[....] Starting enhanced syslogd: rsyslogd[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [ 27.545250] kauditd_printk_skb: 7 callbacks suppressed [ 27.545261] audit: type=1800 audit(1541617314.915:29): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rc.local" dev="sda1" ino=2432 res=0 [ 27.572518] audit: type=1800 audit(1541617314.915:30): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="rmnologin" dev="sda1" ino=2423 res=0 Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.46' (ECDSA) to the list of known hosts. 2018/11/07 19:02:12 fuzzer started 2018/11/07 19:02:14 dialing manager at 10.128.0.26:34255 2018/11/07 19:02:14 syscalls: 1 2018/11/07 19:02:14 code coverage: enabled 2018/11/07 19:02:14 comparison tracing: enabled 2018/11/07 19:02:14 setuid sandbox: enabled 2018/11/07 19:02:14 namespace sandbox: enabled 2018/11/07 19:02:14 Android sandbox: /sys/fs/selinux/policy does not exist 2018/11/07 19:02:14 fault injection: enabled 2018/11/07 19:02:14 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2018/11/07 19:02:14 net packed injection: enabled 2018/11/07 19:02:14 net device setup: enabled 19:05:22 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x200000000000018b, &(0x7f0000000180)=@raw=[@exit, @jmp, @map, @initr0, @exit, @ldst={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x7e, &(0x7f0000000240)=""/126}, 0x48) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000540)="8849", 0x2}], 0x1, &(0x7f0000000680)}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f00000003c0)=@nl=@unspec, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000)="fecc", 0x2}], 0x1}, 0x0) syzkaller login: [ 235.232563] IPVS: ftp: loaded support on port[0] = 21 19:05:22 executing program 1: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x0, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) [ 235.487784] IPVS: ftp: loaded support on port[0] = 21 19:05:23 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00001fefe4), 0x1c) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000340)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@mcast1, @dev, @local}) [ 235.815987] IPVS: ftp: loaded support on port[0] = 21 19:05:23 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socket(0x0, 0x7, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 236.304599] IPVS: ftp: loaded support on port[0] = 21 19:05:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, &(0x7f0000000280), 0x88) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) dup2(r2, r1) ioctl$VT_DISALLOCATE(r1, 0x5608) mmap(&(0x7f0000000000/0xb3c000)=nil, 0xb3c000, 0x0, 0x10, 0xffffffffffffffff, 0x0) [ 236.667287] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.676179] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.702395] device bridge_slave_0 entered promiscuous mode [ 236.830396] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.835366] IPVS: ftp: loaded support on port[0] = 21 [ 236.854969] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.862424] device bridge_slave_1 entered promiscuous mode [ 236.985261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.107071] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready 19:05:24 executing program 5: r0 = memfd_create(&(0x7f0000000040)="00000600000000000000", 0x0) write$binfmt_elf64(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e00000000000000000400000000400000000000000000000035570007efa973c914f53b380002000000000000000300000000000000000000000000000000000000000000000000000000008000f800000000000000"], 0x68) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000140)) clone(0x2102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) write$P9_RREAD(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="92000000750200870000007939d94fbeda73c435e3d44bc5f7cad142403c7bacd94a81180867ab000fe09cbb8201db3497bbe9de17b9e39261c1db594b4d52aded956efbe302ace0feb2db29efd424bdcc289b5179afadfb73af6d79b5dfc1fa6b61bfa248a47abc302df3af3eb592adf0e54a573741701186ccd7631c66f3d3f256"], 0x82) execveat(r0, &(0x7f0000000100)='\x00', &(0x7f00000001c0), &(0x7f0000000340), 0x1000) [ 237.376273] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.396310] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.416094] device bridge_slave_0 entered promiscuous mode [ 237.510338] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.512807] IPVS: ftp: loaded support on port[0] = 21 [ 237.535828] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.558490] device bridge_slave_1 entered promiscuous mode [ 237.579844] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 237.689384] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 237.703698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 237.798070] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.814903] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.831537] device bridge_slave_0 entered promiscuous mode [ 237.840825] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 237.962908] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.976567] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.984003] device bridge_slave_1 entered promiscuous mode [ 238.100567] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.222345] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.260407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.367744] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.398888] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.439148] team0: Port device team_slave_0 added [ 238.548642] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.555591] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.568877] device bridge_slave_0 entered promiscuous mode [ 238.576586] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 238.584983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.596398] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.603760] team0: Port device team_slave_1 added [ 238.623840] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.687751] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 238.695861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.747300] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 238.760555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.775865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.800439] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.820414] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.829061] device bridge_slave_1 entered promiscuous mode [ 238.838458] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.905667] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.935205] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.021156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.050353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.065847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.090110] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.150829] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.163744] team0: Port device team_slave_0 added [ 239.172194] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.199142] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.215854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.326225] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.333616] team0: Port device team_slave_1 added [ 239.345736] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.352123] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.368451] device bridge_slave_0 entered promiscuous mode [ 239.458235] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.480199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.491812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.510540] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.517252] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.524636] device bridge_slave_1 entered promiscuous mode [ 239.539931] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 239.565899] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 239.572987] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 239.583179] team0: Port device team_slave_0 added [ 239.616284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.635689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.665719] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 239.683177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 239.691040] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.707973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.736556] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 239.755462] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 239.763671] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 239.771743] team0: Port device team_slave_1 added [ 239.797639] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 239.808306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.831563] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.854128] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.870815] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.884340] device bridge_slave_0 entered promiscuous mode [ 239.895965] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 239.903079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.935856] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.982747] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.997174] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.015073] device bridge_slave_1 entered promiscuous mode [ 240.027293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.148856] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.171971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.187299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 240.208630] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 240.247467] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.337450] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.358359] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 240.370766] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 240.379203] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 240.406337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 240.434183] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 240.450649] team0: Port device team_slave_0 added [ 240.529176] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 240.545198] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.574294] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 240.602357] team0: Port device team_slave_1 added [ 240.616001] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 240.638586] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.738392] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 240.746227] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.754127] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.781454] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 240.845149] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 240.852726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 240.865678] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 240.904670] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 240.932175] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 240.959278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 240.967686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.046105] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.053236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.062455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.116657] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.123144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.130184] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.136608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.178323] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.188018] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.195798] team0: Port device team_slave_0 added [ 241.315590] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.325728] team0: Port device team_slave_1 added [ 241.335381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 241.446524] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 241.467426] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 241.478585] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 241.496905] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.503280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.509983] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.516393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.532813] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 241.560363] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 241.575914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 241.583769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 241.671060] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 241.696164] team0: Port device team_slave_0 added [ 241.701463] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 241.719977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 241.734621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 241.829332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 241.842795] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 241.851028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 241.864718] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 241.878407] team0: Port device team_slave_1 added [ 241.907445] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.913819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.920545] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.926960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.976881] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 242.005715] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 242.126051] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 242.238742] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 242.255098] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 242.271588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 242.345274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.353483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 242.399751] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 242.416867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 242.444412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 242.678052] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.684481] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.691201] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.697603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.708255] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.269711] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.276160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.282815] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.289243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.305617] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 243.425567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.432858] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 243.894667] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.901127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.907844] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.914212] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.937577] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 244.434895] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.292131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.711047] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 246.741539] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.106585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.199067] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.220826] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.245115] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.265978] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.655285] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 247.665428] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.682799] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 247.693438] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 247.725759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 247.744930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.098113] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.104389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.113252] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.209284] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.233913] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.351725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.611899] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.751095] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.757403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.765972] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.804596] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.121770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.160920] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.241704] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 249.258147] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 249.276555] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 249.632359] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 249.691658] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.118244] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 250.124514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 250.135645] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 250.576133] 8021q: adding VLAN 0 to HW filter on device team0 19:05:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0x51, @time}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000540)={0x0, 0x0, 'client0\x00', 0x0, "e5e45cddc4db5221", "bd5b826ed7f97e181a466b10b4187bcf9a7c062d7e802fddaadb48fd5b2c850e"}) socketpair$unix(0x1, 0x400000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() timer_create(0x0, &(0x7f0000000500)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r2, 0x1000000000013) [ 251.007870] hrtimer: interrupt took 68244 ns 19:05:38 executing program 1: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x0, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) 19:05:39 executing program 1: timer_create(0xfffffffffffffffd, &(0x7f0000000200)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000240)) 19:05:39 executing program 0: timer_create(0x2, &(0x7f0000000200)={0x0, 0x20, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000280)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000240)) 19:05:39 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_tables_names\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x10, 0xffffffffffffffff, 0x0) write(r0, &(0x7f0000000180)="ce", 0x1) pkey_free(0xffffffffffffffff) 19:05:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) 19:05:39 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000007c0)=0x4) 19:05:39 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970600dc0d") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='pids.events\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000d00)="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") close(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f00000002c0)='em0selinuxppp0%self%cpuset\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) [ 251.934470] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/l1tf.html for details. 19:05:39 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) [ 252.097767] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 252.140858] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) [ 252.156638] device lo entered promiscuous mode [ 252.195537] device lo left promiscuous mode [ 252.211601] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 252.252491] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) 19:05:39 executing program 3: r0 = socket(0x10, 0x3, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socket(0x0, 0x7, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:05:41 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r1, &(0x7f0000000280)=0x52, 0x800000080000002) 19:05:41 executing program 0: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x32, 0xffffffffffffffff, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) rt_sigtimedwait(&(0x7f0000000000), &(0x7f0000000100), 0x0, 0x8) 19:05:41 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000040)="6c6f00966fd651b959a9c84a2c00d2970600dc0d") openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000280)='pids.events\x00') socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000d00)="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") close(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x1b, &(0x7f00000002c0)='em0selinuxppp0%self%cpuset\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 19:05:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:41 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0) write$P9_RXATTRCREATE(r1, &(0x7f00000000c0)={0x525}, 0xfffffffffffffdab) open(&(0x7f0000000140)='./bus\x00', 0x0, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/full\x00', 0x200000, 0x0) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)={'broute\x00', 0x0, 0x0, 0x98, [], 0x0, &(0x7f0000000400), &(0x7f0000000440)=""/152}, &(0x7f0000000580)=0x50) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[]}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3f}) 19:05:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x6, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0), 0x20) read(r0, &(0x7f00003fefff)=""/1, 0x1) 19:05:41 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$EVIOCGREP(r0, 0x4010744d, &(0x7f0000001000)=""/174) [ 253.874195] device lo entered promiscuous mode [ 253.890378] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 19:05:41 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r1 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x2c) ptrace$cont(0x18, r1, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x21, r1, 0x0, 0x0) 19:05:41 executing program 4: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 19:05:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x1000000efffffff, 0x100000000000000, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000000000d30000000003000600252000000200006ae00000010000000001000000080012000200020000af5100fa0000003000000002030000000000c6a8000000020000000008000092ab000000000001020014bb00200000ffffffde000000000300050000200000020000f3df0000210008000002000000"], 0x80}}, 0x0) [ 253.957334] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) 19:05:41 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000300)=0x80, 0x80000) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @mcast1, 0x9}, 0x1c) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r4, 0x22401) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r6 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) write$P9_RSETATTR(r3, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r5, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r4, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 19:05:41 executing program 3: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0x41004) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) 19:05:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) rt_sigqueueinfo(r1, 0x2, &(0x7f0000000180)={0x3, 0x1ff, 0x9d, 0x3f}) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) r2 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) clone(0x2102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) setsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000200)="c66abb079d5299756f8c7d545c503436fd7d7bcde8b7fb703e387340d1465bae8111bce2ead369d2852a4d30579939df4bb1f9d15096eb3d746aaa6ce789d4fc2824e13800d33ffa5c162d3d91750a49f80fceee26ecc3b58d4e4f3c876f2e385f14e7a411a22a2cb261c234cc9230b42cd48a411e41ef59fabf635049ab04b8c9f9ac2afac68ea539618ee4e284f79e", 0x90) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="00042abd7000fcdbdf250d00000044000300080008008000000008000100010000000800080009000000080001000200000008000400987000000800030002000000080001000200000008000800ff000000600001000800090026000000080004004e22000014000300ac1414bb00000000000000000000000014000300fe80000000000000000000000000000f08000200bf0000000c00070006ca398b2c000000080001000a000000080004004e21000008000500b80c00001c0003000800080009000000080001000200000008000100030000"], 0x1}}, 0x80) [ 254.147173] audit: type=1804 audit(1541617541.515:31): pid=7333 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir456505184/syzkaller.jAsreX/4/bus" dev="sda1" ino=16554 res=1 19:05:41 executing program 5: r0 = socket(0x80000000000000a, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="72617700000000000000000000000000cf5900000002000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x1) 19:05:41 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, &(0x7f0000000440), 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) [ 254.249869] audit: type=1804 audit(1541617541.615:32): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir962040777/syzkaller.uGopit/4/bus" dev="sda1" ino=16559 res=1 [ 254.287812] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 19:05:41 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0x1000000e8) fcntl$setstatus(r1, 0x4, 0x46c00) io_setup(0x1, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) symlink(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000040)='./file1\x00') ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000080)) [ 254.357886] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) [ 254.380476] audit: type=1804 audit(1541617541.685:33): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor3" name="/root/syzkaller-testdir962040777/syzkaller.uGopit/4/bus" dev="sda1" ino=16559 res=1 19:05:41 executing program 3: syz_mount_image$nfs(&(0x7f0000000080)='nfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002280)='/dev/snd/timer\x00') 19:05:41 executing program 5: r0 = memfd_create(&(0x7f00000007c0)='\x00', 0x0) ftruncate(r0, 0x7) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) memfd_create(&(0x7f00000000c0)='\x00', 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x100000020000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000016c0)=ANY=[], &(0x7f0000001640)) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x10) rt_sigpending(&(0x7f00000012c0), 0x8) r3 = syz_open_dev$rtc(&(0x7f0000001180)='/dev/rtc#\x00', 0x2, 0x0) write(r3, &(0x7f00000011c0)="f1000000", 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000001580)=0x2000000, 0xffffffffffffff0e) write$P9_RLERROR(r2, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r1], 0x15) getsockopt$inet6_buf(r5, 0x29, 0x33, &(0x7f0000002700)=""/4096, &(0x7f0000001380)=0x1173) flistxattr(0xffffffffffffffff, &(0x7f0000001200)=""/158, 0x9e) pipe(&(0x7f0000000040)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000140)=[{0x4, 0x8}, {0x4, 0x4000000000000000}, {0x3}, {}, {0x8, 0x5}], 0x5) openat$full(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/full\x00', 0x202007, 0x0) unshare(0x40000000) listxattr(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=""/211, 0xd3) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) getsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000001680), &(0x7f0000000040)=0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) [ 254.457936] audit: type=1804 audit(1541617541.705:34): pid=7342 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir962040777/syzkaller.uGopit/4/bus" dev="sda1" ino=16559 res=1 19:05:41 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:42 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x608040, 0x0) r0 = creat(&(0x7f0000000200)='./bus\x00', 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f0000000180)='./bus\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000d83ff8), 0x8000fffffffe) [ 254.674439] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem 19:05:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @multicast2}}, &(0x7f0000000300)=0x80, 0x80000) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e21, 0xfffffffffffffff8, @mcast1, 0x9}, 0x1c) creat(&(0x7f0000000200)='./bus\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r3, 0x22401) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$P9_RSETATTR(r2, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) [ 254.765569] IPVS: ftp: loaded support on port[0] = 21 [ 254.773679] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) [ 254.946717] audit: type=1804 audit(1541617542.315:35): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/7/bus" dev="sda1" ino=16558 res=1 [ 255.066209] audit: type=1804 audit(1541617542.345:36): pid=7380 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor3" name="/root/syzkaller-testdir962040777/syzkaller.uGopit/6/bus" dev="sda1" ino=16564 res=1 19:05:42 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800", 0x43732e5398416f1a}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'bond_slave_0\x00', @local}) 19:05:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:42 executing program 4: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0x41004) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) [ 255.193502] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 255.205843] audit: type=1804 audit(1541617542.355:37): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor2" name="/root/syzkaller-testdir456505184/syzkaller.jAsreX/4/bus" dev="sda1" ino=16554 res=1 19:05:42 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) [ 255.423203] audit: type=1804 audit(1541617542.355:38): pid=7384 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir456505184/syzkaller.jAsreX/4/bus" dev="sda1" ino=16554 res=1 [ 255.560430] IPVS: ftp: loaded support on port[0] = 21 [ 255.576653] audit: type=1804 audit(1541617542.785:39): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir371777251/syzkaller.dVluC6/5/bus" dev="sda1" ino=16565 res=1 19:05:43 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x71}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setitimer(0x2, &(0x7f00000000c0)={{0x77359400}}, 0x0) 19:05:43 executing program 4: mkdir(&(0x7f0000001b40)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) truncate(&(0x7f0000000300)='./bus\x00', 0x41004) r1 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) lseek(r0, 0x0, 0x2) sendfile(r0, r1, &(0x7f0000000040), 0x8000fffffffe) truncate(&(0x7f00000000c0)='./bus\x00', 0x0) [ 255.630800] audit: type=1804 audit(1541617542.885:40): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir371777251/syzkaller.dVluC6/5/bus" dev="sda1" ino=16565 res=1 [ 255.659109] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:43 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockname(r0, &(0x7f0000000100)=@xdp, &(0x7f0000000180)=0x3e) 19:05:43 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) [ 255.945478] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:44 executing program 5: r0 = memfd_create(&(0x7f00000007c0)='\x00', 0x0) ftruncate(r0, 0x7) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) ioctl$VT_WAITACTIVE(0xffffffffffffffff, 0x5607) memfd_create(&(0x7f00000000c0)='\x00', 0x2) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x100000020000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000016c0)=ANY=[], &(0x7f0000001640)) add_key$user(&(0x7f0000000700)='user\x00', &(0x7f0000000200), &(0x7f0000000240), 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x10) rt_sigpending(&(0x7f00000012c0), 0x8) r3 = syz_open_dev$rtc(&(0x7f0000001180)='/dev/rtc#\x00', 0x2, 0x0) write(r3, &(0x7f00000011c0)="f1000000", 0x4) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x11, &(0x7f0000001580)=0x2000000, 0xffffffffffffff0e) write$P9_RLERROR(r2, &(0x7f00000016c0)=ANY=[@ANYRESDEC=r1], 0x15) getsockopt$inet6_buf(r5, 0x29, 0x33, &(0x7f0000002700)=""/4096, &(0x7f0000001380)=0x1173) flistxattr(0xffffffffffffffff, &(0x7f0000001200)=""/158, 0x9e) pipe(&(0x7f0000000040)) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000140)=[{0x4, 0x8}, {0x4, 0x4000000000000000}, {0x3}, {}, {0x8, 0x5}], 0x5) openat$full(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/full\x00', 0x202007, 0x0) unshare(0x40000000) listxattr(&(0x7f0000001400)='./file0\x00', &(0x7f0000001440)=""/211, 0xd3) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast}, {0x0, @random="59a310eebccc"}, 0x0, {0x2, 0x0, @dev}, 'team0\x00'}) getsockopt$inet6_int(r6, 0x29, 0x46, &(0x7f0000001680), &(0x7f0000000040)=0x4) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:05:44 executing program 0: 19:05:44 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) shutdown(r0, 0x0) sendto$inet(r0, &(0x7f0000000200), 0xfffffffffffffeb4, 0x20008011, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback, [0x2]}, 0x10) recvmmsg(r0, &(0x7f0000001440)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000880), 0x0, &(0x7f0000000900)=""/238, 0xee}}], 0x1, 0x21, &(0x7f0000001cc0)) 19:05:44 executing program 2: 19:05:44 executing program 4: 19:05:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000), 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:44 executing program 2: 19:05:44 executing program 4: [ 257.431590] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 257.446463] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:05:44 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000), 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:44 executing program 0: [ 257.543735] IPVS: ftp: loaded support on port[0] = 21 19:05:44 executing program 4: 19:05:44 executing program 0: [ 257.589729] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:45 executing program 5: 19:05:45 executing program 2: 19:05:45 executing program 3: 19:05:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000), 0x0, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:45 executing program 4: 19:05:45 executing program 0: 19:05:45 executing program 5: 19:05:45 executing program 2: 19:05:45 executing program 0: 19:05:45 executing program 4: 19:05:45 executing program 5: [ 258.270427] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:45 executing program 2: 19:05:45 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001", 0x1d, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:45 executing program 3: 19:05:45 executing program 0: 19:05:45 executing program 4: 19:05:45 executing program 2: 19:05:45 executing program 3: 19:05:45 executing program 5: [ 258.499209] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:45 executing program 0: 19:05:46 executing program 4: 19:05:46 executing program 2: 19:05:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001", 0x1d, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:46 executing program 3: 19:05:46 executing program 5: 19:05:46 executing program 4: 19:05:46 executing program 0: [ 258.755202] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:46 executing program 3: 19:05:46 executing program 2: 19:05:46 executing program 5: 19:05:46 executing program 0: 19:05:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001", 0x1d, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:46 executing program 2: 19:05:46 executing program 3: 19:05:46 executing program 4: 19:05:46 executing program 5: [ 259.042828] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:46 executing program 0: 19:05:46 executing program 3: 19:05:46 executing program 2: 19:05:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000", 0x2c, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:46 executing program 4: 19:05:46 executing program 5: 19:05:46 executing program 3: 19:05:46 executing program 0: 19:05:46 executing program 2: 19:05:46 executing program 4: [ 259.298621] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:46 executing program 5: 19:05:46 executing program 3: 19:05:46 executing program 2: 19:05:46 executing program 0: 19:05:46 executing program 4: 19:05:46 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000", 0x2c, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:46 executing program 3: 19:05:46 executing program 2: 19:05:47 executing program 0: 19:05:47 executing program 4: 19:05:47 executing program 5: [ 259.618444] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:47 executing program 2: 19:05:47 executing program 0: 19:05:47 executing program 3: 19:05:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000", 0x2c, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:47 executing program 4: 19:05:47 executing program 5: 19:05:47 executing program 0: 19:05:47 executing program 3: 19:05:47 executing program 2: [ 259.909409] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:47 executing program 4: 19:05:47 executing program 5: 19:05:47 executing program 0: 19:05:47 executing program 2: 19:05:47 executing program 3: 19:05:47 executing program 4: 19:05:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:47 executing program 0: 19:05:47 executing program 5: 19:05:47 executing program 2: 19:05:47 executing program 4: [ 260.245513] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:47 executing program 3: 19:05:47 executing program 0: 19:05:47 executing program 5: 19:05:47 executing program 4: 19:05:47 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:47 executing program 2: 19:05:47 executing program 3: 19:05:47 executing program 4: [ 260.508464] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:47 executing program 0: 19:05:48 executing program 2: 19:05:48 executing program 3: 19:05:48 executing program 5: 19:05:48 executing program 0: 19:05:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe", 0x33, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:48 executing program 4: 19:05:48 executing program 3: 19:05:48 executing program 2: 19:05:48 executing program 5: 19:05:48 executing program 0: [ 260.865555] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:48 executing program 4: 19:05:48 executing program 3: 19:05:48 executing program 2: 19:05:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:48 executing program 5: 19:05:48 executing program 0: 19:05:48 executing program 4: 19:05:48 executing program 3: 19:05:48 executing program 2: [ 261.114141] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:48 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{&(0x7f0000003980)=@rc, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001880)=""/190, 0xbe}], 0x1, &(0x7f0000002c00)=""/125, 0x7d}}], 0x1, 0x0, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x1f000000) 19:05:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f0000000140)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)) ioctl$TCFLSH(r1, 0x540b, 0x0) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r2, 0x5402, &(0x7f00000001c0)) 19:05:48 executing program 4: r0 = socket(0x10, 0x2, 0x80000000c) write(r0, &(0x7f0000000040)="1f0000000104ff00fd01f5ffffff00200a0501000800010003f2511a10df00", 0x1f) 19:05:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b3fdc)) write(r0, &(0x7f0000000380)="4f7ad0c9edb302486f1748144523c0c253773e00d49ba39063e2432e8de58f59a03774116e4530fd07000000dcf50bbc54b70c0ea17b4728dde5f9eedfc811ff1f75642558334444c9fe3d13", 0x4c) r1 = syz_open_pts(r0, 0x1) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="10", 0x1}], 0x1) ioctl$TCSETS(r1, 0x5402, &(0x7f00000000c0)) lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.upper\x00', &(0x7f0000000280)={0x0, 0xfb, 0x15, 0x4, 0x0, "99bafd705da7a2dada019de5d459ab7f"}, 0x15, 0x0) [ 261.359099] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 261.386843] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:48 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:48 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:48 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ff", 0x37, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:49 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:49 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000040)=""/55, 0x37}], 0x1, 0x0) 19:05:49 executing program 0: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000000), 0xffffffffffffffff) r0 = gettid() wait4(0x0, &(0x7f00000003c0), 0x80000000, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x1b) tkill(r0, 0x28) ptrace$cont(0x1f, r0, 0x0, 0x0) ptrace$cont(0x18, r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaa}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180), 0x4) ptrace$cont(0x1f, r0, 0x0, 0x0) [ 261.660487] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:49 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/packet\x00') read$FUSE(r0, &(0x7f00000014c0), 0x1000) 19:05:49 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = accept(r0, &(0x7f0000000340), &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000580)=@canfd={{0x4, 0x0, 0x6, 0x40}, 0xc, 0x0, 0x0, 0x0, "2608a0db0997d9c9c1e9733215cdec35da9e86b6e5adb93df1de742247319063018a10d39ff67b7413d32a1156e41e32f4f5f568c534d54f12e3d7ab6203195c"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4040840) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet6(0xa, 0x1000000000006, 0x3ff) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000880)={@rand_addr, @multicast2, 0x0}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', r4}) r5 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x8, 0xc20, 0xdac8, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x80000000, 0x30}, &(0x7f0000000300)=0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) accept4$packet(r5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14, 0x80000) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000640)=0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffe, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={r7, 0x6, 0x1, 0x0, &(0x7f0000000640)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000400020000a358"], 0x1}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e20, 0x0, @dev}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @broadcast}], 0x4c) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='rose0\x00', 0x10) sendmsg(r0, &(0x7f00000006c0)={&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000540)='A', 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x40) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 261.978002] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x8002, &(0x7f0000527ff8), 0x0, 0x0) 19:05:49 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1000001, &(0x7f0000527ff8), 0x0, 0x0) 19:05:49 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') writev(0xffffffffffffffff, &(0x7f00000000c0), 0x20000000000003fa) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x2, 0x2d8, [0x0, 0x20000600, 0x20000630, 0x20000808], 0x0, &(0x7f0000000000), &(0x7f0000000600)=ANY=[@ANYBLOB="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"]}, 0x350) 19:05:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:49 executing program 3: syz_emit_ethernet(0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60c22df77c002c00fe800000000000000000000088000000fe80000000aa00f3000204019078c598000087ae00ca00000000000000000000"], &(0x7f0000000000)) 19:05:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000000040)={0x10, 0x4800000000000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) [ 262.205313] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 262.215209] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 19:05:49 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') 19:05:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x1400000000000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c00000032000107000000000000000004000000180001001400010000000c000100726b626d6f6400000000c96eff426a0aa3360f5cd8cb8e6d5946c9fee98b2afd3537ef35a535e03d4fa5f02be430bd10be1a038289b34b7c4b0dcf92986543a7b2915db1283b25196205bdae6e4daf4e2a945c9a3a1de4f2a197d17c173eb5e8110e1a0f09ff88bdd3f7f5"], 0x1}}, 0x0) [ 262.269663] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:49 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0xfe3a) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), 0x74) [ 262.333691] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:05:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53", 0x39, 0x400}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:49 executing program 3: timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) socket(0x4, 0x0, 0x2000000000b5) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x15, 0x1, 0xffffffff, "9b79ebb472ad10c53629b49b0b7d55f6"}, 0x15, 0x2) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000340)='threaded\x00', 0xffffffc5) lsetxattr$security_selinux(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='security.selinux\x00', &(0x7f0000000980)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x2) syncfs(0xffffffffffffffff) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 19:05:49 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000180)) 19:05:49 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="000775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x359, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000004380)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/116, 0x20000234}], 0x1, &(0x7f0000000240)=""/110, 0x6e}}], 0x1, 0x0, 0x0) 19:05:49 executing program 5: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x1000000002e, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x3a000000}, @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "093a06", 0x8, 0x3a, 0x0, @remote={0xfe, 0x80, [0x4788]}, @mcast2, {[], @udp={0x0, 0x0, 0x8}}}}}}, &(0x7f0000000100)) [ 262.484368] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x7b, 0x0, [0x6e0]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 19:05:49 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000000)) 19:05:50 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x7b, 0x0, [0x6e0]}) [ 262.666705] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x18f040, 0x32) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000200)=0x7) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xed}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000040)='./bus\x00') r4 = socket$inet6(0xa, 0x1, 0x1) r5 = fcntl$getown(r4, 0x9) ptrace$pokeuser(0x6, r5, 0x7fffffff, 0xfffffffffffffffb) ioctl(r4, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") remap_file_pages(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x1, 0x74f, 0x1000) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x4) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYRESDEC=r4, @ANYRESOCT], 0x9a521f83e3116596) mkdir(&(0x7f0000000680)='./bus\x00', 0x22) ioctl$PIO_UNISCRNMAP(r6, 0x4b6a, &(0x7f0000000fc0)="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") r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r7, 0x29, 0xcf, &(0x7f0000000840)=0x1, 0x12d) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000880)={@remote, 0x800, 0x0, 0x3, 0x1, 0x0, 0x10001}, 0x20) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000400)=[{0x3, 0x2}, {0xa, 0x3f}, {0x4, 0x8}, {0x3, 0x8}, {0x7, 0x294}, {0x7, 0x4}, {0x6}, {0x4, 0x72}, {0x8, 0x7}], 0x9) fcntl$setownex(r3, 0xf, &(0x7f0000000180)={0x2, r5}) fsetxattr$trusted_overlay_redirect(r4, &(0x7f00000007c0)='trusted.overlay.redirect\x00', &(0x7f0000000800)='./bus\x00', 0x6, 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000000)={@local, 0x0, 0x0, 0xfe, 0x3}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) ioctl$TIOCLINUX5(r3, 0x541c, &(0x7f00000004c0)={0x5, 0xfff, 0x5, 0x100000000, 0x40001}) clock_nanosleep(0x7, 0x1, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140)) syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000300)='./bus\x00', 0x7, 0x1, &(0x7f0000000780)=[{&(0x7f00000006c0)="c019afd0c52c4aad77c02610b503377a31b4ba591844118c2858fbd4a8b699e4e6479f8c62ea129536bb59b1aa095bb7a73cb9ce250f709c0c3bea88467d91489adb126d62275b3c25a02ef5e4b99b1705fe0a9da618d509c873a2779d01fc6639b60caaf39414bdece44039d12522da149df6fe6195ef858851ef83aa4b1081f06d", 0x82, 0x9}], 0x4, &(0x7f00000005c0)=ANY=[]) connect$inet6(r7, &(0x7f0000000500)={0xa, 0x0, 0x40f7, @mcast2, 0x7ff}, 0x9) r8 = syz_open_procfs(r5, &(0x7f0000000ac0)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") sendmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="1c4e2e23e52fe6679e7d342d0ef229ab846bc88192abe3a7dda153fed0fb80fbb3ce24b36b4f73663acd36450bff989e9ff0663f3065eff8642dfd1e68664fa22f8dc330a7497fa30471b5392167ac15a69450c36287", 0x56}], 0x1, &(0x7f00000009c0), 0x0, 0x20000080}, 0x8800) sendfile(r8, r8, &(0x7f00000000c0)=0x202, 0x5a) 19:05:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) [ 262.810221] kauditd_printk_skb: 6 callbacks suppressed [ 262.810235] audit: type=1800 audit(1541617550.175:47): pid=7858 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=16588 res=0 19:05:50 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket(0x840000000002, 0x3, 0xff) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") sendfile(r3, r4, &(0x7f0000000180), 0x100000001) 19:05:50 executing program 0: clock_adjtime(0x0, &(0x7f00000006c0)={0x7ff}) [ 262.894562] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 19:05:50 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000974fee)='/dev/input/event#\x00', 0x0, 0x101002) write$binfmt_elf64(r0, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{0x0, 0x0, 0x0, 0x0, 0x10000}]}, 0x78) [ 262.957501] mmap: syz-executor4 (7858) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 263.035756] audit: type=1804 audit(1541617550.405:48): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir371777251/syzkaller.dVluC6/34/bus" dev="sda1" ino=16588 res=1 19:05:50 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0xfb) r1 = accept(r0, &(0x7f0000000340), &(0x7f0000000000)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000600)={&(0x7f0000000440)={0x1d, r2}, 0x10, &(0x7f0000000480)={&(0x7f0000000580)=@canfd={{0x4, 0x0, 0x6, 0x40}, 0xc, 0x0, 0x0, 0x0, "2608a0db0997d9c9c1e9733215cdec35da9e86b6e5adb93df1de742247319063018a10d39ff67b7413d32a1156e41e32f4f5f568c534d54f12e3d7ab6203195c"}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4040840) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0xfdf6) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) r3 = socket$inet6(0xa, 0x1000000000006, 0x3ff) ioctl(r3, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000880)={@rand_addr, @multicast2, 0x0}, &(0x7f00000008c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000900)={'team0\x00', r4}) r5 = socket(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000200)={0x1, 0x8, 0xc20, 0xdac8, 0x0}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000002c0)={r6, 0x80000000, 0x30}, &(0x7f0000000300)=0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) accept4$packet(r5, &(0x7f0000000800)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000840)=0x14, 0x80000) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000640)=0x4) r7 = openat$cgroup_root(0xffffffffffffff9c, 0xfffffffffffffffe, 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={r7, 0x6, 0x1, 0x0, &(0x7f0000000640)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b40), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000400020000a358"], 0x1}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e20, 0x0, @dev}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @broadcast}], 0x4c) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='rose0\x00', 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000700)={0xfffffffffffffff7, 0x40000007fff, 0x80000001}, 0x14) shutdown(r0, 0x1) [ 263.208493] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.229246] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 263.250600] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.272395] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 263.292187] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 263.311879] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 19:05:50 executing program 0: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) tkill(r1, 0x22) ptrace$setopts(0x4204, r1, 0x2, 0xa06ff3) 19:05:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000400)="66b9800000c00f326635000400000f300fc71e4425749e66b8eab9ffdd0f23d80f21f86635400000100f23f866b8ef6700000f23c00f21f8663501000f000f23f866b9860b000066b80300000066ba000000000f306666660fd5ef66b8ca9300000f23d00f21f86635100000010f23f8ba6100ec66b80d0000000f23d00f21f866351000000e0f23f8", 0x89}], 0x1, 0x0, &(0x7f0000000180), 0x106e) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19:05:50 executing program 5: mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x4001b071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r1, 0x1) recvmmsg(r0, &(0x7f0000001f4c), 0x4000000000001b9, 0x0, 0x0) [ 263.350214] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:05:50 executing program 5: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x0) [ 263.393765] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock 19:05:50 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a}], 0x0, &(0x7f0000000140)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}) 19:05:50 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) [ 263.519342] audit: type=1804 audit(1541617550.886:49): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir371777251/syzkaller.dVluC6/34/bus" dev="sda1" ino=16588 res=1 [ 263.550753] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 263.641273] audit: type=1800 audit(1541617550.886:50): pid=7863 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor4" name="bus" dev="sda1" ino=16588 res=0 19:05:51 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 19:05:51 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp\x00') [ 263.744232] audit: type=1804 audit(1541617550.946:51): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor4" name="/root/syzkaller-testdir371777251/syzkaller.dVluC6/34/bus" dev="sda1" ino=16588 res=1 19:05:51 executing program 5: syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="b100485caa2a00000000000081004f09080045000001fcffff000002907800000000ffffffff12009078e0000001"], &(0x7f0000000280)={0x0, 0x0, [0x0, 0x0, 0x0, 0x7ffffffffffffffc]}) 19:05:51 executing program 4: r0 = socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000023c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r2) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") 19:05:51 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:51 executing program 0: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:51 executing program 5: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r2, &(0x7f0000000280)=0x52, 0x800000080000002) [ 263.836353] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 263.853960] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) 19:05:51 executing program 3: semctl$SEM_STAT(0x0, 0x0, 0x12, &(0x7f0000000000)=""/219) 19:05:51 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:51 executing program 5: r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000100), &(0x7f0000000140)=0x10) 19:05:51 executing program 3: shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) 19:05:51 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000400000003a) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r1 = dup2(r0, r0) write$P9_RXATTRWALK(r1, &(0x7f0000000040)={0xf}, 0xf) 19:05:51 executing program 0: r0 = socket$inet6(0xa, 0x1040000000002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={"6c6f00ec08562fe8b02b434e00", 0x0}) connect$netlink(r1, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_IFNAME={0x14, 0x3, 'ip6_vti0\x00'}]}, 0x34}}, 0x0) 19:05:51 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xfffffffffffffee2) r1 = socket(0xa, 0x3, 0x10000000007f) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='ip6tnl0\x00', 0x10) sendto$unix(r1, &(0x7f0000000000), 0x5a4, 0x0, &(0x7f0000000080)=@abs, 0x6e) 19:05:51 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') preadv(r0, &(0x7f0000002380)=[{&(0x7f0000000080)=""/171, 0xab}], 0x1, 0x0) preadv(r0, &(0x7f0000002580), 0x0, 0x0) 19:05:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$inet_group_source_req(r0, 0x0, 0x2d, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x104) 19:05:51 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2) socket$inet(0x2, 0x2, 0x0) msgget$private(0x0, 0x0) 19:05:51 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)="06", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f000021affc)=0x10) 19:05:51 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:51 executing program 3: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000240)={0x78, 0x0, [0x6e0, 0x0, 0x401]}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 19:05:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 19:05:52 executing program 5: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="9f5250d49cf6f4"], 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000300)="902e660fd65c970fc4e27d38d2660f22650f20e035100000000f22e0c744240000000000c74424020f000000c7442406000000000f011c24c744240000600000c744240297000000c7442406000000000f011424f36fb926090000b800580000ba000000000f300f20e035000200000f22e0", 0x72}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 264.752624] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 264.794077] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) 19:05:52 executing program 3: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:52 executing program 4: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:05:52 executing program 0: r0 = memfd_create(&(0x7f0000000180)='\x00', 0x0) write(r0, &(0x7f0000000100)="564690f1", 0x4) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) setrlimit(0x1, &(0x7f0000011000)) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00'], 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f0000000040), 0x8) 19:05:52 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:52 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x19, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x1a, 0x4, 0x4b}, 0x2c) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x800, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'vlan0\x00'}, 0x18) r2 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) 19:05:52 executing program 1: syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1, &(0x7f00000002c0)=[{&(0x7f0000000000)="800000000002000019000000e601000000000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000140)) 19:05:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9d, &(0x7f00000002c0)=""/157, 0x1000, &(0x7f0000000380)=""/4096, 0xd5, &(0x7f0000001380)=""/213}) [ 265.101889] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 265.110210] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (1 blocks) [ 265.131151] IPVS: set_ctl: invalid protocol: 25 224.0.0.1:20003 [ 265.149777] syz-executor5 uses obsolete (PF_INET,SOCK_PACKET) [ 265.271705] IPVS: set_ctl: invalid protocol: 25 224.0.0.1:20003 19:05:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9d, &(0x7f00000002c0)=""/157, 0x1000, &(0x7f0000000380)=""/4096, 0xd5, &(0x7f0000001380)=""/213}) 19:05:52 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000000cf", 0x1f) 19:05:52 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:52 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 19:05:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000c95ffd), 0x1c00, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) [ 265.474873] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:05:52 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9d, &(0x7f00000002c0)=""/157, 0x1000, &(0x7f0000000380)=""/4096, 0xd5, &(0x7f0000001380)=""/213}) 19:05:52 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) [ 265.524912] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. 19:05:52 executing program 1: socketpair$unix(0x1, 0x100000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x8914, &(0x7f00000000c0)={"65716c000000a95b00", @ifru_mtu=0x1}) 19:05:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) [ 265.637011] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 265.680378] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 19:05:53 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/../file0\x00', 0x1, 0x28) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e22, @broadcast}}) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000080)='./file1/../file0\x00', &(0x7f00000002c0)='./file1\x00') close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 19:05:53 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0xc) write(r1, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r1, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000000cf", 0x1f) 19:05:53 executing program 1: clone(0x800200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x103e, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000040), &(0x7f0000000200)) r0 = inotify_init1(0x802) r1 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) kcmp(r1, r2, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x4, 0xffffffffffffffff, &(0x7f0000000440)) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000000027e, 0x0) 19:05:53 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0401273, &(0x7f00000000c0)={[], 0x0, 0x8000, 0x409}) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x24000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 19:05:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x34d) [ 265.832280] netlink: 3 bytes leftover after parsing attributes in process `syz-executor3'. [ 265.842974] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.857906] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 265.872721] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 19:05:53 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000040)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffe1b0000000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) [ 265.915595] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 265.972721] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 265.997154] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.004313] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 19:05:53 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 19:05:53 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f00004e8000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="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", 0x218, 0x8000, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) close(r0) 19:05:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000002c0), 0x34d) 19:05:53 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) [ 266.030463] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.054683] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 266.068935] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 19:05:53 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @local}, {0xe0000304, @broadcast}, 0x0, {0x2, 0x0, @broadcast}, "0000000000204bf1ec8800000100"}) [ 266.143399] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) 19:05:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) [ 266.230852] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 266.258872] relay: one or more items not logged [item size (56) > sub-buffer size (9)] [ 266.276269] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.283583] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 266.291725] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.300981] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 266.308682] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.331685] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:05:53 executing program 1: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) 19:05:53 executing program 3: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setreuid(0x0, r1) syz_open_procfs(0x0, &(0x7f0000000200)="2f6578650000c10000000000e9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a071fb35331ce39c5a6568641006d7c0206a74e33326530000000000000000000000") 19:05:53 executing program 4: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 19:05:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:53 executing program 5: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[]) r0 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file1/../file0\x00', 0x1, 0x28) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f00000000c0)={'bridge0\x00', {0x2, 0x4e22, @broadcast}}) mount(&(0x7f0000000200)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f000000a000)) chdir(&(0x7f0000000000)='./file0\x00') r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000080)='./file1/../file0\x00', &(0x7f00000002c0)='./file1\x00') close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) quotactl(0x2080000201, &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f00000002c0)) 19:05:53 executing program 0: sched_setaffinity(0x0, 0xffffffffffffff26, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x800000000000004) ioctl(r0, 0x8912, &(0x7f00000000c0)="15bf6234488dd25d726070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x8000, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f0000000340)={0x1, 0x5}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) syz_open_procfs(0x0, &(0x7f0000000000)="2f65786500000000000409004bddd9de91be10eeaf000ee9a90f798058439ed554fa07424ada75af1f02ac06edbcd7a071fb35331ce39c5a00000000") r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) setfsgid(0x0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000040)={[], 0x0, 0x9, 0x4}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$BLKTRACETEARDOWN(r3, 0x1276, 0x0) 19:05:53 executing program 3: 19:05:53 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) [ 266.562750] relay: one or more items not logged [item size (56) > sub-buffer size (9)] 19:05:54 executing program 3: [ 266.615089] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.675653] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 19:05:54 executing program 0: 19:05:54 executing program 3: 19:05:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) [ 266.716796] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.744345] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:05:54 executing program 1: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) 19:05:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2) [ 266.785557] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.845192] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock 19:05:54 executing program 0: syz_emit_ethernet(0x15, &(0x7f0000000040)={@empty, @empty, [{}], {@llc_tr={0x11, {@llc={0x0, 0x0, "dc"}}}}}, &(0x7f0000000080)) 19:05:54 executing program 3: [ 266.925284] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 266.965269] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock 19:05:54 executing program 5: 19:05:54 executing program 3: 19:05:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2) 19:05:54 executing program 0: 19:05:54 executing program 1: 19:05:54 executing program 0: 19:05:54 executing program 3: 19:05:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2) 19:05:54 executing program 1: 19:05:54 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:54 executing program 5: 19:05:54 executing program 0: 19:05:54 executing program 3: 19:05:54 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2) 19:05:54 executing program 1: 19:05:54 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:54 executing program 3: 19:05:54 executing program 5: 19:05:54 executing program 0: 19:05:55 executing program 4: readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2) 19:05:55 executing program 1: 19:05:55 executing program 5: 19:05:55 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:55 executing program 4: syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}, {&(0x7f0000000080)=""/188, 0xbc}], 0x2) 19:05:55 executing program 3: 19:05:55 executing program 0: 19:05:55 executing program 5: 19:05:55 executing program 1: 19:05:55 executing program 0: 19:05:55 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:55 executing program 3: 19:05:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x1) 19:05:55 executing program 5: 19:05:55 executing program 1: 19:05:55 executing program 0: 19:05:55 executing program 3: 19:05:55 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x1) 19:05:55 executing program 5: 19:05:55 executing program 1: 19:05:55 executing program 0: 19:05:55 executing program 3: 19:05:55 executing program 5: 19:05:55 executing program 1: 19:05:55 executing program 0: 19:05:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/75, 0x4b}], 0x1) 19:05:55 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:55 executing program 3: 19:05:55 executing program 1: 19:05:55 executing program 5: 19:05:55 executing program 0: 19:05:55 executing program 3: 19:05:55 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/188, 0xbc}], 0x1) 19:05:55 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:55 executing program 0: 19:05:55 executing program 1: 19:05:55 executing program 5: 19:05:56 executing program 3: 19:05:56 executing program 0: 19:05:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/188, 0xbc}], 0x1) 19:05:56 executing program 5: 19:05:56 executing program 1: 19:05:56 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:56 executing program 0: 19:05:56 executing program 1: 19:05:56 executing program 3: 19:05:56 executing program 5: 19:05:56 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/ip6_flowlabel\x00') readv(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/188, 0xbc}], 0x1) 19:05:56 executing program 0: 19:05:56 executing program 3: 19:05:56 executing program 1: 19:05:56 executing program 4: 19:05:56 executing program 5: 19:05:56 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:56 executing program 0: 19:05:56 executing program 3: 19:05:56 executing program 4: 19:05:56 executing program 5: 19:05:56 executing program 1: 19:05:56 executing program 4: 19:05:56 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:56 executing program 3: 19:05:56 executing program 0: 19:05:56 executing program 5: 19:05:56 executing program 3: 19:05:56 executing program 1: 19:05:56 executing program 4: 19:05:56 executing program 0: 19:05:56 executing program 5: 19:05:56 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f00000002c0), 0x34d) 19:05:56 executing program 1: 19:05:56 executing program 4: 19:05:56 executing program 3: 19:05:56 executing program 0: 19:05:56 executing program 5: 19:05:57 executing program 1: 19:05:57 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:57 executing program 4: 19:05:57 executing program 5: 19:05:57 executing program 0: 19:05:57 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000200)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845a2bed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) getdents64(r0, &(0x7f0000000000)=""/224, 0xe0) 19:05:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000000)=""/227, 0xfb) getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:57 executing program 1: 19:05:57 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:57 executing program 5: 19:05:57 executing program 0: 19:05:57 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00), 0x0, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:57 executing program 4: 19:05:57 executing program 1: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) 19:05:57 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/user\x00') 19:05:57 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:57 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:57 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0xfffffffffffffed5) 19:05:57 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000000040)=""/120, 0x78) 19:05:57 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xe78f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) 19:05:57 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000000006031409200183a00f664b1e98c35f53cd0431efecefe8000000000006d7be0000000000000000001dba09d7500000000fe800000000000000000000000000004"], 0x1) 19:05:57 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0xfffffffffffffee2) r1 = socket(0xa, 0x3, 0x1000000000ff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='ip6tnl0\x00', 0x10) sendto$unix(r1, &(0x7f0000000000), 0x5a4, 0x0, &(0x7f0000000080)=@abs, 0x6e) 19:05:57 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:57 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x0) readv(r1, &(0x7f00000002c0), 0x34d) 19:05:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write(0xffffffffffffffff, &(0x7f0000000600), 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0x1, 0x3c2) setsockopt$inet6_int(r0, 0x29, 0x1000000021, &(0x7f0000000180)=0x3, 0xa5be89580d02122b) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) 19:05:57 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:57 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x709ff8) [ 270.416698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 270.429624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:05:57 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)="2e2f6367726f757000b7ce76e737faf0ea5bdda2c1a7b334a85de6775dc931d6a185f716d654e3ab09ce8fa9876e96c926e745464784e641c28276db7abcb3e8e464922733120190f965dec00e327709f06d83efb8df6a2ec830f8e0b4505cd2ea6fa3c44421fc71031b98742c19ad92c5a7c67b748f0b43d88d10022e201a0247457c49314bbaf8bd40000000", 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001a00)=[{{&(0x7f0000001700)=@generic, 0x80, &(0x7f0000000240), 0xbd, &(0x7f00000019c0)=""/61, 0x3d}}], 0x1, 0x0, &(0x7f0000001ac0)) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000002c0), 0x34d) 19:05:57 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:57 executing program 4: r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)) 19:05:57 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x172) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 19:05:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x709ff8) [ 270.578410] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:05:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:05:58 executing program 2: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x8000000000002, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @loopback, @dev}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @broadcast}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000272000)='net/mcfilter\x00') readv(r1, &(0x7f0000000280)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) readv(r1, &(0x7f0000000140)=[{&(0x7f00000012c0)=""/190, 0xbe}], 0x1) 19:05:58 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x709ff8) 19:05:58 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) 19:05:58 executing program 1: clone(0x0, &(0x7f0000000000), &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000000)) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000100), &(0x7f0000000140)) 19:05:58 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x709ff8) 19:05:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:58 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0xa, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"0000000000000000000000000200", 0x20000015001}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f0000000240), 0xc, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1}, @mpls={[], @ipv6={0x0, 0x6, "314092", 0x18, 0x3a, 0x0, @dev, @mcast2, {[], @icmpv6=@mld={0x0, 0x0, 0x0, 0x0, 0x0, @dev}}}}}, 0xff23) shmdt(0x0) timer_create(0x0, &(0x7f0000000000), &(0x7f0000000080)) 19:05:58 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x2}) 19:05:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:05:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:58 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0xfffffeb3) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000074"]) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000016) 19:05:58 executing program 0: ioctl$TCFLSH(0xffffffffffffffff, 0x5405, 0x709ff8) 19:05:58 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c000200080001c007000000"], 0x1}}, 0x0) [ 271.347112] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 271.405172] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:05:58 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:58 executing program 2: timerfd_gettime(0xffffffffffffffff, &(0x7f00000000c0)) socket(0x4, 0x0, 0x2000000000b5) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x15, 0x1, 0xffffffff, "9b79ebb472ad10c53629b49b0b7d55f6"}, 0x15, 0x2) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) request_key(&(0x7f0000000300)='asymmetric\x00', &(0x7f00000004c0)={'syz'}, &(0x7f0000000500)='\x00', 0xffffffffffffffff) write$cgroup_type(r1, &(0x7f0000000340)='threaded\x00', 0xffffffc5) lsetxattr$security_selinux(&(0x7f0000000640)='./bus\x00', &(0x7f00000006c0)='security.selinux\x00', &(0x7f0000000980)='system_u:object_r:unconfined_execmem_exec_t:s0\x00', 0x2f, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000580)=@buf={0x1000, &(0x7f0000000cc0)="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"}) syncfs(r1) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 19:05:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:05:58 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5405, 0x709ff8) 19:05:59 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x88, 0x1000000000000b, &(0x7f00006ed000), &(0x7f0000f24000)=0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10) [ 271.580121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:05:59 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:59 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x5405, 0x0) 19:05:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:05:59 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 19:05:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8000000008, {{0x2, 0x0, @multicast2}}}, 0x88) request_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xffffffffffffffff) mprotect(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x2) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000100)=0x157) 19:05:59 executing program 1: mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000007240)=[{{&(0x7f0000000040)=@l2, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB='D\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc}}], 0x1, 0x0) 19:05:59 executing program 0: r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000250007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000002600ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) 19:05:59 executing program 2: r0 = socket$inet6(0xa, 0x803, 0x2) r1 = socket(0x11, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={"626f6e6430007499cef700", 0x0}) sendto$packet(r1, &(0x7f0000000000)="49692d690d6ad18e5502", 0xa, 0x0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 19:05:59 executing program 1: mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) process_vm_writev(0x0, &(0x7f0000000180), 0x20000000000004b5, &(0x7f0000003000)=[{&(0x7f0000000000)=""/2, 0x2}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000006ffc)) 19:05:59 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:59 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) close(0xffffffffffffffff) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x72109c5fef5d34d3) r2 = gettid() fcntl$setown(r1, 0x8, r2) fcntl$setsig(r1, 0xa, 0x21) inotify_add_watch(r1, &(0x7f00007a7000)='./control\x00', 0xa4000960) mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) [ 272.321846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 19:05:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:05:59 executing program 2: clone(0x40000104, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200000, 0x0) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x10) r1 = socket$inet6(0xa, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x1) exit(0x0) sendfile(r1, r2, &(0x7f0000000140), 0x2000007fe) [ 272.379793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor0'. 19:05:59 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x8912, &(0x7f00000001c0)="0a4c000240316295717070") mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x803, 0x3) mmap(&(0x7f0000946000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000946000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x8032, 0xffffffffffffffff, 0x0) 19:05:59 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(r0, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:05:59 executing program 0: r0 = socket$kcm(0x10, 0x3, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="230000005e0081aee4050c00000f00fe078bc36f1600000063dac37b7403242189c609", 0x23}], 0x1, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r0, &(0x7f0000007dc0)={&(0x7f0000007a80)=@can, 0x80, &(0x7f0000007d80)}, 0x0) 19:05:59 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000ef80)={0x1, 0x802, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "790eaada477f17eb046695eea58af88d0ba3b8f5ca34f33a9a82d81e455bc6ca3479893215467e3bb85ea1247aafde2b17277187bd8fc023bb972d19343108b0"}}, 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x3, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) [ 272.537034] IPVS: ftp: loaded support on port[0] = 21 19:05:59 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000002fd8)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000010ff0)={0x1d, r1}, 0x10, &(0x7f000000eff0)={&(0x7f0000012f80)={0x4, 0xfffffffffffffffc, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "68759a67d8602d3e4b207446a705148d03f1f86e60b22a6ec7e5b35afc19cd0ed506fb9cdba948697c01f3ec6bc0f8f98290b0198d30bde485753f80c203fe81"}}, 0x80}}, 0x0) 19:05:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup(0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:00 executing program 5: mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x1000000000032, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)="006400ecc19f15bacd6cff4f648d8d4b4f62cf0881f6e4845aabed37657d434b8da93ee7") getdents64(0xffffffffffffffff, &(0x7f0000000df0)=""/528, 0x7f355eb8) 19:06:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000006afd"], 0x1) sendto$inet6(r0, &(0x7f0000000080)="3d57706cca5d299c", 0x8, 0x8040, &(0x7f0000000040)={0xa, 0x2, 0x0, @mcast2}, 0x1c) sendmsg(r0, &(0x7f0000610fc8)={0x0, 0x0, &(0x7f00009f8000)=[{&(0x7f0000554000)="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", 0x59d}], 0x1, &(0x7f0000864bb8)}, 0x0) 19:06:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:00 executing program 4: r0 = socket$packet(0x11, 0x800000000002, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) syz_emit_ethernet(0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000000000000000000080045000000000000000029907a00000000ffffcc908ad40489b6299078c92475b0564c449384e4"], &(0x7f0000000380)) 19:06:00 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = accept4$inet(r0, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f0000000180)=0x10, 0x80800) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000040)={0x5, [0x1, 0x80000001, 0x7, 0xfffffffffffffe00, 0xceb]}, 0xe) r3 = socket(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth0_to_team\x00', 0x0}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)=0xffffffffffffffff, 0x4) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000280)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@loopback, @dev, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x1, 0x4) 19:06:00 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000000)={0x19, @multicast1, 0x4e23, 0x3, 'lc\x00', 0x1a, 0x4, 0x4b}, 0x2c) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x3, 'vlan0\x00'}, 0x18) r1 = socket$inet(0x2, 0xa, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x0, {0x2, 0x0, @loopback}, {0x2, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x27}) 19:06:00 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/arp\x00') sendfile(r0, r2, &(0x7f0000000480), 0x200000008001) 19:06:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:00 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ipv6_route\x00') sendfile(r0, r2, &(0x7f0000000480), 0x200000008001) 19:06:00 executing program 4: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x100000400000003a) [ 272.921308] IPVS: set_ctl: invalid protocol: 25 224.0.0.1:20003 19:06:00 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = dup(r0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) [ 272.992277] IPVS: set_ctl: invalid protocol: 25 224.0.0.1:20003 19:06:00 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x800000, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:00 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:00 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') 19:06:00 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socket(0x0, 0x7, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:00 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:00 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/user\x00') 19:06:00 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x800) 19:06:00 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:00 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000140)={[{@numtail='nonumtail=0'}]}) 19:06:00 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:00 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) [ 273.465536] FAT-fs (loop0): bogus number of reserved sectors 19:06:00 executing program 1: pselect6(0x40, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), 0x0) 19:06:00 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) [ 273.522574] FAT-fs (loop0): Can't find a valid FAT filesystem 19:06:01 executing program 0: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x27a6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400100110000200040000f804", 0x17}], 0x0, &(0x7f0000000140)={[{@numtail='nonumtail=0'}, {@fat=@check_relaxed='check=relaxed'}, {@shortname_mixed='shortname=mixed'}]}) 19:06:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:01 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socket(0x0, 0x7, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:01 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) 19:06:01 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640)='/dev/fuse\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{&(0x7f0000000080)=@xdp, 0x80, &(0x7f0000002040)=[{&(0x7f0000000dc0)=""/52, 0x34}], 0x1, &(0x7f00000020c0)=""/4096, 0x1000}}], 0x1, 0x22, &(0x7f0000006340)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:01 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:01 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r3, 0x22401) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$P9_RSETATTR(r2, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 19:06:01 executing program 1: syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000001580), 0x1008, &(0x7f0000001880)=ANY=[]) 19:06:01 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) [ 274.506615] audit: type=1804 audit(1541617561.876:52): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/88/bus" dev="sda1" ino=16641 res=1 19:06:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:02 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) msgget$private(0x0, 0x0) 19:06:02 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) unshare(0x10040100) 19:06:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:02 executing program 4: r0 = socket(0x10, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) socket(0x0, 0x7, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2600000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfd}, 0x14}}, 0x40800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup(r1) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:02 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x27a6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400100110000200040000f804", 0x17}], 0x0, &(0x7f0000000140)={[{@numtail='nonumtail=0'}, {@fat=@check_relaxed='check=relaxed'}, {@shortname_mixed='shortname=mixed'}, {@shortname_lower='shortname=lower'}, {@rodir='rodir'}]}) [ 275.195566] audit: type=1804 audit(1541617562.556:53): pid=8784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/88/bus" dev="sda1" ino=16641 res=1 [ 275.250572] FAT-fs (loop5): Directory bread(block 24) failed [ 275.280017] FAT-fs (loop5): Directory bread(block 25) failed [ 275.286313] audit: type=1804 audit(1541617562.566:54): pid=8794 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/88/bus" dev="sda1" ino=16641 res=1 [ 275.330507] FAT-fs (loop5): Directory bread(block 26) failed [ 275.354144] FAT-fs (loop5): Directory bread(block 27) failed [ 275.403403] FAT-fs (loop5): Directory bread(block 28) failed [ 275.427680] FAT-fs (loop5): Directory bread(block 29) failed [ 275.449970] FAT-fs (loop5): Directory bread(block 30) failed [ 275.470140] FAT-fs (loop5): Directory bread(block 31) failed 19:06:02 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = dup(0xffffffffffffffff) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:02 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r3, 0x22401) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$P9_RSETATTR(r2, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 19:06:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r3, 0x22401) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$P9_RSETATTR(r2, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 19:06:02 executing program 5: syz_open_procfs(0x0, &(0x7f0000000200)='net/rt6_stats\x00') [ 275.600290] audit: type=1804 audit(1541617562.966:56): pid=8840 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/89/bus" dev="sda1" ino=16660 res=1 19:06:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) [ 275.726761] audit: type=1804 audit(1541617562.966:55): pid=8836 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor1" name="/root/syzkaller-testdir110781915/syzkaller.zrgnaJ/76/bus" dev="sda1" ino=16645 res=1 19:06:03 executing program 5: syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1, &(0x7f0000000140)=[{&(0x7f0000000200)="0001000000ff000000010000c9030000ec000000010008000000000000000000002000f3ff1f000000010000000000006e5fbe5c0000ffff53ef", 0x3a, 0x400}], 0x0, &(0x7f0000000040)) 19:06:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup(r2) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000180)={0x79, 0x0, [0x176]}) 19:06:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)) 19:06:03 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r3, 0x22401) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$P9_RSETATTR(r2, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 19:06:03 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x800000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) [ 276.407980] EXT4-fs (loop5): #blocks per group too big: 4076871680 19:06:03 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0x176]}) [ 276.536356] audit: type=1804 audit(1541617563.906:57): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/90/bus" dev="sda1" ino=16653 res=1 19:06:04 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:04 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:06:04 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x7ff) 19:06:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0x176]}) 19:06:04 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x800000, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:04 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x0, 0x0, [0x176]}) 19:06:04 executing program 1: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000200), 0x0, 0x0, 0x7, 0xffffffffffffff00, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20, "7c903fb8acad09369a9a6bf257f20914996b0b067427236382bc92170545c8b5"}}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 19:06:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79}) 19:06:05 executing program 4: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480), 0x3) recvmsg(r0, &(0x7f0000002880)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000002740), 0x0, &(0x7f0000002800)=""/88, 0x58}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) 19:06:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79}) 19:06:05 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 19:06:05 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000080), 0xff69, 0x20000801, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)="766574683100000000ffffffffffef00", 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x500000000000000}, 0x6) 19:06:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000180)={0x79}) 19:06:05 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_int(r0, &(0x7f0000000100)="6370757365742e6d656d730065f9ab7e9918eeae0e13b597855e1b7afee0c23bb36ceee219e94e07826c9a81bad62048890b966df67cc2360af0d20fdaaf2c71461fb662959b3aeafed1cd581cd8c54522e64901d76302c342907eefaf10", 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2c}]}, 0x1e4) 19:06:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='io.stat\x00', 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000280)={0xc46, 0x0, 0x0, 0x100}) open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, @perf_config_ext, 0x0, 0x3f}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000240)=""/135, 0x87, 0xffffffff) syz_open_pts(r3, 0x22401) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r5 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhci\x00', 0x41, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7ff, 0x1ff, &(0x7f0000000040)=0x3f}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) write$P9_RSETATTR(r2, &(0x7f0000000480)={0x7, 0x1b, 0x2}, 0x7) sendmmsg(r4, &(0x7f00000092c0), 0x800010b, 0x18) getsockopt$EBT_SO_GET_INIT_INFO(r3, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000000)=0x78) ioctl$TIOCNOTTY(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000004c0)={{0xffffffffffffffff, 0x2, 0x7fffffff, 0x0, 0x3a24}}) openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.memory_migrate\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)="2f67726f75702e73746174003c23fb572a1f0294e6f378b41ad54b4d9d9a1f63f8785ad188a7e1c88875e05b18a4cb3a9cd12dcea440d899c22c652b3a471b4a7fa2f3fdf6e034d804e5f0df4b1dee483b157624c59c0100e89e6a357c000000", 0x2761, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) 19:06:05 executing program 1: clock_adjtime(0x0, &(0x7f00000006c0)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x9}) [ 277.956228] audit: type=1804 audit(1541617565.320:58): pid=8936 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/91/bus" dev="sda1" ino=16674 res=1 19:06:05 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') 19:06:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x27a6, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400100110000200040000f804", 0x17}], 0x0, &(0x7f0000000140)={[{@numtail='nonumtail=0'}, {@fat=@check_relaxed='check=relaxed'}, {@shortname_lower='shortname=lower'}]}) [ 278.239350] FAT-fs (loop3): Directory bread(block 24) failed [ 278.301109] FAT-fs (loop3): Directory bread(block 25) failed [ 278.340743] FAT-fs (loop3): Directory bread(block 26) failed [ 278.373628] FAT-fs (loop3): Directory bread(block 27) failed [ 278.405283] FAT-fs (loop3): Directory bread(block 28) failed [ 278.432354] FAT-fs (loop3): Directory bread(block 29) failed [ 278.459335] FAT-fs (loop3): Directory bread(block 30) failed [ 278.485169] FAT-fs (loop3): Directory bread(block 31) failed 19:06:05 executing program 1: ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000001c0)={0x8000, 0x20}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1, 0x1efffffc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000700)='./bus\x00', 0x0) msgget$private(0x0, 0x0) 19:06:05 executing program 4: r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r1, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r2 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') sendfile(r0, r2, &(0x7f0000000280), 0x800000080000002) 19:06:05 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) write(r0, &(0x7f0000000600)="34fd98aa1d0e7adec937a5f331a75f487934f50242a0751944936972896c29a5068c8ecba1aa0a4e2a631b5180e1fbde79f4502dc4c4a1fba9dcd9ed83e639aefa1b87631c33d1a82cb0c0035676ddfeb0fe7984d7519b0f839d497fc9d64ef14d1de22220ff2623df4950134b9fb734a52adad95f131cce3672a9d7d7b400d2c62810b5f20351639330948107bf8d4534a03ac389455c54d8eb4d609b3e858b7213b38eb01f0eeaba3739ae927916e28da6a79a3fd5e32d30ab30bf959d4596e5ffbff6789a650b9e7d248d1ba849012336a4f3ef8fab07a8f5b81bb0bc45b2174538315ca12b7c723b2157562564a8a1f19d28179f8c565448e0e921b8c3e6fc4adaafa8b929ad077f633325b6a6f71a586cabc4883e03e19315f946b277858593a7367e232202fe9ad656c6768a1517da7f0498b48cb078e929fb11db0cc551f754bffc4859dd89a396915cc809b07d448573098409ea21371056f67ef4114ec10547f498d24513fe594308bf022868ad21e85bba811942fdc45161a1a8a7fe00d5c6b05ed7954f631bbd12a5c9a5cfa5965e0595de608b04ebe02b3fcbf3b9f57807a1a7ad8528992e2ec65949da2f4a0478dfd3ae52639c15d8aeaa351da6d393b58c772168fae604d097fef4d6b9360eb169a0b0ee70cdc22435a003e68698f61b3b63b1f51011bc8f4ef944c1de821785f670124a1c6ed18335d63412", 0x200) sendfile(r0, r1, 0x0, 0x10000) 19:06:05 executing program 5: r0 = socket$kcm(0x10, 0x1000000000000002, 0x0) recvmsg(r0, &(0x7f0000002880)={&(0x7f0000000100)=@nl=@proc, 0x80, &(0x7f0000002740), 0x0, &(0x7f0000002800)=""/88, 0x58}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="23000000420081aee405e9a4000000000000c6ff07d800400300000000000000000000", 0x23}], 0x1, &(0x7f0000000a00)}, 0x0) 19:06:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0xfffffffffffffde4, 0x0, &(0x7f0000000500)}) [ 278.681174] audit: type=1800 audit(1541617566.040:59): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16681 res=0 19:06:06 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:06 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) 19:06:06 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x20000000000002) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) close(r0) [ 278.775111] binder: 8973:8974 got reply transaction with bad transaction stack, transaction 2 has target 8973:0 [ 278.801071] audit: type=1804 audit(1541617566.070:60): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor0" name="/root/syzkaller-testdir116033194/syzkaller.WI1Qsv/92/file0" dev="sda1" ino=16681 res=1 [ 278.835993] binder: 8973:8974 transaction failed 29201/-71, size 0-0 line 2756 [ 278.903540] binder_alloc: binder_alloc_mmap_handler: 8973 20001000-20004000 already mapped failed -16 19:06:06 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e7, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x2c) r0 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r0, &(0x7f0000002780)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001380), 0x2ed, &(0x7f0000000100)}, 0x0) 19:06:06 executing program 0: r0 = socket(0x10000000a, 0x3, 0x1000000000006) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x2}, 0x20) [ 278.942867] audit: type=1800 audit(1541617566.070:61): pid=8969 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor0" name="file0" dev="sda1" ino=16681 res=0 [ 278.969481] binder: BINDER_SET_CONTEXT_MGR already set [ 278.999704] binder: 8973:8974 ioctl 40046207 0 returned -16 [ 279.037749] binder_alloc: 8973: binder_alloc_buf, no vma [ 279.043731] binder: 8973:8996 transaction failed 29189/-3, size 0-0 line 2973 [ 279.063736] binder: 8973:8974 got reply transaction with no transaction stack [ 279.099890] binder: release 8973:8974 transaction 2 out, still active [ 279.108036] binder: 8973:8974 transaction failed 29201/-71, size 0-0 line 2741 [ 279.120977] binder: send failed reply for transaction 2, target dead [ 279.135395] binder: undelivered TRANSACTION_ERROR: 29189 19:06:06 executing program 1: dup(0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x800000000002, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 19:06:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0xfffffffffffffde4, 0x0, &(0x7f0000000500)}) 19:06:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000240)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000600)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}}], 0xfffffffffffffde4, 0x0, &(0x7f0000000500)}) 19:06:06 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x6c400, 0x0) write(r0, &(0x7f0000000600)="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", 0x200) sendfile(r0, r1, 0x0, 0x10000) 19:06:06 executing program 4: perf_event_open(&(0x7f0000000500)={0x800000000002, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2daf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) [ 279.276576] binder: 9011:9012 got reply transaction with bad transaction stack, transaction 7 has target 9011:0 [ 279.293583] binder: BINDER_SET_CONTEXT_MGR already set [ 279.314991] binder: 9013:9014 ioctl 40046207 0 returned -16 19:06:06 executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x10, 0x829, 0x0, 0x0, {0x3}, [@nested={0xc, 0x2, [@typed={0x8, 0x0, @str='\x00'}]}]}, 0x20}}, 0x0) [ 279.315786] binder: 9011:9012 transaction failed 29201/-71, size 0-0 line 2756 19:06:06 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="0f070f20616426660fe855090f350f22e4c4e205a622f20f5a2666baf80cb8ccae358eef66bafc0cb872000000efb805000000b9000000000f01d9b9800000c00f3235000800000f30", 0x49}], 0x1, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 19:06:06 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x5) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xffffffe8) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) r1 = gettid() ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000000)) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r1, 0x401004000000016) [ 279.388409] binder: 9013:9014 got reply transaction with bad transaction stack, transaction 9 has target 9011:0 [ 279.427964] binder: release 9011:9012 transaction 7 out, still active 19:06:06 executing program 3: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280), &(0x7f0000000240)) flock(r0, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 279.454931] binder: 9013:9014 transaction failed 29201/-71, size 0-0 line 2756 [ 279.486427] binder: release 9013:9014 transaction 9 out, still active [ 279.494760] binder: send failed reply for transaction 7, target dead 19:06:06 executing program 0: clone(0x200, &(0x7f00000000c0), &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000180)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000200)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) mknod(&(0x7f0000000b80)='./file1\x00', 0x0, 0x0) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) execve(&(0x7f0000000040)='./file1\x00', &(0x7f0000000280), &(0x7f0000000240)) flock(r0, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x0) [ 279.533205] binder: send failed reply for transaction 9, target dead 19:06:07 executing program 4: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000140)=[{{&(0x7f00000001c0)=@sco, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000580)=""/246, 0x416}}], 0x4000018, 0x0, &(0x7f00000044c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000540), 0xcf53e35) close(r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x12}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000000040)) tkill(r3, 0x401004000000016) 19:06:07 executing program 2: r0 = socket(0x0, 0x3, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000000)={0x2, 0x0, [{0x1, 0x7, 0x0, 0x3, 0x3}, {0x0, 0x200000000000, 0x1ffe0000000000, 0x100000000, 0xfff}]}) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0x0) r2 = socket(0x0, 0x7, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000140)=@sco, &(0x7f00000004c0)=0xffffffffffffffec, 0x80000) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000400)={0x101, 0x0, {0x0, 0x2, 0x80000000, 0x0, 0x7ff}}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="2e65f32efe0a6766c7442400008000006766c7442402000000006766c744240600000000670f011c24b866000f00d066b88044a2b20f23c80f21f866350400d0000f23f80f0766b80500000066b9080000000f01c10f0766b8010000000f01c10f01dfb835008ee0", 0x68}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000440)=ANY=[]) fsetxattr(r2, &(0x7f0000000040)=@known='trusted.overlay.opaque\x00', &(0x7f0000000740)='GPLeth1keyring-procvboxnet1-vmnet0eth0/,ppp0*security{\x00', 0x37, 0x2) readv(0xffffffffffffffff, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/69, 0x45}, {&(0x7f0000000680)=""/185, 0xb9}, {&(0x7f0000000340)=""/43, 0x2b}, {&(0x7f0000000480)=""/44, 0x2c}], 0x5) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_ifreq(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) [ 279.816750] BUG: unable to handle kernel paging request at 000000360000001b [ 279.823894] PGD 18e837067 P4D 18e837067 PUD 0 [ 279.828489] Oops: 0010 [#1] PREEMPT SMP KASAN [ 279.832989] CPU: 0 PID: 9036 Comm: syz-executor3 Not tainted 4.20.0-rc1-next-20181107+ #107 [ 279.841480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 279.842372] kasan: CONFIG_KASAN_INLINE enabled [ 279.850848] RIP: 0010:0x360000001b [ 279.850869] Code: Bad RIP value. [ 279.850877] RSP: 0018:ffff88017d5deeb8 EFLAGS: 00010293 [ 279.850889] RAX: ffff880187d72080 RBX: 000000360000001b RCX: ffffffff81ed555d [ 279.850898] RDX: 0000000000000000 RSI: ffffffff81ed5c9e RDI: ffff88017d5def38 [ 279.850912] RBP: ffff88017d5df0a0 R08: ffff880187d72080 R09: ffffed003b5c5b67 [ 279.889498] R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff8801d7fdf340 [ 279.896769] R13: ffff88017d5def38 R14: 1ffff1002fabbddb R15: dffffc0000000000 [ 279.903054] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 279.904038] FS: 00007fa259581700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 279.904048] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 279.904057] CR2: 00000035fffffff1 CR3: 000000018e838000 CR4: 00000000001406f0 [ 279.904069] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 279.904082] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 279.947290] Call Trace: [ 279.949970] ? locks_remove_flock+0x236/0x350 [ 279.954474] ? flock_lock_inode+0x11c0/0x11c0 [ 279.959003] ? mark_held_locks+0x130/0x130 [ 279.963243] ? mark_held_locks+0x130/0x130 [ 279.967499] ? unwind_get_return_address+0x61/0xa0 [ 279.972480] ? save_stack+0xa9/0xd0 [ 279.976125] ? save_stack+0x43/0xd0 [ 279.979757] ? kasan_slab_free+0xe/0x10 [ 279.983734] ? kmem_cache_free+0x83/0x290 [ 279.987909] ? put_files_struct+0x34f/0x3c0 [ 279.992237] locks_remove_file+0x148/0x5c0 [ 279.996471] ? fcntl_setlk+0xfc0/0xfc0 [ 280.000387] ? perf_trace_sched_process_exec+0x860/0x860 [ 280.005844] ? __might_sleep+0x95/0x190 [ 280.009890] __fput+0x2f0/0xa70 [ 280.013186] ? get_max_files+0x20/0x20 [ 280.017091] ? trace_hardirqs_on+0xbd/0x310 [ 280.021423] ? kasan_check_read+0x11/0x20 [ 280.025610] ? task_work_run+0x1af/0x2a0 [ 280.029683] ? trace_hardirqs_off_caller+0x300/0x300 [ 280.034795] ____fput+0x15/0x20 [ 280.038079] task_work_run+0x1e8/0x2a0 [ 280.041981] ? task_work_cancel+0x240/0x240 [ 280.046331] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.051872] ? switch_task_namespaces+0x9d/0xd0 [ 280.056580] do_exit+0x1ad1/0x26d0 [ 280.060159] ? refcount_sub_and_test_checked+0x203/0x310 [ 280.065618] ? refcount_dec_if_one+0xc1/0x180 [ 280.070123] ? mm_update_next_owner+0x990/0x990 [ 280.074792] ? print_usage_bug+0xc0/0xc0 [ 280.078857] ? __lock_acquire+0x62f/0x4c20 [ 280.083100] ? graph_lock+0x270/0x270 [ 280.086917] ? __lock_acquire+0x62f/0x4c20 [ 280.091152] ? mark_held_locks+0x130/0x130 [ 280.095428] ? mntput_no_expire+0x1ba/0xc00 [ 280.099752] ? lock_downgrade+0x900/0x900 [ 280.103922] ? check_preemption_disabled+0x48/0x280 [ 280.108944] ? mark_held_locks+0x130/0x130 [ 280.113181] ? print_usage_bug+0xc0/0xc0 [ 280.117242] ? dput.part.25+0x241/0x860 [ 280.121220] ? lock_downgrade+0x900/0x900 [ 280.125367] ? check_preemption_disabled+0x48/0x280 [ 280.130389] ? mntput_no_expire+0x1e6/0xc00 [ 280.134734] ? rcu_softirq_qs+0x20/0x20 [ 280.138716] ? graph_lock+0x270/0x270 [ 280.142556] ? dput.part.25+0x26d/0x860 [ 280.146536] ? graph_lock+0x270/0x270 [ 280.150337] ? find_held_lock+0x36/0x1c0 [ 280.154402] ? memset+0x31/0x40 [ 280.157685] ? find_held_lock+0x36/0x1c0 [ 280.161775] ? get_signal+0x953/0x1970 [ 280.165703] ? _raw_spin_unlock_irq+0x27/0x80 [ 280.170204] ? _raw_spin_unlock_irq+0x27/0x80 [ 280.174705] do_group_exit+0x177/0x440 [ 280.178594] ? trace_hardirqs_off_caller+0x300/0x300 [ 280.183697] ? __ia32_sys_exit+0x50/0x50 [ 280.187766] get_signal+0x8a8/0x1970 [ 280.191481] ? ptrace_notify+0x130/0x130 [ 280.195579] ? save_stack+0x43/0xd0 [ 280.199207] ? kasan_slab_free+0xe/0x10 [ 280.203181] ? kmem_cache_free+0x83/0x290 [ 280.207325] ? putname+0xf2/0x130 [ 280.210810] ? do_sys_open+0x54d/0x700 [ 280.214692] ? __x64_sys_openat+0x9d/0x100 [ 280.218975] ? do_syscall_64+0x1b9/0x820 [ 280.223040] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.228407] ? trace_hardirqs_off+0xb8/0x310 [ 280.232815] ? kasan_check_read+0x11/0x20 [ 280.236988] ? do_raw_spin_unlock+0xa7/0x330 [ 280.241401] ? trace_hardirqs_on+0x310/0x310 [ 280.245848] do_signal+0x9c/0x21c0 [ 280.249395] ? check_preemption_disabled+0x48/0x280 [ 280.254449] ? rcu_lockdep_current_cpu_online+0x1a4/0x210 [ 280.259990] ? setup_sigcontext+0x7d0/0x7d0 [ 280.264788] ? putname+0xf2/0x130 [ 280.268243] ? exit_to_usermode_loop+0x8c/0x380 [ 280.272912] ? exit_to_usermode_loop+0x8c/0x380 [ 280.277583] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 280.282168] ? trace_hardirqs_on+0xbd/0x310 [ 280.286489] ? kmem_cache_free+0x24f/0x290 [ 280.290727] ? do_syscall_64+0x6be/0x820 [ 280.294790] ? do_sys_open+0x3ac/0x700 [ 280.298684] exit_to_usermode_loop+0x2e5/0x380 [ 280.303271] ? __bpf_trace_sys_exit+0x30/0x30 [ 280.307775] do_syscall_64+0x6be/0x820 [ 280.311667] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 280.317031] ? syscall_return_slowpath+0x5e0/0x5e0 [ 280.321961] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.326807] ? trace_hardirqs_on_caller+0x310/0x310 [ 280.332002] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 280.337019] ? prepare_exit_to_usermode+0x291/0x3b0 [ 280.342041] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 280.346907] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 280.352110] RIP: 0033:0x457569 [ 280.355311] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 280.374208] RSP: 002b:00007fa259580c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 280.381913] RAX: 0000000000000005 RBX: 0000000000000004 RCX: 0000000000457569 [ 280.389179] RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffffffffffffff9c [ 280.396678] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 280.403947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa2595816d4 [ 280.411215] R13: 00000000004c2ef4 R14: 00000000004d48d0 R15: 00000000ffffffff [ 280.418487] Modules linked in: [ 280.421678] CR2: 000000360000001b [ 280.425136] ---[ end trace deba1a57bfc051da ]--- [ 280.425148] general protection fault: 0000 [#2] PREEMPT SMP KASAN [ 280.425166] CPU: 1 PID: 9051 Comm: syz-executor3 Tainted: G D 4.20.0-rc1-next-20181107+ #107 [ 280.429905] RIP: 0010:0x360000001b [ 280.436134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 280.446021] Code: Bad RIP value. [ 280.449546] RIP: 0010:__x86_indirect_thunk_rbx+0x10/0x20 [ 280.458873] RSP: 0018:ffff88017d5deeb8 EFLAGS: 00010293 [ 280.462229] Code: 90 0f ae e8 eb f9 48 89 04 24 c3 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 90 0f ae e8 eb f9 48 89 1c 24 0f 1f 44 00 00 66 2e 0f 1f 84 00 00 00 00 00 e8 07 00 00 00 f3 [ 280.467660] RAX: ffff880187d72080 RBX: 000000360000001b RCX: ffffffff81ed555d [ 280.473004] RSP: 0018:ffff880187b96f38 EFLAGS: 00010293 [ 280.491903] RDX: 0000000000000000 RSI: ffffffff81ed5c9e RDI: ffff88017d5def38 [ 280.499164] RAX: ffff880187fc40c0 RBX: 894cdffffc000000 RCX: ffffffff81ed555d [ 280.504511] RBP: ffff88017d5df0a0 R08: ffff880187d72080 R09: ffffed003b5c5b67 [ 280.511792] RDX: 0000000000000000 RSI: ffffffff81ed5c9e RDI: ffff880187b96fc0 [ 280.511806] RBP: ffff880187b97128 R08: ffff880187fc40c0 R09: fffffbfff1322588 [ 280.519066] R10: ffffed003b5c5b67 R11: ffff8801dae2db3b R12: ffff8801d7fdf340 [ 280.526328] R10: fffffbfff1322588 R11: ffffffff89912c43 R12: ffff8801d3587a40 [ 280.533583] R13: ffff88017d5def38 R14: 1ffff1002fabbddb R15: dffffc0000000000 [ 280.540858] R13: ffff880187b96fc0 R14: 1ffff10030f72dec R15: dffffc0000000000 [ 280.548121] FS: 00007fa259581700(0000) GS:ffff8801dae00000(0000) knlGS:0000000000000000 [ 280.555377] FS: 00007fa259581700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 280.562632] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.569888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.578112] CR2: 00000035fffffff1 CR3: 000000018e838000 CR4: 00000000001406f0 [ 280.586319] CR2: 0000001b2c024000 CR3: 00000001c7fda000 CR4: 00000000001406e0 [ 280.592186] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.598052] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.605309] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.612564] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.619817] Kernel panic - not syncing: Fatal exception [ 280.627073] Call Trace: [ 280.649532] ? locks_remove_flock+0x236/0x350 [ 280.654031] ? flock_lock_inode+0x11c0/0x11c0 [ 280.658532] ? kasan_check_read+0x11/0x20 [ 280.662690] ? mark_held_locks+0x130/0x130 [ 280.667020] ? is_bpf_text_address+0xd3/0x170 [ 280.671524] ? kernel_text_address+0x79/0xf0 [ 280.675932] ? __kernel_text_address+0xd/0x40 [ 280.680425] ? unwind_get_return_address+0x61/0xa0 [ 280.685380] ? __save_stack_trace+0x8d/0xf0 [ 280.689711] locks_remove_file+0x148/0x5c0 [ 280.693951] ? fcntl_setlk+0xfc0/0xfc0 [ 280.697837] ? kasan_slab_free+0xe/0x10 [ 280.701812] ? perf_trace_sched_process_exec+0x860/0x860 [ 280.707263] ? do_exit+0xf4d/0x26d0 [ 280.710891] ? get_signal+0x8a8/0x1970 [ 280.714776] ? do_signal+0x9c/0x21c0 [ 280.718489] ? exit_to_usermode_loop+0x2e5/0x380 [ 280.723243] ? prepare_exit_to_usermode+0x342/0x3b0 [ 280.728263] ? retint_user+0x8/0x18 [ 280.731891] ? __might_sleep+0x95/0x190 [ 280.735871] __fput+0x2f0/0xa70 [ 280.739160] ? get_max_files+0x20/0x20 [ 280.743048] ? trace_hardirqs_on+0xbd/0x310 [ 280.747369] ? kasan_check_read+0x11/0x20 [ 280.751515] ? task_work_run+0x1af/0x2a0 [ 280.755578] ? trace_hardirqs_off_caller+0x300/0x300 [ 280.760694] ____fput+0x15/0x20 [ 280.763974] task_work_run+0x1e8/0x2a0 [ 280.767863] ? task_work_cancel+0x240/0x240 [ 280.772187] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 280.777723] ? switch_task_namespaces+0x9d/0xd0 [ 280.782396] do_exit+0x1ad1/0x26d0 [ 280.785932] ? __put_cred+0x28c/0x360 [ 280.789749] ? mm_update_next_owner+0x990/0x990 [ 280.794424] ? prepare_creds+0x4d0/0x4d0 [ 280.798489] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 280.804026] ? do_coredump+0x477/0x4001 [ 280.808001] ? unwind_get_return_address+0x61/0xa0 [ 280.812933] ? __save_stack_trace+0x8d/0xf0 [ 280.817272] ? dump_align+0xa0/0xa0 [ 280.820901] ? save_stack+0xa9/0xd0 [ 280.824546] ? save_stack+0x43/0xd0 [ 280.828179] ? __kasan_slab_free+0x102/0x150 [ 280.832585] ? kasan_slab_free+0xe/0x10 [ 280.836560] ? kmem_cache_free+0x83/0x290 [ 280.840710] ? __sigqueue_free.part.29+0x74/0x90 [ 280.845463] ? __dequeue_signal+0x530/0x7d0 [ 280.849782] ? dequeue_signal+0xbd/0x630 [ 280.853839] ? get_signal+0x3ec/0x1970 [ 280.857724] ? do_signal+0x9c/0x21c0 [ 280.861438] ? exit_to_usermode_loop+0x2e5/0x380 [ 280.866194] ? prepare_exit_to_usermode+0x342/0x3b0 [ 280.871214] ? trace_hardirqs_off+0xb8/0x310 [ 280.875627] ? kasan_check_read+0x11/0x20 [ 280.879793] ? do_raw_spin_unlock+0xa7/0x330 [ 280.884206] ? trace_hardirqs_on+0x310/0x310 [ 280.888622] ? graph_lock+0x270/0x270 [ 280.892433] ? __lock_is_held+0xb5/0x140 [ 280.896498] ? __sigqueue_free.part.29+0x74/0x90 [ 280.901254] ? graph_lock+0x270/0x270 [ 280.905061] ? __sigqueue_free.part.29+0x74/0x90 [ 280.909827] ? rcu_read_lock_sched_held+0x14f/0x180 [ 280.914843] ? kmem_cache_free+0x24f/0x290 [ 280.919091] ? __sigqueue_free.part.29+0x74/0x90 [ 280.923855] ? find_held_lock+0x36/0x1c0 [ 280.927922] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 280.933538] ? proc_coredump_connector+0x4f8/0x630 [ 280.938474] ? proc_comm_connector+0x520/0x520 [ 280.943059] do_group_exit+0x177/0x440 [ 280.946958] ? __ia32_sys_exit+0x50/0x50 [ 280.951021] get_signal+0x8a8/0x1970 [ 280.954744] ? ptrace_notify+0x130/0x130 [ 280.958814] ? force_sig_info+0x281/0x310 [ 280.962968] ? force_sigsegv+0x3d/0x110 [ 280.966939] ? signal_setup_done+0xbb/0x2f0 [ 280.971258] ? __switch_to_asm+0x34/0x70 [ 280.975319] ? set_current_blocked+0x40/0x40 [ 280.979729] ? __schedule+0x8d7/0x21d0 [ 280.983624] ? kasan_check_read+0x11/0x20 [ 280.987778] do_signal+0x9c/0x21c0 [ 280.991318] ? __sched_text_start+0x8/0x8 [ 280.995467] ? setup_sigcontext+0x7d0/0x7d0 [ 280.999791] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 281.004550] ? exit_to_usermode_loop+0x8c/0x380 [ 281.009218] ? exit_to_usermode_loop+0x8c/0x380 [ 281.013887] ? lockdep_hardirqs_on+0x3bb/0x5b0 [ 281.018469] ? trace_hardirqs_on+0xbd/0x310 [ 281.022791] ? prepare_exit_to_usermode+0x342/0x3b0 [ 281.027809] ? preempt_schedule+0x4d/0x60 [ 281.031960] exit_to_usermode_loop+0x2e5/0x380 [ 281.036542] ? __bpf_trace_sys_exit+0x30/0x30 [ 281.041038] ? trace_hardirqs_off_caller+0xbb/0x300 [ 281.046142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.050991] prepare_exit_to_usermode+0x342/0x3b0 [ 281.055837] ? trace_event_raw_event_sys_enter+0x700/0x700 [ 281.061465] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.066311] ? general_protection+0x8/0x30 [ 281.070551] retint_user+0x8/0x18 [ 281.074000] RIP: 0033:0x457575 [ 281.077195] Code: 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 0f 83 cb b3 fb ff 66 2e 0f 1f 84 00 00 00 00 00 48 85 ff 41 57 4d 89 cf 41 56 41 [ 281.096107] RSP: 002b:00000000200000c0 EFLAGS: 00010217 [ 281.101473] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000457569 [ 281.108740] RDX: 0000000020000000 RSI: 00000000200000c0 RDI: 0000000000000200 [ 281.116007] RBP: 000000000072bf00 R08: 0000000020000180 R09: 0000000000000000 [ 281.123274] R10: 0000000020000100 R11: 0000000000000246 R12: 00007fa2595816d4 [ 281.130537] R13: 00000000004bd9e6 R14: 00000000004cc6c8 R15: 00000000ffffffff [ 281.137811] Modules linked in: [ 281.142083] Kernel Offset: disabled [ 281.145737] Rebooting in 86400 seconds..