905] ? kernel_read_file+0x37a/0x520 [ 232.809236] kernel_read_file+0x37a/0x520 [ 232.813399] ? get_user_arg_ptr.isra.0+0xa0/0xa0 [ 232.818163] ? __fget_light+0x172/0x1f0 [ 232.822157] kernel_read_file_from_fd+0x54/0x90 [ 232.826840] SYSC_finit_module+0xda/0x160 [ 232.831109] ? SYSC_init_module+0x1d0/0x1d0 [ 232.835437] ? wait_for_completion+0x420/0x420 [ 232.840029] ? __sb_end_write+0xc1/0x100 [ 232.844107] ? do_syscall_64+0x53/0x640 [ 232.848088] ? SyS_init_module+0x10/0x10 [ 232.852160] SyS_finit_module+0x9/0x10 [ 232.856053] do_syscall_64+0x1e8/0x640 [ 232.859947] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 232.864805] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 232.869994] RIP: 0033:0x45a6f9 [ 232.873212] RSP: 002b:00007fde47469c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000139 [ 232.880919] RAX: ffffffffffffffda RBX: 00007fde47469c90 RCX: 000000000045a6f9 [ 232.888186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 232.895459] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 232.902819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fde4746a6d4 [ 232.910092] R13: 00000000004c11ff R14: 00000000004d5220 R15: 0000000000000004 [ 232.928349] Mem-Info: [ 232.931367] active_anon:214191 inactive_anon:2766 isolated_anon:0 [ 232.931367] active_file:8136 inactive_file:14049 isolated_file:0 [ 232.931367] unevictable:0 dirty:108 writeback:0 unstable:0 [ 232.931367] slab_reclaimable:12999 slab_unreclaimable:111112 [ 232.931367] mapped:59349 shmem:2832 pagetables:1537 bounce:0 [ 232.931367] free:1168861 free_pcp:514 free_cma:0 [ 232.974549] Node 0 active_anon:856764kB inactive_anon:11064kB active_file:32396kB inactive_file:56068kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:237392kB dirty:428kB writeback:0kB shmem:11328kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 155648kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 233.012076] Node 1 active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:128kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 233.046885] Node 0 DMA free:15908kB min:216kB low:268kB high:320kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.078074] lowmem_reserve[]: 0 2569 2569 2569 2569 [ 233.083987] Node 0 DMA32 free:879280kB min:36380kB low:45472kB high:54564kB active_anon:852592kB inactive_anon:11064kB active_file:32396kB inactive_file:56068kB unevictable:0kB writepending:428kB present:3129332kB managed:2634384kB mlocked:0kB kernel_stack:7904kB pagetables:6000kB bounce:0kB free_pcp:1352kB local_pcp:712kB free_cma:0kB 06:22:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2) r1 = getuid() r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) setresuid(r1, r3, r5) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge0\x00\x00\x00\x01\xd8\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x5, 0x0, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYRES32=r7], &(0x7f000095dffc)=0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0xd5a, 0x20, 0x0, 0x1}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r6, 0x84, 0x73, &(0x7f0000000100)={r8, 0x1, 0x20, 0x2, 0x80000001}, &(0x7f0000000140)=0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00\xff\xff\xfd\xfd\x00\x00\x00z', 0xfff7ffffffffffdb}) r9 = syz_open_dev$vivid(&(0x7f0000000400)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_S_PARM(r9, 0xc0cc5616, &(0x7f0000000440)={0x9, @raw_data="81cb2f58800d0078730f33fa3594e8aa7cbeff63b5043d52df0f207a7a030441e25f9f1795e95043536c3ddd0867e441df894adc3c40cf287e3cc63d1e2770eda8023a6c59da6991fdd6e9211c56158ce7b757c55604b385a0e3e79958142813d54ce10ac8eeb8bc5877394ec77b422302160007b7f58cd696633d9af186f3fcaf49c068500e3f3598c3840301596c5721aa2cf464a1720b4e24b5b92155a3c551c9c36cfe3a2e0bf20f9e03952c986516ec35ce697ff4b2a8cfa9c2bf51f444b88230a9d49c8fc3"}) 06:22:32 executing program 3: syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='wsync']) socketpair$unix(0x1, 0x40000000000001, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x40) [ 233.125028] lowmem_reserve[]: 0 0 0 0 0 [ 233.129205] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 233.163043] lowmem_reserve[]: 0 0 0 0 0 06:22:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2', 0x0, 0x0, 0x0, 0x1f00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x10000000, 0x0, 0xfffffffd}, 0x10, 0x0, r2}, 0x78) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xc0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={r4}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000240)=r5, 0x4) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x20}, 0x20}}, 0x0) [ 233.171888] Node 1 Normal free:3785704kB min:53508kB low:66884kB high:80260kB active_anon:0kB inactive_anon:0kB active_file:148kB inactive_file:128kB unevictable:0kB writepending:4kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:940kB local_pcp:292kB free_cma:0kB [ 233.204482] lowmem_reserve[]: 0 0 0 0 0 06:22:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x10000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) [ 233.234895] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 233.276651] Node 0 DMA32: 3099*4kB (UME) 89*8kB (UME) 46*16kB (UME) 2984*32kB (UME) 1902*64kB (UME) 200*128kB (UM) 24*256kB (UME) 3*512kB (UM) 2*1024kB (UE) 0*2048kB 149*4096kB (M) = 876692kB 06:22:32 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$USBDEVFS_CLEAR_HALT(r1, 0x80045515, &(0x7f00000000c0)={0xc, 0x1}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r2], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x1f, 0x200, 0x81, 0x10000, r2}, &(0x7f0000000040)=0x10) [ 233.348670] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 233.370497] Node 1 Normal: 60*4kB (UME) 345*8kB (UE) 279*16kB (UM) 62*32kB (UME) 18*64kB (UME) 11*128kB (U) 1*256kB (U) 4*512kB (U) 3*1024kB (UM) 4*2048kB (UME) 918*4096kB (M) = 3785704kB 06:22:32 executing program 3: mkdir(&(0x7f00000013c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x7) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$swradio(0x0, 0x1, 0x2) prctl$PR_SET_FPEXC(0xc, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) [ 233.394326] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.405121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 233.423238] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 233.438978] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 233.458346] 25001 total pagecache pages [ 233.462529] 0 pages in swap cache [ 233.465986] Swap cache stats: add 0, delete 0, find 0/0 [ 233.476459] Free swap = 0kB [ 233.479496] Total swap = 0kB [ 233.488399] 1965979 pages RAM [ 233.496829] 0 pages HighMem/MovableOnly [ 233.502610] 335858 pages reserved [ 233.509419] 0 pages cma reserved 06:22:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000240), &(0x7f0000000280)=0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x28, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @l2={'eth', 0x3a, 'teql0\x00'}}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00fcdbdf250f0000000c00090008000200feffffff"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x800) sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r5 = getpid() sched_setattr(r5, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) r7 = accept4$rose(r6, &(0x7f0000000080)=@full={0xb, @remote, @netrom, 0x0, [@bcast, @rose, @null, @default, @default, @netrom]}, &(0x7f00000000c0)=0x40, 0x80800) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000000000)) r8 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x1) ftruncate(r8, 0xa00000) finit_module(r8, 0x0, 0x0) finit_module(r8, 0x0, 0x0) 06:22:32 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) kcmp(r0, r1, 0x0, 0xffffffffffffffff, r2) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r3, 0x80000000000000bd) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000080)) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r7, 0x38, 0x0, @in={0x2, 0x4e21, @local}}}, 0x90) recvmmsg(r4, &(0x7f00000018c0), 0x4000000000002ed, 0x0, 0x0) r8 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r8, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") close(r4) accept4(r3, 0x0, 0x0, 0x0) close(r4) [ 233.675222] audit: type=1400 audit(1575872552.564:64): avc: denied { name_bind } for pid=8725 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 233.709587] audit: type=1400 audit(1575872552.594:65): avc: denied { node_bind } for pid=8725 comm="syz-executor.3" saddr=::1 src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 [ 233.738387] audit: type=1400 audit(1575872552.594:66): avc: denied { name_connect } for pid=8725 comm="syz-executor.3" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 [ 233.770140] protocol 88fb is buggy, dev hsr_slave_0 [ 233.775309] protocol 88fb is buggy, dev hsr_slave_1 06:22:32 executing program 3: r0 = socket$inet6(0xa, 0x400000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) dup(r1) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x6) close(r0) socket$netlink(0x10, 0x3, 0xa) r5 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200005) sendfile(r0, r5, 0x0, 0x8000ffffffff) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) [ 233.990228] protocol 88fb is buggy, dev hsr_slave_0 [ 233.995404] protocol 88fb is buggy, dev hsr_slave_1 [ 234.066644] audit: type=1400 audit(1575872552.954:67): avc: denied { create } for pid=8731 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:22:33 executing program 5: r0 = socket$packet(0x11, 0x20000000000003, 0x300) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x842, 0x0) ioctl$NBD_SET_BLKSIZE(r1, 0xab01, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'lo\x00\x00\x00\x00\x02\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2a}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r2, 0x1, 0x6, @remote}, 0x0) r3 = socket(0x100000000011, 0x2, 0x0) bind(r3, &(0x7f0000000140)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r4, 0x1, 0x6, @remote}, 0x10) 06:22:33 executing program 2: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000003c0)={r1, r2, 0x9041, 0x68, &(0x7f0000000340)="bf0955dca935e2148c40e3489ffab9d453223784674919595c62f3dfbb07462bd2af1198998f1c73d4a12f5a7758b77de46d44894268f4d235fa6f1a8bbb66d1e7d98c53cec4ab7c7333a0599330f6d350c866853f23eaa59da1423158a0ba36661edb9656299e59", 0xf7, 0x2, 0x5, 0x5, 0x4, 0x1, 0x0, 'syz0\x00'}) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r3 = perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xca8c9fc1d895f7fb) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f0000000200)=0x800) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f00000000c0)=0x2, 0x4) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_inet_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) stat(0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4) sendto$inet(r5, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) io_submit(0x0, 0xffffffffffffffd4, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$FBIOPUTCMAP(r6, 0x4605, &(0x7f00000001c0)={0x6, 0x5, &(0x7f0000000040)=[0x4, 0x8001, 0x4, 0xe50, 0x209], &(0x7f0000000080), &(0x7f0000000140)=[0xb8], &(0x7f0000000180)=[0x74e, 0x2, 0x3, 0x9, 0xd225]}) memfd_create(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) getpgrp(0x0) [ 234.139301] audit: type=1400 audit(1575872552.954:68): avc: denied { write } for pid=8731 comm="syz-executor.3" path="socket:[34203]" dev="sockfs" ino=34203 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 06:22:33 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f0000000200)) ptrace$peeksig(0x4209, r1, &(0x7f0000000000)={0x6, 0x1, 0x1}, &(0x7f00000000c0)=[{}]) 06:22:33 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x200000, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800001c0}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x150, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x3}}, {{@nsim={{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x4, 0x3}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x14, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0x150}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) sendmsg$kcm(r4, &(0x7f0000002a40)={&(0x7f00000002c0)=@isdn={0x22, 0x40, 0x20, 0x7, 0x3}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000340)="b648b695eb34d6b157bef88751d14e67b948301ef9d0eb8933dead4e9ba9b17f73520da99c5708b3c5aab66a25e02aa753bb08ff70e74a5df242a7d8f7a7ab06d28df415d39a5f6871b39a954295bdea8c95387ddb14a4eb164c994e40b548fcaae86267920fd0d67e984f5ec06bb427e98dc5614baffde2f1fea37bfe4f180a7d7ffe4ad64bf9e5bc368cc80ca59e04b0c10b290bbb9dd22f3ba813d7374b02a81c79b1", 0xa4}, {&(0x7f0000000400)="cc45bb2688510ec28314cc5b1b508c55bb4d1a87791fff0150fc", 0x1a}, {&(0x7f0000000440)="6b906f50a2ea01fa9bccb28ee7d38fac12bc588802f2421257b6623bae57dda4c9c4160bd9c6202788400c0e4e8fe41cf34d471bc4d0c3af2d16242cd9d49f641b6eff6161f5b2afab2f8d7dbf68c3e49c94582121dd216de9cbb51ace40ad9402887e9bd428fd0190237798d95cc347482918a84356577a1bc513123e496e271fb23f", 0x83}, {&(0x7f0000000500)="5a0a59ac3f71bdff6e70bc473acb0e9e1d128c1aed86b86ad5d3bc560bc9cb38aad9811fbd85b9c479621a7fc081fcbe8b6ac4012fd44efe1936b713a9", 0x3d}, {&(0x7f0000000540)="30dbe248bfe5f54e2f9e57a64439f482d9444a7b5b364836c9e76b48b0c13099dd6b0d8b8239794310951d2ee1495a84178620fc7f6e8626fae944fb3d1a8e335d4c4d4937006e705d1c4348b6d703787da8b897ead76c019902f43b1afbda93a6684486fa4c369cf0da2a8899e28ef97585478ee1662fd1a69e3ec05c73ba69a38a5e0bb71bdb9af70f7b5de7df30ccfe698f6d3f", 0x95}], 0x5, &(0x7f0000000680)=[{0x90, 0x105, 0x10001, "b5312e1fefa3f62434500f9c14ac5e9dc254e10797ee5911388144b6159e789f1b782654c6a23e3e50fa36698a57660250f6ba74955aa592f9928907266fe4da82a6cfe889cfa3a8df3fa779864582339f31d7c66e15ba2332852bb229b14aefa8829057fe8a1e01719ba7ef6d27838e4e9272ea630339b60eb5"}, {0x1010, 0x10d, 0xbf64, "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"}, {0x10, 0x161, 0x1}, {0x30, 0x105, 0x0, "31de58d13e6beee959fe38ea49a78da7b77ae86f99bf6c625de2"}, {0x1010, 0x118, 0x65, "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"}, {0x30, 0x10a, 0x5, "fa177f5e28f71b2405a9c9a3d165cba27713b753f0982a3fdc9162f5534968d5"}, {0x20, 0x112, 0x3f, "5457e2e8f4ddde9b50b4"}, {0xf0, 0x8b, 0x8, "9ba0c70702e6b8e71ae56ad16d16e923ba8a0e29466530f46f5e98da77d2eff08d2f79e758486489292dc5f5fb24e1e33258806c82fa3d09379d5fa819778570f7c66afd81a86adcb605251abad24bc73e42b9365af6bff94008b22c696c9439cd8f16805a9b81c6e8dff7b442728ec888a6a0ec7ac0c68a591eb4e80ef428be501b591144d7618326ac383b9f8746d46648c9f38bcc57502d4c5c41c2d60f207de66b64b665e7cdb6a50ba05882fd3c31ab85bd3fdcbd0caad83db6c53198a29ab1045e12d382a63647426df7ddf8d2e5863db5c802afe2007406996f5af9"}, {0x110, 0x2f7, 0x7fffffff, "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"}, {0x80, 0x101, 0x0, "38817e8c45c1d85ba564942540a11a407b54650ce70cd693709c418ba457b0f42ab5e92ec80df202f8d21c91587913e8727f3bb6007250c6beff38ffdf5a1420824e71023208b0ce57240c4869055728552e17fea3554d4c4cd33ccccc8790c01792a7ea01b001be1844eb"}], 0x23c0}, 0x70000045) socket$kcm(0x29, 0x2, 0x0) 06:22:33 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x8200) openat$ashmem(0xffffffffffffff9c, 0x0, 0x10141, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000005d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000680)='cgroup.threads\x00', 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$media(0x0, 0x8001, 0x0) r2 = add_key$keyring(&(0x7f0000000140)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r2, &(0x7f0000000400)=""/102, 0x66) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r2) r3 = request_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000340)='\x00\x02readed\x80', 0xfffffffffffffffb) add_key$keyring(0x0, &(0x7f0000000300)={'\b\x00', 0x1}, 0x0, 0x0, r3) lsetxattr$security_capability(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x20}, {0x0, 0x28}]}, 0x18, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x294ad, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000700)}, 0x4, 0xdf, 0x0, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000075c0)={'team0\x00'}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x100, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f00000003c0)=@urb_type_control={0x2, {}, 0x10000, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)="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"}) write$cgroup_type(r1, &(0x7f0000000200)='\x00\x02readed\x80', 0xffffffad) getresuid(&(0x7f0000004180), 0x0, 0x0) 06:22:33 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180)=0xfffffe00, 0x4) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x12c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="2d997e568b940344a40733b5e36b51d3"}}]}, 0x78}}, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) pipe(0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x4a0, 0x118, 0x258, 0x258, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000001c0), {[{{@arp={@broadcast, @local, 0x0, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0x181]}, @mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x4, 0x455, 0x3ff, 0x2960, 0x4, 0x0, 'veth1\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x29a}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x80000000}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x23}, 0xff000000, 0x0, @mac=@remote, {[0x0, 0x0, 0x1fe, 0xff]}, @empty, {[0xff, 0x0, 0x7f, 0xff, 0x0, 0x17e]}, 0x4, 0x20, 0x0, 0x6, 0xf44, 0x3, 'bridge_slave_0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @multicast1, 0x0, 0x80000000}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x1800, 0xfffe, 0x0, 0x0, "46aee200d130d9b93ef6ea1ed7218a126eecf6c077e4ce0bd86dc591d1c3d9d12495a8da7069284647df1faaeb9cbaa89ea741772f8832240ee74967c0c487b7"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1) 06:22:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_open_dev$mice(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_pts(r1, 0x76be94e4d2f9d9cc) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000280)={0x0, @aes128}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="14889891706345c33ee4867caf20637801e0518429fc33f6ecee057e6397541d6b103e65c9f967c01fc3c1e16e04a5f8760c2777d60ea8ee8f20bab0e4"], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000140)=0x3, 0x4) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') 06:22:34 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f00000000c0)={0x5, @output={0x1000, 0x9fa68942e57d1914, {0x6, 0x8}, 0x9, 0x5}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:34 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x9, &(0x7f0000000500)=[{0xffff, 0x3, 0x20, 0x9}, {0x3d4, 0xff, 0x5, 0x200}, {0x7, 0x1f, 0xfc, 0x5}, {0x0, 0x1, 0x6, 0x8000}, {0x9, 0x3e, 0x1, 0x7ff}, {0x2, 0x0, 0x69, 0x8}, {0x6, 0x8, 0xfd, 0x5}, {0x6, 0x3, 0x3, 0x80000001}, {0x5, 0xec, 0x0, 0x3}]}, 0x10) lsetxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='security.SMACK64TRANSMUTE\x00', 0x0, 0x0, 0x7) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='bbr\x00', 0x3a7) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat(r1, &(0x7f0000000200)='./file0\x00', 0x8fdeafb683b7f2f3, 0xc0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5387, &(0x7f0000000080)) write(r3, &(0x7f0000000400)="042b51b9621a28776f6e0dc7f7876a5f23fca09f0626aca830556dbbadeedc1c30c154bb0414844a99b856f2b1480bd9671f69c8b46a07dd11b00ca66b0c1d9d8533e2af7341ad6fac1909242058e52c6e711f2f0e366bd3debc19e88b1c0d2646b47538b7153c9534984825ba31581c3978bd7cd6346b938251f5c53670a67fcda2b8bce66933d07382c1a82526f9414505051fee12fd0fc5f30b012c5c78d06db091d87ac7894c83b8c8300e22a96be8b56295f041e6d32c4cff3f65a51c052251da701aa2e07293c6f8cb8165f35dcc07e1b5b496c8b74ba520798c74abcafec1fb317b9b51c06917", 0xea) write$P9_RMKDIR(r2, &(0x7f0000000340)={0x14, 0x49, 0x1, {0x2, 0x0, 0x6}}, 0x14) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) dup3(r4, 0xffffffffffffffff, 0x0) r5 = dup(0xffffffffffffffff) connect$vsock_stream(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r6 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r6) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r6, 0x28, 0x2, &(0x7f0000000240)=0x8, 0x8) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000180)={r4}) socket$inet_udplite(0x2, 0x2, 0x88) 06:22:34 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180)=0xfffffe00, 0x4) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x12c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="2d997e568b940344a40733b5e36b51d3"}}]}, 0x78}}, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) pipe(0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x4a0, 0x118, 0x258, 0x258, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000001c0), {[{{@arp={@broadcast, @local, 0x0, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0x181]}, @mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x4, 0x455, 0x3ff, 0x2960, 0x4, 0x0, 'veth1\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x29a}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x80000000}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x23}, 0xff000000, 0x0, @mac=@remote, {[0x0, 0x0, 0x1fe, 0xff]}, @empty, {[0xff, 0x0, 0x7f, 0xff, 0x0, 0x17e]}, 0x4, 0x20, 0x0, 0x6, 0xf44, 0x3, 'bridge_slave_0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @multicast1, 0x0, 0x80000000}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x1800, 0xfffe, 0x0, 0x0, "46aee200d130d9b93ef6ea1ed7218a126eecf6c077e4ce0bd86dc591d1c3d9d12495a8da7069284647df1faaeb9cbaa89ea741772f8832240ee74967c0c487b7"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1) 06:22:34 executing program 2: pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0xb2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000180)=0xfffffe00, 0x4) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, 0x0, 0x12c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000b6dfc8)={0x500, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x0, 0x403, 0xf, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[0x300000000000000, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x6000000, 0x40030000000000], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @sadb_key={0x1, 0x9}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr="2d997e568b940344a40733b5e36b51d3"}}]}, 0x78}}, 0x0) bind$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) splice(r0, 0x0, r1, 0x0, 0x0, 0x0) pipe(0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x4a0, 0x118, 0x258, 0x258, 0x3b8, 0x3b8, 0x3b8, 0x4, &(0x7f00000001c0), {[{{@arp={@broadcast, @local, 0x0, 0xffffffff, @empty, {[0x0, 0xff, 0xff, 0x181]}, @mac=@local, {[0x0, 0xff, 0x0, 0x0, 0xff, 0xff]}, 0x4, 0x455, 0x3ff, 0x2960, 0x4, 0x0, 'veth1\x00', 'bridge0\x00', {}, {0xff}, 0x0, 0x29a}, 0xf0, 0x118}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x80000000}}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x23}, 0xff000000, 0x0, @mac=@remote, {[0x0, 0x0, 0x1fe, 0xff]}, @empty, {[0xff, 0x0, 0x7f, 0xff, 0x0, 0x17e]}, 0x4, 0x20, 0x0, 0x6, 0xf44, 0x3, 'bridge_slave_0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x80}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @multicast1, 0x0, 0x80000000}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x800, 0x1800, 0xfffe, 0x0, 0x0, "46aee200d130d9b93ef6ea1ed7218a126eecf6c077e4ce0bd86dc591d1c3d9d12495a8da7069284647df1faaeb9cbaa89ea741772f8832240ee74967c0c487b7"}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4f0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x1) [ 235.334876] audit: type=1400 audit(1575872554.224:69): avc: denied { setopt } for pid=8766 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 235.401593] sg_write: data in/out 1999116862/192 bytes for SCSI command 0x4-- guessing data in; [ 235.401593] program syz-executor.5 not setting count and/or reply_len properly 06:22:34 executing program 2: r0 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x40) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x7fffffff) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r4, r0, 0x0, 0xffffffff) 06:22:34 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x1a3d0, 0x0, 0x54000000, [], [{0x801, 0x0, 0x80000001, 0x0, 0x1}, {0x801, 0x0, 0x80080080000001}]}) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000340)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r2, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0x6a65bc0f1b6c398b, 0x70bd2b, 0x0, {}, [""]}, 0x14}}, 0x100) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x7c994b2fe588bcf}, 0x20000000) ftruncate(r0, 0xa00000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) setsockopt$packet_buf(r4, 0x107, 0xd, &(0x7f0000000180)="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", 0x1000) finit_module(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$CAPI_NCCI_OPENCOUNT(r5, 0x80044326, &(0x7f0000000000)=0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x81, @remote, 0x10000}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e22, 0x6, @rand_addr="68462e35213a573d6fce30656df33c71", 0x792}, @in6={0xa, 0x4e20, 0xfd, @empty, 0x3}], 0x74) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x25}) finit_module(r0, 0x0, 0x0) 06:22:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) ioctl$UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, 0x0) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_open_dev$mice(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x100, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) syz_open_pts(r1, 0x76be94e4d2f9d9cc) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x400, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0='bpq0\x00', 0x5, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @null]}) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f0000000080)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000280)={0x0, @aes128}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="14889891706345c33ee4867caf20637801e0518429fc33f6ecee057e6397541d6b103e65c9f967c01fc3c1e16e04a5f8760c2777d60ea8ee8f20bab0e4"], 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f0000000140)=0x3, 0x4) renameat(r3, &(0x7f0000000180)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') 06:22:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f00000000c0)=0x1a) r4 = pkey_alloc(0x0, 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000100)={0x5, 0x30000, 0x5caa, 0x4}) pkey_free(r4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) setsockopt$CAIFSO_REQ_PARAM(r6, 0x116, 0x80, &(0x7f0000000180)="c1aaac079b16f374fe1907e7a64dbe4c386dbd0184cdbb24066ae0b98e0d0967997adcc4a3516905b797955e7872eea21faf68a6922646eacef4c1900018c4661448ffd88e958a55c16b6f935467f66c2476a14de3c3da67964adddae76720b9f20fa876cf009b65ae2306be9d414b909d6797841a", 0x75) openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r7, &(0x7f0000019000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x2f7) 06:22:35 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x6, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) recvmmsg(r4, &(0x7f0000002940)=[{{&(0x7f00000001c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000001600)=[{&(0x7f0000000240)=""/145, 0x91}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/182, 0xb6}, {&(0x7f0000001440)=""/107, 0x6b}, {&(0x7f00000014c0)=""/186, 0xba}, {&(0x7f0000001580)=""/78, 0x4e}], 0x7, &(0x7f0000001680)=""/81, 0x51}, 0x3}, {{&(0x7f0000001700)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/192, 0xc0}, {&(0x7f0000002840)=""/59, 0x3b}], 0x3, &(0x7f00000028c0)=""/66, 0x42}, 0xfff}], 0x2, 0x461e9b80b7e80e, &(0x7f00000029c0)={0x0, 0x989680}) sendmsg$nl_route(r3, &(0x7f0000002a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1110420}, 0xc, &(0x7f0000002a40)={&(0x7f0000002a00)=@bridge_delneigh={0x1c, 0x1d, 0x200, 0x70bd2a, 0x25dfdbfb, {0xe, 0x0, 0x0, r5, 0x8, 0x1, 0xb}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10009040) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, [{0x10, 0x1, [@IFLA_VF_TX_RATE={0xc}]}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x7ff, 0x0) 06:22:35 executing program 4: setxattr$security_capability(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f00000001c0)=@v2={0x2000000, [{0x2, 0xffffffff}, {0x9, 0x7f}]}, 0x14, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="eeffb5feb58e0007"], 0x48}}, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000080)) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000080)) r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/enforce\x00', 0x0, 0x0) r8 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x402a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) close(0xffffffffffffffff) unshare(0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000300)='./bus\x00', 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x5d34bb28dff928f3, 0x0) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x5387, &(0x7f0000000080)) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRESHEX=r4, @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES16=r6, @ANYRESDEC], @ANYPTR=&(0x7f0000000380)=ANY=[@ANYRESDEC=r8]], 0x5}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r9 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r9, &(0x7f0000001e40), 0x3, 0x20000000) 06:22:35 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x686987548330b3, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000640)={0x0, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast1}}}, 0x108) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x1, 0x1, 0x0, 0x3, 0x0, 0xfffffffffffffffd}, 0xa89d93c94aee04b1) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r5, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x2) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb9a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)={&(0x7f0000000440)='./file0/file0\x00', 0x0, 0x14}, 0x8) ioctl$VIDIOC_S_MODULATOR(r6, 0x40445637, &(0x7f00000003c0)={0x8e, "eb1fd2355c9ea460119f0c1d1179c220476000d6881a376cb0a18f3fe0bdf1c7", 0x200, 0x8, 0x6, 0x4, 0x4}) readv(r2, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/204, 0xcc}], 0x1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) [ 236.372230] kauditd_printk_skb: 3 callbacks suppressed [ 236.372239] audit: type=1804 audit(1575872555.264:73): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.2" name="/root/syzkaller-testdir176979727/syzkaller.09lfsb/56/file0" dev="sda1" ino=16808 res=1 06:22:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4a, &(0x7f00000002c0)=""/151) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x1001000004e23, 0x0, @loopback}, 0x1c) listen(r0, 0x4) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(0xffffffffffffffff, 0x400448cb, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x30, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x4}, 0x0) getsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f00000001c0)=""/155, &(0x7f0000000280)=0x9b) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = accept(r0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='vcan0\x00', 0x10) sendto$packet(r2, &(0x7f0000000080)="0e000000000000000075", 0xa, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000380)={0x3, 'gre0\x00', {0x3}, 0x5}) 06:22:35 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x40002, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x97a, @ipv4={[], [], @loopback}, 0x409}, 0x1c) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:35 executing program 0: pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000000)={0xaf1c, 0x0, 0x0, 0x100400}) r1 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r1, 0xa00000) finit_module(r1, 0x0, 0x0) finit_module(r1, 0x0, 0x0) 06:22:35 executing program 4: ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000000c0)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x3, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2}) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)=0x1) 06:22:35 executing program 3: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0xa, &(0x7f0000000100)}], 0x492492492492805, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1a34578d3abdf1e15566701800100000000006722b4ecb75c52"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x1}}, 0x10) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101], 0x1f004}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x0) 06:22:35 executing program 1: r0 = add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f00000001c0)="13", 0x1, 0xfffffffffffffffb) keyctl$revoke(0x3, r0) keyctl$invalidate(0x15, r0) 06:22:36 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x8001141042, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000340)=@req3={0x3, 0x6, 0x401, 0x70, 0xffff, 0xfff, 0x80000001}, 0x1c) write(0xffffffffffffffff, &(0x7f0000000000)="b6", 0xfffffe7e) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)='cpu.stat\x00', 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000240)={0xffff, 0x401, 0x1000}) socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/btrfs-control\x00', 0xb0180, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000380)={0x18, 0x0, 0x2, {0x9}}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000080)) fsetxattr$security_ima(r6, &(0x7f0000000400)='security.ima\x00', &(0x7f0000000440)=@sha1={0x1, "fa80bab6fba9120db03c0c591c808489adf1620a"}, 0x15, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0x9, &(0x7f0000000140)=""/120, &(0x7f00000002c0)=0x78) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast1, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x2, 0xa, 0x1b0, 0x80, 0x33}, {0x3fde27fc, 0x7fffffff, 0x0, 0x0, 0x5, 0x7, 0x4, 0xfd56}, {0x0, 0x2286, 0x7ff, 0x5}, 0x0, 0x6e6bbd, 0x0, 0x1, 0x2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x10}, 0x4d5, 0x3c}, 0xa, @in6=@mcast1, 0x3503, 0x8476f732d1874694, 0x1, 0x3, 0x3, 0x4e9, 0x7}}, 0xe8) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x807f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x200}, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, {0x85, 0x0, 0x8, 0x81, 0x1, 0x4}, 0x8, 0x6f}, 0xe) fchdir(r7) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) umount2(&(0x7f0000000540)='./file0\x00', 0x0) 06:22:36 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x1b0}) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/d}gn\x89rol\x00\x00\x10\x00', 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_open_dev$video4linux(&(0x7f00000000c0)='/dev/v4l-subdev#\x00', 0x301, 0x105000) chown(&(0x7f0000000140)='./file0\x00', r3, r4) r6 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r7], 0x20}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000003c0)={r7, 0x3}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) ioctl$KVM_X86_SET_MCE(r8, 0x4040ae9e, &(0x7f0000000100)={0x3900000000000000, 0x3000, 0x0, 0x1, 0x9}) r9 = msgget$private(0x0, 0x1) msgctl$IPC_STAT(r9, 0x2, &(0x7f00000002c0)=""/106) msgctl$MSG_STAT(r9, 0xb, &(0x7f00000002c0)=""/213) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r10) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) r15 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r16) setresuid(r10, r16, r12) r17 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x300, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r18, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet6_mreq(r18, 0x29, 0x14, &(0x7f0000000440)={@loopback, 0x0}, &(0x7f0000000480)=0x14) bind$packet(r17, &(0x7f00000004c0)={0x11, 0x8, r19, 0x1, 0x2a, 0x6, @local}, 0x14) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r20, &(0x7f00000001c0), 0xfffffef3) ioctl$USBDEVFS_CONTROL(r20, 0xc0185500, &(0x7f00000005c0)={0x1d, 0x10, 0xf000, 0x2, 0xa5, 0x39, &(0x7f0000000500)="33bfb13156b08e42edeab95f761d2507642e67f66de11754e6723a7c43e03ebd63b5d6ba2958d2d77d48bbe3f778e6b84e63d9b850adc93d24480bcd392b904bf04f23c8fd53f6194cdd2cfd85a5bcb83b2b3d1e2b9dac7d1b581bc677549662f0eaab0ed680adcb613e892e14c0f558391f62e092a3b87fd1966e23311eecd06e565c76c9151b3a95c5262c6580f4621bbb4ead607e0881e81f05b58450bf83d32117f7ab"}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)) 06:22:36 executing program 1: perf_event_open(&(0x7f0000000040)={0xd, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000240)={0xf, 0x1, 0x7ff}) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000008c0)=""/244, 0xf4}], 0x1}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f00000017c0), 0x3a8, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000200)={r1, 0x1, &(0x7f0000000100)=[0x1f], &(0x7f0000000140)=[0x7, 0xff], 0xf1, 0x1, 0x5, &(0x7f0000000180)=[0x8], &(0x7f00000001c0)=[0x4, 0x9, 0x466, 0x521, 0x5, 0x1ef, 0x3, 0x24]}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r4 = gettid() r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f00000001c0), 0xfffffef3) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000640)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xc0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000004c0)={0x10000003, 0x0, 0x6aa3, 0xffffffff}, &(0x7f0000000200)=0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=0x6}}, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={r4, r5, 0x0, 0xd1, &(0x7f0000000080)='memory.high\x00\x90\x80\xa4\x96\xbb\xe4\xb2\xa2\x01\xc0\xb8*Z\xef\xf8\x0e\x1f]\xf7\x10\xdb\xfe\xe4\x1d\xc6\x92\x7f\xeeK_p\t\x8c\x9f5\xd0\xef)\xd8\x04\xbf\xc2N\x1c\xf0R\xdc\r\xb1Gf\xba\xd11#<\xaf^,s\x85\x10R\x99\xc2D\xee\n\"\xf9c\x15{\xc1[\xef\x06\x8a\xcd\x9d\xc8\x90#\xd0\xe7\xe3\xe0\xa9\xf3\xc0n\x1f\xd1\x11P\xe20\xcd\x1c\xfa\xfd\xa3\xcf\x9c\xc6\xb7]\x16\xc7\xd7\xb4/\x82\xd1\xae\xd9TM\x05a\xe5\xc5U\x91\xbe\x81\xac4\x9d\x02`\xe7\xa6q\x1f@\x1f\x1f?tm\x9c\xd1\x8c\xa1\xb5\xe0`H)\x97r\xc0?y\x9cc=c`A^\x9f\xcd\xbc\xf4m>I\xae\xdf\x946\xe7M`\xeb\x9fm\xbe+n\x00\x18k\x98\xab\xd5\xeet\"d\x81\x94\x04\xf5\xeb', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a40)={0x0, 0xffffffffffffffff, 0x0, 0x15, &(0x7f0000000a00)='\x80+@cpuset.nodevppp1)\x00', r8}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={r3, r0, 0x0, 0x8, &(0x7f0000000440)='cmdline\x00', r8}, 0x30) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) r12 = getpid() sched_setattr(r12, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r2, &(0x7f0000000600)={&(0x7f00000002c0)=@abs={0x2, 0x0, 0x4e23}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000340)="97ec3681607f4e3ef3a01386849c2eb0a43f002ebe7c2644875898b4e8c74634ddadf384da8d1aa566e263fca1615d01d260fcd0fab6ff126977e437", 0x3c}, {&(0x7f0000000380)="b8c2fe7237c7a12aa0b0492fdce537aabad2cb787ab695f244e7efe5b87c4a6f37af79ebeb5a", 0x26}, {&(0x7f00000003c0)="1f5c2bae23e153b4921f010480c121b5831df1b121bddebcb5c7c7fca8fe2c9db1ffde7d25f9b450c5cfc67f9b5c67ba24ef731a662cec3f45da4553", 0x3c}], 0x3, &(0x7f0000000580)=[@cred={{0x1c, 0x1, 0x2, {r9, r11, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r12, 0xffffffffffffffff, r13}}}], 0x58, 0xd1b5aeccf86248d4}, 0x80) 06:22:36 executing program 2: mkdir(&(0x7f0000000080)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={{}, {r0, r1/1000+10000}}, 0x0) mkdir(&(0x7f0000000500)='./file1\x00', 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) creat(&(0x7f0000000200)='./file1/file0\x00', 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="7570706572070000002e2f66696c65302c6c047765776469723d2e2f6669dfae5381776f726b6469723d2e2f66696c65317520a8b7e3502e4b6b585e694cd2c4806ed9c35ee3b6e12f610062e8e736cd5f101eb3279b7f1f5d74803d63139b5a4f260f223b6fe694db0cc2d90ada126f23b110aa0f97cf57879b62f095821f9a99d59a112b6ec82d5b04d19bf0b5ac850dc0a2ffa34904e34d495ad689cd921bb8f5f6db45486cec97e5527e341a007c8fec82a5d12fcd7b2d3edfac16750390a5c8e929a71ef5a2ca74b7638782c190c9168d795d1b42d8fc5f49198bba700ed44bd455b94399635c42adb8924957ac563102"]) chdir(&(0x7f0000000180)='./file0\x00') unlink(0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x8, 0x400100) fsetxattr$security_evm(r4, &(0x7f0000000040)='security.evm\x00', &(0x7f00000000c0)=@ng={0x4, 0xa, "6c9e32e1d145"}, 0x8, 0x2) open(&(0x7f0000000180)='./file0\x00', 0x28042, 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file1\x00') [ 237.503413] overlayfs: unrecognized mount option "upper" or missing value 06:22:36 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000080)={r0, 0x0, 0x0, 0xfffffffffffffffc, 0xaf}) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000180)=""/4096) 06:22:36 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000000c0)={0x1, 0x0, 0x0, &(0x7f0000034000)=""/95, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)=ANY=[]) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000002c0), &(0x7f00000007c0)=0xc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r3, 0x580, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x401}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') 06:22:36 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e7, 0x0, @perf_config_ext={0xffffffffffffff32, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlink(&(0x7f0000000040)='./file1\x00', &(0x7f0000000000)='.//ile0\x00') syz_genetlink_get_family_id$tipc2(0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) r0 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x801, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000280)=0x8, 0x4) lsetxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000380)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32, @ANYBLOB="0f6268236e915a0dbf617ba55dfa49a17fae7c6964c629dc7fcc1832570f7e0098996dc8", @ANYRES32, @ANYBLOB="1046915f0006000000000008000000000000"], 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) linkat(r1, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) renameat(r0, &(0x7f0000000180)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') creat(&(0x7f0000000080)='./bus\x00', 0x0) connect(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r2) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000300)) 06:22:36 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x16, &(0x7f00000000c0)) ptrace(0x10, r2) 06:22:36 executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x6, @perf_config_ext={0x9, 0xffffffff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) io_submit(0x0, 0x1, &(0x7f00000006c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="e669389f", 0x4}]) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000940)='fuse\x00', 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0) write$binfmt_elf64(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="280e3fa65336ccdcf4a400000000fbb509"], 0x2) fallocate(r6, 0x3, 0x0, 0x8020003) writev(r6, &(0x7f0000000380)=[{0x0}], 0x1) lseek(0xffffffffffffffff, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f00000001c0)='net/arp\x00') 06:22:37 executing program 5: perf_event_open(&(0x7f0000000440)={0x2, 0x373, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r2 = getpid() socket$nl_route(0x10, 0x3, 0x0) tkill(r2, 0x9) socket$packet(0x11, 0x0, 0x300) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="aaf20000d046b85cb01e92550250a490cff4300ad49be094008010bcf7bdbbd065501305f5a4d0dacee21d438be196e80742259eb3a1ac7e004b94f9b7ab4baa81cf128f5f61a199ab7c2badfb67c00ca013e15c05fb9a13f9557e4a9191f6c477a723c6fc1f10aca3e062d95598fbf27d12a60451f0e13ceed34dda1a105b18979383f0ef5237116d32d45ead01d0cb6ad41f7185ad664506ae44b9c79abba5de97372bd4a87357cd6c895780dcebe38410add118"], 0x5}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32, @ANYBLOB="0008008000000000030000000800010075333200580002001400050000000000000000000000000000000000400006003c0001000000000000000020898dde66057433b6ef3a41d22be225e0001b00000000000000000000000000000000000000000084e1a912c5998bcbf050000000000000000000000000000000798a3c067277da1a290b9613a33c575c36fad473382c8f5532ef3f0e1d2c450a7decbf3431a69f9b2ecb3291bed174245a962fe0484676958265e2988326a89db3139d91fe4aee6ae7e745abdfc21a9f61f2035979c1e3e9fea5b3958bc14fce6e66a36d1ab3194534ba4e973684b27793bff837d3"], 0x84}}, 0x0) 06:22:37 executing program 2: openat(0xffffffffffffffff, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) dup(0xffffffffffffffff) ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x800000000000803, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r5, 0x10001) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x2080, 0x0) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f000095dffc)=0x1bb) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r8, &(0x7f00000001c0), 0xfffffef3) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f0000000200)='./file0\x00', r8}, 0x10) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) sendto$unix(r10, &(0x7f0000000080)="9c", 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r7, &(0x7f0000000100)=0x4) sendto(r4, &(0x7f0000000140)="120000001600e70d017b00000000008e1584", 0x28f, 0x0, 0x0, 0x3d4) 06:22:37 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/125, 0x7d}], 0x1, &(0x7f0000000140)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x3}], 0x18, 0x8000}, 0x40000) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:37 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000200)=0x1e, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0xfd, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000240)={0x7, 0x0, 0x4}, &(0x7f0000000280)=[{}, {}, {}, {}]) 06:22:37 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0xfffffffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x82959364573b602d}) socketpair(0x11, 0x80000, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 06:22:37 executing program 5: sched_setattr(0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x238) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0xb1900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 238.513348] sctp: [Deprecated]: syz-executor.2 (pid 8938) Use of int in maxseg socket option. [ 238.513348] Use struct sctp_assoc_value instead 06:22:37 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80100, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/policy\x00', 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)) ftruncate(r1, 0xfffffffffffffa11) finit_module(r0, 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(0xffffffffffffffff, 0x80024321, &(0x7f00000000c0)) finit_module(r0, 0x0, 0x0) 06:22:37 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) write(r2, &(0x7f00000001c0), 0xfffffef3) r4 = socket$alg(0x26, 0x5, 0x0) ioctl(r4, 0x2, &(0x7f0000000040)="acd55b9e28e0b47d00f2f7a9b015e97110c1466b169af41795165abf76bc5e470362442e6a21747fdde3226f05b0295d48") epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x124c3ff0f75b8806}) r5 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5387, &(0x7f0000000080)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x31000, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5387, &(0x7f0000000080)) fcntl$F_GET_RW_HINT(r6, 0x40b, &(0x7f00000001c0)) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r1, @ANYBLOB=',fowner=', @ANYRESDEC=r8, @ANYBLOB="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", @ANYRESDEC=r9, @ANYBLOB=',euid<', @ANYRESDEC=r11, @ANYBLOB=',uid=', @ANYRESDEC=0xee00, @ANYBLOB=',dont_measure,fsmagic=0x0000000000000000,\x00']) 06:22:37 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, &(0x7f00000002c0)) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x789c04, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x4, 0x80200) r4 = dup(r0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f00000000c0)={'nr0\x00', {0x2, 0x4e24, @loopback}}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) socket(0x0, 0x0, 0x0) socket(0x1d, 0x0, 0x0) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000140)=0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x3}}, 0x18) dup(r5) socket(0x10, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:22:37 executing program 5: syz_open_dev$loop(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) close(0xffffffffffffffff) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x8, 0xe5}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x30, r1, 0x0, 0x70bd29, 0x25dfdbfe, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x0, 0x0, 0x2, 0x2}}}, [""]}, 0x30}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda9, 0x4) sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2) dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r2}) socket$inet_udplite(0x2, 0x2, 0x88) 06:22:37 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) read$usbmon(r2, &(0x7f00000000c0)=""/176, 0xb0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) pipe2(&(0x7f0000000180)={0xffffffffffffffff}, 0x4800) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f00000001c0)) finit_module(r0, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) splice(r4, &(0x7f0000000000)=0x6, r0, &(0x7f0000000080)=0x2, 0x7ff, 0x2) finit_module(r0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x76ba0b62456df1ac) [ 238.802838] can: request_module (can-proto-0) failed. 06:22:37 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101401, 0x0) write$rfkill(r0, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x1, 0x4}, 0x3c2) 06:22:37 executing program 3: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ubi_ctrl\x00', 0x100, 0x0) socket$netlink(0x10, 0x3, 0x15) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) ftruncate(r1, 0x8200) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50b, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, &(0x7f0000001000)) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x0}}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000008600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresuid(&(0x7f0000004180), 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x101, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x1f, 0x10, 0x9, 0xae, 0x4, 0xca, 0x9, 0x10, 0x6, 0x60, 0x20}, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(0x0) close(0xffffffffffffffff) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, 0x0) [ 238.956797] audit: type=1400 audit(1575872557.844:74): avc: denied { create } for pid=8983 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 06:22:38 executing program 5: lstat(0x0, 0x0) getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0xfffffffffffffffd) ftruncate(r0, 0x80003) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r2, r0, &(0x7f00000000c0), 0x8000fffffffe) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x8001}, 0x10) pipe(0x0) setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f00000001c0)=0xe2, 0x4) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000340), 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000025e000)={0x2, [0x0, 0x0]}, 0x0) 06:22:38 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f00000001c0), 0xfffffef3) ioctl$KDSETMODE(r0, 0x4b3a, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x30, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) creat(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000f21301ce646ba1df1e15566701800122b4ecb75c5200004000000000000000"], 0x1}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x101], 0x1f004}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 06:22:38 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, 0x0) kexec_load(0x15, 0x4, &(0x7f0000000300)=[{&(0x7f0000000040)="276041bde1b7c6442b86d163b30795c6aa46b208cf1befea0c1647691dd97b1e6209a4ad9a4141ec0c11df11184eb25cdac78802e85d48bdaec56a0bdbcfdd81bd0db12a1b7a0eea64d17cce5f79d45944a4626b59bc4b0bbb57665fbe45362938a88795b2f92a4b143a5c1de93a6d78d2ab761399b4312ea1d6", 0x7a, 0xabc5, 0x3d19}, {&(0x7f00000000c0)="1e4a168fe92899d8515a17f455a90677481e7fee533247923d51b1fef99dd71999fee9451ba95b5c1e2d996fd1", 0x2d, 0x10000, 0xfef}, {&(0x7f0000000140)="cecf8829a9348dc6f2cba1123c5c6ee13a219a454713831c6de5168b65e1cd968f4e5c5ab9c0c740291689525e35e56bbac1ee7fecf9c8c342bbe0d5b33e1b08049da8d242fc5d00dbd821867f4a10acebaa4cefb28ddd4524155d76a9351a98118c2505c5ad753c761282dc83241530df1b5c2f6e85fdfc062cfbcd484165572593cb5d6dc630c26fce9de29bdc46fa1ac273119ab28c686853be27f37706f65bb9c6f52c9a6df7b7ab8b3e0af27d506b8c55d5fc92a57e7241bdb28893", 0xbe, 0x7, 0x180}, {&(0x7f0000000240)="9d4a595cf6440f7baec0763e95d3bfae1025967e8bf08c9df7448932807956a49c5fdf0d3038a995baf09e8c0f823617e10c57dc5c0fe3bf568094e91ea1ad63f0f03f269277be57aa6025999d556041d788ab6c8c57f9bc8f107270981f2d8a76ae07ce3ecb21cc9d5f654e7b6e19b6954ff6709a2787c71b3067358a8e41db641e3d56073462812a875adeaead816e768bbe0a6dfbeeafa39199cb1630050a6e", 0xa1, 0x2d, 0x1}], 0x3e0000) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getpeername$unix(r2, &(0x7f00000003c0), &(0x7f0000000440)=0x6e) keyctl$link(0x8, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, 0x0, 0x0) r3 = request_key(0x0, &(0x7f00000008c0)={'\x00\x00 ', 0x1}, 0xfffffffffffffffd, 0xfffffffffffffffd) keyctl$negate(0xd, r3, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) open$dir(0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, 0x0) shutdown(r1, 0x1) recvfrom$inet6(r1, &(0x7f0000001840)=""/31, 0xfbdabf04, 0x100, &(0x7f0000001880), 0x715000) r4 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r6], 0x20}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000480)={r6, 0x1000}, &(0x7f00000004c0)=0x8) sendto$inet6(r4, &(0x7f0000000200)="e5b997fddd402f61a17706a1d4444ee1aa909bdd5b98c93789fd48f97cc7015e8483cc86c9818d14b23c3f7b41ba4391", 0xfffffdda, 0x8dffffff, 0x0, 0xfffffee0) 06:22:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r1, 0xc0385650, &(0x7f0000000040)={{0x1, @name="209c4094c7efad561362e4b54dd0cac38b3b439fbe7be6310ccb8cb3fe730865"}, 0x8, 0x38, 0x2}) write(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x20, 0x81, 0x0, 0x0, 0x200, 0x4, 0x7, 0x7, 0x10000, 0x1, 0x8, 0x1, 0x40, 0x1, 0x2, 0x7}}) openat$bsg(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bsg\x00', 0x400, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:38 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/d\xc0\b\x00\x00\x00\x00\x00\x00o\xff\x9b\xbc5\x00', 0x690581, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) getpeername$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x400) 06:22:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffff, 0x2000) 06:22:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0805b7055e0bcfe8474071d216a7006d6988f5a25acb662ef5") ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'\x00', 0x800000400}) close(r0) 06:22:38 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) 06:22:38 executing program 4: syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x6000, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x0, 0x0, 0x2, "c7dda67a8b01e5bd319527a67d0714582657381b559fe5b6e14701b2d787adf1", 0x47504a4d}) 06:22:38 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0xffffffff, 0x2000) 06:22:38 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f0000000080)) r2 = dup2(r1, r0) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000200)=""/56) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) write$FUSE_POLL(r3, &(0x7f00000000c0)={0x18, 0x0, 0x6, {0x3}}, 0x18) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) mq_timedreceive(r4, &(0x7f0000000100)=""/142, 0x8e, 0x3, &(0x7f00000001c0)) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x220400, 0x0) ioctl$VIDIOC_G_AUDOUT(r5, 0x80345631, &(0x7f0000000080)) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r6, 0x4058534c, &(0x7f0000000240)={0x6, 0x0, 0xffff, 0x9, 0x2, 0x6}) 06:22:38 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getpid() r0 = getpid() r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000001c0)="f69faf1634253d2352ef72a4b15329f0f323dc22bed30b2530b8fc696d789b", 0x1f, r1}, 0x68) sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) clone(0x6000, &(0x7f0000000440)="e351cb804df29bc284d751eca059e126050cb31a69da15a6da7a01327f984b5525717819adb30470e502645f2f2886544b268c71a836ecfd89ebe657d9159335fefd0c37be6f13c126ce0c583d1ca6f85e6d09498ee31c97ead8561e1ce89c0c9922379471fc8e8fb85c9e545533b76aa9fa3307c3dc91df2089003d7f488ea2450e75a38d34f6c60136368eeb777d889bcca07cccb02ba7ce92db65216a7908f03d3b57271fd09ed3177a403ff255cce314b8d8b2735b024b1c7e7187085c928e53ec3f2d9396c6429763216954a6eb0a401eeac60fe7962a8fc97954c6c9dc93f684d778342c9c1430f0e11e4b9c9e28b3f14c783912ed1e", &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000540)="119a0b09d4e8c84bdd52ab83c4a1840e84168990178c1cd0333620f6e21ae354aef33e3436f872999e39ee8066133ad2fa4e0812a9f51781c36e629f757d40cbe1bf7490ad699ba886bd5230848c93382cd6abf623a2829b1992225eb30d0c5d18a725300f6414f411592084fa9f93e6f1fe21e53e3646bd12aea55f5d0bbedd29462e07e7be29d45a2e209237c847bd55f88d740f012ae05f8d3e0fb14a02477762c1d9d7ba7fd466c8231dc444b4cfdefb68966c9df7f896188ea3ace8fdf0d7dfc1d35670f7a8130a187f42bb94daf7ce3740a7163021b773") getpid() sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3, 0x0, 0x20000000000000}, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x100, 0x0) unshare(0x2040400) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$KVM_IRQ_LINE(r7, 0x4008ae61, 0x0) ioctl$sock_ifreq(r6, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x00\x02\xff', @ifru_names='bond_slave_1\x00'}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, &(0x7f0000000140)='syz1\x00') ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000680)) syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x5, 0x400) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 239.898617] bond0: Releasing backup interface bond_slave_1 [ 239.928006] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:22:38 executing program 5: pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x100000000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) mkdir(&(0x7f00000000c0)='./file1\x00', 0x0) poll(0x0, 0x0, 0xffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000002c0)=0xe8) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000180)='9p\x00', 0x200000, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0x3}}, {@sq={'sq', 0x3d, 0x5}}, {@rq={'rq', 0x3d, 0x3}}, {@timeout={'timeout', 0x3d, 0x8001}}, {@timeout={'timeout', 0x3d, 0x603bfa79}}, {@timeout={'timeout', 0x3d, 0x2b}}], [{@euid_eq={'euid', 0x3d, r0}}, {@measure='measure'}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/ipv6_route\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x1ff, 0x0, 0x0, 0x18, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x3}) r3 = syz_open_pts(r2, 0x40000000000c0182) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) sendfile(r3, r1, 0x0, 0x6f0a77bd) inotify_init() write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @ipx={0xffff, 0x20, 0xd4, 0x0, {@broadcast, @random="f9e5263fd10d", 0x8}, {@random=0x8, @random="32e13c5cb80f", 0x5}, "3a18"}}, 0x20) 06:22:38 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000000c0)={@loopback, @remote}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRESOCT], 0x28, 0x40}], 0x1, 0x4000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x1, 0x20, 0x4004, 0x6, 0x8, 0x4d, 0x623, 0x0, r4}, &(0x7f0000000040)=0x20) 06:22:39 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r5 = creat(&(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) open(0x0, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='$ddl\x05-control\x00', 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', r5, 0x0, 0x0) preadv(r7, 0x0, 0xfffffffffffffeb2, 0x10400003) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x9c9a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0xfffffffffffffdfd, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) 06:22:39 executing program 2: openat$proc_capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(0xffffffffffffffff, 0xc0285629, &(0x7f0000000280)={0x0, 0x200, 0x2, [], 0x0}) pipe(0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) dup(0xffffffffffffffff) capget(&(0x7f0000000000), 0x0) getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000004c0), 0x12) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) socket(0xa, 0x3, 0x8) r1 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00'}) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) kcmp(r2, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snapshot\x00', 0x20601, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup3(r3, r4, 0x0) dup2(r6, r5) 06:22:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r2, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="390000001300250069000007a2e407edab0080581000000046008107a277001419000a0010000000000003f5000000000000ef38bf461e59d7", 0x330}], 0x1) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000040)={0xffffffff, 0x6, 0x5, 0x7}, 0x10) [ 240.138563] team0: Cannot enslave team device to itself 06:22:39 executing program 2: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="00000080000000000000"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$swradio(0x0, 0x0, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40000}}, 0x20}}, 0x0) 06:22:39 executing program 2: pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x148) mount$9p_fd(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@noextend='noextend'}]}}) write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="2a000000290100000000000000000000000000000000000000000000000000000007002e2f66696c6530"], 0x2a) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RWALK(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="950000006f0100"], 0x7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) creat(&(0x7f0000000300)='./file0/file0\x00', 0x188) 06:22:39 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xfda, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0x10000}], 0x0, 0x0) 06:22:39 executing program 0: r0 = memfd_create(&(0x7f0000000040)='[system\x00', 0x0) ftruncate(r0, 0xa00000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'irlan0\x00', &(0x7f0000003340)=ANY=[@ANYBLOB="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"]}) r1 = socket(0x2, 0x5, 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001100)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000001140)=0x10) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000010c0)) finit_module(r0, 0x0, 0x0) finit_module(r0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x9}) 06:22:39 executing program 5: r0 = socket(0x5, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x7fd59fe7cb66f268, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x0) r3 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x20a154cc) 06:22:39 executing program 1: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net//yz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) write$fb(r0, &(0x7f0000000100)="9a155c68edf9a9a0e0875fe97f9767d583ea6a5aeccdc9f67e0ed01613658f4352e184e787", 0x25) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'vxcan1\x00', 0xfd}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x280000, 0x0) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @rand_addr=0x3}, {0x6, @random="60969417c0e4"}, 0x1fdf865e993473b, {0x2, 0x4e24, @multicast1}, 'veth0\x00'}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="6632fca8922dde455206e5936d7345f3", 0x10) mount$fuse(0x20000000, &(0x7f0000000040)='./file0\x00', 0x0, 0x7a00, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = dup2(r5, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) dup2(r3, r6) ioctl$VIDIOC_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000000180)={0x0, @reserved}) syz_mount_image$minix(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x4021, 0x0) [ 240.584173] bond0: Releasing backup interface bond_slave_1 [ 240.593577] bond0: Enslaving bond_slave_1 as an active interface with an up link 06:22:39 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) pipe(&(0x7f0000001780)) perf_event_open(&(0x7f000001d000)={0x1, 0x449, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000170001010000040000001e000100004e0c72be26b7fec03c66a4eee6cc02000d933579054fd824dc8720f6c78f721a3c40ff8916becd85e5701210147968253c0108f174a8d5cb2fcf80e549306407bbcd15895503297f17c97ae935b02bd4c4bea21203d1e58b6e625dc738d5eb5f8629251086e84702c82d416fdf3bd204e588dda582f83e0b5953137258322b5c46a29fb1b32c4766c98df4c02c2d72e197518cea4378678455e0b77ad21cf12b35a5a018ff9cf5"], 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) fallocate(r0, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) mkdirat(r6, &(0x7f00000017c0)='./bus\x00', 0x10) r7 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5387, &(0x7f0000000080)) ioctl$SG_GET_NUM_WAITING(r7, 0x227d, &(0x7f0000001800)) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') preadv(r8, &(0x7f0000000480), 0x10000000000002a1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r9) recvmmsg(r9, &(0x7f00000016c0)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f00000013c0)=""/231, 0xe7}}, {{&(0x7f00000002c0)=@nfc_llcp, 0x80, &(0x7f0000000340)=[{&(0x7f00000014c0)=""/190, 0xbe}, {&(0x7f0000001580)=""/76, 0x4c}], 0x2, &(0x7f0000001600)=""/147, 0x93}, 0x9}], 0x2, 0x2eb84c17a9b351d5, &(0x7f0000001740)) sendfile(r0, r3, 0x0, 0x8000fffffffe) pipe2$9p(&(0x7f0000000180), 0x84000) [ 240.712556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.737784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.745024] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:22:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x108001, 0x0) write$P9_RVERSION(r3, &(0x7f00000001c0)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYRES64, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0], @ANYRESHEX=r1]], 0x8) [ 240.799740] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.815774] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 240.826898] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 06:22:39 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000140)=0x5) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000080)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r1, 0x80184151, &(0x7f0000000280)={0x0, &(0x7f0000000200)="fca7d092775f8f2f63b76d3b828f195129c4f1c74a608fd926fa609e1ca2eaa1c5d7a3d6dc0b0b4d71fc06638dc95b269fa9124425833062a3d8d602ab5d0c863d718a77215523c289694982cadd15c7833d43d90423", 0x56}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)) syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0]) 06:22:39 executing program 5: socket$inet(0x10, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xa925, 0x0, 0x0, 0xffffffffffffffff}) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000010000/0x18000)=nil, 0x0, 0x420da68f5d13958b, 0x0, 0x0, 0xfffffffffffffe3a) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f0000000300)={'nat\x00'}, &(0x7f00000001c0)=0x78) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = accept4$inet6(r4, &(0x7f00000003c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000440)=0x1c, 0x81800) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @local}, 0x14) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x1f, 0x11, 0x4}, 0x20}}, 0x0) 06:22:39 executing program 3: r0 = geteuid() r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={[{@gid={'gid', 0x3d, r2}}]}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000100)={0xa0, 0x0, 0x5, {{0x4, 0x1, 0xc7db, 0x1f, 0x8b76, 0x3, {0x0, 0x0, 0xc309, 0x70000000000000, 0x1, 0x80000001, 0x5, 0x13, 0x4, 0xffff8001, 0x9, r0, r2, 0x5, 0x2}}, {0x0, 0xb}}}, 0xa0) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000)=0x8001, 0x4) sendmsg(r3, &(0x7f00000000c0)={&(0x7f0000000b40)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000200)='a', 0x1}], 0x1}, 0x0) 06:22:39 executing program 4: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="2000000000000000840000000200000000", @ANYRES32=r2], 0x20}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={r2, @in6={{0xa, 0x4e21, 0x4, @mcast2, 0x9}}, 0x8, 0xfffffff7, 0x9, 0x0, 0x4}, &(0x7f0000000180)=0x98) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) ioctl$VIDIOC_SUBDEV_G_FMT(r3, 0xc0585604, &(0x7f0000000000)={0x1, 0x0, {0x8, 0x4, 0x3811, 0x4, 0xb, 0x1, 0x0, 0x1}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x0, 0x400, 0x0, 0xa}) r4 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5387, &(0x7f0000000080)) fsetxattr$smack_xattr_label(r4, &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)={'/dev/vbi#\x00'}, 0xb, 0x4c7e4c61a6b49ec0) 06:22:40 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) write$P9_RLINK(0xffffffffffffffff, &(0x7f00000000c0)={0x7}, 0x7) r4 = gettid() r5 = creat(&(0x7f0000000280)='./file0\x00', 0x1) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x3) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) write$uinput_user_dev(r7, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r8, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r8, 0x40045564, 0x0) write$uinput_user_dev(r8, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000001c0)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}, 0x45c) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r9, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x0) r10 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0) ioctl$UI_SET_ABSBIT(r10, 0x40045567, 0x2f) ioctl$UI_SET_EVBIT(r10, 0x40045564, 0x3) write$uinput_user_dev(r10, 0x0, 0x0) write$binfmt_script(r5, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR, @ANYRESOCT, @ANYRESOCT=r4, @ANYRESOCT, @ANYRESDEC, @ANYPTR, @ANYPTR64, @ANYRES64], @ANYRES16=0x0, @ANYRESDEC=0x0], @ANYRESOCT, @ANYBLOB="ff0bfc3ccfed50d6f54be712ce139ef57d284f54c523e3a1092cd91f75e39ea653cdd40c7ec8fa9f7728c3c2b2eadef766a3ea43093d1664230ab6cbbe3d3d6ec84b40b35ea2b21c78a452ac8eae3b97558211dedffc8ede4da4023ddcafb098b4936bbcaa8e86ef4598fb45351eb0ad49f71ceb7a3c80687a4600cb67bcba1ae673aa6e86b31ff39744e754cce4707ecb4e889e5f76d9fb436a9d9d4fea9e59f4c90536803d3fa2253ad1146b59541ae6c525586486eac9d8a3780c3d22e88c997825ace4448efc3025579de28a18d05e0dfbab39fa438b53f901a717150f61bcc02895cd2962e2517a0000", @ANYRESOCT=r10], 0x134) prctl$PR_SET_PTRACER(0x59616d61, r4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r5) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) dup(0xffffffffffffffff) [ 241.190124] protocol 88fb is buggy, dev hsr_slave_0 [ 241.195325] protocol 88fb is buggy, dev hsr_slave_1 [ 242.740451] device bridge_slave_1 left promiscuous mode [ 242.746057] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.800962] device bridge_slave_0 left promiscuous mode [ 242.806483] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.876477] team0 (unregistering): Port device veth3 removed [ 242.924377] device hsr_slave_1 left promiscuous mode [ 242.962576] device hsr_slave_0 left promiscuous mode [ 243.002785] team0 (unregistering): Port device team_slave_1 removed [ 243.012773] team0 (unregistering): Port device team_slave_0 removed [ 243.022049] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 243.064981] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 243.125620] bond0 (unregistering): Released all slaves [ 382.587846] audit: type=1400 audit(1575872701.474:75): avc: denied { map } for pid=9159 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 [ 427.990580] INFO: task syz-executor.2:9145 blocked for more than 140 seconds. [ 427.998018] Not tainted 4.14.158-syzkaller #0 [ 428.003149] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.011157] syz-executor.2 D28496 9145 7014 0x00000004 [ 428.016782] Call Trace: [ 428.019357] __schedule+0x7b8/0x1cd0 [ 428.023095] ? firmware_map_remove+0x196/0x196 [ 428.027673] ? _raw_spin_unlock_irq+0x28/0x90 [ 428.032207] schedule+0x92/0x1c0 [ 428.035635] rwsem_down_write_failed+0x5ce/0xb50 [ 428.040411] ? rwsem_down_read_failed+0x390/0x390 [ 428.045254] call_rwsem_down_write_failed+0x17/0x30 [ 428.050291] ? call_rwsem_down_write_failed+0x17/0x30 [ 428.055476] down_write+0x53/0x90 [ 428.058910] ? lock_mount+0x8c/0x2c0 [ 428.062641] lock_mount+0x8c/0x2c0 [ 428.066175] do_add_mount+0x27/0x350 [ 428.069888] do_mount+0x1307/0x27d0 [ 428.073618] ? copy_mount_options+0x5c/0x2f0 [ 428.078034] ? rcu_read_lock_sched_held+0x110/0x130 [ 428.083072] ? copy_mount_string+0x40/0x40 [ 428.087411] ? copy_mount_options+0x1fe/0x2f0 [ 428.091938] SyS_mount+0xab/0x120 [ 428.095381] ? copy_mnt_ns+0x8c0/0x8c0 [ 428.099252] do_syscall_64+0x1e8/0x640 [ 428.103164] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.108013] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.113217] RIP: 0033:0x45a6f9 [ 428.116400] RSP: 002b:00007f3ddcd7fc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 428.124126] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000000045a6f9 [ 428.131421] RDX: 00000000200008c0 RSI: 0000000020000000 RDI: 0000000000000000 [ 428.138680] RBP: 000000000075bfc8 R08: 0000000020000800 R09: 0000000000000000 [ 428.145963] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ddcd806d4 [ 428.153307] R13: 00000000004c7aa2 R14: 00000000004de940 R15: 00000000ffffffff [ 428.160630] INFO: task syz-executor.2:9146 blocked for more than 140 seconds. [ 428.167901] Not tainted 4.14.158-syzkaller #0 [ 428.172948] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.180925] syz-executor.2 D29744 9146 7014 0x00000004 [ 428.186539] Call Trace: [ 428.189116] __schedule+0x7b8/0x1cd0 [ 428.192862] ? firmware_map_remove+0x196/0x196 [ 428.197436] ? _raw_spin_unlock_irq+0x28/0x90 [ 428.201953] schedule+0x92/0x1c0 [ 428.205312] rwsem_down_write_failed+0x5ce/0xb50 [ 428.210103] ? rwsem_down_read_failed+0x390/0x390 [ 428.214945] call_rwsem_down_write_failed+0x17/0x30 [ 428.219938] ? call_rwsem_down_write_failed+0x17/0x30 [ 428.225150] down_write+0x53/0x90 [ 428.228596] ? path_openat+0xfab/0x3f70 [ 428.232661] path_openat+0xfab/0x3f70 [ 428.236459] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.241847] ? trace_hardirqs_on+0x10/0x10 [ 428.246079] ? path_lookupat.isra.0+0x7b0/0x7b0 [ 428.250779] ? __lock_is_held+0xb6/0x140 [ 428.254842] ? save_trace+0x290/0x290 [ 428.258733] ? __alloc_fd+0x1d4/0x4a0 [ 428.262557] do_filp_open+0x18e/0x250 [ 428.266364] ? __alloc_fd+0x1d4/0x4a0 [ 428.270196] ? may_open_dev+0xe0/0xe0 [ 428.273994] ? do_raw_spin_unlock+0x16b/0x260 [ 428.278468] ? _raw_spin_unlock+0x2d/0x50 [ 428.282632] ? __alloc_fd+0x1d4/0x4a0 [ 428.286430] do_sys_open+0x2c5/0x430 [ 428.290197] ? filp_open+0x70/0x70 [ 428.293743] ? SyS_clock_gettime+0xf8/0x180 [ 428.298046] ? do_syscall_64+0x53/0x640 [ 428.302038] SyS_creat+0x27/0x30 [ 428.305402] ? compat_SyS_openat+0x40/0x40 [ 428.309643] do_syscall_64+0x1e8/0x640 [ 428.313559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.318411] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.323615] RIP: 0033:0x45a6f9 [ 428.326791] RSP: 002b:00007f3ddcd5ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 428.334531] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 000000000045a6f9 [ 428.341822] RDX: 0000000000000000 RSI: 0000000000000188 RDI: 0000000020000300 [ 428.349087] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 428.356405] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3ddcd5f6d4 [ 428.363713] R13: 00000000004c0fa8 R14: 00000000004d4da0 R15: 00000000ffffffff [ 428.371055] [ 428.371055] Showing all locks held in the system: [ 428.377529] 1 lock held by khungtaskd/1045: [ 428.382102] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 428.391237] 1 lock held by rsyslogd/6843: [ 428.395372] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 428.403648] 2 locks held by getty/6965: [ 428.407608] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.416361] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.425691] 2 locks held by getty/6966: [ 428.429648] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.438393] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.447759] 2 locks held by getty/6967: [ 428.451756] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.460450] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.469721] 2 locks held by getty/6968: [ 428.473732] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.482428] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.491749] 2 locks held by getty/6969: [ 428.495712] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.504403] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.513727] 2 locks held by getty/6970: [ 428.517693] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.526410] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.535945] 2 locks held by getty/6971: [ 428.539902] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.548604] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.557998] 2 locks held by syz-executor.2/9077: [ 428.562913] #0: (sb_writers#16){.+.+}, at: [] mnt_want_write+0x3f/0xb0 [ 428.571368] #1: (&sb->s_type->i_mutex_key#21){+.+.}, at: [] path_openat+0xfab/0x3f70 [ 428.581076] 1 lock held by syz-executor.2/9145: [ 428.585760] #0: (&sb->s_type->i_mutex_key#21){+.+.}, at: [] lock_mount+0x8c/0x2c0 [ 428.595167] 2 locks held by syz-executor.2/9146: [ 428.599918] #0: (sb_writers#16){.+.+}, at: [] mnt_want_write+0x3f/0xb0 [ 428.608375] #1: (&sb->s_type->i_mutex_key#21){+.+.}, at: [] path_openat+0xfab/0x3f70 [ 428.618104] [ 428.619761] ============================================= [ 428.619761] [ 428.626953] NMI backtrace for cpu 1 [ 428.630711] CPU: 1 PID: 1045 Comm: khungtaskd Not tainted 4.14.158-syzkaller #0 [ 428.638149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.647485] Call Trace: [ 428.650068] dump_stack+0x142/0x197 [ 428.653689] nmi_cpu_backtrace.cold+0x57/0x94 [ 428.658169] ? irq_force_complete_move.cold+0x7d/0x7d [ 428.663381] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 428.668661] arch_trigger_cpumask_backtrace+0x14/0x20 [ 428.673840] watchdog+0x5e7/0xb90 [ 428.677279] kthread+0x319/0x430 [ 428.680655] ? hungtask_pm_notify+0x50/0x50 [ 428.684971] ? kthread_create_on_node+0xd0/0xd0 [ 428.689622] ret_from_fork+0x24/0x30 [ 428.693469] Sending NMI from CPU 1 to CPUs 0: [ 428.698014] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff866554ae [ 428.698974] Kernel panic - not syncing: hung_task: blocked tasks [ 428.711342] CPU: 1 PID: 1045 Comm: khungtaskd Not tainted 4.14.158-syzkaller #0 [ 428.718767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.728097] Call Trace: [ 428.730671] dump_stack+0x142/0x197 [ 428.734294] panic+0x1f9/0x42d [ 428.737480] ? add_taint.cold+0x16/0x16 [ 428.741479] ? ___preempt_schedule+0x16/0x18 [ 428.745886] watchdog+0x5f8/0xb90 [ 428.749326] kthread+0x319/0x430 [ 428.752676] ? hungtask_pm_notify+0x50/0x50 [ 428.756979] ? kthread_create_on_node+0xd0/0xd0 [ 428.761636] ret_from_fork+0x24/0x30 [ 428.766889] Kernel Offset: disabled [ 428.770531] Rebooting in 86400 seconds..