000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15}) 13:45:20 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB='\n\x00\b\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000300)={0x5f, 0x400, 0x3, 0xa7, r5}, &(0x7f0000000340)=0x10) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) r8 = socket$kcm(0x29, 0x5, 0x0) poll(&(0x7f0000000400)=[{r7, 0x72}, {r8, 0xa004}], 0x2, 0x3ff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x6, 0x5}, &(0x7f0000000240)=0xc) write$ppp(r3, &(0x7f0000000180)="b4f54c015f873b58da76baa5e0fc3cbb3715015ca3ad01aa2901748cf58afbca21cef8e6205d405c054c0f33d6045cb55c18db5f141230ba9df64a1d100e39ff99ee6d0dd8e7c4dccfca76514732b9b6ad4653851e672602b7594707a74186f33356930360e6c0b663a9d5bcf0381f30ed1440fa2014331a7a815803765411ecf9933982c8409a847f941c", 0x8b) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) r10 = creat(&(0x7f0000000380)='./file0\x00', 0xbe) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r10, 0xc040564a, &(0x7f00000003c0)={0x9, 0x0, 0x2009, 0x40, 0x5, 0x4, 0x200, 0x1}) write$cgroup_pid(r9, &(0x7f0000000000), 0x10000000d) 13:45:20 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 225.269196] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13370 comm=syz-executor.4 [ 225.304284] audit: type=1804 audit(1572702320.852:153): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/400/bus" dev="sda1" ino=17127 res=1 [ 225.873621] block nbd3: shutting down sockets 13:45:21 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15}) 13:45:21 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x0) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:21 executing program 2: syz_emit_ethernet(0x69, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa020000ff000091002900810049000011545540f514579000dd18180b4f2502010033891af2a972d39e38c8110815269fc541d6f69d91b3209472b6a4b1bb0400bd5ad8f0ff1141fc5dd429b55dff40f77269a51fdda03be4edd5a360f543a0c5cd50c83f48ab95d3825f9065efcf216d1df3dc0ed68dcb34ab0d8dc2e5bec97e96c51edaeb268b17a20fc000d58844e384da9c5a8bc8bfe76870dc8ed62eec2d9aa92d99fbdf8f3b08eb722088cb0b2bbd721070382b3f1231de0be0243e40e4036a8aa8bce79e518ebf9229a36ae9da49"], 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="240000005e0007031dfffd956f61050007dfc211fe000002ffffa888421ba3a20400ff7e280000001100ffffba16a0aa1c0900000000000013000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000001c0)={0x1, 0x7e, 0x0, 0x6}, 0x10) socket$inet6(0xa, 0x9, 0x7fc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20008, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6) r5 = bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffee3) ioctl(r5, 0x10000, &(0x7f0000000140)="153f6234488dd25d766070") socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) r7 = socket(0x11, 0x3, 0x8) r8 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x6, 0x10000) ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000800)=0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000440)=r9) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x10}) ioctl$RTC_WKALM_RD(r8, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r7, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @empty, 0x4e24, 0x3, 'lblcr\x00', 0x1e, 0x0, 0x10}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r10 = memfd_create(&(0x7f0000000c40)='memory.events\x00\xf0\xb5zCw/Z3\xac\xa2\xd2\xc4\x1c~\xf9M\xe7\xd2R\xe9\x1f\x99 >\xa7\xfe\xb6\xcbQH\xf5\xee\xdfL\xbev\x98\'\x14\xbd\"\xcfT\xde\xe7\x11+\xa5\x9b\xbdMy\xc7\x9b\x9a\x8d\xf5\x978\xb8\x8e>X\xeaq\x9a\xc4\x90\x14\xf5\xae\x90\v\x06\x86\xd1\x1d\x82n\xfa7\xe7}\xc9\xf1u\xee\xb9\xf2\ar\xc8\xeb\x15\x93\xf7\xd5\x14\x8dD\x88\xe4\xca3\x032f\x11%s\xc28\x94\xb9\xd8\xa2\x86\x8c\xf9\xa3;G\x90\xef\xbf\xd9\xb5j}\xec\xc9\x1f&r\xb9I\xba`\xc0\xfen\xf0\xe8\x03\xf0\xee\x82\xbd5b=\xd9\xda^\xb7k`\xedz\x86P\xba\xc9\v\x1fgt\xbaN\xfe7)\xd5\xa4\xf9\xc0\xfa\f_\x15\xd5\xe2v\r)\xa6\xdc\xe3B\x17\xb2\xb2\a\xad\xe6\xa0*\x95\xb2\x91,^\xed3o\x1di\x14\x81>\xa8\xdcb\xe7\x8a\xfc', 0x0) write$binfmt_misc(r8, &(0x7f0000000c40)=ANY=[], 0x0) close(r4) r11 = dup3(r4, r10, 0x10000) setsockopt$inet_sctp_SCTP_EVENTS(r11, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x1, 0x40, 0x7, 0x1f, 0x6, 0x100000000, 0x8001, 0x7d, 0x2, 0x86}, 0xb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfd9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 13:45:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:21 executing program 0: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 225.988906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.997700] audit: type=1804 audit(1572702321.542:154): pid=13391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/401/bus" dev="sda1" ino=17106 res=1 13:45:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r1, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) [ 226.067684] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13396 comm=syz-executor.4 13:45:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r1, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 13:45:21 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15}) [ 226.117365] block nbd3: Receive control failed (result -22) 13:45:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r1, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) [ 226.186246] block nbd0: Receive control failed (result -22) [ 226.246277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13433 comm=syz-executor.4 [ 226.786560] block nbd3: shutting down sockets 13:45:22 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:22 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="b70200000b000000bfa30001000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d607dfc329dfb58296305000000000000008500000001000000a700000000000000950000000000000043f6a9e358eaa828cba05c14bb89774b4e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1b0}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r0, 0x16}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000003580)=[{&(0x7f0000000380)="5a3949e15a59ca4a4f5aa4be7f3aac045e09d14d50687eff5f22b42504b87a6a52a672788b6ca41a1999535a6d2a2b83df0c0ea62ba4801b1640625dca9825702122a689c0bf7d23e5e7e3d188916574915ba83561a6227c69b0cdd407c800485aae7eed632366f9215d344187c900ce8ecabd4eb39d4c0d67fb389fd3b8772e39107039ffed2547af566556aa6bfb3870e66a8740526c49b4fcbb19471d8d832d85b50b0d2bb19c218ab7c947a0cbd33457ece743b8fa45c7ece18932b6f2f94cf32fee361d9bd618d2cf82f008f6c7", 0xd0}, {&(0x7f0000000140)="4140e8e3d10ab0288bd87f98af897ba1bae96940bc688b57439c3348b13d7e", 0x1f}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="1d1640f2c1a191a031af54f752aac10519273c4a492528543d40b21a805ff31ad0a29b642cba6a3f5337c7021fe2625cf85b3a38f8f5b57b1381d1a31cc1f4842958560cd0f6d236260df69cb3ee8ef8b90c63ea515d97c5623cf5d97b528c6a8d0404f24a04306bdef4246b0b81d0851a2494c967fc2410afdb17e7f3617bd001e567c638a4b11e421bd1318571c1dae9efc617e1d4b7869228347a2ac4e416164a95fc3b7c96c308fe84d15d3f852367056edc74b2684bd88e16ecffc334068fce1b83cfb9ac5c809deee592fd437c974256ad9f11a738c9bc7bc9a84d0261f6a8f2", 0xe3}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000180)}, {&(0x7f0000002580)="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", 0x1000}, {&(0x7f0000000280)="947bb0d303da7e1a6d8d49808b921b2fb67b438b2ba692d54f27f213cf544a4f176c74e5eceb9d8605d5c7bbab8b552b0250a2a5fc622e6494c3ba41063403505241f385d12afbaed02e542377330cdb7238d59befeb7ec020f81562a8e638fb6629dc7b2ddbf1bba53d8edc5d1368efd367bfb612f0f68efdfcf6f4d202ed33d40ed46120b7a39ef00cd8efc8c3194abf16384db19ad34138bf9b", 0x9b}], 0x8}, 0x10) 13:45:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, 0x0, 0x0, 0x0) 13:45:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(0xffffffffffffffff, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r15}) [ 226.868447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13443 comm=syz-executor.4 [ 226.884260] audit: type=1804 audit(1572702322.452:155): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/402/bus" dev="sda1" ino=17144 res=1 13:45:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, 0x0, 0x0, 0x0) [ 226.918760] block nbd0: shutting down sockets 13:45:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, 0x0, 0x0, 0x0) 13:45:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) 13:45:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000027c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) mlockall(0x7) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x20886100, 0x0, 0x0, 0x0, &(0x7f0000000100)="d353ff072d0400b4f4d4f600000304000022") pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_DO_IT(r4, 0xab03) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000001c0)={'security\x00'}, &(0x7f0000000240)=0x438) 13:45:22 executing program 1 (fault-call:17 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:22 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(0xffffffffffffffff, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 227.026980] block nbd3: Receive control failed (result -22) [ 227.049186] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13469 comm=syz-executor.4 13:45:22 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) [ 227.107986] audit: type=1804 audit(1572702322.662:156): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/403/bus" dev="sda1" ino=17144 res=1 [ 227.175250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13484 comm=syz-executor.4 [ 227.690149] block nbd3: shutting down sockets 13:45:23 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x40}], 0x1, 0x100, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000200)={0x0, 0x3, [0x40, 0xffffffe1, 0x7ff, 0x82, 0x8, 0xfffffffd, 0x8c94, 0x7fff]}) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) r14 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r14, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r14, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) 13:45:23 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(0xffffffffffffffff, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:23 executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='sessionid\x00') sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x100000000000}, 0x0, 0x0, 0xf0000000, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000280)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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"}}}, 0xfe34) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@ethernet={0x1, @random="0e11189ee15a"}, {&(0x7f0000000640)=""/51, 0x33}, &(0x7f0000000680), 0x2}, 0xa0) socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000006c0), &(0x7f0000000700)=0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0x23, 0x0, &(0x7f0000000040)="cee3f87af8f97b1d9a7a34502d6a611a530000002a0d614fda67dd2705e05b6e936df2", 0x0, 0xf000, 0x0, 0x29, 0x0, &(0x7f0000000180)="5fa9dd69a821774ab0b30a771297c971af242a2a9b0c12f05a26f665bd237f536fd555e342738db819", 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000000100006a0af2fe00000000850000001a000000b700000000000000950000000000000063e165cd844a954b26c933db8e175e097efb3f55bb2007ee5105b42128aa090a79507df79f2d8129cf487130d5f24bf901115e17392ac66ad029d1c08a2c6146101e04aeacea799a22a2fa798b5adc436b27d53337e5003e4be77d81b48a5c69395bf5d87e672ac81350beda8e61dbc2777df150b7cdd77b85b94109a314fd085f028f2ed1a4535550614e09d6378198a60978670838336a440b4d8f699b62aafbad8ada181f7af2abd55a87acb7d153d62058d0a4139f173619ccf55520f22c9cb6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc54fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a5903ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804dc5fa77ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b870f8f92eb6f0e8c70e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84fad791fa99dac06b57479321a0574fb304bc2a168aa43328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16e97fc20faf791ec85821d0c48fb657c29b302b0d2277a84af326f36f3e2c25a61ec45c3af97a8f17da954aff3f7dac1abafa3c18078bc4a04b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac593ad0fde074569ae753a7ac74865cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da3239acad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd383d5612ff0230dc6eb55e9d46de56ef907b059b90bc0289afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870787854df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de59bda7780ae073dfb81c8d6623851c31539b22809e1d7f0cda06a9fa87d64cb778f54334354ec2697a03aff14a9aa4bd908a99494a65044fd539f5096412b926b2e095b84c20243ff98df3347f0e399d1bbf27e3c332f9c0e153b28b2d422ebccec45b9d3fa02208d304d455c3630eeaebde922320178b00cc6ed7946130b547dbf8b497af0a77fbcf2cd1da14a829d7849cbcfc83d5dd697cd592781fdfd266ee0e2ac8b3d547337f858cc93fe9f0d6506fa923be164c9bddca4e59db430698863d0a32381088beefaaf58433960fb72d4fd925c329124a67713017806d29888ada48167abb5bae1f1c8fb3f55e709b862bc8a5ce8d444b3ed7113092867db3f6444162fd50233e00752b4ab6b373b336b52b6e710d7b36e524283e6dfc58473b985ab4de64440048f1b5d39f2fd1ff7823bff8261c065dd5fb75fac7108e8dcea36b0158cbbe00ab161117de2deda42b745524c1ef417dde6850470d7bf5e0055c9d46f648c74c64ab279d5ccfa7d0f68a60d4434276514fb68db4b939a957d9369f8ad776e7d8d5b5b92009f4329a4670998e7c8206b77edb1ea4de291d18cd1f6590e09496b3bf9c17d0000000000000075e3a5f4c995c96ec1fb5a86500edd9c3cfd8541f9a7dc2bb97c699d565e5b5ab9dc1fff5759e307e6ec77d13efc25d3606f02484df90fd1c2dc42e66a2d96655c614fd20f653abf7a61ac3630a3787b3e467db9be79448c1758b3e0e17e4eff1b899368acb9fd75a39e3db8129b48fb449c5d4f609d778e8f1b103de76bb577896d3ec0a476a7a85d22feb83cccfbf46aba93fb9592d1000abf8965eaf041bbcf8dd27e415a771ee05672d78a2a5f35eeaae300c198de53d009f01d246a3130fc9e6e04757843e9600e889f4b8d1cc9e3f030a3d40e9ccd7abb3b4995663688ed875068e420f7fdebb180b84cf75747ed54a73e3711fe914a7530417e29a2ed23829064c4a5f56041cc5690b16f6d6adbb15f87c336f8416415862fe63bc7f3ca85ea685c0e94db54fe3509e784312f846a510d5be9d01bd47e5c4cd1245c4e13640553ea01d1d797ecc9fcd3acb610440f96e6fd5ca570916a4c34244558ec43be8d83d73fd4ff549996a951828832bbf648621e0aea4d8786033a2531932adce9ad87d00b1efa3a44a82236c0bbe0768a1956424832d20b6d469d3590cd2eeba44bfda3d89ab21db1304d8e28008fde70650d1670b01c97e994b393bbb5d1a0584c9be3a85f6210fd2ceb27169049f3ab0c643d23d721b10aeb737fb9d78f16e068c7dbca1d588fcd430e4d3c037f6cfd6b286da5e71dc38dca1a79717d"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x7b, 0x1c3, &(0x7f0000000040)="cee3f87af8f97b1d9a7a34502d6a611a530000002a0d614fda67dd2705e05b6e936df2", 0x0, 0xf000, 0x0, 0x0, 0xc2, &(0x7f0000000180)="5fa9dd69a821774ab0b30a771297c971af242a2a9b0c12f05a26f665bd237f536fd555e342738db819"}, 0x28) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000800)=ANY=[@ANYPTR], &(0x7f0000000380)=0x1) r7 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x0, 0x416082) ioctl$KDSKBSENT(r7, 0x4b49, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00'}) 13:45:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) [ 227.823990] audit: type=1804 audit(1572702323.362:157): pid=13498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/404/bus" dev="sda1" ino=17158 res=1 [ 227.928066] block nbd3: Receive control failed (result -22) 13:45:23 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) 13:45:23 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x1000008912, &(0x7f00000002c0)="0800b5055e0bcfe87b0071") r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000040)={0xa925, 0x1, 0x0, 0xffffffffffffffff}) r4 = dup(r3) r5 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) write$binfmt_script(r5, &(0x7f0000000180)={'#! ', './file0', [{0x20, '^'}, {0x20, '/dev/ion\x00'}, {0x20, 'GPL/'}, {}, {0x20, ':nodev+posix_acl_accessnodev'}], 0xa, "806de9bdf0e04e53e11154562b5700acbdbacd3bd1edab137fbb153529de5d83c56e49c7aee1d17897c49e89679a86c4a79515a88175ae9b246c11a20a19449050cf400a67a426b4b340d89a1ceb5db27fc2ff450f5cb05051de98c95f69bf3caea9ee99957f0ecc588026f63b6ce0553e2286649d63d0d96917885dc882b756dcd0c62119735cedd40134d9103f33002c6e2be06a9c4c77f7ff5f8d24f60e0ec5df5b0d30c2b401d71c1e78698d064b3831862cbf8311bd32df369918f73aa2fd798d231763d395b8ce"}, 0x104) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) r6 = semget$private(0x0, 0x2, 0x400) r7 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r7, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000300)=0xc) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000380)='./file0\x00', r10, r11) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000340)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000440)=0xe8) r13 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000380)='./file0\x00', r14, r15) semctl$IPC_SET(r6, 0x0, 0x1, &(0x7f0000000480)={{0x401, r8, r11, r12, r15, 0x11, 0x6}, 0x10001, 0x7, 0x3}) dup3(r0, r1, 0x0) 13:45:23 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 228.147045] audit: type=1804 audit(1572702323.702:158): pid=13520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/405/bus" dev="sda1" ino=17129 res=1 13:45:23 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r13, 0x29, 0x22, &(0x7f0000000800)={{{@in=@dev, @in6=@local}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0x46f) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) [ 228.266062] audit: type=1400 audit(1572702323.822:159): avc: denied { map } for pid=13525 comm="syz-executor.0" path="/dev/zero" dev="devtmpfs" ino=13623 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:zero_device_t:s0 tclass=chr_file permissive=1 13:45:23 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 228.418180] audit: type=1804 audit(1572702323.972:160): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/406/bus" dev="sda1" ino=17147 res=1 [ 228.567910] block nbd3: shutting down sockets 13:45:24 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='memory.events\x00', 0x0, 0x0) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCDELRT(r13, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) 13:45:24 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, 0xffffffffffffffff, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) openat(r12, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCDELRT(r13, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) [ 228.759244] block nbd3: Receive control failed (result -22) [ 228.765168] audit: type=1804 audit(1572702324.312:161): pid=13547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/407/bus" dev="sda1" ino=17161 res=1 13:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) r13 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r13, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) ioctl$sock_inet6_SIOCDELRT(r13, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r14}) 13:45:24 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) [ 228.996587] audit: type=1804 audit(1572702324.552:162): pid=13559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/408/bus" dev="sda1" ino=17161 res=1 13:45:24 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:24 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) 13:45:24 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 229.218306] selinux_nlmsg_perm: 8 callbacks suppressed [ 229.218316] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13577 comm=syz-executor.4 [ 229.231684] audit: type=1804 audit(1572702324.792:163): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/409/bus" dev="sda1" ino=17161 res=1 [ 229.267695] block nbd2: Receive control failed (result -22) 13:45:24 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) [ 229.359913] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13586 comm=syz-executor.4 [ 229.457020] block nbd3: shutting down sockets 13:45:25 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r3}, &(0x7f0000000300)=0x10) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) fchdir(r11) r12 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r12, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) ioctl$sock_inet6_SIOCDELRT(r12, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r13}) 13:45:25 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 229.555548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13592 comm=syz-executor.4 13:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00\x00\x00\x00\x00\xdb\x88}t\xa9\xd4\xb8\x04\x9e f\x06\xa8\b\xfc\xfe=\xd3\x12\x91\xf7\x86\xce\xe9*.\xd9\xcc\x0e\xeb\x0fn\x1b!p\x05W\xd7\xd3!\xc6\x16\xf2\xa6\x9f\x97^]X\aZ\x8d\xf0h1\x03\xcfHQo\xd9`c\xfa`1\x93\xe1\xcc1\t\xac\x8e\xeb4\x81\x89\xc4\xa5\xd8n\xeao\xc6j\xdcl\x927\x8d\xb5\x93i\xd8!\xef\xce#\x044\x93=\xb2\x8e\x92\x93\xe6>W\xb10\tyuR.iJ\xc5\xb35\x83<\xe7\xaa\xb2*\xf6\xb8\xa1T\x94\x89\xae\xf6\x94\xbca\xeb\x9a\xa2#v\xf0HqZJ\xc2*\xbeN\x91\xc9y+B#\x9e$UGX\x06\x8f\x01\xab\xa7\xb6\x8d\xe6\xe0\x15\xebI\x8cP\xbeE\x88g\x8f\xaa\x96\x7fS\xb75\x852Q\x1a\x97P\x92\xf5\x8c\xd1I\xd9\r\xff\xabh\x89\xe87y0O\xe3\xa2\xa4km\xa4J\f\x8aIN)\xec\vl\x993\x03\xf5\xf5\x1e\xab\xefz\x17\xfa\xe0I\xd1\xee0Dj}\xda5\xe6a*I\x7f\x1f\xd1\xad\x85\xef\x18^\xb0\xba\xec\x9b\xf7g[l\xf7\x86wR\xfb%\xe5\xf3Td \xa3kg\xb5\xf0\x18\xcd\x86\xe5\xc4\xd4},h\xc0S\x7f1\xd6#B*\xe3\xd8\x7f\x9bg\xc1\xeb\x10wiI\x8e\xbf\xdf\xaa[5\xa1\x83=\xad\xdag\xa7T\"\x1f\xe2pS\xa6;\xd02\x0e(Q\x16\x8f\xf9Q\xf3\xc2@\xd4\x10', 0x200002, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}) 13:45:25 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 229.704061] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13599 comm=syz-executor.4 13:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}) 13:45:25 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 229.798996] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13605 comm=syz-executor.4 13:45:25 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 229.921795] block nbd2: shutting down sockets 13:45:25 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) r6 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r8, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x7) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r5, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r7, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r5, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) openat(r8, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r9, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r10 = getpid() kcmp(r2, r10, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) r11 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r11, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}) ioctl$sock_inet6_SIOCDELRT(r11, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12}) 13:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r6, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat(r7, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r8, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) getpid() r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) [ 230.036017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13617 comm=syz-executor.4 13:45:25 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 230.136982] block nbd2: Receive control failed (result -22) [ 230.151496] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13624 comm=syz-executor.4 13:45:25 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r3}, &(0x7f0000000300)=0x10) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:25 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r6, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r4, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) openat(r7, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB='{\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00032dbd7000fddbdf250100000008000b00", @ANYRES32=r8, @ANYBLOB="08000800ac1e0001080004000400000008000b00", @ANYRES32=0x0, @ANYBLOB="14000700ff01000000000000000000000000000108000600ffffffff14000900ff020000000000000000000000000001"], 0x64}, 0x1, 0x0, 0x0, 0x20040010}, 0x40) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}) 13:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 230.460340] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13634 comm=syz-executor.4 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r5, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat(r6, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000580)=0x14) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) 13:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 230.575117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13642 comm=syz-executor.4 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r5, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) openat(r6, &(0x7f0000000400)='./file0\x00', 0x418281, 0xb4) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r5, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8}) [ 230.667084] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pig=13648 comm=syz-executor.4 [ 230.814111] block nbd2: shutting down sockets 13:45:26 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:26 executing program 2: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x0) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r5, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x2000, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r3, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r5, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040006000000fddbdf2501000000080001004e210000"], 0x1c}, 0x1, 0x0, 0x0, 0x4048040}, 0x5) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7}) [ 231.024385] kauditd_printk_skb: 7 callbacks suppressed [ 231.024393] audit: type=1804 audit(1572702326.572:171): pid=13665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/416/bus" dev="sda1" ino=17169 res=1 13:45:26 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r3}, &(0x7f0000000300)=0x10) r4 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r4, &(0x7f0000002740), 0x7, 0x0, 0x0) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000002980)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000c00}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="08002cbd700200000008000b20", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x24004044}, 0x4000800) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) 13:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:26 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f00000000c0)={0x0, 0xff, 0xb5a, 0x1, 0x6a, 0x7fff}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@setlink={0x38, 0x13, 0x80d221ea7a3f36cd, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x18, 0x16, [{0x14, 0x1, [@IFLA_VF_VLAN={0x10}]}]}]}, 0x38}}, 0x0) 13:45:26 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) recvmmsg(r3, &(0x7f0000002740), 0x7, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 13:45:26 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) read(r6, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x401, 0x4) 13:45:26 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 231.329897] audit: type=1804 audit(1572702326.882:172): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/417/bus" dev="sda1" ino=17168 res=1 [ 231.443573] audit: type=1804 audit(1572702327.002:173): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/418/bus" dev="sda1" ino=17170 res=1 13:45:27 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) read(r6, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x401, 0x4) 13:45:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') openat$pfkey(0xffffffffffffff9c, &(0x7f0000002140)='/proc/self/net/pfkey\x00', 0x8100, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 13:45:27 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x1ff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000200)={0x3, r3, 0x0, 0x6}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 231.779203] audit: type=1804 audit(1572702327.342:174): pid=13710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/419/bus" dev="sda1" ino=17121 res=1 13:45:27 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x103}, 0x1c}}, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='\xb2y\xfdY\xfd', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 13:45:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) read(r6, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x401, 0x4) 13:45:27 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x400, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r3 = dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) write$P9_RXATTRCREATE(r1, &(0x7f0000000400)={0x7, 0x21, 0x1}, 0x7) r4 = fcntl$getown(r3, 0x9) syz_open_procfs(r4, &(0x7f00000001c0)='net/ip_mr_cache\x00') openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x1, 0x0) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000), 0x0, 0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x7fffffff, 0x20}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000280)={r7, 0x58e}, &(0x7f0000000340)=0x8) 13:45:27 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000240)=""/185, 0xb9}], 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) [ 232.203946] audit: type=1804 audit(1572702327.762:175): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/420/bus" dev="sda1" ino=16563 res=1 [ 232.304980] block nbd3: Receive control failed (result -22) 13:45:28 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) read(r6, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000200)=0x401, 0x4) 13:45:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x88001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) write$P9_RSYMLINK(r1, &(0x7f0000000240)={0x14, 0x11, 0x2, {0xc9, 0xfffffbf0, 0x7}}, 0x14) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x12081, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_QUERYCAP(r5, 0x80685600, &(0x7f0000000340)) dup2(r4, r2) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) pipe(0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e21, @multicast1}}}, &(0x7f0000000480)=0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000004c0)={r8, 0xffffffff, 0xf01f27257f063b9}, 0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 13:45:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0x48}], 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) 13:45:28 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 232.710628] audit: type=1804 audit(1572702328.262:176): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/421/bus" dev="sda1" ino=16801 res=1 [ 233.006582] block nbd3: shutting down sockets 13:45:28 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x4, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w\x7f\xbc/\x12\xd1\xe0\xd4\xe6\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xc7K\x00'/144, 0xfffffffffffffffd) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snapshot\x00', 0x101000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) r2 = dup3(0xffffffffffffffff, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000440)=[@in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e24, @remote}], 0x60) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x34a, 0x0, 0x0, 0xb2) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r5 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x7, 0x20002) getsockopt$inet_tcp_int(r5, 0x6, 0x3210970296a6db25, &(0x7f0000000280), &(0x7f0000000340)=0x4) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f00000003c0)) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) ioctl$SIOCAX25DELFWD(r9, 0x89eb, &(0x7f0000000380)={@bcast, @bcast}) prctl$PR_GET_KEEPCAPS(0x7) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) eventfd2(0xa95, 0x1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r4, &(0x7f00000017c0), 0x199, 0x0) 13:45:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 13:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) read(r6, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x4030582a, &(0x7f0000000040)) write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6) 13:45:28 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:28 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) pipe(&(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 13:45:28 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) read(r5, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) [ 233.148371] audit: type=1804 audit(1572702328.702:177): pid=13771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/422/bus" dev="sda1" ino=16707 res=1 [ 233.266323] block nbd3: Receive control failed (result -22) 13:45:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000080)={0x9, 0x6, 0x5, 0x54, &(0x7f0000000100)=""/84, 0xe4, &(0x7f0000000180)=""/228, 0x48, &(0x7f0000000280)=""/72}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000000ec0)=0xe8) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xb028100}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x6c, r1, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, [], 0x22}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400}, 0x4040) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r5, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r7 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r8 = getpid() sched_setattr(r8, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) write$FUSE_LK(r2, &(0x7f0000000240)={0x28, 0x0, 0x6, {{0x100000000, 0x0, 0x7642da9745182cc8, r8}}}, 0x28) ioctl$ASHMEM_SET_SIZE(r7, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=@dstopts={0x3a, 0x18, [], [@generic={0x3, 0xbc, "9729263c597c85e01155f1a995b523b5c2c1ef60a4a0b79b192b62752e374e58fda169968abf60ee4134b592f8a00cd425628528fb7fd713cc8c885fcdb113ae9615e7b755f0b7ceb81c707d58c24b1a4438f8cfa4305eadd981b6b95566bcbec48ba1a11bf5c5f0088223ae58eac275087610afa1e3610c645a23409fabee1606fa6638364ba6255db2f9277251a1c3142994937c2a21366e5faa863a985760b08fdf6c48aa7755712e9e002d7e95035d045c50142cf77f91219cfc"}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1}]}, 0xd0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r7, r5) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r6, &(0x7f00000017c0), 0x199, 0x0) 13:45:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0xd989811d53c956a6, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 13:45:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) read(r4, &(0x7f00000018c0)=""/4097, 0x1001) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:45:29 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 233.549335] audit: type=1804 audit(1572702329.102:178): pid=13795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/423/bus" dev="sda1" ino=17184 res=1 [ 233.948307] block nbd3: shutting down sockets 13:45:29 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) socket$nl_generic(0x10, 0x3, 0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 13:45:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) read(r4, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400100, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:29 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000240)=0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 13:45:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) r5 = dup2(r3, r4) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xd0, r6, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0xeddffa4db02e132c}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfffffff7}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 234.103734] audit: type=1804 audit(1572702329.642:179): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/424/bus" dev="sda1" ino=16721 res=1 [ 234.145321] block nbd3: Receive control failed (result -22) 13:45:29 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r4, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:29 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 13:45:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$SIOCRSACCEPT(r5, 0x89e3) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:29 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 234.402638] audit: type=1804 audit(1572702329.962:180): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/425/bus" dev="sda1" ino=17173 res=1 [ 234.831110] block nbd3: shutting down sockets 13:45:30 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x81, 0x80100) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) read(0xffffffffffffffff, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) getsockopt$inet6_int(r0, 0x29, 0x25, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) 13:45:30 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) read(0xffffffffffffffff, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:30 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000100)=0x80000001) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:30 executing program 4: socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 234.992322] block nbd3: Receive control failed (result -22) 13:45:30 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:30 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) read(0xffffffffffffffff, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:30 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:30 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) delete_module(&(0x7f0000000200)='keyringsecurity,:/trusteduser\x00', 0x800) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f00000001c0)={0x4, 0x4, 0x5}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 235.708548] block nbd3: shutting down sockets 13:45:31 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f00000002c0)={0x8, 0x0, 0x0, 0x1ff, r5}, &(0x7f0000000300)=0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {}, 0x20a}) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {}, 0xab852ebbeefbd631}) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) write$char_usb(r0, &(0x7f0000000340)="7d6e954e425e2edc3a64b3408a4a0b3eb8a6c32ce1bea321319029568addd16ce242b88cdd4ca14dfbcb12cef94823393af3405a84d4be672683ecf2eecc932c4c12d37196a59e962a21ea19178e38f28494cc086fbb1419c16e8d0e123420deb0baa78c76807ed7ca063fa95283cc2e9f9d39eccb6d6a25a46bee8490a198b231ffd11520f6b85d8c247f1bf05e1d3349a97eb020353eb40275857420fca8b6bb984e13eaf276177420f8500d6d24e14eb9c4a7ab8f9aa7fbe7e367f5e1b6c6124b7c5419ce7a9f345cf2e75123f869085edc38c9a15959e9a5139e1bee0fc67fd7ba4f69eb9bfda1f499", 0xeb) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x334) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev, 0x100}, r6}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0xa, 0x4, 0xfa00, {r6}}, 0xc) r7 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x1, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x4, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x1, 0x2}, 0x0, 0x0, &(0x7f00000004c0)={0x1, 0x1, 0x4, 0x5}, &(0x7f0000000500)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x6}}, 0x10) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:45:31 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r3, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:31 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001240)={0x28, 0x2, 0x0, {0x1, 0x2, 0xfff}}, 0x28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r3, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x3ff) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={@remote={[], 0x0}, 0x3, 'team_slave_1\x00'}) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 235.899842] block nbd3: Receive control failed (result -22) 13:45:31 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:31 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:31 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[], 0xfc28) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r3, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:31 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:31 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 236.164028] kauditd_printk_skb: 3 callbacks suppressed [ 236.164036] audit: type=1804 audit(1572702331.722:184): pid=13942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/429/bus" dev="sda1" ino=17192 res=1 13:45:32 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x2, 0x1, 0x5}, &(0x7f0000000280)=0x10) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x10, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r3, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:32 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 236.598938] block nbd3: shutting down sockets 13:45:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)=ANY=[@ANYBLOB="030000000000000000000100000000000010000000000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="000000000000000000f00000000000000010000000000000", @ANYPTR=&(0x7f0000001640)=ANY=[@ANYBLOB='\x00'/4096], @ANYBLOB="00000000000000000060040000000000af00000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'/175], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:32 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:32 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x2000) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r3, &(0x7f00000018c0)=""/4097, 0x1001) [ 236.719098] audit: type=1804 audit(1572702332.272:185): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/430/bus" dev="sda1" ino=17206 res=1 13:45:32 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000001c0)={0x1f, 0x3, {0x5, 0x1f, 0x3, 0x9, 0x78, 0x5}, 0x1, 0x7f}, 0xe) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x96b9111d12619994, 0x14d926b051ac1d3c, 0x0, 0xfffffffffffffcd2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) sched_setattr(r5, &(0x7f0000000340)={0x30, 0x0, 0x1577e7425828ce51, 0x0, 0x81, 0x0, 0x4, 0x9}, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r2) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 13:45:32 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:32 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[0x0]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 236.841049] block nbd3: Receive control failed (result -22) [ 236.888950] audit: type=1804 audit(1572702332.442:186): pid=13994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/431/bus" dev="sda1" ino=17206 res=1 [ 237.489387] block nbd3: shutting down sockets 13:45:33 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r2, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) 13:45:33 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) 13:45:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r2, &(0x7f00000018c0)=""/4097, 0x1001) [ 237.579061] audit: type=1804 audit(1572702333.132:187): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/432/bus" dev="sda1" ino=17223 res=1 13:45:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) 13:45:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000140)='memory/event{\xe6', 0x7a05, 0x1700) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r2, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000701000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000380)="262e0f01cb360f01d165dd778d2e64f30f3264660fd44026b82f098ec8650f01ca66b9800000c00f326635008000000f30660f3880180f013d", 0x39}], 0x1, 0x20, &(0x7f0000000400), 0x0) write(r2, &(0x7f0000000340), 0x41395527) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@empty, @in6=@ipv4={[], [], @broadcast}}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f0000000340)=0xe8) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r4 = syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x7, 0x10000) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000000440)={0x1, 0x81, 0x5, 0x1, 0x3}) r5 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r6, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r6, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r5, &(0x7f00000017c0), 0x199, 0x0) [ 237.673196] block nbd3: Receive control failed (result -22) 13:45:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 238.371829] block nbd3: shutting down sockets 13:45:33 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:33 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:33 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000001200)='memory.swap.current\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r1, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) ioctl$UI_SET_RELBIT(r3, 0x40045566, 0x4) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$CAPI_GET_ERRCODE(r4, 0x80024321, &(0x7f00000001c0)) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x95af) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:33 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) pipe(&(0x7f0000000200)) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:33 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r0, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 238.465212] audit: type=1804 audit(1572702334.022:188): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/433/bus" dev="sda1" ino=17227 res=1 13:45:34 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r0, &(0x7f00000018c0)=""/4097, 0x1001) [ 238.544386] block nbd3: Receive control failed (result -22) 13:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:34 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000018c0)=""/4097, 0x1001) [ 238.608488] block nbd3: shutting down sockets 13:45:34 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:34 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 238.744349] audit: type=1804 audit(1572702334.302:189): pid=14098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/434/bus" dev="sda1" ino=17199 res=1 13:45:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x18842, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x3b3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) ioctl$sock_ifreq(r1, 0x8942, &(0x7f0000000440)={'bpq0\x00', @ifru_addrs=@hci={0x1f, r4}}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0xe, 0x4, 0x440, 0x258, 0x258, 0x140, 0x258, 0x0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x4, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x7}}, @common=@eui64={0x28, 'eui64\x00'}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x11}, @dev={0xfe, 0x80, [], 0x1b}, [0xffffffff, 0xff, 0xffffff00], [0xff000000, 0xff, 0x9050b3c8d7d021cd], 'bridge0\x00', 'bond0\x00', {0xff}, {0xff}, 0x5e, 0x3, 0x1, 0x10}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x1, 0x7f}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, [], 0x15}, [0xffffff00, 0xff000000, 0xff000000, 0x1ff000001], [0xffffff00, 0x0, 0xff, 0xff], 'veth0_to_team\x00', 'hsr0\x00', {}, {}, 0x3c, 0x0, 0x4, 0x20}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x4, 0x20, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$netrom_NETROM_T1(r5, 0x103, 0x1, &(0x7f0000000240)=0xc5, 0x4) 13:45:34 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:34 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) 13:45:34 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:34 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:34 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r0, &(0x7f00000018c0)=""/4097, 0x1001) [ 239.294144] audit: type=1804 audit(1572702334.852:190): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/435/bus" dev="sda1" ino=17229 res=1 13:45:34 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) 13:45:34 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x82, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000200), &(0x7f0000000240)=0x4) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:45:35 executing program 0: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) [ 239.378238] block nbd3: Receive control failed (result -22) [ 239.396747] block nbd3: shutting down sockets 13:45:35 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:35 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:35 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/urandom\x00', 0x100, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x401, 0x80400) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000280)=0x54) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) renameat2(r5, &(0x7f0000000340)='./file0\x00', r6, &(0x7f0000000380)='./file0\x00', 0x4) 13:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:35 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000018c0)=""/4097, 0x1001) [ 239.606010] block nbd3: Receive control failed (result -22) 13:45:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000001c0), 0x16e, 0x0) 13:45:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 239.651385] block nbd3: shutting down sockets 13:45:35 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000018c0)=""/4097, 0x1001) 13:45:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:35 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:35 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f00000001c0), &(0x7f0000000240)=0x68) 13:45:35 executing program 2: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 13:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 239.822758] audit: type=1804 audit(1572702335.382:191): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/437/bus" dev="sda1" ino=17199 res=1 13:45:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 239.896776] block nbd3: shutting down sockets 13:45:35 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:35 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 13:45:35 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) 13:45:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) [ 240.058486] block nbd3: shutting down sockets [ 240.063151] audit: type=1804 audit(1572702335.612:192): pid=14225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/438/bus" dev="sda1" ino=17241 res=1 13:45:35 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 13:45:35 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 240.112895] block nbd2: Receive control failed (result -22) [ 240.127584] block nbd2: shutting down sockets [ 240.198319] block nbd3: shutting down sockets 13:45:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x71}}], 0x22b, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bond_slave_0\x00', &(0x7f0000000340)=@ethtool_dump={0x3e, 0x1, 0x9, 0xfd, "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"}}) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r2) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 13:45:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:36 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 13:45:36 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) 13:45:36 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x40000, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 240.777467] audit: type=1804 audit(1572702336.332:193): pid=14254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/439/bus" dev="sda1" ino=17258 res=1 13:45:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, 0x0) 13:45:36 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) [ 240.830723] block nbd2: Receive control failed (result -22) [ 240.849680] block nbd2: shutting down sockets 13:45:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:36 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) 13:45:36 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, r0, 0x0) 13:45:36 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) [ 241.024595] block nbd2: Receive control failed (result -22) 13:45:36 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @mcast2, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @ipv4={[], [], @multicast1}}) [ 241.088966] block nbd2: shutting down sockets 13:45:36 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x430101, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000640)='/dev/admmidi#\x00', 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='9p\x00', 0x80080, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@subj_role={'subj_role', 0x3d, '/dev/autofs\x00'}}]}}) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) r5 = syz_open_dev$vbi(&(0x7f0000000200)='/dev/vbi#\x00', 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000c920", @ANYRES16=r7, @ANYBLOB="77a9000000000000000006000000"], 0x14}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x104, r7, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0x1}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x2}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x4, 0xbe6}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x4, 0x2}}, {{{{0x10, 0x1, 'netdevsim\x00'}, {0x10, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x4, 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x4000) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RWALK(r8, &(0x7f0000000480)={0x4a, 0x6f, 0x2, {0x5, [{0xe2, 0x0, 0x3}, {0x8, 0x2, 0x2}, {0x1e, 0x1, 0x7}, {0x9, 0x4}, {0x4, 0x4, 0x3}]}}, 0x4a) pipe(0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f00000001c0)={0x8, 0x4745504d, 0x3, @discrete={0x5, 0x2}}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:36 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:36 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x3, 0x201) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:36 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, 0xffffffffffffffff, 0x0) [ 241.233891] block nbd2: Receive control failed (result -22) [ 241.278368] block nbd2: shutting down sockets [ 241.295177] kauditd_printk_skb: 1 callbacks suppressed [ 241.295185] audit: type=1804 audit(1572702336.852:195): pid=14329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/441/bus" dev="sda1" ino=17259 res=1 13:45:36 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:36 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:36 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 241.328316] block nbd4: Receive control failed (result -22) 13:45:37 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:37 executing program 4: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r2, 0xab03) [ 241.413757] block nbd4: shutting down sockets [ 241.433553] block nbd2: Receive control failed (result -22) [ 241.445006] block nbd2: shutting down sockets [ 241.556568] block nbd4: Receive control failed (result -22) [ 241.573808] block nbd4: shutting down sockets 13:45:37 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:37 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, 0xffffffffffffffff, 0x0) 13:45:37 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = syz_open_dev$video(&(0x7f0000000140)='/dev/video#\x00', 0x3f, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, [], &(0x7f00000000c0)={0x98f909, 0xfffdfffffffffffe, [], @ptr=0x70f000}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x802, 0x0) dup(r4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) fsetxattr$security_smack_transmute(r5, &(0x7f0000000200)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x0) 13:45:37 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0xfe1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) getresuid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r0, &(0x7f00000003c0)={0x90, 0xffffffffffffffda, 0x5, {0x3, 0x0, 0x3, 0x5, 0x401, 0x200, {0x2, 0xc7, 0x31ee422f, 0x5, 0x0, 0x5, 0x40, 0x401, 0x800, 0x7fff, 0x1, r1, r2, 0x5f, 0xffff0001}}}, 0x90) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r5, r3) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r4, &(0x7f00000017c0), 0x199, 0x0) 13:45:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 242.032147] block nbd2: Receive control failed (result -22) [ 242.038669] block nbd3: Receive control failed (result -22) [ 242.047896] block nbd2: shutting down sockets [ 242.057842] block nbd3: shutting down sockets 13:45:37 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:37 executing program 3: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 242.085446] audit: type=1804 audit(1572702337.642:196): pid=14382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/442/bus" dev="sda1" ino=17234 res=1 13:45:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:37 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:37 executing program 3: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, 0xffffffffffffffff, 0x0) 13:45:38 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:38 executing program 3: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 242.585454] audit: type=1804 audit(1572702338.142:197): pid=14423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/443/bus" dev="sda1" ino=17273 res=1 13:45:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:38 executing program 3: r0 = socket(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:38 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:38 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r0, 0x2008001) dup3(r1, r0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, 0xffffffffffffffff, 0x0) 13:45:38 executing program 3: r0 = socket(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) [ 242.922288] audit: type=1804 audit(1572702338.482:198): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/444/bus" dev="sda1" ino=17234 res=1 13:45:38 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) 13:45:38 executing program 3: r0 = socket(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 243.103550] block nbd2: shutting down sockets 13:45:38 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:38 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) [ 243.245519] block nbd2: shutting down sockets 13:45:39 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r2, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:39 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:39 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 13:45:39 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r2, 0xab03) [ 243.807610] block nbd2: shutting down sockets 13:45:39 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) [ 243.835206] block nbd5: Receive control failed (result -22) [ 243.851128] block nbd5: shutting down sockets 13:45:39 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:39 executing program 5: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 243.976689] block nbd5: shutting down sockets 13:45:39 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 13:45:39 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) name_to_handle_at(r4, 0x0, &(0x7f0000000080)={0x8}, 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r6, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r7}], 0x1, 0xffffffffffbffff8) dup2(r6, r7) fcntl$setown(r6, 0x8, r5) tkill(r5, 0x16) r8 = getpgid(r5) r9 = syz_open_procfs(r8, &(0x7f00000000c0)='c\a\x00\x00\x00') preadv(r9, 0x0, 0x0, 0x6c00000000000000) ioctl$DRM_IOCTL_ADD_CTX(r9, 0xc0086420, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000000040)={r10, 0x4}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000001c0)={r10, 0x4}) 13:45:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400100, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:40 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:40 executing program 0 (fault-call:4 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:40 executing program 5: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x400100, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 244.677099] FAULT_INJECTION: forcing a failure. [ 244.677099] name failslab, interval 1, probability 0, space 0, times 1 [ 244.690530] CPU: 0 PID: 14535 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 244.697564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.706933] Call Trace: [ 244.709517] dump_stack+0x138/0x197 [ 244.713158] should_fail.cold+0x10f/0x159 [ 244.717318] should_failslab+0xdb/0x130 [ 244.721302] kmem_cache_alloc+0x2d7/0x780 [ 244.725459] ? __might_sleep+0x93/0xb0 [ 244.729355] __anon_vma_prepare+0x62/0x390 [ 244.733599] do_huge_pmd_anonymous_page+0xd32/0x1470 [ 244.738711] ? find_held_lock+0x35/0x130 [ 244.742772] ? process_measurement+0x58a/0xb80 [ 244.747385] ? __thp_get_unmapped_area+0x130/0x130 [ 244.752314] __handle_mm_fault+0x22bf/0x3470 [ 244.752328] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 244.752339] ? find_held_lock+0x35/0x130 [ 244.752349] ? handle_mm_fault+0x1b6/0x7c0 [ 244.752372] handle_mm_fault+0x293/0x7c0 [ 244.752387] __do_page_fault+0x4c1/0xb80 [ 244.752400] ? vmalloc_fault+0xe30/0xe30 [ 244.752416] do_page_fault+0x71/0x511 [ 244.752429] page_fault+0x25/0x50 [ 244.752437] RIP: 0010:__get_user_4+0x21/0x30 [ 244.752444] RSP: 0018:ffff88806430fb78 EFLAGS: 00010202 [ 244.798961] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc90006669000 [ 244.806248] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 244.813516] RBP: ffff88806430fca0 R08: ffff8880635a4380 R09: 0000000000000001 [ 244.820782] R10: 0000000000000000 R11: ffff8880635a4380 R12: 0000000020000040 [ 244.828034] R13: ffff888067349280 R14: dffffc0000000000 R15: ffff888067349288 [ 244.835304] ? __might_fault+0x188/0x1d0 [ 244.839372] ? vhost_vring_ioctl+0xaa/0x1340 [ 244.843766] ? avc_ss_reset+0x110/0x110 [ 244.847724] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 244.852204] ? vhost_dev_ioctl+0xf3/0xe90 [ 244.856341] ? vhost_chr_write_iter+0x1260/0x1260 [ 244.861168] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 244.865737] ? vhost_vsock_flush+0xc0/0xc0 [ 244.869966] ? __might_sleep+0x93/0xb0 [ 244.873837] ? __fget+0x210/0x370 [ 244.877282] ? vhost_vsock_flush+0xc0/0xc0 [ 244.881496] do_vfs_ioctl+0x7ae/0x1060 [ 244.885364] ? selinux_file_mprotect+0x5d0/0x5d0 [ 244.890099] ? lock_downgrade+0x740/0x740 [ 244.894228] ? ioctl_preallocate+0x1c0/0x1c0 [ 244.898621] ? __fget+0x237/0x370 [ 244.902062] ? security_file_ioctl+0x89/0xb0 [ 244.906451] SyS_ioctl+0x8f/0xc0 [ 244.909796] ? do_vfs_ioctl+0x1060/0x1060 [ 244.913927] do_syscall_64+0x1e8/0x640 [ 244.917797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.922625] entry_SYSCALL_64_after_hwframe+0x42/0xb7 13:45:40 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:40 executing program 5 (fault-call:8 fault-nth:0): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) tgkill(r0, r1, 0xd) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r2) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) [ 244.927794] RIP: 0033:0x459f49 [ 244.930964] RSP: 002b:00007f4ee7f18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 244.938662] RAX: ffffffffffffffda RBX: 00007f4ee7f18c90 RCX: 0000000000459f49 [ 244.945913] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 244.953163] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 244.960418] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee7f196d4 [ 244.967666] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 13:45:40 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:40 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:40 executing program 1: perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x80, 0x0, 0x3, 0x0, 0x0, 0x41c1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}, 0x213, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) r5 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000200)={0x30000004}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_wait(r5, &(0x7f0000000180)=[{}], 0x1, 0xfffffffffffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f00000001c0)) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 245.046819] audit: type=1804 audit(1572702340.602:199): pid=14554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/449/bus" dev="sda1" ino=17276 res=1 [ 245.047929] FAULT_INJECTION: forcing a failure. [ 245.047929] name failslab, interval 1, probability 0, space 0, times 1 [ 245.134373] CPU: 0 PID: 14554 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 245.141427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.150790] Call Trace: [ 245.153379] dump_stack+0x138/0x197 [ 245.157003] should_fail.cold+0x10f/0x159 [ 245.161139] should_failslab+0xdb/0x130 [ 245.165121] kmem_cache_alloc+0x2d7/0x780 [ 245.169311] ? trace_hardirqs_on+0xd/0x10 [ 245.173451] ? get_reqs_available+0x228/0x3d0 [ 245.177956] do_io_submit+0x2c4/0x13f0 [ 245.181842] ? free_ioctx_users+0x3e0/0x3e0 [ 245.186163] ? SyS_write+0x15e/0x230 [ 245.189857] ? SyS_io_destroy+0x310/0x310 [ 245.193996] SyS_io_submit+0x28/0x30 [ 245.197699] ? SyS_io_submit+0x28/0x30 [ 245.201611] do_syscall_64+0x1e8/0x640 [ 245.205483] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.210322] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.215543] RIP: 0033:0x459f49 [ 245.218717] RSP: 002b:00007f3dcd120c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 245.226423] RAX: ffffffffffffffda RBX: 00007f3dcd120c90 RCX: 0000000000459f49 13:45:40 executing program 2: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:40 executing program 0 (fault-call:4 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:40 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 245.233690] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd100000 [ 245.240951] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 245.248206] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1216d4 [ 245.255467] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 [ 245.365043] block nbd2: Receive control failed (result -22) [ 245.366730] FAULT_INJECTION: forcing a failure. [ 245.366730] name failslab, interval 1, probability 0, space 0, times 0 [ 245.389940] block nbd2: shutting down sockets [ 245.390948] CPU: 0 PID: 14586 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 245.401492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.410843] Call Trace: [ 245.413427] dump_stack+0x138/0x197 [ 245.413445] should_fail.cold+0x10f/0x159 [ 245.413459] should_failslab+0xdb/0x130 [ 245.413473] kmem_cache_alloc+0x2d7/0x780 [ 245.421216] ? anon_vma_compatible+0x62/0x2a0 [ 245.421231] __anon_vma_prepare+0x1b1/0x390 [ 245.421246] do_huge_pmd_anonymous_page+0xd32/0x1470 [ 245.421260] ? find_held_lock+0x35/0x130 [ 245.443225] ? process_measurement+0x58a/0xb80 [ 245.443242] ? __thp_get_unmapped_area+0x130/0x130 [ 245.443258] __handle_mm_fault+0x22bf/0x3470 [ 245.443269] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 245.443280] ? find_held_lock+0x35/0x130 [ 245.443289] ? handle_mm_fault+0x1b6/0x7c0 [ 245.443308] handle_mm_fault+0x293/0x7c0 [ 245.443324] __do_page_fault+0x4c1/0xb80 [ 245.443338] ? vmalloc_fault+0xe30/0xe30 [ 245.443353] do_page_fault+0x71/0x511 [ 245.443367] page_fault+0x25/0x50 [ 245.461341] RIP: 0010:__get_user_4+0x21/0x30 [ 245.461348] RSP: 0018:ffff88805ab7fb78 EFLAGS: 00010202 [ 245.461357] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc90006669000 [ 245.461362] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 245.461367] RBP: ffff88805ab7fca0 R08: ffff888059698680 R09: 0000000000000001 [ 245.461373] R10: 0000000000000000 R11: ffff888059698680 R12: 0000000020000040 [ 245.461378] R13: ffff888066469240 R14: dffffc0000000000 R15: ffff888066469248 [ 245.461400] ? __might_fault+0x188/0x1d0 [ 245.461415] ? vhost_vring_ioctl+0xaa/0x1340 [ 245.461426] ? avc_ss_reset+0x110/0x110 [ 245.461439] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 245.461449] ? vhost_dev_ioctl+0xf3/0xe90 [ 245.461464] ? vhost_chr_write_iter+0x1260/0x1260 [ 245.565551] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 245.570131] ? vhost_vsock_flush+0xc0/0xc0 [ 245.574350] ? __might_sleep+0x93/0xb0 [ 245.578223] ? __fget+0x210/0x370 [ 245.581664] ? vhost_vsock_flush+0xc0/0xc0 [ 245.585879] do_vfs_ioctl+0x7ae/0x1060 [ 245.589758] ? selinux_file_mprotect+0x5d0/0x5d0 [ 245.594507] ? lock_downgrade+0x740/0x740 [ 245.598651] ? ioctl_preallocate+0x1c0/0x1c0 [ 245.603059] ? __fget+0x237/0x370 [ 245.606503] ? security_file_ioctl+0x89/0xb0 [ 245.610903] SyS_ioctl+0x8f/0xc0 [ 245.614261] ? do_vfs_ioctl+0x1060/0x1060 [ 245.618408] do_syscall_64+0x1e8/0x640 [ 245.622286] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.627126] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.632304] RIP: 0033:0x459f49 [ 245.635475] RSP: 002b:00007f4ee7f18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 245.643170] RAX: ffffffffffffffda RBX: 00007f4ee7f18c90 RCX: 0000000000459f49 [ 245.650421] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 245.657674] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:45:40 executing program 5 (fault-call:8 fault-nth:1): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:40 executing program 3: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:41 executing program 2: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 245.664930] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee7f196d4 [ 245.672186] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 13:45:41 executing program 3: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) [ 245.746575] audit: type=1804 audit(1572702341.302:200): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/450/bus" dev="sda1" ino=17279 res=1 [ 245.747750] FAULT_INJECTION: forcing a failure. [ 245.747750] name failslab, interval 1, probability 0, space 0, times 0 [ 245.803720] CPU: 0 PID: 14590 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 245.810771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 245.820126] Call Trace: [ 245.822716] dump_stack+0x138/0x197 [ 245.826354] should_fail.cold+0x10f/0x159 [ 245.830502] should_failslab+0xdb/0x130 [ 245.834476] kmem_cache_alloc+0x2d7/0x780 [ 245.838628] ? iov_iter_alignment+0x152/0x650 [ 245.843125] ? new_inode+0x1f/0x40 [ 245.846684] do_blockdev_direct_IO+0x331/0x7fd0 13:45:41 executing program 2: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:41 executing program 2: r0 = socket(0x0, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 245.851381] ? __lock_acquire+0x5f7/0x4620 [ 245.855632] ? __lock_acquire+0x5f7/0x4620 [ 245.859878] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 245.865507] ? sb_init_dio_done_wq+0x80/0x80 [ 245.869920] ? __lock_acquire+0x5f7/0x4620 [ 245.874157] ? __lock_acquire+0x5f7/0x4620 [ 245.878413] ? __unlock_page_memcg+0x53/0x100 [ 245.882952] ? lock_acquire+0x16f/0x430 [ 245.886929] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 245.892554] __blockdev_direct_IO+0xa1/0xca [ 245.896871] ext4_direct_IO+0x9ed/0x1890 [ 245.900922] ? is_bpf_text_address+0xa6/0x120 [ 245.900935] ? kernel_text_address+0x73/0xf0 [ 245.900946] ? __unwind_start+0x1f6/0x3d0 [ 245.900964] generic_file_read_iter+0x2f3/0x21b0 [ 245.900978] ? fsnotify+0x92f/0x11e0 [ 245.900999] ? filemap_range_has_page+0x1e0/0x1e0 [ 245.901011] ? __inode_security_revalidate+0xd6/0x130 [ 245.901022] ? avc_policy_seqno+0x9/0x20 [ 245.909897] ? selinux_file_permission+0x85/0x480 [ 245.909913] ? security_file_permission+0x89/0x1f0 [ 245.909928] ext4_file_read_iter+0x14e/0x340 [ 245.909943] aio_read+0x221/0x300 [ 245.909953] ? aio_write+0x4f0/0x4f0 [ 245.909962] ? find_held_lock+0x35/0x130 [ 245.909974] ? __might_fault+0x110/0x1d0 [ 245.965922] ? __might_fault+0x110/0x1d0 [ 245.969973] ? lock_downgrade+0x740/0x740 [ 245.974109] do_io_submit+0x1027/0x13f0 [ 245.978075] ? free_ioctx_users+0x3e0/0x3e0 [ 245.982387] ? SyS_write+0x15e/0x230 [ 245.986081] ? SyS_io_destroy+0x310/0x310 [ 245.990211] SyS_io_submit+0x28/0x30 [ 245.993905] ? SyS_io_submit+0x28/0x30 [ 245.997776] do_syscall_64+0x1e8/0x640 [ 246.001657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.006485] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.011657] RIP: 0033:0x459f49 [ 246.014828] RSP: 002b:00007f3dcd162c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 246.022516] RAX: ffffffffffffffda RBX: 00007f3dcd162c90 RCX: 0000000000459f49 [ 246.029768] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd121000 [ 246.037032] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.044284] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1636d4 13:45:41 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000300)="892e87b313901fbca9df52ce3ade75afbad7acaf28198fc0417deb178b565cbf93bcd69742e2e381cb14ebd91d1b117e193d9f7959aa7f41326802a60f37e88c810d8baddd8b0a518bc4b184ff4152a076d4800350b349b31df9881967d6cde318324c0407138cce78a926bc0e305235f97b0d6502f5afded77eea614f1d594a571be4c04d5ba9b093303dda8f5686a51e70165b61005d0571fd483a2904c59d5db4fc", 0xa3, 0x4040040, &(0x7f00000003c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 246.051533] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 13:45:41 executing program 2: r0 = socket(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:41 executing program 0 (fault-call:4 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:41 executing program 3: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB="e330b4119a30024275c95bede3f8e64cc51afe915345c69145fcec1eacffdbecff56ea88fdb1098d3a093b1e928fea804a529f217c7661200306d40ac8f6e42632a7cd9c71932976d8a98b46b16a97e7861859a483cc1e5299e914f373ff94424f3b1158fcacca6966a8a2ceb92ba315", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000880)={r6}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x10, 0x4c, 0x2, r6}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RUNLINKAT(r7, &(0x7f0000000280)={0x5c, 0x4d, 0x1}, 0x336) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:41 executing program 5 (fault-call:8 fault-nth:2): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:41 executing program 2: r0 = socket(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 246.179525] FAULT_INJECTION: forcing a failure. [ 246.179525] name fail_page_alloc, interval 1, probability 0, space 0, times 1 13:45:41 executing program 3: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) [ 246.236435] CPU: 1 PID: 14622 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 246.243487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.243492] Call Trace: [ 246.243508] dump_stack+0x138/0x197 [ 246.243526] should_fail.cold+0x10f/0x159 [ 246.243538] ? __might_sleep+0x93/0xb0 [ 246.267086] __alloc_pages_nodemask+0x1d6/0x7a0 [ 246.271755] ? find_held_lock+0x35/0x130 [ 246.275815] ? __alloc_pages_slowpath+0x2930/0x2930 [ 246.280833] ? lock_downgrade+0x740/0x740 [ 246.280851] alloc_pages_current+0xec/0x1e0 [ 246.280859] ? up_write+0x1a/0x60 [ 246.280872] pte_alloc_one+0x1a/0x100 [ 246.280884] do_huge_pmd_anonymous_page+0x8e4/0x1470 [ 246.280893] ? find_held_lock+0x35/0x130 [ 246.280903] ? process_measurement+0x58a/0xb80 [ 246.310282] ? __thp_get_unmapped_area+0x130/0x130 [ 246.315224] __handle_mm_fault+0x22bf/0x3470 [ 246.319644] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 246.324400] ? find_held_lock+0x35/0x130 [ 246.328460] ? handle_mm_fault+0x1b6/0x7c0 [ 246.332708] handle_mm_fault+0x293/0x7c0 [ 246.336771] __do_page_fault+0x4c1/0xb80 [ 246.340844] ? vmalloc_fault+0xe30/0xe30 [ 246.344895] do_page_fault+0x71/0x511 [ 246.348698] page_fault+0x25/0x50 [ 246.352137] RIP: 0010:__get_user_4+0x21/0x30 [ 246.356525] RSP: 0018:ffff8880a4e27b78 EFLAGS: 00010202 [ 246.361869] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc90006669000 [ 246.369122] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 246.376373] RBP: ffff8880a4e27ca0 R08: ffff8880622e6080 R09: 0000000000000001 [ 246.383627] R10: 0000000000000000 R11: ffff8880622e6080 R12: 0000000020000040 [ 246.390878] R13: ffff88805ff28e80 R14: dffffc0000000000 R15: ffff88805ff28e88 [ 246.398143] ? __might_fault+0x188/0x1d0 [ 246.402190] ? vhost_vring_ioctl+0xaa/0x1340 [ 246.406582] ? avc_ss_reset+0x110/0x110 [ 246.410544] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 246.415018] ? vhost_dev_ioctl+0xf3/0xe90 [ 246.419151] ? vhost_chr_write_iter+0x1260/0x1260 [ 246.423979] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 246.428542] ? vhost_vsock_flush+0xc0/0xc0 [ 246.432761] ? __might_sleep+0x93/0xb0 [ 246.436628] ? __fget+0x210/0x370 [ 246.440066] ? vhost_vsock_flush+0xc0/0xc0 [ 246.444287] do_vfs_ioctl+0x7ae/0x1060 [ 246.448156] ? selinux_file_mprotect+0x5d0/0x5d0 [ 246.452892] ? lock_downgrade+0x740/0x740 [ 246.457023] ? ioctl_preallocate+0x1c0/0x1c0 [ 246.461414] ? __fget+0x237/0x370 [ 246.464853] ? security_file_ioctl+0x89/0xb0 [ 246.469246] SyS_ioctl+0x8f/0xc0 [ 246.472592] ? do_vfs_ioctl+0x1060/0x1060 [ 246.476725] do_syscall_64+0x1e8/0x640 [ 246.480614] ? trace_hardirqs_off_thunk+0x1a/0x1c 13:45:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x8000000000000007, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 246.485443] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.490614] RIP: 0033:0x459f49 [ 246.493802] RSP: 002b:00007f4ee7f18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 246.501490] RAX: ffffffffffffffda RBX: 00007f4ee7f18c90 RCX: 0000000000459f49 [ 246.508741] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 246.515991] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 246.523242] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee7f196d4 [ 246.530493] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 13:45:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40106436, &(0x7f00000001c0)={0x0, 0xfffffffeffffffff}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(r3, 0x540a, 0x1000000000000009) dup2(r2, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x0) 13:45:42 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 246.603681] audit: type=1804 audit(1572702342.162:201): pid=14648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/451/bus" dev="sda1" ino=17310 res=1 [ 246.615017] FAULT_INJECTION: forcing a failure. [ 246.615017] name failslab, interval 1, probability 0, space 0, times 0 [ 246.686165] CPU: 0 PID: 14636 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 246.693231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 246.702588] Call Trace: [ 246.705181] dump_stack+0x138/0x197 [ 246.708818] should_fail.cold+0x10f/0x159 [ 246.709772] block nbd3: Receive control failed (result -22) [ 246.712966] should_failslab+0xdb/0x130 [ 246.712978] __kmalloc+0x2f0/0x7a0 [ 246.712994] ? ext4_find_extent+0x709/0x960 [ 246.713007] ext4_find_extent+0x709/0x960 [ 246.713019] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 246.713032] ext4_ext_map_blocks+0x1a3/0x4fa0 [ 246.713042] ? __save_stack_trace+0x7b/0xd0 [ 246.713053] ? save_trace+0x290/0x290 [ 246.713073] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 246.722743] ? __lock_is_held+0xb6/0x140 [ 246.722761] ? lock_acquire+0x16f/0x430 [ 246.722769] ? ext4_map_blocks+0x402/0x17c0 [ 246.722785] ext4_map_blocks+0xd3c/0x17c0 [ 246.730615] ? ext4_issue_zeroout+0x160/0x160 [ 246.730624] ? trace_hardirqs_on_caller+0x400/0x590 [ 246.730633] ? trace_hardirqs_on+0xd/0x10 [ 246.730648] _ext4_get_block+0x1a0/0x590 [ 246.730660] ? ext4_map_blocks+0x17c0/0x17c0 [ 246.730674] ? iov_iter_advance+0x218/0xc60 [ 246.740214] block nbd3: shutting down sockets [ 246.744722] ext4_dio_get_block+0x9a/0xb0 [ 246.809634] do_blockdev_direct_IO+0x211a/0x7fd0 [ 246.814466] ? __lock_acquire+0x5f7/0x4620 [ 246.818688] ? sb_init_dio_done_wq+0x80/0x80 [ 246.823077] ? __lock_acquire+0x5f7/0x4620 [ 246.827295] ? __lock_acquire+0x5f7/0x4620 [ 246.831521] ? __unlock_page_memcg+0x53/0x100 [ 246.836035] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 246.841655] ? lock_acquire+0x16f/0x430 [ 246.845620] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 246.853068] __blockdev_direct_IO+0xa1/0xca [ 246.857383] ext4_direct_IO+0x9ed/0x1890 [ 246.861429] ? is_bpf_text_address+0xa6/0x120 [ 246.865905] ? kernel_text_address+0x73/0xf0 [ 246.870302] ? __unwind_start+0x1f6/0x3d0 [ 246.874445] generic_file_read_iter+0x2f3/0x21b0 [ 246.879184] ? fsnotify+0x92f/0x11e0 [ 246.882899] ? filemap_range_has_page+0x1e0/0x1e0 [ 246.887726] ? __inode_security_revalidate+0xd6/0x130 [ 246.892904] ? avc_policy_seqno+0x9/0x20 [ 246.896953] ? selinux_file_permission+0x85/0x480 [ 246.901777] ? security_file_permission+0x89/0x1f0 [ 246.906689] ext4_file_read_iter+0x14e/0x340 [ 246.911086] aio_read+0x221/0x300 [ 246.914525] ? aio_write+0x4f0/0x4f0 [ 246.918227] ? find_held_lock+0x35/0x130 [ 246.922276] ? __might_fault+0x110/0x1d0 [ 246.926344] ? __might_fault+0x110/0x1d0 [ 246.930417] ? lock_downgrade+0x740/0x740 [ 246.934578] do_io_submit+0x1027/0x13f0 [ 246.938537] ? free_ioctx_users+0x3e0/0x3e0 [ 246.942853] ? SyS_write+0x15e/0x230 [ 246.946568] ? SyS_io_destroy+0x310/0x310 [ 246.950709] SyS_io_submit+0x28/0x30 [ 246.954427] ? SyS_io_submit+0x28/0x30 [ 246.958298] do_syscall_64+0x1e8/0x640 [ 246.962166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 246.967006] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 246.972193] RIP: 0033:0x459f49 [ 246.975372] RSP: 002b:00007f3dcd162c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 13:45:42 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:42 executing program 0 (fault-call:4 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:42 executing program 2: r0 = socket(0x11, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 246.983058] RAX: ffffffffffffffda RBX: 00007f3dcd162c90 RCX: 0000000000459f49 [ 246.990311] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd121000 [ 246.997581] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.004832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1636d4 [ 247.012085] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 13:45:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:42 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:42 executing program 5 (fault-call:8 fault-nth:3): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_mount_image$ntfs(&(0x7f00000001c0)='ntfs\x00', &(0x7f0000000200)='./file0\x00', 0x9, 0x1, &(0x7f0000000240)=[{&(0x7f0000000340)="ff750d5d0e597ca19b51dac80cbcc04668d9e370bae9c597abdd6c7ef618cf3f90e2b949dfc18d670f0d7220efc1bfb2817ceb02466c496252c88fd6f2f427d58f08695807d75ef809bb9bc6b9a5c032ced7a326f56d7624ac30fdf49ea6c35cb99562689c1c6dc81ed20d0db808d3597bd350606cd06fad5045716a0d4727853a0e7425fecd4f29baf549b0d68c228926ddeec1e4b9c70c6d631c55e388d2c9b941b95ac8755ee4ffd5b29357228a6a8b7c6d1b05f6aceaec8e1c975838006a7c2f821ceee0d32449a6bf", 0xcb, 0x9}], 0x10, &(0x7f0000000440)={[{@utf8='utf8'}, {@fmask={'fmask', 0x3d, 0x7}}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0xffffffffffffffff}}, {@show_sys_files_yes='show_sys_files=yes'}, {@show_sys_files_no='show_sys_files=no'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x4}}], [{@audit='audit'}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 247.102770] FAULT_INJECTION: forcing a failure. [ 247.102770] name failslab, interval 1, probability 0, space 0, times 0 [ 247.126288] block nbd3: Receive control failed (result -22) [ 247.129586] CPU: 1 PID: 14677 Comm: syz-executor.0 Not tainted 4.14.151 #0 [ 247.139039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.148385] Call Trace: [ 247.148406] dump_stack+0x138/0x197 [ 247.148423] should_fail.cold+0x10f/0x159 [ 247.148438] should_failslab+0xdb/0x130 [ 247.148449] kmem_cache_alloc+0x2d7/0x780 [ 247.162741] ptlock_alloc+0x20/0x70 [ 247.162753] pte_alloc_one+0x60/0x100 [ 247.162765] do_huge_pmd_anonymous_page+0x8e4/0x1470 [ 247.162778] ? find_held_lock+0x35/0x130 [ 247.173477] block nbd3: shutting down sockets [ 247.174321] ? process_measurement+0x58a/0xb80 [ 247.183448] ? __thp_get_unmapped_area+0x130/0x130 [ 247.183464] __handle_mm_fault+0x22bf/0x3470 [ 247.183477] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 247.192514] ? find_held_lock+0x35/0x130 [ 247.192529] ? handle_mm_fault+0x1b6/0x7c0 [ 247.192549] handle_mm_fault+0x293/0x7c0 [ 247.192564] __do_page_fault+0x4c1/0xb80 [ 247.222980] ? vmalloc_fault+0xe30/0xe30 [ 247.227051] do_page_fault+0x71/0x511 [ 247.230864] page_fault+0x25/0x50 [ 247.234324] RIP: 0010:__get_user_4+0x21/0x30 [ 247.238728] RSP: 0018:ffff88805beafb78 EFLAGS: 00010202 [ 247.244083] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc90006669000 [ 247.244089] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 247.244095] RBP: ffff88805beafca0 R08: ffff8880631941c0 R09: 0000000000000001 [ 247.244101] R10: 0000000000000000 R11: ffff8880631941c0 R12: 0000000020000040 [ 247.244107] R13: ffff8880560c5600 R14: dffffc0000000000 R15: ffff8880560c5608 [ 247.244127] ? __might_fault+0x188/0x1d0 [ 247.244143] ? vhost_vring_ioctl+0xaa/0x1340 [ 247.258666] ? avc_ss_reset+0x110/0x110 [ 247.258683] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 247.258693] ? vhost_dev_ioctl+0xf3/0xe90 [ 247.301466] ? vhost_chr_write_iter+0x1260/0x1260 [ 247.306296] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 247.310863] ? vhost_vsock_flush+0xc0/0xc0 [ 247.315080] ? __might_sleep+0x93/0xb0 [ 247.318950] ? __fget+0x210/0x370 [ 247.322405] ? vhost_vsock_flush+0xc0/0xc0 [ 247.326624] do_vfs_ioctl+0x7ae/0x1060 [ 247.330497] ? selinux_file_mprotect+0x5d0/0x5d0 [ 247.335237] ? lock_downgrade+0x740/0x740 [ 247.339368] ? ioctl_preallocate+0x1c0/0x1c0 [ 247.343763] ? __fget+0x237/0x370 [ 247.347204] ? security_file_ioctl+0x89/0xb0 [ 247.351619] SyS_ioctl+0x8f/0xc0 [ 247.354965] ? do_vfs_ioctl+0x1060/0x1060 [ 247.359096] do_syscall_64+0x1e8/0x640 [ 247.362964] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.367793] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.372961] RIP: 0033:0x459f49 [ 247.376134] RSP: 002b:00007f4ee7f18c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.383823] RAX: ffffffffffffffda RBX: 00007f4ee7f18c90 RCX: 0000000000459f49 [ 247.391077] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 13:45:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x242000, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r3 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/current\x00', 0x2, 0x0) fallocate(r3, 0x4, 0xe08a, 0x1) 13:45:42 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000880)) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000007c0)=[{&(0x7f00000001c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/227, 0xfffffffffffffe05}, {&(0x7f0000000440)=""/134, 0x86}, {&(0x7f0000000240)=""/6, 0x6}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f0000000640)=""/232, 0xe8}, {&(0x7f0000000280)=""/6, 0x6}, {&(0x7f0000000900)=""/38, 0x18}, {&(0x7f0000000740)=""/79, 0x4f}], 0x9, 0x0) [ 247.398344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.405593] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4ee7f196d4 [ 247.412844] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 [ 247.461221] audit: type=1804 audit(1572702343.022:202): pid=14697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/452/bus" dev="sda1" ino=17307 res=1 [ 247.476818] FAULT_INJECTION: forcing a failure. [ 247.476818] name failslab, interval 1, probability 0, space 0, times 0 [ 247.500109] CPU: 0 PID: 14697 Comm: syz-executor.5 Not tainted 4.14.151 #0 13:45:43 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:43 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 247.507125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.516489] Call Trace: [ 247.519078] dump_stack+0x138/0x197 [ 247.522708] should_fail.cold+0x10f/0x159 [ 247.526855] ? __es_tree_search.isra.0+0x15f/0x1c0 [ 247.531789] should_failslab+0xdb/0x130 [ 247.535764] kmem_cache_alloc+0x47/0x780 [ 247.539834] __es_insert_extent+0x26c/0xe60 [ 247.544164] ext4_es_insert_extent+0x1f0/0x590 [ 247.548747] ? check_preemption_disabled+0x3c/0x250 [ 247.553764] ? ext4_es_find_delayed_extent_range+0x960/0x960 [ 247.553776] ? rcu_lockdep_current_cpu_online+0xf2/0x140 [ 247.553788] ? ext4_es_find_delayed_extent_range+0x31d/0x960 [ 247.559977] block nbd3: Receive control failed (result -22) [ 247.565094] ext4_ext_put_gap_in_cache+0xcb/0x110 [ 247.565104] ? ext4_zeroout_es+0x170/0x170 [ 247.565114] ? ext4_find_extent+0x64c/0x960 [ 247.565132] ext4_ext_map_blocks+0x1d4b/0x4fa0 [ 247.565141] ? __save_stack_trace+0x7b/0xd0 [ 247.565152] ? save_trace+0x290/0x290 [ 247.565167] ? ext4_find_delalloc_cluster+0xb0/0xb0 [ 247.565174] ? __lock_is_held+0xb6/0x140 [ 247.565189] ? lock_acquire+0x16f/0x430 [ 247.576656] ? ext4_map_blocks+0x402/0x17c0 [ 247.607680] ext4_map_blocks+0xd3c/0x17c0 [ 247.607700] ? ext4_issue_zeroout+0x160/0x160 [ 247.607712] ? trace_hardirqs_on_caller+0x400/0x590 [ 247.607721] ? trace_hardirqs_on+0xd/0x10 [ 247.615761] _ext4_get_block+0x1a0/0x590 [ 247.615775] ? ext4_map_blocks+0x17c0/0x17c0 [ 247.615790] ? iov_iter_advance+0x218/0xc60 [ 247.615803] ext4_dio_get_block+0x9a/0xb0 [ 247.615818] do_blockdev_direct_IO+0x211a/0x7fd0 [ 247.633761] ? __lock_acquire+0x5f7/0x4620 [ 247.633789] ? sb_init_dio_done_wq+0x80/0x80 [ 247.633797] ? __lock_acquire+0x5f7/0x4620 [ 247.633806] ? __lock_acquire+0x5f7/0x4620 [ 247.633816] ? __unlock_page_memcg+0x53/0x100 [ 247.633839] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 247.633858] ? lock_acquire+0x16f/0x430 [ 247.633868] ? ext4_dio_get_block_unwritten_sync+0xd0/0xd0 [ 247.642071] __blockdev_direct_IO+0xa1/0xca [ 247.642086] ext4_direct_IO+0x9ed/0x1890 [ 247.642098] ? is_bpf_text_address+0xa6/0x120 [ 247.642110] ? kernel_text_address+0x73/0xf0 [ 247.642124] ? __unwind_start+0x1f6/0x3d0 [ 247.642143] generic_file_read_iter+0x2f3/0x21b0 [ 247.642154] ? fsnotify+0x92f/0x11e0 [ 247.642176] ? filemap_range_has_page+0x1e0/0x1e0 [ 247.642187] ? __inode_security_revalidate+0xd6/0x130 [ 247.642198] ? avc_policy_seqno+0x9/0x20 [ 247.642208] ? selinux_file_permission+0x85/0x480 [ 247.651318] block nbd3: shutting down sockets [ 247.655048] ? security_file_permission+0x89/0x1f0 [ 247.655066] ext4_file_read_iter+0x14e/0x340 [ 247.655077] aio_read+0x221/0x300 [ 247.655086] ? aio_write+0x4f0/0x4f0 [ 247.672664] ? find_held_lock+0x35/0x130 [ 247.672679] ? __might_fault+0x110/0x1d0 [ 247.672693] ? __might_fault+0x110/0x1d0 [ 247.672709] ? lock_downgrade+0x740/0x740 [ 247.681410] do_io_submit+0x1027/0x13f0 [ 247.681430] ? free_ioctx_users+0x3e0/0x3e0 [ 247.681450] ? SyS_write+0x15e/0x230 [ 247.681460] ? SyS_io_destroy+0x310/0x310 [ 247.681470] SyS_io_submit+0x28/0x30 [ 247.681479] ? SyS_io_submit+0x28/0x30 [ 247.681496] do_syscall_64+0x1e8/0x640 [ 247.681506] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.681522] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.681531] RIP: 0033:0x459f49 [ 247.681536] RSP: 002b:00007f3dcd162c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 247.696706] RAX: ffffffffffffffda RBX: 00007f3dcd162c90 RCX: 0000000000459f49 [ 247.696713] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd121000 [ 247.696719] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 247.696725] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1636d4 [ 247.696731] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 13:45:43 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000240), 0x19f, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000500)='user\x00\x9fU\x00\x00\x00\x00_\x9f\xae\xd4 k\xc9\xa2\xdbK\x97\xda\x15\xb7\xc2\x8b\xc5<\x82`8,\x97\xe9\xb6\x91\x01\x7f\x00\x00\x00\x00\x00\xa9\xff\x02\xabjQ\xfe\x96\x1be/\x84\x111?\xbe\r\r\xabO8\\\x9e\xfe\t\xcd\xd2\x04\x04\x04\xb2\x85\x8e\bRl}\xcf~\xe6\x1fC\n\xcbi\x8f\xaf\x16h\xd9(\xf4\xa5^\xf2G\x13fR\xaa8\x86\x92\xa4\x12\x7fO\x87z\xe3\xc8\xe1aO\xbc\x9e\xcb\xb7\xe3\fY\x13\xa0\xd5\x14\xaa\xb9z\n\xc1va\xdc\x03', &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000100)='&bdevwlan1em1md5sum\x00', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000001280)=[@in6={0xa, 0x0, 0x0, @dev, 0x7}], 0x1c) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$TUNSETLINK(r6, 0x400454cd, 0x79b) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x100, 0x400) 13:45:43 executing program 0 (fault-call:4 fault-nth:4): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:43 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:43 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:43 executing program 5 (fault-call:8 fault-nth:4): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) socket$inet6_sctp(0xa, 0x4, 0x84) r3 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) dup2(r2, r3) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:43 executing program 2: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:43 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000100)={0x2}) 13:45:43 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 248.022933] block nbd3: Receive control failed (result -22) [ 248.029434] block nbd3: shutting down sockets [ 248.034497] audit: type=1804 audit(1572702343.582:203): pid=14738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/453/bus" dev="sda1" ino=17315 res=1 [ 248.162153] FAULT_INJECTION: forcing a failure. [ 248.162153] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 248.178382] CPU: 0 PID: 14738 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 248.185429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.188387] block nbd3: Receive control failed (result -22) [ 248.194780] Call Trace: [ 248.194796] dump_stack+0x138/0x197 [ 248.194813] should_fail.cold+0x10f/0x159 13:45:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140), 0x0, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000340)={{0xdeed0bebe0ce6a4f, 0x0, @reserved="e29d630f5ec187a8ce16c9063383c21d0c153aa819712a02f2c74dc90337cfb0"}, 0xbd, [], "fd4f11b342a6789e475dbe908ea2d6a4aab713995c09584479f4e49335e9f7347714929387b640360d0c569132009e57a625b2f8d5de552eee027c78d5a076e91bf2beab4ff27fbd29486456c7441b58a43741c5b912109761ddc32edb6578c69ce388b2a985fe115cc80bbffe1ca70f3808e4224dd804f5b2a49ca34996777e75a18b0e05768333ce6592ae9308cc996259df658f06da0b2320b73da96a355060d3c2d7faf8320a7b781d8529825658d3cb261102d8688f1aeb341e09"}) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000001c0)="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") preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 248.194823] ? __might_sleep+0x93/0xb0 [ 248.194836] __alloc_pages_nodemask+0x1d6/0x7a0 [ 248.194849] ? __alloc_pages_slowpath+0x2930/0x2930 [ 248.194863] ? __do_page_cache_readahead+0x28e/0x960 [ 248.194876] alloc_pages_current+0xec/0x1e0 [ 248.203148] __page_cache_alloc+0x248/0x3e0 [ 248.210902] __do_page_cache_readahead+0x2d9/0x960 [ 248.210918] ? read_cache_pages+0x5f0/0x5f0 [ 248.210928] ? retint_kernel+0x2d/0x2d [ 248.210946] ? ondemand_readahead+0x14f/0xb40 [ 248.238186] ondemand_readahead+0x50a/0xb40 13:45:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f00000001c0)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 248.251281] ? ondemand_readahead+0x50a/0xb40 [ 248.251300] page_cache_sync_readahead+0xab/0x100 [ 248.251314] generic_file_read_iter+0x1269/0x21b0 [ 248.251341] ? filemap_range_has_page+0x1e0/0x1e0 [ 248.251352] ? __inode_security_revalidate+0xd6/0x130 [ 248.251364] ? avc_policy_seqno+0x9/0x20 [ 248.251373] ? selinux_file_permission+0x85/0x480 [ 248.251384] ? security_file_permission+0x89/0x1f0 [ 248.251399] ext4_file_read_iter+0x14e/0x340 [ 248.251411] aio_read+0x221/0x300 [ 248.251428] ? aio_write+0x4f0/0x4f0 [ 248.251437] ? __might_fault+0x110/0x1d0 [ 248.251458] ? lock_release+0x44d/0x940 [ 248.318216] ? lock_downgrade+0x740/0x740 [ 248.322180] block nbd3: shutting down sockets [ 248.322372] do_io_submit+0x1027/0x13f0 [ 248.330937] ? free_ioctx_users+0x3e0/0x3e0 [ 248.335261] ? trace_hardirqs_on_caller+0x400/0x590 [ 248.340290] ? SyS_io_destroy+0x310/0x310 [ 248.344440] ? SyS_io_destroy+0x310/0x310 [ 248.348594] SyS_io_submit+0x28/0x30 [ 248.352305] ? SyS_io_submit+0x28/0x30 [ 248.356194] do_syscall_64+0x1e8/0x640 [ 248.360097] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 248.365546] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 248.365554] RIP: 0033:0x459f49 [ 248.365561] RSP: 002b:00007f3dcd162c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 248.381627] RAX: ffffffffffffffda RBX: 00007f3dcd162c90 RCX: 0000000000459f49 [ 248.381634] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd142000 [ 248.381639] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 248.381645] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1636d4 [ 248.381651] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 13:45:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x49bc, 0x200000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:44 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r1 = getpgid(r0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfff, 0xfffffffffffffff7}}, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cachefiles\x00', 0x1082, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000880)={r5}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000003c0)={r5, 0x4}, &(0x7f0000000400)=0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r6, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) bind$rds(r9, &(0x7f0000000340)={0x2, 0x4e24, @local}, 0x10) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r8, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r8, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r10, &(0x7f00000001c0)="01359e73df00703f4ed1c666b17728bb2ae540be423b8b0c66eebc42693b280ac0d6636a267419590c5a8b77", &(0x7f0000000200)=""/98}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r8, r6) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r7, &(0x7f00000017c0), 0x199, 0x0) 13:45:44 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat(r2, &(0x7f0000000080)='./file0\x00', 0x200800, 0x381) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:44 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:44 executing program 5 (fault-call:8 fault-nth:5): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:44 executing program 2: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 248.866343] block nbd3: Receive control failed (result -22) [ 248.879662] block nbd3: shutting down sockets [ 248.884407] audit: type=1804 audit(1572702344.442:204): pid=14785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/454/bus" dev="sda1" ino=17325 res=1 13:45:44 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) [ 248.977361] FAULT_INJECTION: forcing a failure. [ 248.977361] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.013453] CPU: 0 PID: 14785 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 249.020506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.029878] Call Trace: [ 249.032458] dump_stack+0x138/0x197 [ 249.036071] should_fail.cold+0x10f/0x159 [ 249.040203] ? __might_sleep+0x93/0xb0 [ 249.044089] __alloc_pages_nodemask+0x1d6/0x7a0 [ 249.048752] ? __alloc_pages_slowpath+0x2930/0x2930 [ 249.053763] ? __do_page_cache_readahead+0x28e/0x960 [ 249.058859] alloc_pages_current+0xec/0x1e0 [ 249.063171] __page_cache_alloc+0x248/0x3e0 [ 249.067482] __do_page_cache_readahead+0x2d9/0x960 [ 249.072397] ? read_cache_pages+0x5f0/0x5f0 [ 249.076722] ? lock_downgrade+0x740/0x740 [ 249.080867] ondemand_readahead+0x50a/0xb40 [ 249.085176] ? ondemand_readahead+0x50a/0xb40 [ 249.089657] page_cache_sync_readahead+0xab/0x100 [ 249.094481] generic_file_read_iter+0x1269/0x21b0 [ 249.099333] ? filemap_range_has_page+0x1e0/0x1e0 [ 249.104173] ? __inode_security_revalidate+0xd6/0x130 [ 249.109394] ? avc_policy_seqno+0x9/0x20 [ 249.113439] ? selinux_file_permission+0x85/0x480 [ 249.118265] ? security_file_permission+0x89/0x1f0 [ 249.123190] ext4_file_read_iter+0x14e/0x340 [ 249.127588] aio_read+0x221/0x300 [ 249.131119] ? aio_write+0x4f0/0x4f0 [ 249.134817] ? find_held_lock+0x35/0x130 [ 249.138859] ? __might_fault+0x110/0x1d0 [ 249.142928] ? __might_fault+0x110/0x1d0 [ 249.146984] ? lock_downgrade+0x740/0x740 [ 249.151118] do_io_submit+0x1027/0x13f0 [ 249.155077] ? free_ioctx_users+0x3e0/0x3e0 [ 249.159376] ? trace_hardirqs_on_caller+0x400/0x590 [ 249.164376] ? SyS_io_destroy+0x310/0x310 [ 249.168504] ? SyS_io_destroy+0x310/0x310 [ 249.172758] SyS_io_submit+0x28/0x30 [ 249.176448] ? SyS_io_submit+0x28/0x30 [ 249.180320] do_syscall_64+0x1e8/0x640 [ 249.184206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.189046] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.194215] RIP: 0033:0x459f49 [ 249.197383] RSP: 002b:00007f3dcd162c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 249.205109] RAX: ffffffffffffffda RBX: 00007f3dcd162c90 RCX: 0000000000459f49 [ 249.212359] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd142000 [ 249.219608] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:45:44 executing program 3: perf_event_open(&(0x7f0000000680)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:44 executing program 2: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:44 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 249.226858] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1636d4 [ 249.234107] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 13:45:44 executing program 3 (fault-call:5 fault-nth:0): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 249.354918] block nbd3: Receive control failed (result -22) [ 249.374894] block nbd3: shutting down sockets 13:45:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') socket$inet(0x2, 0x5, 0x5) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x9) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:45 executing program 5 (fault-call:8 fault-nth:6): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:45 executing program 2: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:45 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x3, 0x4000) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x40, @mcast1, 0x1ff}, @in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e22, 0x1, @local, 0x3}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}], 0x88) 13:45:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f00000001c0), &(0x7f0000000200)=0x4) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) 13:45:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) r2 = dup(0xffffffffffffffff) ioctl$VIDIOC_ENUM_DV_TIMINGS(r2, 0xc0945662, &(0x7f0000000100)={0x7, 0x0, [], {0x0, @bt={0x0, 0x20, 0x0, 0x0, 0x5, 0x47, 0x6, 0xff, 0x100, 0x433, 0x9, 0x1, 0x3, 0x6, 0x10, 0x40}}}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$RTC_WKALM_SET(r0, 0x4028700f, &(0x7f00000001c0)={0x0, 0x0, {0x28, 0x1, 0xc, 0xe, 0x3, 0x7, 0x2, 0x166, 0x38d9a678fce1165f}}) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 249.741621] block nbd3: Receive control failed (result -22) [ 249.762788] audit: type=1804 audit(1572702345.312:205): pid=14842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/455/bus" dev="sda1" ino=17329 res=1 13:45:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:45 executing program 2: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) 13:45:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000011, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 249.867778] FAULT_INJECTION: forcing a failure. [ 249.867778] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 249.896449] CPU: 0 PID: 14842 Comm: syz-executor.5 Not tainted 4.14.151 #0 [ 249.903578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.903583] Call Trace: [ 249.903598] dump_stack+0x138/0x197 [ 249.903613] should_fail.cold+0x10f/0x159 [ 249.903624] ? __might_sleep+0x93/0xb0 [ 249.927160] __alloc_pages_nodemask+0x1d6/0x7a0 [ 249.927175] ? __alloc_pages_slowpath+0x2930/0x2930 [ 249.927192] ? __do_page_cache_readahead+0x28e/0x960 [ 249.927207] alloc_pages_current+0xec/0x1e0 [ 249.927220] __page_cache_alloc+0x248/0x3e0 [ 249.950682] __do_page_cache_readahead+0x2d9/0x960 [ 249.955608] ? read_cache_pages+0x5f0/0x5f0 [ 249.959910] ? check_preemption_disabled+0x3c/0x250 [ 249.964969] ondemand_readahead+0x50a/0xb40 [ 249.971018] ? ondemand_readahead+0x50a/0xb40 [ 249.975498] page_cache_sync_readahead+0xab/0x100 [ 249.980324] generic_file_read_iter+0x1269/0x21b0 [ 249.985156] ? filemap_range_has_page+0x1e0/0x1e0 [ 249.989977] ? __inode_security_revalidate+0xd6/0x130 [ 249.995148] ? avc_policy_seqno+0x9/0x20 [ 249.999192] ? selinux_file_permission+0x85/0x480 [ 250.004244] ? security_file_permission+0x89/0x1f0 [ 250.009153] ext4_file_read_iter+0x14e/0x340 [ 250.013541] aio_read+0x221/0x300 [ 250.016970] ? aio_write+0x4f0/0x4f0 [ 250.020661] ? find_held_lock+0x35/0x130 [ 250.024700] ? __might_fault+0x110/0x1d0 [ 250.028741] ? __might_fault+0x110/0x1d0 [ 250.032787] ? lock_downgrade+0x740/0x740 [ 250.036917] do_io_submit+0x1027/0x13f0 [ 250.040877] ? free_ioctx_users+0x3e0/0x3e0 [ 250.045184] ? trace_hardirqs_on_caller+0x400/0x590 [ 250.050203] ? SyS_io_destroy+0x310/0x310 [ 250.054330] ? SyS_io_destroy+0x310/0x310 [ 250.058468] SyS_io_submit+0x28/0x30 [ 250.062171] ? SyS_io_submit+0x28/0x30 [ 250.066039] do_syscall_64+0x1e8/0x640 [ 250.069929] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.074766] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.079936] RIP: 0033:0x459f49 [ 250.083136] RSP: 002b:00007f3dcd162c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 250.090829] RAX: ffffffffffffffda RBX: 00007f3dcd162c90 RCX: 0000000000459f49 [ 250.098085] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007f3dcd142000 [ 250.105344] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 250.112641] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3dcd1636d4 13:45:45 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 250.120031] R13: 00000000004c1519 R14: 00000000004d4e10 R15: 0000000000000007 13:45:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:45 executing program 5 (fault-call:8 fault-nth:7): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:45 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000019, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:45 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 250.231569] block nbd2: Receive control failed (result -22) [ 250.240774] block nbd2: shutting down sockets [ 250.296464] audit: type=1804 audit(1572702345.852:206): pid=14890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/456/bus" dev="sda1" ino=17330 res=1 [ 250.518191] block nbd3: shutting down sockets 13:45:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:46 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000100)={0x0, r2, 0x4, 0x3f, 0x0, 0x8001}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000140)={0x5, &(0x7f0000000180)=[{0x1, 0xf, 0xe1, 0x3}, {0x6, 0x3, 0xff, 0x1}, {0x3, 0x4, 0x6, 0x9}, {0x400, 0x1f, 0x8, 0x8005}, {0x5, 0xc0, 0x1f, 0x8002}]}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:46 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) pivot_root(&(0x7f0000000080)='./bus\x00', &(0x7f00000001c0)='./bus/file0\x00') r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x800, 0x0) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x2}}, 0x18) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x9, 0x0, 0x90, 0x7c, 0x0, 0x61a, 0x20000, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x4db, 0x7}, 0x10024, 0x7fff, 0x907b, 0x0, 0x8, 0xfffff800, 0xe3}, 0x0, 0xd, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:46 executing program 3: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000040)) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) finit_module(r0, &(0x7f0000000000)='\x00', 0x2) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="c4010000eebd56f943e72bce2e", @ANYRES16=0x0, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x80) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 13:45:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) accept4$inet6(r3, 0x0, &(0x7f00000001c0), 0x400) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv4_getrule={0x20, 0x22, 0x1, 0x70bd28, 0x25dfdbff, {0x2, 0x10, 0x20, 0x40, 0x5, 0x0, 0x0, 0x3, 0x4}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4000000) [ 250.619907] block nbd2: Receive control failed (result -22) [ 250.633144] block nbd2: shutting down sockets [ 250.637730] audit: type=1804 audit(1572702346.192:207): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/457/bus" dev="sda1" ino=17340 res=1 13:45:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:46 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:46 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000080)) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) clock_gettime(0x5, &(0x7f0000000040)) io_setup(0x40000000008, &(0x7f0000000240)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) open_by_handle_at(r1, &(0x7f0000000140)={0xba, 0x8000, "6703dea44a65f521d75489e515f605ba08869d880cdef2c9ab942b2778d0f50a501824fe7e2eeb7ead8836aecbe83eaa9aaeef67f520df13b8ac706507076036052ce0cc2fd8c432c806ea294b05e6cb5ddd858262390064361c9e20230b24d1fadc38acee128cc4c2b53cff427b1af4ad34dbdae4cbc36badb53966e367c96d6c9c011eeedfaf32b07f76231f5197b823aff15e19004489578b2c3435824c24fd1f5b4b778c023ceb6cd805ca6c04b4f2a2"}, 0x101000) write(r4, &(0x7f0000000340), 0x41395527) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={{0x1f, 0x1, 0x40, 0x0, 0x1, 0xfc}, 0x5131}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 250.673064] audit: type=1804 audit(1572702346.212:208): pid=14915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/457/bus" dev="sda1" ino=17340 res=1 13:45:46 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) 13:45:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x4, r1}) 13:45:46 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) [ 250.839464] block nbd2: Receive control failed (result -22) [ 250.853878] block nbd2: shutting down sockets 13:45:46 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='\xf5dUv/z\x01ro\x00', 0x101000, 0x0) ioctl$TIOCSRS485(r1, 0x542f, &(0x7f0000000080)={0x5, 0xff, 0xcc740000}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000280)={0x7, 0x43}) sendmsg$TIPC_CMD_SHOW_STATS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r3, 0x103}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x11000008}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xb3d2d40b619c0c85}, 0x800) [ 250.864685] audit: type=1804 audit(1572702346.412:209): pid=14939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/458/bus" dev="sda1" ino=17318 res=1 13:45:46 executing program 4: ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) 13:45:46 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:46 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 250.995755] block nbd2: Receive control failed (result -22) [ 251.007820] block nbd2: shutting down sockets 13:45:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:47 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x2, 0x9e, 0x8, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x500000, 0x0, @perf_config_ext={0x0, 0x1}, 0xdfeb4b4f5c07ce56, 0x0, 0x3, 0x4, 0x0, 0xe7a, 0x2b}, r3, 0x8, r0, 0xa) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x40240, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:45:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) getitimer(0x6fffe4ddbe7d958e, &(0x7f0000000080)) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00') r5 = openat$null(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/null\x00', 0x42, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000440)={0xe3, 0x8, 0x11, {r6, r7+30000000}, 0x24da, 0x1f}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbdf25030000000c000300a5060000000000000c00040072000000000000001400070008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00040000800000000000000c00030009000000000200000c080600000000000022a30000000c0006000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x80800) recvfrom$inet(r2, &(0x7f0000000100)=""/196, 0xc4, 0x3, &(0x7f0000000200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:47 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) [ 251.587068] block nbd2: Receive control failed (result -22) [ 251.596903] block nbd2: shutting down sockets 13:45:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000001c0)) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) bind$inet6(r3, &(0x7f0000002180)={0xa, 0x4e24, 0xf5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xfff}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$packet(0x11, 0x2, 0x300) dup(r4) r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x8003, &(0x7f0000000300)=0x75f, 0x9) r6 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) r7 = memfd_create(&(0x7f0000000340)='-vboxnet0\x00]\xea\xb0\xe2N\xc6c\x05\x8d\xb5\xc0\n\xad\x0f#+\x17\xd6A\xf4\xdf\x1b\xf9~\x8e\"\r\xff\xbb\xb0\xc3\x86\x97\xaf\xf8\x7f*\xfc\xfd\xe7\xcc\xbc\xddI.\xc3\x9aQ\xc8\x8e8U\xdaX\x06\x92\x1d\xbd\x10\xf9\xe8q\x00\xddr>\xd7\x9f\xf8r\xeeE\xa83K\xf60 \x7f\xcd\xac\x86\x9eT*\xf7\a^L,\x98\xa2(2,\x8c*\xff\x8aA\xa1\x153\x15\b\xcb\xf7\xefw\xa6\xc7c@\xb5\x9b\xdc$`3]\xf9.\xcf\x00', 0x0) ftruncate(r7, 0x1000000) mount$overlay(0x400000, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0x0, 0xfffffffffffffff8, 0x1, 0x8, 0x8, 0x0, 0xd8}, &(0x7f0000000440)={0xcc, 0x2, 0x0, 0x67, 0xffff, 0x6, 0x8, 0x7}, &(0x7f0000000480)={0x3, 0x0, 0x0, 0x0, 0x10001, 0x100000000, 0x0, 0xfffffffffffffff8}, &(0x7f0000000600)={0x77359400}, &(0x7f0000000680)={&(0x7f0000000640), 0x8}) sendfile(r6, r7, &(0x7f00000000c0)=0xf18001, 0xeefffdef) mkdirat(r5, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) 13:45:47 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000000)=0x100) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SIOCAX25ADDFWD(r1, 0x89ea, &(0x7f0000000080)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x19, 0x80010, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:47 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) 13:45:47 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000000)='net/route\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xffffffff, 0x6, 0x17c8, 0x800, 0x9de, 0x82200090, r3}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video0\x00', 0x2, 0x0) r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r4, 0x2008001) dup3(r5, r4, 0x0) fcntl$setstatus(r4, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000001c0)=@random={'osx.', 'net/route\x00'}, &(0x7f0000000280)='\x00', 0x1, 0x5) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r0, 0x3b64) ioctl$void(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f00000001c0)=0x97a1, 0x4) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 251.732054] block nbd2: Receive control failed (result -22) [ 251.755259] block nbd2: shutting down sockets 13:45:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000340)={0x5, 'bcsh0\x00', 0x3}, 0x18) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cuse\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000380)={{0x2b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x2, 'dh\x00', 0x20, 0xabc, 0x28}, {@local, 0x4e23, 0x3, 0xfffffbff, 0x40, 0x3a}}, 0x44) write$FUSE_GETXATTR(r5, &(0x7f0000000280)={0x18, 0x0, 0x8, {0xffff}}, 0x18) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @broadcast}, &(0x7f0000000200)=0xc) 13:45:47 executing program 2 (fault-call:5 fault-nth:0): r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 251.768277] audit: type=1804 audit(1572702347.322:210): pid=15007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/459/bus" dev="sda1" ino=17355 res=1 13:45:47 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/z~ro\x00', 0x660440, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) close(r2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 251.834465] block nbd3: Receive control failed (result -22) 13:45:47 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:47 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_setup(0x1ff, &(0x7f0000000000)=0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x4, r5, &(0x7f0000000580)="7134190e9431abfa09507fe32fea1c00b038d9f9b10f840f1c48b84a2d41b329a078e42ad1a49ff02a08b8e6816792f88d6c802dde30e348543b3bde765d76e72a3725a36ba16f28b0a9d9acca780ae8f9596ca961aa5f5b3ccea8ec5f1c516f652391bb1619bb1f44be2b393df06fa460bdd986a9989931ebe3b656e4775e71c115d41f8d4263c4329b20906d625b12e7053e397cc3c3710557f641ddc87f77d04f01b3e18a20e3888bd49aa2226bf904981ace89b66fe55d35719bdaea8e48de1bb63cf8e6bddd277c5c1aa873608b1ea47bd663d9e196406c05adacd25590198562c0196b1c403c88236e870d9ffc13ff7dee393ded285d99bdb71f2b7acbc23a4a75266e95931f7b1231314d081e496ae6115590c0a34fe178dd5345cab38147741ba8e1567ac90af793b30ba68ef6a31623df3e9124d135f770e768a0bbda2f521007d48b2008f1ea589465afab0d744bfaca8d04daf3b503ee4050007c028026495291caaef9ba838f975f8c8453555e57b4b1aae99f85a51c7d0dd6fe0cc7912fe031c5453bf823c5e68e49aa5ea12b3a94a558625e2efddef827c0558692f932e587ffc48a81b1cf56a0033316576b70de3b31de596bd3b0beab05742b80be88f72aed7bf5a77460a0ae7a1cfddd42bd734d796d3838955bdeb0c215ddfcc5617d28975e4839c0b4e68ec93c56b6fd48b07d9d774f0360bd459eba3d993f73636eba3b510f18a40dd86e0e35f6b6e1f74db8e83cd6e4ec69c7121d367edd319910d46ed973bec1d3b2d972aa2ec71848330b6abd58c24bd49d89f9ed0fcef12dbdb54997de650ef7c8ed5fb0eb36406aeecc17e9f592ab2c714af121df2683e02c76880e2b729832d95d50b1b5db7ad859d7a0e6f7b105b1d14a882cfc388030fc54a2d4f1576b27831006646a8df56f5fc4791a8176d799225d7573e1844496db03ce090c37dac856020fb9aff33b5bdd45e23c92326d11eba7106857a712818a9a5b769d85a511a12e50653205076721905cd95eacfe59d8ff1f3b31d2fdd000d711ab0859c802be39c2aa1b1b364125419a9cb53f7a9d7d6506998c576adfd3d1612503239d03e0b197bed5b40dfc1adea0988780b37ef866b6ec51acf2dadd0b9610b933ff94dc279e3cdaf9b39572f26baf46796b6ea507698c2f908832b3504ca6467b30d3e13c850dec8cbd2b6aabdea7319c1c2e2242b821ea35ab66d98360366507c3dd7a7a693b8bc637d970ed19d7f0a34fec77a311d1f829f622bab05169f1ef45b9bc77d97fcf125b5f6f8e78740ae9c8538f23cce093bd9efd43eae5820c6bce6bfed20882e82c7e0f23e0ddc1bf0f261b18577f113ad63d8eeca7f4dbf616c20470772b63beb5ffc7333483fafb42a1231f772c5d2dc334e799e7d697d18171e4e721a97edd5c0d917559396fda0537c12a7e8f493c154e1cc92505251d660ed03e81991cf0f8c8491b04b0ba91d6d45cafe526c33f943d04260859953ffbe1542c7283b4c9936965275778ce484e8edd459f3c7b399f5b31be0950b4e8072d52fd6f44c0432dd938b050c79ca9a73976719b7a1f4c5ff02ce5a5fdeebfd5a9f49c3078afd8cc2cf91ec2bf371b51718bef98b0e719bd5f48aedfc78d96b17702c6e94e3f981171292e246ea92c3cc3e242b565e94ec13f1915b92656d919e09140eed3b716d3288cca5ad4da14b79740b6f0f3e7a96c0cab85acee09345841ff78680834edb4af96658c8eec8dfcc7934ef9a3279b3fe6fc1bd5097551676a243425db97ea233294ab1202570da91b94425d958b0221f2e994446245a7b4ce8ec33a383e3d77702c61ac6198578b77f9784eeaf0c3037952e3767b4d3f36e7758aff4b58c946fc5e9583e1b7423d55b9534caeb586c7646a3c3802802711514c17074958976fe1807358a606f363a5aab70308d118ad0dac0a1176cac047aa1a27085a4fd4595b0b0a863e846e7354a25b521cca5bcaa60a04b5d3786a1be64db28ed48ae1cc52d23a198f0d0702201d0a30767dcf2044257a7acab4255c10a41ec7c251760becaac5f46057f2f54703d4f910beecc23a010f2a9139e2d89412ba1f2c7faee1467d989f83deac8445b8a38939005ee3d76947b7f67fdbd2b5830b2878733af79e568a9449135e1abbfa4800066f558821767f90940ec2db1419664ae07eb7803116c972062154cdcfe6e5424c73147a065dd3568858af1a8fe871a3b2a8a6c3cbac8766717690e15a06edb75d791cfd2d95466b1ab339b4223cdbfdca8b119358dac376a8dd865fd27bcba651856de58baaa6797dc46c0233e32c511ff9c9e0f629b1bacc07a194a359ff4dcb99e4115d8213631b7d804fc78114de06e65ec530cd627c831bc7f9f82bedef0a0e2a3cfe10dc8bce771434541d8c4ff0b9aba859f4764117745b5fd3814098e70eb16638d250c2e2202d9ceae4334ca8e88a19bb59c4cf61ac8b536384aa6b07453c0d2af45c5f2d1a9024860ba2f1c8d212d00d058db56022bc9eb4f7397011c7357a10b410b0eb232d3fabfce91cb71c437d14ebd1536ba9c55a1cca095a3289eac42bb6c2b87b3a7a96cd484eed773927c3116ce96242155477aedee114cb4ee78dbfe78290dcc3ddfb058e2cc84e489c4f92d9a848c2285c5448649a7088ccac047ced1e25bb4f9154ed96b604e58efddd11ed560811d54fe4fbab321641e3fd4333d99f2c080b3e880a2d594ba694dfe170f305f51b5ebbd5091bcec2938daec22f6d0665fdab2d184510333647a17d0bbc72698391c1dbb9df0c2094200866b9556306ec0cd7bb0679fa8a9ae8bb680d7242588e465093813e4537501604b33124c00e9748ccc772a116127ff6e8118ee0650eeb6d341cb041913c196f98f256f587805869867fcc43d3befbc287d32225d5a87107de1874427ff5f9dba4df7d7f2416628d4d815a6cd6ea35d9e06b3041c456469728bebf4f70d188eed51dff2d5823e0e11de709fbb9065a88064586e3497bcca43bdd99f54e8f3238a3d1bdc5116a3d568503716eaeae7aef404ddd1b46602447101c613bd2d90277fa09043ae543df60c1f0dfcd6d4fe4bee8a6c8f0bb4010a398ec988ff7e5b7c4c2920d76b65e20a95512dd12e418984da521069cf3e3ae42840a009311b685bcb58709b663ebe747fec30e9d0b5e3f8eeae95de2061ed2f4ad6b5e5f79485633cdccc68f85a5740cc7a05b0353233e3775c9e3fe863c92b30fc5c09e8e051c8d2024109fbcf0dc63826971cdcee02cd21b414c4b6cc997cdc5e5524e836ca60a73ee0bf576988a91357a035876cc9ee265bd9bd743f3780f18a1e4de1642f17a15ee95259e238360284c45cbf2629a5a01a52b04bb0d83039ebb9c01342a1721bd81563af4fa66efd17a8895de6a464f7b21e6a99665d5e61cdf203c7708e104da047994deffdb5fc1a7eaa98ac0503c9ebe1a70244886f4b5389ebdae811a33a67565af724b1dd38193f227bbc034ff601125e61fff214806a95a42ac55a165faa99ef4bb189ffed3d9f89649159c14ba9299f70d6bfdbd97e3bfbacf22a0228b2d1c37823227de3236768cb9c4efeb13ae3db9957bc1d3c89ca977d116b6cbe537f95005eb3a3de0270bd0d1c54dbe0b2be182083f829d3e3b487eee62013539d496b05258d66e88cb5e4dd81d54617280604d4e05dedb25b7b94890c6e3a29596e15be5db3b44d78a42faf19638d98ca4cefa338990b77dd88ed6070bd2324d579bb38413760a826afe70bf2fec9ef4dfa62ce36502440846bc088ad845eb2ef9a00abff8f22367774bf626ade2c16f0b463dea2496041e81f65b7b12af25599deb72930529a3dcbe3358c3080a21792d59af2b3ef058b01a8940b6eef8d7d11ed737515c55a64c771809f12644e1b2d8c5e454df60b01b3514cb6f4c8c961dbecd7f3beccbbead76b02c09b4e188c9541dd87892d5bfcbcbc56d717088b27d2024f317b62416e5a6ae8d906a635cedebd4ec34b42dbe47e1bb1c875781034515e2446df08780614dd954dc2df1eb1f97b79cce244d83dae62ad7962e51212d3810e6f3c211a57b81ba0c6ccefd586c79956898778e4b0a9729d1000e2358fe9d448beb0fed1220efa65cb734deed7399a3077d1ce03befd5b982dc663a5f8dffd51cc46ef737bf0b9f33d429bbaba9cad0e4fe37080bc44c5562381728f7af0430e4616e85be51634ce9bd156db0cb85a2a67f1708c75f78bf6882db29c8a2cf684daa922ec2d239af68aafd3d73f9b7c86e9c264272856cb38f12d22a1ee52c6da3e3303f225705de9e8bbf882b54382ef2c7c1e080f74c345fae24e887fe2e04902495665753bef3812da570e9c4a30744f238fe2bc040e85ae231cf5e068be08f05d3b2009740770532236b3b96df0cefaf6bad1e632107a9767c507c183cce39cff5037fba5073e49b851964d06bf1a662b496d94225f98c23239ae28f65ca9b53d2b46f721568fb964ecc2f84df1f4cca6dad2b4e696d94bfb86a18c20949f560538b69064d22919f31c7ade0ee4d2321a3491dee78542ff9b7cc50428b25b5bf3a7cdf96074747f971f0b49c7eff636df2250297df3a53f48f47ba08663827baf6218b325ee97f976e7a1ea848fb4bb3acd636098f413a40f0e96c6d9ac287678e49a9e9d163d93df49499292b6957c87a345da34e6059b13be5e1c940aac1f7f065bd3f2ba4f768b94561b557de30ce14ed1771ddffaa6f257d42079bda58a048de4ba2d849da8127138136cb70356f6583cd35ab0be751beba89f9635e48db7b295a95144d115d570519d1351446cca5b5cf4b7fbde55423379785f55e095c87cb7b80f1b289f6867f87ce6351fe4f8090fc502d32ef521751124466248d3d52ed0e7928be4ac2b0a389af79a6181aadd766503125b9c0f152f5e5f0d441e63349c59ea885c0fdf60f38cad7f3bd2d4e858676bfd847551dc9ef51e009ea735a0546f13e3cf187d37dba54ab6eb5449b321060ebe0c5e5d2ce071d7d65c0b9aae39642a8c21563fb9b92363d7ec0bf6f9a0ef53f349cf165ec449e5910cbc54d3986c1ef371e6e1eebb1676be72ad800b8c536ff9326d29281e7301da588c2fdd7c0512045a9a7ad9976f9cf09767fe2ba64b756685cadab45f8ada36f5465ae88dad3144a97a6d9ea0fc12756250abcfc21a6c974fc3646df0348d5c538db32fc098d3e01eb8ac50dfb3b8c3951425bb28bbb684c95bbc5e58512aef357d20281273cc8326413be53e7f25155d3f8ea70512f80d135c7122dbbc57eb3750e1e2d91b6c315c13eda552360d79636f57c0d8bea9834a8e498d99f9e9472468fe2bef79cdfba6e96224c4ece712dd357218653b05fd3fba9f1eb3fc49da1ce09cf04395e837d80f6ad7faef56ba0876303c7d10f96d8bccd304cdd1e5cf33efa3b4e30153d862d0de21a89c29ebd7dbdeb50d065fb432caeb6d9f3189f93a121fa8beb231f7f2b954cb029302c6958349934e050925a869a91190610bb577005c98ca4351a2fa55141456e2417fb37ce9a0c2b28336efcd28cbbb34f6ce94e166f793c4c4bc1dcb57ba7945b2606944dc94a6de68ce871100807149715e5d99a20a654640543cdbcce471b5183e462bd55d0b7d348af8423ce474d4b509a314f224506667d922f8ccc2cfef1dac47f1bc4ed781174a86ae57672da18bfe0f3bdc1f78d7d9d212a2f631fa703f092c2c720df0e25cfcf0c86e83591b4f2ff6a26452fff7c6eaa96ab4c7b9bb96ab5bb7ce035546b843c3d7149a2659f", 0x1000, 0x0, 0x0, 0x2}]) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) signalfd(r6, &(0x7f0000000140)={0x8}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 251.893112] block nbd2: Receive control failed (result -22) [ 251.901376] block nbd2: shutting down sockets [ 252.022906] audit: type=1804 audit(1572702347.582:211): pid=15045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/460/bus" dev="sda1" ino=17351 res=1 [ 252.530273] block nbd3: shutting down sockets [ 252.592064] block nbd3: Receive control failed (result -22) [ 252.600471] block nbd3: shutting down sockets 13:45:48 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x83100673ca5d43bd) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:48 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r3 = syz_open_dev$admmidi(&(0x7f0000003ac0)='/dev/admmidi#\x00', 0x80, 0x400000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) vmsplice(r1, &(0x7f0000003f40)=[{&(0x7f0000003c40)="07464dfda3a7796c22292c", 0xb}, {&(0x7f0000003c80)="36de74f6c9156726dc9fdde797067b3c1bbfc03b5450536290e4de69866fa2e937e369ec641234f6aca812", 0x2b}, {&(0x7f0000003cc0)="d95a2cf14f51248815a7b42dab54ccd0f8e89f231e5943039e8d21795642dcdbd84963dfd64e0aeb5208dad7a5b704e7979fddd2e754ac13be656ba72c7e23880d9581ae5aae75c9bb546b4a2bb3df387fbbfcdc952f787ce0e69fff532252b16a1580e61395b8526e6c63d42eff29d7e8d8040d3db9d59154857b55b402aa24767bb6b284057249174aadbf92e8f61fa2d09c2f3a54fdc0f92868ad0bd82e9ffcf5a581da765569abde8ee3355e20547ea7ba38f888f510ffbd51283e71b4c220ebe813d2590ebbdbc8a1e9eef4ff6e55f5e9c4fa49b65aaa68c06460fdf737c9bd7f", 0xe3}, {&(0x7f0000003dc0)="ba71339a3c997919b1aa7a50557a86fb145e657babd7354ebf62dcd2db3b228dc150fb520533619ba2d327bd8db19cd07c5c4812c5efc1289764a031d1972acf517173b7e83cacb84dfb8d32a833a2f29bd1e00073cca37bcc7249fb349c836afd26772072bcf62e30303d4f14d7396fe3e4623111598af96a27ee882b73c5bd1f2a651ee654d312ab4722162213c61b9360cdead4b5e365f1da8be06d9c50557530765e0129681676c11a4aef24c33c0a998feed3657f15ef18a7f859bb4d71b6954de1f7a2c7136ef4018d381567b070c177a140", 0xd5}, {&(0x7f0000003ec0)="1d814625f9a1dec57e1ac5e551dbfc06f05f1cf4f688de3ee20a215c0c3ae55c3701fc507e4d079a5129f4c16a5f3126beb1c7d01d1959eb8eecfd279160a54c3836d564b83677301a19e96748ec6e85d1161d21412e5d36edb2ffcd0cf117a36e322cd8c994f7eace1f03c1", 0x6c}], 0x5, 0x4) write(r4, &(0x7f0000003fc0)="7c321d24c8857d50110a8b6a4063285df8f88b165fbcad57ca62108dac49cc09c1bdb787973c97b0ed849085f6f861d106e569a7c2f96de74d897a68b355f1fd683495e1062ea88c9e84579bf94ad33805c6eefb39fe185f4e6fd4a3d4eeeac5ed977bede04ac419c4d90a82734bab2003de2dda756fd66943055a4b33375bb457d2a0403b05dda62a67dbd2a67a8d5088f955cf1c9e22dc7cdad1987fb9a1055b4a515d6f763760c5bba76c51f88fae5439ca8c0bc6bfc6a0b7de909db1be6c411ad63a90865d2248f102053514886c", 0x89b7fe264f04f946) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480077a885ddb05cc5826a0000427e5592e007fda77a7c67520e36f14217bb5ae40a7cae13617417f5d3736e10b8052745d688b7c08207228755881f1e3662988ce7ce39190796c562904270e6d5f96c0ef662475c37be60f1a651e6a5ccf525b5e6938ad3c77fab59d30a9fca6c88fc66814398fc6e42028dfb896342a008729a16029eccc5c1ba90065f99bde8b8", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180001"], 0x3}}, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x3, &(0x7f0000000600)={@broadcast, @multicast2, r6}, 0xc) r7 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$minix(&(0x7f0000000640)='minix\x00', &(0x7f0000000680)='./file0\x00', 0x4, 0x8, &(0x7f0000003980)=[{&(0x7f00000006c0)="6cfd960edad174d3193d5fc0ff87b731422478584cb0cbae964a025180f2f25d80c04088b8fd40cf031312caf99a7bd6e6ec627716cbe1918af1742e0ed9679f7f0eefb61683b73f8c602ed6393ccdf4aae553c825e20bc0e52fb6697544ae75c7d0177b58ed91c9e119b7b94aed6b53517622b6d347eacbbdafa654f27251ec8758d6606a263be394d4fd83a862fac6764643673768a649047390ac6a667d7af1e6fa999a15c0f2d0355b97b816bd6042676af917d9e8d89073858e802e210d224bfdc11a7499a2b4a92411a6b2f3d2c6fbc66b8a1cc1a4da12312f904b25f3165e6903068f20e8dd03a20820f6ee538b", 0xf1, 0x9}, {&(0x7f00000007c0)="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", 0x1000, 0x9}, {&(0x7f00000017c0)="98a1518a527b116b61b05dd5fcde67e6cc872255a5e77552cbd9d671d12b4c60e09f117e2bd429c96a451ce504fc5ba0812b64c288824be0c84b2f56274d6a0a63ece7484db7a2f6176a42670b8be1d3fbd4683d2955d04d8e3f5b4243549c56da2840b33d8d4cfc35fd95b9df41b254031673bf86fc5e1e1b6ab7a84c3ef97e5414ed317e3542045cf107ada5e71ded483035d8d3710210677a3c6241bd2d6001603cfc000c7d2b355f9feb713122407eac1d77af544fd151a65812bd1881057a20ee68404f0975414051c0e0a3b0685d12fa9a034e63f0e130d9da3588221cf3d3abe6a1b5718065671ef3f4bb984e0a72c90a3373d8356f29dd6cf74ee9375885af4c3355fedf839c5276ee3d01a5d5f76fe5b4fcf3e3a6d08f4f3edd9cbaad4948f0d615d133ab15d8b85e7609e77cd36dcce7ff5b57a0b87fa32c5b14a10c444e03acb8ea0bc7eff11c7faf6833a5c594b59d547a1359e12126ec69e80f6206f976f86c95965db68f093bf668c5712e94c65128b07410f055982a0c54931ea2f2efa1d07400cc9dc9b3209fad9c2ccd89469fcc9cefac603e07755d69e10d789c67e8c860849cfd0d1212395033439dbf0e4f00ca524b4c2ca54259807a1db3140f2a5aa4cbdacd1e0e042f0e5977838931ecbb2557017e5d4e0a361e096957fb180db9444394114913c414563116195c726e7f4dcef9408a2466ac0fc5a715fa858d9196af499d3e83ec0ee6e10cb1e6fad2ea926bf69c46a34280e9b9a0e4f710e01973711832300d75193d554fa0ce639c43fdaeca0aa7b2152525cf4b7bafbf4d5286e9c05e3a107ff658973ac1c5e57329119e999c6a4c49cb3a01d4f64fe631aebfdcc3b7b71d04534fb496855c9f5e6ebe606f332761358856496583adbf9a7bf21ab92cd5599485acd5be82657a72ecb13c4bfcf3f0018aaa11891315d7fe42c3b359efc84993563065b575b6c5bdb815efc3f7405066ae8f2a5c8450fc9b9bfdff50e0060be7f5ad839191739b0c8879c03692766b4dfdae626e65b408662ec08248082b0236282367399f30cf890fc9acbdd1748ad0f175589252155d7febaa822e992bfc5589ed8e71c58ca9d9dc62e755a1affc9b6d136102fb1a274adc5fd4ac475c2647f3e946cb9b7efa5e430955a2f10c669597363128fa8670180ec46215e8fe9c6dae732f421486e2322688f5129dcb315e692db11cea0ef83a7109943bec1359894b710ff944dc04e2249266ac5306f6fba10efdfede7532b42fa26a7548ec85d73e6fd31dd35095bff6d292d339cf01b5a827b9190d8611335cf8792b3d1973a06abe50d61dc9b32b78551c957b15b4b37b65936bafecae32524e72a553017b46cf740159f04aa1244c100defa57830183b89cc258481146b8089455dff45960bfb9adb30f8ac54d4021d6de38610a0609f0931dfd5061897e99366aacbe386c42125b8f55161645d493ef5ce5b3f6e55d5030b4186d5b7047ea83db574afb42caac78be48b2c07e26f3361520995675c65fc529ec7b38cb3a2879d67eb04d17becc94c4a856df4ef65ddbda2a00d65487d731b443c991373c8d5d1925121b740454a3a6303e4e0e3ccddff30818f55da720412f4f054bd1d5696aa98dd607c0f38f65d9dcc411276b1dd6c741dfa02aafd0dba4fcc929ee846df92f10e494ff70d3f627bdff2f93b44fb92169689623eda6b92462603fa62ea5418d44d981a08032ffc19c74e4b1cf1b3bea6ccb537039d19da8507b0e41c1667c93ac4ff0db5c411474f8afef3011dbdd44151f04721b50c23ee46cfaa9697b6775cabd0a3f69105bfa7959bc4d1acd9575dea1b4a35544b813c454dfd005b488ed6d46627640359959db521e1407d3fdfcf2be0fdb2db0d36f199949335a2f17b6a7d0ccc8f80cc36f1ce963d9b7c4e456edb76d5c3f0445b9e60e2ece099e80c57ce9c62ee360be5e0d1e673f0d6b02b73424dbc2553a64d357d2a2ebc43a189468da7d649c3b9cfad73eab30126ab399ca543f613456a1f58243d5a213a13f35573b968b01e2c4fcfd5afc5c4703bf230bc40a8b825be5c4c89d82c6b44d8367e29ef13aeafea64d7232ae61ef451016cda4494bc16002eda8ef9037abe5b290692528d75737036add59c70dbefa93a0209c6b4b5dd7e2b55d59c314ffa96e9115bc490b1df05e341b8fafa23ecb44cf27260841e5c24706e9343cd171f1e7eab5f66621aaa56a57287e77249106938344f057f63edd07f191eca8d62c9c39ddf15c2ebf84db63e2e9ded6896530fd5017a1d6d6c99b1ac0bf8e72e272fe2f91052623af6e8a939adffc540351e8fb767973cf238f2424d6cb589ebf1991366a022f77967eddf8bd862840d9eefa4f393dcf4043c4515579661ff9d5688c41224a176bfe2dd92b5a4c5192cc0fef8b69362d802e5243a708c69e9228d9942ce43527480ee035f21603169bcf9494308b70e7fca86b2c1de552ce0483cb59fe9dfcc5653ccb2749efa1ca170b4582bcf460194fd8a832dbf03407384b6bb829b484c59bec2f53ff90b48cfd8754b8cac809bbd036b1c724c0944b25ce5770588998b8c68874e593d38bddf60becadec44b619669ff3385dbac236b0389b0daa3fc335cbb4374351f0a1811ccab209e05eecf5ce3a10571a584fd4884004ccb6b80d21d14fe71585941a7bcb8da008740e32b9c988e426ae67ffbfcc69c7ead658ccebea1f69287df028e97c9683078e3918020aa547423d1246df5baaf906a0f70a0a88484097b07262d9e9b1aa5cd32ee9b7639af2739301586b2f9c5a80a4f842fc5c638f1091a4272dcdaf93ec5b511910e9ad39450959f8b5f25009ad38a965fe4c88d3f826f523fdfe16ee8ee3b8e22c36a9937d2cdc23777c2aac84c8142ff6a441bb7d3fd95b20537f5f2adb35889f512e381518c83e4743b1c4e820ad670af6bb355814970342bd15036797163dd1f497f877c33cc32c05a1f19f3e5579dee0cdd6f6a33b1489347f333ebddadc3e81198c2a08af4a74a61c64109b060b3600ec2a6e8b25d7ef86b70b599bedde0563c7122e1c7ed8574d3d8f97f32a0498eb743e5e7dc6d666e46d705b6e1b4914d218ec611a1fecc1bf9932ccd58f9536b18f70bb3526e12d68b0ebf656c898d0d141d36b587ff0e5bc5cbfd9edd8550d56d215861e630dbc7e818555f71e6c122feb87a3e76d0cb5dce730ca465d8080a7687b32029f72498fe15a58e66678a63210da39719d051dd366a32fb13dc05e1a6472cec7693db6437c0a27fdfe41b014f6855275f667ed593d138c1f005cd09e31543a2b2beeca06e8460573919553a351e7534d676517c6786f020583eba31ecfbf32677506ea275b24be93ae6ec9a798f0a2f6e7325cd4a0275cf342a0681aa07d8bbabd2c47fc0ac52ee894b1eb6cb2a35f3f2f710dbdee2763e334a6a49dd8bca601a85cce5339eb7beca9337b38eeac8c09300d96af7f6b1a9b315114c9195c4e51bba0f98c7193132bc2856370c1e69b0384fb696d6d8da2be53ea7a20b85768ff72ebcc736c5523d820922e864b08c3ee0e22da16366c5baec3fa5621890405a40046895c6ffecf036e5f8b35febaa844496ecdf488e7fb4fe070f0fe82b89aabe466fedf7db3765e9ae533e91cd815d01fd45d52ae0cbf2030fa9e13a4172706ad24358ced296eed2821467dd7866d8423e1d12a00957eaed99fe1dc775a0e487165632ea50742cae7b0125cb23cec1e9afc7304c3efecc2c3a5030b6306308c420795dc23caf2927bd1f18642b59653e8f47ff9b0e2e5dc4f9fb8a6921ac7f632622e12c145ce7a2106ab3c86507fe2d4c4526054d929c1668824390fd55fc72dc93205d2be28e5776fe23e553364ed9c204715f0923e1926f8864fab3061c0eb64822078c719808c695e3132e673d7c7ca390a02f4585decb97d92b4a9869ab47507378691ca76f7d8dc6f1dea1e2580d206229f3cd44e98a5111aa6b9efcf3566c78ed08f3eb3d8c14242c1ee011aacca234b8f57914eb3984c160e92e678ddcc52dee7f403dd9c531a79ab57fe841363011cbdb77fcc6db8c8aee909890cf66d71c274597be5277fc1f2b6b0cbab5d9f48c9c1d4b8809b45da86df7104554c513fef1efbedeb0473ca0990c58c26e42f60d2efafda02ef4c6022ea7ce0b232b30b683fb6568761a3330a8de5683f5b4a28a681c34b4265c4256afbc8c7f4e9befbbd95036cc830203fcd39b2dc36f97a9de22d3fa16b85ef7a92abe0fe2219e41c41db1f7ac2db126548f2fa7f8131e9226057dcaa4e3730f736fdd8f82c24962d72e57ee0f19157f25c4f40a2c6984b1486a2912cfbd80c91e5cb5c3bd9c67a5e77c5a25896c40c15e2f141bd64caaed4350c733d92ae42e20aaa2aed8406793d8fa0a32fb1e0d22e972ec280f4aba7e2894b43a2c7c7e274938db0fbfeca9cbf710b7cbade2bf8eec759915dc27bc451faaa7f996c56187e44ab515ca0124c6ec68d48334365df2ee75ee5412439a9a3ddfbce2c2ed5a2976e20c7dc395b19bc4dfc5e8d022425ba37a95801149413ed1c0dbe652027437fba549c3dd9a4be78ddadd48e33028810e7a7d7d752e15cb3bfad81d6307d433b92d36a3f1e4e9f46c1ad2fc22d4d8765cd483234d71689dddd34c0ebca6283b90763bae0b1e3600be3b61656cb54d27d8d977dcbcce086f6724c0f404779b59102319f07d08fda50f734cb86945bba3af7192049d7fa1d804f09f3cb8f9f4a4bb1236302a8d94ccf4cfc1603ca0c0c8414f11e02b54e4f73308408f11c7b5e64d330a55d4569a2df691b15ba9a909451928d9bd67cd0c0cf4eaddfcb53833d1395813950833943433289e923722da85b3032bc6c097a3597fe1e1e96e6ebb1e52d8a456e2ef08c788bd1ff9bb871f02c32b61f5bef9c6c367a056c1afabafcc493413254f78205d6516589939cafe946366b20378b68ed884ab266551978dd0ee068bc3d13a4214bc2bb8b6cdab4375ccc686f91234daf6236718722a169bdaa504a38f4779a21f21d938b585d7da59e46eccbea3bfc1c068da70168bc9f7a4d79465f62a57bdc448b75b8d77067b982dac50dc6014b2dbc7e36e6371c73d64ce6d8074253bc166f6b6e84c6a6a1f4933ebb92e43481fbbd1729a6643b0b033381fde94a274b6bb258bf64fa92747dbaa413e36bf5908e29720a481182a7327a1ceeb965acf72f4884f106768f5fa92014d74e9e2b320d784fb5b77bd1c50fb3056b20407282a7b548a14dd077b90a4913f00b4a09d6d305c3cf74b763aaf693a9f3b21e168c5bed31f6c04a36f3a9c42e249f04c0bbe40080c10ee5e9a51e3df187c7d049c7d7a40582e5b9cae8a7b46dc5a9d066bd480f4790d7ba428d4b957d943498fc4cf9fd6e84fe9956d723e553a84b5d989b773dffcc08bb7f90ed5ff2d31aa59efa74f9b45235446b34a061f5511da254023f9bf21d5be944c3934c6645042c149081ef699df9037493e9a395191cee68ed99e3943c5a5f293a5afbf6f99c44d7948ddf633d7071b90d7880caffb9b62abe41ee0e67ffac7448057ffc431bb3fbcfe1756e4d80ec7d3ce229934d28916fca877e4278cc9615d9ab5a4377e9e77777f14a7465b98177de5914a4236dd58eb1f5e83941a25a5bd62ded89b95d40a3aca63c20d98a1f5807fc891135ca2eeee74baa9b11b213dd74174f455785223e03ff169a69f4810392005e70ade3d14a8f6fc5b22429cc957cddd53eb333d8c0e335d3d1373c902c32a98e5b8ce024356", 0x1000, 0x2}, {&(0x7f00000027c0)="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", 0x1000, 0x4}, {&(0x7f00000037c0)="d6f5b910e98572de6cf5186b82fe5d638855065b6b5b1dd48d04b6456df8824c6f462e57573c4e", 0x27, 0x6}, {&(0x7f0000003800)="4e8de6367671fc088210bf056ba6e53a3ae7607924d32fb1c6028e6a3e85e1d1e6ec84d9144557c3576ee4d6c40d4ff8e3ba187693c89de4e42b7feca4f74efe1201ded93e621ed43b1ac3ea9cdd5d884aafdf6d27d5", 0x56, 0x5}, {&(0x7f0000003880)="04ee971f2e9466a48bfec2646ff86d8681cb64a4701e6965606a9134069b9a367377ba9a8d7bd57fd32db38f8b7c484605710ae1274e76aed1fb9973e0371ab7ee668c0241a0ea1aaee259dbaddb373b568d081c4e54f133c9bc2ae354615f5b3d64f5b0a6ed29db52bc69fc020b87", 0x6f, 0x4}, {&(0x7f0000003900)="8bdbe7406411b62d2673a2fb1eb6779975860c0f5a457e4e121784e838a9d34f1e55d125d27c74ff54deccb8cca02a781267ecd32fc55e60c66f2078d65cf7d05cde7966a8dd8f4e463e4f4ffab15fce0e34b1f0ba20f1b6ce96093961da3b3b147a7adc9880f2ac02ef3e3b14825f228f4e90a7f866dfb8c62771301e", 0x7d, 0x80000001}], 0x10, 0x0) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$NBD_DO_IT(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/cachefiles\x00', 0x400401, 0x0) accept4$vsock_stream(r9, &(0x7f0000003a80)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) fcntl$setpipe(r8, 0x407, 0x0) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCGSID(r11, 0x5429, &(0x7f00000040c0)=0x0) tgkill(r10, r12, 0x34) write(r8, &(0x7f0000000340), 0x41395527) recvmsg(r5, &(0x7f0000000180)={&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0xfffffffffffffecd, &(0x7f0000000540)=[{&(0x7f0000000100)=""/55, 0x37}, {&(0x7f0000000200)=""/190, 0xfcd4}, {&(0x7f0000000140)=""/35, 0x32}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/140, 0x92}]}, 0x14003) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6erspan0\x00', r13}) 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:48 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r5 = getuid() r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) chown(&(0x7f0000000380)='./file0\x00', r7, r8) mount$fuse(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='fuse\x00', 0x400, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@blksize={'blksize'}}, {@allow_other='allow_other'}, {@allow_other='allow_other'}, {@allow_other='allow_other'}], [{@smackfsdef={'smackfsdef', 0x3d, 'trusted'}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'wlan0\\(]'}}, {@permit_directio='permit_directio'}]}}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000000)) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) getsockopt$packet_int(r9, 0x107, 0x9, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000280)={0x2, 0x8, 0x2}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @broadcast}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e20, @multicast1}, 0x30, 0x0, 0x0, 0x0, 0x1, &(0x7f00000001c0)='veth1_to_hsr\x00', 0x100000001, 0x4, 0xf933}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 252.705045] audit: type=1804 audit(1572702348.262:212): pid=15059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/461/bus" dev="sda1" ino=17370 res=1 [ 252.710541] block nbd2: Receive control failed (result -22) [ 252.733829] block nbd3: shutting down sockets 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 252.750434] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. [ 252.777234] block nbd3: shutting down sockets 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:48 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000002c0)={0x0, {0x7ff, 0x3ff}}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x7f, 0x80, 0x0, 0x8001, 0x1a, 0x2, 0xd3, 0x40, 0xff, 0x80}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$rose(r4, &(0x7f00000000c0)=""/164, 0xa4, 0x40000040, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x800) dup2(r5, r6) bind$isdn(r3, &(0x7f0000000080)={0x22, 0x9d, 0x2e, 0x4, 0x9}, 0x4) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x57f, 0x4000) 13:45:48 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, r2) request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000300)='#\xd9cpuset\x00', r1) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb068c582f24186cf0d", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180001"], 0x3}}, 0x0) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r4}, 0x10) r5 = socket(0x11, 0x2, 0x0) r6 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x4], 0x2) ioctl$NBD_SET_SOCK(r6, 0xab00, r5) ioctl$NBD_CLEAR_SOCK(r7, 0xab03) r8 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r8, 0x3b64) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/45, 0x2d) ioctl$EXT4_IOC_GROUP_ADD(r8, 0x40286608, &(0x7f0000000000)={0x5, 0x4, 0x80, 0xfffffffc, 0xa9, 0x3}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r9, 0x407, 0x0) write(r9, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) r11 = creat(&(0x7f0000000100)='./file0\x00', 0x8) ioctl$NBD_DO_IT(r11, 0xab03) 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 252.984080] block nbd3: Receive control failed (result -22) 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:48 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 253.481884] block nbd2: shutting down sockets 13:45:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x4, 0xe0ec}, {0xfffffffc, 0x40000}]}, 0x14, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:45:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x251}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:49 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCNOTTY(r2, 0x5422) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_GET_CAPABILITIES(r4, 0x8004551a, &(0x7f0000000040)) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_DO_IT(r3, 0xab03) 13:45:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r3 = dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f00000001c0)=0x94, &(0x7f0000000200)=0x4) 13:45:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 253.617326] audit: type=1804 audit(1572702349.172:213): pid=15125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/462/bus" dev="sda1" ino=17374 res=1 13:45:49 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000880)={r5}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r5, 0x9, 0xfff, 0x9006, 0x80, 0x81}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0xfe01, 0x6}, &(0x7f0000000200)=0x8) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000080)={0x2, 0xfffffff8}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r7, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 253.760847] block nbd3: shutting down sockets 13:45:49 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x1e0000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) write$char_usb(r1, &(0x7f00000001c0)="5b42895f", 0x4) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.upper\x00', &(0x7f0000000340)={0x0, 0xfb, 0x7c, 0x7, 0x6, "6ecb92188ea975f3f607dbdc971ba9bf", "a86ce61e116d5d6f08a1a1d4dd267f1b9c6a660819e581b7ad3051f4e829069245e7f116204ee0efb8388ba3159c4f9c5cad2ac5c3f59a33b476f9882b5dfe92be6f66db83bdf268988a03cde73f8a23fe0c47efc9726770a8b027ee4379082748932706e724c9"}, 0x7c, 0x1) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:49 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x10000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffd69, 0x0, 0x10, 0xff, 0x0, 0x0, 0x7ff, 0x4d00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0xd}, 0x100, 0x0, 0x8000000}, r1, 0x0, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2008001) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) r3 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x5, 0x2) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 253.854289] audit: type=1804 audit(1572702349.412:214): pid=15158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/463/bus" dev="sda1" ino=17368 res=1 [ 253.896259] block nbd3: Receive control failed (result -22) 13:45:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x20}, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:49 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 253.907956] block nbd3: shutting down sockets 13:45:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 253.961043] block nbd3: shutting down sockets [ 254.406460] block nbd2: shutting down sockets 13:45:50 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_proto_private(r0, 0x89e8, &(0x7f00000000c0)="24fb2a8a5309b35952d6d84563419d0a6e413238144007089e4704ed0d6eedc071469c6e164448a5994781c1c4ea51fdd2ccf30597b709ed1dbb8c47827f4c364ac37ed30a43b3ae4a973fcac4db546ec010a62bd20ac3388f0dd22093b3cd3b982e20459b3a864c44eabe9203328e0b651fbdf4f187ecd693f98975c6dffc1739eb24f22150b22b8c") r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = dup(r3) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000000)=""/176) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x80000, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r2, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, r3) add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, r2) r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$SIOCX25SDTEFACILITIES(r6, 0x89eb, &(0x7f0000000240)={0x2, 0xfff, 0xfffb, 0x1, 0x5, 0x1, 0x5, "1fb3d6063d9168a0f5723f0e73805430e44399d3", "c287e7d6c49b78b7307c046c6ac4f31abf0d5957"}) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f00000001c0)) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 254.494669] block nbd3: Receive control failed (result -22) [ 254.504780] block nbd3: shutting down sockets [ 254.542005] block nbd3: Receive control failed (result -22) [ 254.549862] block nbd3: shutting down sockets 13:45:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x7, 0xa800) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x400840, 0x0) io_submit(r2, 0x2, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x8, r0, &(0x7f0000000100)="3d49a5ad18d9164dcfc105d724656f59120658b415cdb4e98b59964882fa3f8de42f14a8bfbb288e0b572fe2b8ac61ce93a8254f7bfe052aba39f687afc212a364053daea0b690f7574d92d5ae67a6f7c64368a5f3cf1b61eb2faa52c1d520ba3eb3f13efb246c3f5fb1e05b4a92e84b124a060216b8dbfff063c7d6bd2570d249dcb896db6e81d6c0db2633e73cebba92673c456ef9d89d16729a081c7e11a11475c2338d6a58bb7d65cdd5a23f36d05630cac23b8818b91cfcfc6c529c08c6f55ffccd17b1945caca83d678e38914343330d526cdc831400e61ee4057fc1", 0xdf, 0x3, 0x0, 0x0, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x4fe0c4b7fe3f0e, 0x8, r4, &(0x7f0000000240)="9d6b2337b789e066718c7c1e3b33d9ea878afa2facb449f6dc63678a2288955f82ed5091c1ffd28fece62d1e1d3177fa0420c5bbb69e2b2caf7c9052c076c4d4681ced01a782079bdd4e7f08cb38fe778a5bbd613894158bac84a4efb9435ba7df094255e9343f3700ff9fdaf7650852e369f6e58ed786cf22404c4aae58c715acc619d210f75328666ba121a2841f16594361734a5e829c2234b6f02a2783a5c54ffdf59fad60fa9dc4d9a627a760314c858c9b139797fcbee09ae76d9f9fe34a5d538c6c9b", 0xc6, 0x5, 0x0, 0x2, r5}]) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:50 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = fcntl$dupfd(r2, 0x80c, r3) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) 13:45:50 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r6, 0x103}, 0x1c}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x30f}}, 0x0) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r9, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa3}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x64}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20002841) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000340)) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8040}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x10) r10 = getpid() sched_setattr(r10, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) tkill(r10, 0x3) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r11, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:50 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x14000, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000040)={0x6, {{0xa, 0x4e22, 0x200, @local, 0x80000000}}}, 0x88) ioctl$NBD_DO_IT(r2, 0xab03) [ 254.719037] block nbd3: Receive control failed (result -22) [ 254.725325] block nbd2: Receive control failed (result -22) [ 254.735112] block nbd3: shutting down sockets [ 254.742700] block nbd2: shutting down sockets 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) [ 254.747269] audit: type=1804 audit(1572702350.302:215): pid=15219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/464/bus" dev="sda1" ino=17387 res=1 13:45:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) [ 254.791756] block nbd3: shutting down sockets [ 254.811673] block nbd2: shutting down sockets 13:45:50 executing program 2: r0 = socket(0x4, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000006c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@initdev}}, &(0x7f00000007c0)=0xe8) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x8, &(0x7f0000000600)=[{&(0x7f00000000c0)="49e097262c5d17e7173a05f17375c14f3851ba33b28cc6532d8c29e86f44dc24862e55fd3d7b1afdebc0420054c4d7cb931594303276b8e642aee01198f6825d7a0a6c659a", 0x45, 0x7}, {&(0x7f0000000200)="5bd8a9264664433846beb82fb01af074eab57439b93815edd0e5d6b8390332af7119e7626cf92f929d17d1dfbbf54afe143dd8b7a42e856de7b887dfca5294cfda7b8fcade0d0a873340420005f29dac1b2bf6911f256686a5dfda737ed104d7bae30ce2f0d580070c17da71ac32265df37066a3dc6b77e3d861a95895df4daa4b2d872fc06e5968da76f4cdcb07bba5bbc5080b173d1c7d506a040cc94955470b610aff009a56555db30052052ea37956eda5bf1c0aa1a9b706b4762ea1170e204ca29804873ff0e13a95cd", 0xcc, 0xfffffffffffffffe}, {&(0x7f0000000300)="e3455724c0096abcf9968a659a1d2d008b23e6f6ceae05e0612ef90d0bc55cb676a30910ed1150e23e2a725f3d68536d2b15f3823782dedff1b053431db2b59c16af0c72bf01c08222aab5447b76181db65d7b5401dca73d302e1dc5ed2318e3de4a52baa4e7d1d02d8d439f1612360f20f963ef89b44d2dec558298eb95b72ea79430300b1ef99ed3816720170e695e4a85242a", 0x94, 0x3}, {&(0x7f0000000140)="3e198e4d9ff9be2fcd64545e407c7c04d2b0bd487cfd986924ecb83319a48e8450f6ab5d8a99404938899566007c", 0x2e, 0xea}, {&(0x7f0000000180)="09bbba884f8d4a9f774ee4c40fc36cd5b599f806ce047265b034e7410c571e2442656263d9c33441059a1bf90e81a926670c6e2cbccf0a39a93a", 0x3a, 0x8}, {&(0x7f00000003c0)="ef7e63d4e06755d9ac3429fc18879c905558d2709f4798adb3e6c06f5ccfcaa9adf69f29449941b76b1a02ad9c4ec33c1fe04f69f51af7a2c6b8de01ededd1e3befe8654ed0f4b922488589b9f4b0c5bb8cf1bda92fd732e7289c5eeacf9727a84305ccd", 0x64, 0x80000001}, {&(0x7f0000000440)="198d5efec05ebff8836121dd7194bbfd93eacd77eec44daab8c4f551d58c4823966072f40f094a31afdfd09f5801f0ba982850cde536331935c67b18108975ecaa830650dc7397fd6c385d5ecc86763b97a4c77d78cc966cf219d5750bf3facffe2dc1ae9a94fbcd5f4e763131f1a6ff98eddcc1b1d2787a3798c2a3a54de4e8c295081ac70bbc6fa382eb50c8a329cef0028e418263fa87d7c5de6400e8ac5ef150d1b45983709d29bd9de40d3e29fcb3", 0xb1, 0x80000000}, {&(0x7f0000000500)="1203a08b7f8b67717460b3ab1657e5b050d7b8bc9bb2248db31d59761deaa5531e835a5873e53345f6a4c869434e8499b12c41b65826c232022966d4fb3bc1f7803a37e57b654f03836796803f0b3ef06ddc44e9079cc70c0f96819f3eb1a9d7a43f8f2630d2ada05d8c78ae476f546d0870c7eea9fe8111b474d1b7477a5fcda4bec271e4cf04eae2f4b4b60660a77966922a469895e50e7290052aa18352eed149f483b51ed0c8d5d39b726a69ed5a3aec84755144542258f43f9141a9ee8d8d90c07f909fbec8ba41161013f4f73b6b7361edc9e2812cbaf4d2fb2560fd27d3e2fc252dc30f3a3b18", 0xea, 0x44de}], 0x905022, &(0x7f0000000800)={[{@session={'session', 0x3d, 0xb058}}, {@nobarrier='nobarrier'}, {@creator={'creator', 0x3d, "c48d6e4b"}}], [{@dont_measure='dont_measure'}, {@euid_lt={'euid<', r4}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@smackfsfloor={'smackfsfloor', 0x3d, ':'}}, {@smackfshat={'smackfshat', 0x3d, 'vboxnet0'}}, {@subj_type={'subj_type', 0x3d, 'lo.vboxnet0ppp1^'}}]}) write(r3, &(0x7f0000000000)="c4b8acd20ebd1264830dd9c1df1021dfcc7d4b81393cb8f901b8bfb3149f701e9759a3ca76aa5b4221ce8fdeea87116d6e6104c29a6737", 0x37) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:50 executing program 3: r0 = socket(0x8, 0x800, 0x3f) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000040)=""/171) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$ndb(&(0x7f0000000140)='/dev/nbd#\x00', 0x0, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$NBD_SET_SIZE(r4, 0xab02, 0x7) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000100)="001baa1f6a643a28c146da432ff3d87aa6ea641efc3c721dd316cb50887259e8a229", 0xfc9d) socket$isdn(0x22, 0x3, 0x21) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r5, 0x3) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)) 13:45:50 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001600)=0x0) r2 = getuid() r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) getsockopt$EBT_SO_GET_ENTRIES(r5, 0x0, 0x81, &(0x7f0000001800)={'filter\x00', 0x0, 0x4, 0xe7, [], 0x6, &(0x7f0000001780)=[{}, {}, {}, {}, {}, {}], &(0x7f00000018c0)=""/231}, &(0x7f0000001500)=0x78) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) r7 = dup2(r6, 0xffffffffffffffff) ioctl$TIOCNOTTY(r7, 0x5422) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setuid(r9) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xfffffffffffffff9, 0x8, &(0x7f0000001540)=[{&(0x7f0000000140)="8d66b4f1339af82d0f7bbda55186576e9e67145050a02c325aa9fb7591177ddee9cb1f0d7ccb6bd4b36d159764fc318815a794f3330e4702f2d3b88bc403043f73a4dbe72d1c3177e217dfdfeff9084e12c2c372e10d97e29bb0e5dab2943006a218974b1a701403198d016d7777418b9953ebcdbffbc15316eb410f50f20cf69248cc5659c59f94f457708c61c5081653eec513d0852eea7b04b92fc9bb7510cb6e696f2088f5f62e8b00c343807218f3cac97b978f09e765225656b635c78d1b2b237c5109a773527f07309bfa0241be5f45f1ff3656cf2d9100808055728fda42d97fae510e36f33d915877d4212690", 0xf1, 0x9df}, {&(0x7f0000000240)="d2f4050cffc9a0f215fd42caacb804b253482c1e2d54cb3a7f5e43b49cb5a6915fdad5b332e9bbafc0d06e8f7e433ab3d0defcb80191fa3c420a001a73223afcad51c983dcc704469bbad17a6b39a95d98f1358f815daed8b5d1b5a72ca78fcc29d6cc5c70d8344a59d164fae8735db0b7699e7a5d24c04a0e461f90d9bfd02c2c9927f3d2dd59cab0a227", 0x8b, 0x2}, {&(0x7f0000000300)="2e408cff5d81cacee3215cf52deb86170d49ad050d3120baaf8f713f6539f966caba14eac2d371c203f1ebdbbd62879365c1be62a1229190445623ba7619aa7e1da169afbdb04293aa4c09e79dde8accbd2eb832e887c997c58653c4cd3f617b1e194b3602ea39b1fbd69bd107d5295435b5bc0efe38b227037c4451601fd8ff6101fe4a8e95d59fabd8fa40eb481d37ae6c9603883481d3a1689a6a9b6bd22828860998ecd9e6279aa54f", 0xab, 0x7}, {&(0x7f00000003c0)="53dc39e1940d96fd00ad3033bac0adeee9b9b053a384ba5ab6bc41f378353e261de712a00b50cae3b7a764341daf2e3afad8ed859bfafd9755916ed242cee77d632944cdc6d9b1f34347d4679128caaf0879724cfebeea2a09820c49324caf6db430db44afe7005b0474d50ddb7f205b5b6fc97f132d52922b212540eb8e97d05d2c810eeee1d6070b79dc2ad9fed5f15a114e6fe18c51986d0efb866a9c8a1433b17b140a08323f406058293f4fd5d482a6f7fb584ec5af02577efc081c", 0xbe, 0x6}, {&(0x7f0000000480)="c1a6f10526d2cb18a9c6", 0xa, 0xfffffffffffffffe}, {&(0x7f00000004c0)="ebe266a8b6d50dc6ef1c2a6d0be7de471f2b7a471ce31739f02af5497933b82970962c6a1cec279bb8614b716c883735d0", 0x31, 0xff}, {&(0x7f0000000500)="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", 0x1000, 0x80000000}, {&(0x7f0000001500), 0x0, 0x691}], 0x800000, &(0x7f0000001640)={[{@fat=@umask={'umask', 0x3d, 0x1ff}}, {@shortname_win95='shortname=win95'}, {@shortname_mixed='shortname=mixed'}, {@uni_xlate='uni_xlate=1'}, {@shortname_win95='shortname=win95'}, {@shortname_win95='shortname=win95'}, {@shortname_winnt='shortname=winnt'}, {@uni_xlate='uni_xlate=1'}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}], [{@obj_role={'obj_role'}}, {@uid_gt={'uid>', r1}}, {@obj_user={'obj_user'}}, {@fsname={'fsname', 0x3d, '/dev/zero\x00'}}, {@dont_measure='dont_measure'}, {@uid_lt={'uid<', r2}}, {@hash='hash'}, {@uid_eq={'uid', 0x3d, r4}}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r10, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RLOPEN(r2, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x20, 0x2, 0x7}}}, 0x18) r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:50 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000040)={0x6, {0x80, 0xfffffeff, 0x0, 0x9, 0x6172a782, 0x200}}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r6, 0xaea3) 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) 13:45:50 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r3, 0xab07, 0x5) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:50 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0xffc5, "f3"}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xb, 0x10000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') perf_event_open(&(0x7f0000000240)={0x3, 0x70, 0x80, 0x7f, 0x0, 0x5a, 0x0, 0x7, 0x4600, 0x5, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000001c0), 0x2}, 0x20000, 0x2000000008, 0x22a, 0x6, 0x9, 0x2, 0x81}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x3) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x0) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 255.318299] audit: type=1804 audit(1572702350.872:216): pid=15281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/465/bus" dev="sda1" ino=17385 res=1 13:45:50 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) [ 255.384223] block nbd2: Receive control failed (result -22) 13:45:51 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80208400}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="5182abce07ecd6b45a0a80cad72d13d111d5c186e89642e0f2821c15ceae68e90e7c49f788235cf8be723a7ccf6a7e7f0453ea789d20c3c508b8e11a57d5571e7fc4931156d504c8bf06c07755150fb23f3d383463df57d48877c0dbee5d4e0a989ad0c9758c16ddd4a0f2231e86908d9ebd7eaa7f9907e3a72efd9a8559cee09c5ac629ed65fce078af577b9179208f46716f9f87356726bc3c9449f28f7a589b0ab088e2d757aef2c34eab3502e806dbf266865799c9b5b330a8edcf5312295bd940a0fa8b85bf5c992ae096b1e7c72d0c8097fe09", @ANYRES16=r3, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x400201c}, 0xe011) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, 0x0) [ 255.463943] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 255.478210] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 255.493221] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock 13:45:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 255.522220] EXT4-fs: failed to create workqueue [ 255.533318] EXT4-fs (loop1): mount failed 13:45:51 executing program 3: r0 = socket(0x11, 0x2, 0xfd) rt_sigpending(&(0x7f00000000c0), 0x8) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x141000, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x1) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$NBD_DO_IT(r3, 0xab03) 13:45:51 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r1, 0xc0305615, &(0x7f00000002c0)={0x0, {0x7ff, 0x3ff}}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) syz_open_dev$swradio(&(0x7f0000000240)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000280)={0x7f, 0x80, 0x0, 0x8001, 0x1a, 0x2, 0xd3, 0x40, 0xff, 0x80}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$rose(r4, &(0x7f00000000c0)=""/164, 0xa4, 0x40000040, &(0x7f00000001c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x800) dup2(r5, r6) bind$isdn(r3, &(0x7f0000000080)={0x22, 0x9d, 0x2e, 0x4, 0x9}, 0x4) syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x57f, 0x4000) [ 255.747474] block nbd3: Receive control failed (result -22) [ 255.760312] block nbd3: shutting down sockets [ 255.783067] block nbd3: Receive control failed (result -22) [ 255.792341] block nbd3: shutting down sockets [ 256.101512] block nbd2: shutting down sockets 13:45:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='\x00\x00\xea%\x00', 0x10000, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:51 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) ioctl$PPPIOCDISCONN(r3, 0x7439) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:51 executing program 3: r0 = socket(0x11, 0xa, 0x2) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x8000) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x1}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f00000000c0)=0x80) read$alg(r1, &(0x7f0000000100)=""/146, 0x92) fcntl$setpipe(r3, 0x407, 0x0) write(r1, &(0x7f0000000240)="9e52e800000000e8107bc3e7d90bc615596ff25bbd63faa184154b780bb4ba70722070346c3229890f648c35c1b7fc1892f998e4f50c2690030fce9ad7dfca2a588b4e92b5b13c9c9b87bca672717cbb55e81ba6aab5531da94870a9b036bea6539e6ab294dba82f133d90d8c745e2b36e291d2dfbe37d01aa5b397146ecd550d35669fb07276a6e5eef5efdd1bcdfdf7c62b60ce1b4c500000000dee5d83db07c8cffd03d886f0290acb6469708f933c19dae6aea04f71724983639c734f0d960ab8e42cb7e16502bd9a01579b4e2afc6283027d199b62b66dcc56accaad4d5833cd15b01040000000000569fd0710ced46cd5d0f4eccd8a70ec3eca02bd7100a37e55ffce80b391d4902161f3d46c50a37b211a46cc1451c0226e7a749ba19ed06947742094c017c234fe450f660399f5eeaffc0054b62d912a3954e77d323bfe0b5f3c767d0f3628dd19362ac21fb0723ee918dcf22ae6a068997d252f7eca19c7020e002fc32e0c420cc9ef0d54c00dcdbba25e26d9c6e5273f43e4db5815fa2686519f6f25215ff", 0xfffffffffffffeb0) ioctl$TIOCSCTTY(r3, 0x540e, 0x8000) [ 256.152256] block nbd2: Receive control failed (result -22) [ 256.168101] block nbd2: shutting down sockets 13:45:51 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) clock_gettime(0x0, &(0x7f0000005540)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000005340)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/253, 0xfd}, {&(0x7f0000000140)=""/13, 0xd}, {&(0x7f0000000200)=""/107, 0x6b}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)=""/167, 0xa7}, {&(0x7f0000000400)=""/148, 0x94}, {&(0x7f00000004c0)=""/20, 0x14}], 0x9}, 0x80000001}, {{&(0x7f00000005c0)=@caif=@dgm, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000640)=""/211, 0xd3}, {&(0x7f0000000740)=""/74, 0x4a}, {&(0x7f00000007c0)=""/30, 0x1e}, {&(0x7f0000000800)=""/147, 0x93}, {&(0x7f00000008c0)=""/100, 0x64}, {&(0x7f0000000940)=""/110, 0x6e}, {&(0x7f00000009c0)=""/36, 0x24}], 0x7, &(0x7f0000000a80)=""/54, 0x36}, 0x3aab}, {{0x0, 0x0, &(0x7f0000000ac0), 0x0, &(0x7f0000000b00)=""/12, 0xc}, 0x1f}, {{&(0x7f0000000b40)=@xdp, 0x80, &(0x7f0000001100)=[{&(0x7f0000000bc0)=""/99, 0x63}, {&(0x7f0000000c40)=""/195, 0xc3}, {&(0x7f0000000d40)=""/34, 0x22}, {&(0x7f0000000d80)=""/162, 0xa2}, {&(0x7f0000000e40)=""/192, 0xc0}, {&(0x7f0000000f00)=""/187, 0xbb}, {&(0x7f0000000fc0)=""/161, 0xa1}, {&(0x7f0000001080)=""/77, 0x4d}], 0x8}, 0x101}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001180)=""/202, 0xca}, {&(0x7f0000001280)=""/26, 0x1a}, {&(0x7f00000012c0)=""/179, 0xb3}, {&(0x7f0000001380)=""/196, 0xc4}, {&(0x7f0000001480)=""/243, 0xf3}], 0x5, &(0x7f0000001600)=""/4096, 0x1000}, 0x3}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000002600)=""/99, 0x63}, {&(0x7f0000002680)=""/34, 0x22}, {&(0x7f00000026c0)=""/18, 0x12}, {&(0x7f0000002700)=""/253, 0xfd}], 0x4, &(0x7f0000002840)=""/175, 0xaf}, 0x9}, {{&(0x7f0000002900)=@nl=@unspec, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000002980)=""/152, 0x98}, {&(0x7f0000002a40)=""/109, 0x6d}, {&(0x7f0000002ac0)=""/214, 0xd6}, {&(0x7f0000002bc0)=""/87, 0x57}, {&(0x7f0000002c40)=""/167, 0xa7}, {&(0x7f0000002d00)=""/253, 0xfd}, {&(0x7f0000002e00)=""/185, 0xb9}], 0x7, &(0x7f0000002f40)=""/4096, 0x1000}, 0x4}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f0000003f40)=""/113, 0x71}, {&(0x7f0000003fc0)=""/43, 0x2b}, {&(0x7f0000004000)=""/220, 0xdc}, {&(0x7f0000004100)=""/4096, 0x1000}, {&(0x7f0000005100)=""/57, 0x39}, {&(0x7f0000005140)=""/195, 0xc3}], 0x6, &(0x7f00000052c0)=""/77, 0x4d}, 0x4}], 0x8, 0x2000, &(0x7f0000005580)={r4, r5+10000000}) ptrace$peekuser(0x3, r3, 0x7ff) ioctl$NBD_DO_IT(r2, 0xab03) [ 256.206511] audit: type=1804 audit(1572702351.762:217): pid=15341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/467/bus" dev="sda1" ino=17388 res=1 [ 256.234128] block nbd3: Receive control failed (result -22) [ 256.241714] block nbd3: shutting down sockets 13:45:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0xfffffed9}}], 0x131, 0x20001, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_GET_VRING_BASE(r3, 0xc008af12, &(0x7f00000001c0)) write(0xffffffffffffffff, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:51 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000b00000000260a0000fa0c1f8ca07b0d2eaaeb639f00000000002cda594874c32ff1e630ffb6dc99bb09000000d68a6d470ae51ef100"/67]) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)={0x1}) [ 256.282446] block nbd3: shutting down sockets [ 256.287360] block nbd2: Receive control failed (result -22) [ 256.298192] block nbd2: shutting down sockets 13:45:51 executing program 3: r0 = socket(0x4, 0x80000, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x3, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x83, 0xb}}, 0xfffffffffffffcb3) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x3, {0xa, 0x4e24, 0x5, @mcast2, 0x800}, r5}}, 0x38) ioctl$NBD_DO_IT(r2, 0xab03) [ 256.345004] block nbd2: shutting down sockets 13:45:51 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101080, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x20010, r2, 0x9) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) getsockopt$inet_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=0x78) ioctl$NBD_DO_IT(r3, 0xab03) 13:45:51 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000400), &(0x7f0000000480)=0x4) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept$nfc_llcp(r3, &(0x7f0000000280), &(0x7f00000000c0)=0x60) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x60281, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000500)={'veth0_to_bond\x00', 0x100}) ioctl$VIDIOC_S_JPEGCOMP(r4, 0x408c563e, &(0x7f0000000340)={0xdf, 0xc, 0x27, "3f98578f6102ccb8408bed8a39fe8cc9c09acf022b65226e85d8c3bd6498b882a3480c7f3dceddc8178df6b498524601a0b5d56b50672f4e5827aaa5", 0x0, "e27e103032d01555e4ce54da34bb503ce28d85cf71aa2ebd237fb9d231a77aa0f322dfe4834a497497d768179fb2bac408a3ec1c17efcca020b3d240", 0x10}) r6 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f00000004c0), 0x4) ftruncate(r2, 0x2008001) r8 = dup3(r6, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r9, 0x8, &(0x7f0000000140)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x6, r6, &(0x7f0000000040)="f107", 0x0, 0x4, 0x0, 0x2, r8}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) [ 256.447955] block nbd2: Receive control failed (result -22) [ 256.458647] block nbd2: shutting down sockets [ 256.503268] block nbd2: shutting down sockets 13:45:52 executing program 2: r0 = socket(0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) setxattr$security_smack_entry(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPOUT\x00', &(0x7f0000000080)='-{\x00', 0x3, 0x7) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 256.533004] audit: type=1804 audit(1572702352.092:218): pid=15380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/468/bus" dev="sda1" ino=17390 res=1 13:45:52 executing program 4: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x101080, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000001, 0x20010, r2, 0x9) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x1, 0x0) getsockopt$inet_dccp_buf(r4, 0x21, 0xc, &(0x7f0000000040)=""/120, &(0x7f00000000c0)=0x78) ioctl$NBD_DO_IT(r3, 0xab03) 13:45:52 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x40) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 256.646439] block nbd4: Receive control failed (result -22) [ 256.659601] block nbd4: shutting down sockets 13:45:52 executing program 4 (fault-call:4 fault-nth:0): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 256.692213] block nbd2: Receive control failed (result -22) [ 256.702229] block nbd2: shutting down sockets [ 256.738914] FAULT_INJECTION: forcing a failure. [ 256.738914] name failslab, interval 1, probability 0, space 0, times 0 [ 256.750819] CPU: 0 PID: 15398 Comm: syz-executor.4 Not tainted 4.14.151 #0 [ 256.757837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.759484] block nbd2: shutting down sockets [ 256.767174] Call Trace: [ 256.767192] dump_stack+0x138/0x197 [ 256.767211] should_fail.cold+0x10f/0x159 [ 256.767228] should_failslab+0xdb/0x130 [ 256.767239] kmem_cache_alloc+0x2d7/0x780 [ 256.767251] ? __might_sleep+0x93/0xb0 [ 256.767265] __anon_vma_prepare+0x62/0x390 [ 256.767277] do_huge_pmd_anonymous_page+0xd32/0x1470 [ 256.767288] ? find_held_lock+0x35/0x130 [ 256.807448] ? process_measurement+0x58a/0xb80 [ 256.812025] ? __thp_get_unmapped_area+0x130/0x130 [ 256.816949] __handle_mm_fault+0x22bf/0x3470 [ 256.821344] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 256.826092] ? find_held_lock+0x35/0x130 [ 256.830154] ? handle_mm_fault+0x1b6/0x7c0 [ 256.834407] handle_mm_fault+0x293/0x7c0 [ 256.838481] __do_page_fault+0x4c1/0xb80 [ 256.842530] ? vmalloc_fault+0xe30/0xe30 [ 256.846582] do_page_fault+0x71/0x511 [ 256.850374] page_fault+0x25/0x50 [ 256.853828] RIP: 0010:__get_user_4+0x21/0x30 [ 256.858219] RSP: 0018:ffff8880567b7b78 EFLAGS: 00010202 [ 256.863655] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc9000726f000 [ 256.870922] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 256.878182] RBP: ffff8880567b7ca0 R08: ffff88809940c6c0 R09: 0000000000000001 [ 256.885437] R10: 0000000000000000 R11: ffff88809940c6c0 R12: 0000000020000040 [ 256.892704] R13: ffff888056c47500 R14: dffffc0000000000 R15: ffff888056c47508 [ 256.899979] ? __might_fault+0x188/0x1d0 [ 256.904043] ? vhost_vring_ioctl+0xaa/0x1340 [ 256.908490] ? avc_ss_reset+0x110/0x110 [ 256.912454] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 256.916940] ? vhost_dev_ioctl+0xf3/0xe90 [ 256.921080] ? vhost_chr_write_iter+0x1260/0x1260 [ 256.925918] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 256.930493] ? vhost_vsock_flush+0xc0/0xc0 [ 256.934722] ? __might_sleep+0x93/0xb0 [ 256.938587] ? __fget+0x210/0x370 [ 256.942038] ? vhost_vsock_flush+0xc0/0xc0 [ 256.946326] do_vfs_ioctl+0x7ae/0x1060 [ 256.950211] ? selinux_file_mprotect+0x5d0/0x5d0 [ 256.954965] ? lock_downgrade+0x740/0x740 [ 256.959101] ? ioctl_preallocate+0x1c0/0x1c0 [ 256.963491] ? __fget+0x237/0x370 [ 256.966930] ? security_file_ioctl+0x89/0xb0 [ 256.971332] SyS_ioctl+0x8f/0xc0 [ 256.974687] ? do_vfs_ioctl+0x1060/0x1060 [ 256.978815] do_syscall_64+0x1e8/0x640 [ 256.982684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.987514] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 256.992687] RIP: 0033:0x459f49 [ 256.995882] RSP: 002b:00007f9af617fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.003568] RAX: ffffffffffffffda RBX: 00007f9af617fc90 RCX: 0000000000459f49 [ 257.010822] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 257.018079] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 257.025333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9af61806d4 [ 257.032587] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 13:45:52 executing program 4 (fault-call:4 fault-nth:1): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 257.142043] FAULT_INJECTION: forcing a failure. [ 257.142043] name failslab, interval 1, probability 0, space 0, times 0 [ 257.159819] CPU: 1 PID: 15406 Comm: syz-executor.4 Not tainted 4.14.151 #0 [ 257.166865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.176261] Call Trace: [ 257.178855] dump_stack+0x138/0x197 [ 257.182496] should_fail.cold+0x10f/0x159 [ 257.186652] should_failslab+0xdb/0x130 13:45:52 executing program 2: r0 = socket(0x11, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x3112db6baec8f394) fallocate(r2, 0x0, 0x0, 0x8e18) r3 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x80000) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') r5 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0xf4, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x24, 0x7, [{0x8}, {0x8, 0x1, r2}, {0x8}, {0x8}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SOCKETS={0x2c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r3}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x3c, 0x7, [{0x8, 0x1, r3}, {0x8, 0x1, r2}, {0x8}, {0x8}, {0x8, 0x1, r3}, {0x8, 0x1, r3}, {0x8, 0x1, r3}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000}]}, 0xf4}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x80}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40008d0) r6 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r6, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r7, 0xab03) ioctl$NBD_DO_IT(r7, 0xab03) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x280c02, 0x0) [ 257.190634] kmem_cache_alloc+0x2d7/0x780 [ 257.194788] ? anon_vma_compatible+0x62/0x2a0 [ 257.199287] __anon_vma_prepare+0x1b1/0x390 [ 257.203613] do_huge_pmd_anonymous_page+0xd32/0x1470 [ 257.208716] ? find_held_lock+0x35/0x130 [ 257.212773] ? process_measurement+0x58a/0xb80 [ 257.217441] ? __thp_get_unmapped_area+0x130/0x130 [ 257.222375] __handle_mm_fault+0x22bf/0x3470 [ 257.226778] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 257.231513] ? find_held_lock+0x35/0x130 [ 257.235553] ? handle_mm_fault+0x1b6/0x7c0 [ 257.239773] handle_mm_fault+0x293/0x7c0 [ 257.243818] __do_page_fault+0x4c1/0xb80 [ 257.247859] ? vmalloc_fault+0xe30/0xe30 [ 257.251996] do_page_fault+0x71/0x511 [ 257.255775] page_fault+0x25/0x50 [ 257.259334] RIP: 0010:__get_user_4+0x21/0x30 [ 257.263715] RSP: 0018:ffff88805446fb78 EFLAGS: 00010202 [ 257.269064] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc9000726f000 [ 257.276326] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 257.282348] block nbd2: Receive control failed (result -22) [ 257.283579] RBP: ffff88805446fca0 R08: ffff888091e845c0 R09: 0000000000000001 [ 257.296522] R10: 0000000000000000 R11: ffff888091e845c0 R12: 0000000020000040 [ 257.296528] R13: ffff8880567c7400 R14: dffffc0000000000 R15: ffff8880567c7408 [ 257.296552] ? __might_fault+0x188/0x1d0 [ 257.296579] ? vhost_vring_ioctl+0xaa/0x1340 [ 257.296591] ? avc_ss_reset+0x110/0x110 [ 257.311123] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 257.311133] ? vhost_dev_ioctl+0xf3/0xe90 [ 257.311148] ? vhost_chr_write_iter+0x1260/0x1260 [ 257.311162] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 257.341520] ? vhost_vsock_flush+0xc0/0xc0 [ 257.345738] ? __might_sleep+0x93/0xb0 [ 257.349615] ? __fget+0x210/0x370 [ 257.353076] ? vhost_vsock_flush+0xc0/0xc0 [ 257.357301] do_vfs_ioctl+0x7ae/0x1060 [ 257.361189] ? selinux_file_mprotect+0x5d0/0x5d0 [ 257.365924] ? lock_downgrade+0x740/0x740 [ 257.370054] ? ioctl_preallocate+0x1c0/0x1c0 [ 257.374443] ? __fget+0x237/0x370 [ 257.377886] ? security_file_ioctl+0x89/0xb0 [ 257.382282] SyS_ioctl+0x8f/0xc0 [ 257.385627] ? do_vfs_ioctl+0x1060/0x1060 [ 257.389754] do_syscall_64+0x1e8/0x640 [ 257.393619] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.398457] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.403635] RIP: 0033:0x459f49 [ 257.406813] RSP: 002b:00007f9af617fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.414597] RAX: ffffffffffffffda RBX: 00007f9af617fc90 RCX: 0000000000459f49 [ 257.421846] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 257.429094] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 13:45:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x1, 0x300) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$inet(r1, &(0x7f00000004c0)=""/140, 0x8c, 0x0, &(0x7f0000000240)={0x2, 0x4e20, @rand_addr=0x240000}, 0x10) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r7, 0x894b, &(0x7f0000000580)) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vsock\x00', 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0xa, 0xb9, 0xfffffffe, 0x1, 0x8b, r5, 0x1, [], r8, r9, 0x0, 0x2}, 0x3c) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r2) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/load\x00', 0x2, 0x0) 13:45:53 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @netrom}, [@null, @bcast, @rose, @null, @rose, @netrom, @netrom, @bcast]}, &(0x7f0000000100)=0x48, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000140)={r1}) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = accept4$inet(r5, &(0x7f0000000180)={0x2, 0x0, @local}, &(0x7f0000000200)=0x10, 0x80800) sendfile(r6, r0, &(0x7f0000000240)=0x100000001, 0x5) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$NBD_DO_IT(r3, 0xab03) [ 257.436343] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9af61806d4 [ 257.443591] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 13:45:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='@\xab\x1e0\xab|\x1e\"o\x00', 0x20001, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:53 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x24) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2008001) dup3(r3, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/btrfs-control\x00', 0x4000, 0x0) renameat(r4, &(0x7f0000000140)='./bus\x00', r5, &(0x7f00000001c0)='./bus\x00') fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:53 executing program 4 (fault-call:4 fault-nth:2): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@broute={'broute\x00', 0x20, 0x2, 0x32c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000640], 0x0, &(0x7f00000001c0), &(0x7f0000000640)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x0, 0x58, 0x0, 'ip6gretap0\x00', 'bcsh0\x00', 'team_slave_1\x00', 'lo\x00', @empty, [0x0, 0x0, 0x1fe, 0xff], @broadcast, [0x0, 0x80, 0x0, 0x101], 0x126, 0x126, 0x19e, [@connbytes={'connbytes\x00', 0x18, {{0xa000000000000000, 0x8001, 0x2, 0x1}}}, @ip6={'ip6\x00', 0x50, {{@loopback, @loopback, [0xffffff00, 0xff000000, 0x9d052f2a34c09614, 0xffffff00], [0xff000000, 0xffffff00, 0x1fffffffe, 0xff], 0x0, 0x9, 0x0, 0x50, 0x4e23, 0x4e24, 0x4e24, 0x4e24}}}], [], @common=@NFLOG={'NFLOG\x00', 0x50, {{0x1873096e, 0x0, 0x8, 0x0, 0x0, "e578196879ee695c97071d930873b512313d93a6e183ea3526a0b75661964ccf9052a5954fda2eb7df62a4277b0223427d7d6b2b37b60ce74585971a315dfea1"}}}}, {0x5, 0x4, 0x6005, 'rose0\x00', 'bond0\x00', 'veth1_to_bond\x00', 'team_slave_1\x00', @remote, [0x0, 0xff, 0x0, 0x5d821ba5102c1ed9], @empty, [0x0, 0xff, 0xff, 0x80, 0x0, 0xff], 0x6e, 0xce, 0xfe, [], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x6}}}}]}]}, 0x3a4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x68, r4, 0x20, 0x70bd27, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x80000001, @link='syz1\x00'}}}, [""]}, 0x68}}, 0x20000040) [ 257.609261] audit: type=1804 audit(1572702353.162:219): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/469/bus" dev="sda1" ino=17392 res=1 [ 257.647375] block nbd3: Receive control failed (result -22) [ 257.651467] FAULT_INJECTION: forcing a failure. 13:45:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 257.651467] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.701362] CPU: 1 PID: 15440 Comm: syz-executor.4 Not tainted 4.14.151 #0 [ 257.708417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.718481] Call Trace: [ 257.721076] dump_stack+0x138/0x197 [ 257.724713] should_fail.cold+0x10f/0x159 [ 257.728856] ? __might_sleep+0x93/0xb0 [ 257.732738] __alloc_pages_nodemask+0x1d6/0x7a0 [ 257.732748] ? find_held_lock+0x35/0x130 [ 257.732760] ? __alloc_pages_slowpath+0x2930/0x2930 [ 257.732774] ? lock_downgrade+0x740/0x740 [ 257.732790] alloc_pages_current+0xec/0x1e0 [ 257.754937] ? up_write+0x1a/0x60 [ 257.758394] pte_alloc_one+0x1a/0x100 [ 257.762196] do_huge_pmd_anonymous_page+0x8e4/0x1470 [ 257.767310] ? find_held_lock+0x35/0x130 [ 257.771370] ? process_measurement+0x58a/0xb80 [ 257.775953] ? __thp_get_unmapped_area+0x130/0x130 [ 257.780889] __handle_mm_fault+0x22bf/0x3470 [ 257.785296] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 257.790051] ? find_held_lock+0x35/0x130 [ 257.794109] ? handle_mm_fault+0x1b6/0x7c0 [ 257.798349] handle_mm_fault+0x293/0x7c0 [ 257.802410] __do_page_fault+0x4c1/0xb80 [ 257.806491] ? vmalloc_fault+0xe30/0xe30 [ 257.810554] do_page_fault+0x71/0x511 [ 257.814353] page_fault+0x25/0x50 [ 257.817808] RIP: 0010:__get_user_4+0x21/0x30 [ 257.822221] RSP: 0018:ffff88805a66fb78 EFLAGS: 00010202 [ 257.827582] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc9000726f000 [ 257.834844] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 257.842110] RBP: ffff88805a66fca0 R08: ffff88805e06c580 R09: 0000000000000001 [ 257.849375] R10: 0000000000000000 R11: ffff88805e06c580 R12: 0000000020000040 [ 257.856639] R13: ffff888088b48900 R14: dffffc0000000000 R15: ffff888088b48908 [ 257.863924] ? __might_fault+0x188/0x1d0 [ 257.867991] ? vhost_vring_ioctl+0xaa/0x1340 [ 257.872397] ? avc_ss_reset+0x110/0x110 [ 257.876373] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 257.880868] ? vhost_dev_ioctl+0xf3/0xe90 [ 257.885018] ? vhost_chr_write_iter+0x1260/0x1260 [ 257.889862] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 257.894444] ? vhost_vsock_flush+0xc0/0xc0 [ 257.898676] ? __might_sleep+0x93/0xb0 [ 257.902560] ? __fget+0x210/0x370 [ 257.906018] ? vhost_vsock_flush+0xc0/0xc0 [ 257.910250] do_vfs_ioctl+0x7ae/0x1060 [ 257.914137] ? selinux_file_mprotect+0x5d0/0x5d0 [ 257.918890] ? lock_downgrade+0x740/0x740 [ 257.923040] ? ioctl_preallocate+0x1c0/0x1c0 [ 257.927447] ? __fget+0x237/0x370 [ 257.930903] ? security_file_ioctl+0x89/0xb0 [ 257.935309] SyS_ioctl+0x8f/0xc0 [ 257.938676] ? do_vfs_ioctl+0x1060/0x1060 [ 257.942823] do_syscall_64+0x1e8/0x640 [ 257.946711] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.951559] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 257.956747] RIP: 0033:0x459f49 [ 257.959927] RSP: 002b:00007f9af617fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.967636] RAX: ffffffffffffffda RBX: 00007f9af617fc90 RCX: 0000000000459f49 [ 257.974898] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 257.982161] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 257.989426] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9af61806d4 [ 257.996691] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 [ 258.025956] block nbd2: shutting down sockets 13:45:53 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x232400, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xe7, "47bc8e524edac37d03224a04bfe229bd65360fcdbd9328a48e7c29621e173f41be9b1c4a54d3fa0094fe8c3bc04a0b50ac89343a557ba990078a033f1083ce455fd2d1bd4b0b2d1934bb88239b855f033c567209fdf1da59da072196439bdfce6074fdfc140732d46aefdb57800961a9d76298a49689ed4e772daef4dfc29b1e73518064256ec75409b47adfdae79696e7eb4c82b769cd301b8b70e6d183430cdb588c73418c2b526a142880e27236d7fca33f391e40768789a5081dbea035499dcce7ccbd3663cb7d649d4ba66f98c9fded4715f8f53a5d35d94f27a115b97a6a6a5d45152905"}, &(0x7f0000000200)=0xef) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000240)={0x9d9, 0x204, 0x4, 0x5, r2}, 0x10) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:53 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x3, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x400}, 0x1c}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4004800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x100, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x4108, 0x0, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x34000840}, 0x4000000) ioctl$NBD_CLEAR_SOCK(r3, 0xab04) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:53 executing program 4 (fault-call:4 fault-nth:3): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 258.156478] block nbd2: Receive control failed (result -22) [ 258.165477] block nbd2: shutting down sockets [ 258.176676] FAULT_INJECTION: forcing a failure. [ 258.176676] name failslab, interval 1, probability 0, space 0, times 0 [ 258.188280] CPU: 1 PID: 15473 Comm: syz-executor.4 Not tainted 4.14.151 #0 [ 258.195298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 258.204648] Call Trace: [ 258.207239] dump_stack+0x138/0x197 [ 258.210872] should_fail.cold+0x10f/0x159 [ 258.215024] should_failslab+0xdb/0x130 [ 258.218999] kmem_cache_alloc+0x2d7/0x780 [ 258.223158] ptlock_alloc+0x20/0x70 [ 258.226794] pte_alloc_one+0x60/0x100 [ 258.230601] do_huge_pmd_anonymous_page+0x8e4/0x1470 [ 258.235705] ? find_held_lock+0x35/0x130 [ 258.239769] ? process_measurement+0x58a/0xb80 [ 258.244356] ? __thp_get_unmapped_area+0x130/0x130 [ 258.249290] __handle_mm_fault+0x22bf/0x3470 [ 258.253698] ? vm_insert_mixed_mkwrite+0x40/0x40 [ 258.258451] ? find_held_lock+0x35/0x130 [ 258.262511] ? handle_mm_fault+0x1b6/0x7c0 [ 258.266755] handle_mm_fault+0x293/0x7c0 [ 258.270819] __do_page_fault+0x4c1/0xb80 [ 258.274882] ? vmalloc_fault+0xe30/0xe30 [ 258.278942] do_page_fault+0x71/0x511 [ 258.282753] page_fault+0x25/0x50 [ 258.286204] RIP: 0010:__get_user_4+0x21/0x30 [ 258.290601] RSP: 0018:ffff88805e897b78 EFLAGS: 00010202 [ 258.295960] RAX: 0000000020000043 RBX: 000000004008af21 RCX: ffffc9000726f000 [ 258.303226] RDX: ffffffffffffffff RSI: ffffffff817bff38 RDI: 0000000000000282 [ 258.310490] RBP: ffff88805e897ca0 R08: ffff88805be9e280 R09: 0000000000000001 [ 258.317752] R10: 0000000000000000 R11: ffff88805be9e280 R12: 0000000020000040 [ 258.325016] R13: ffff888056767340 R14: dffffc0000000000 R15: ffff888056767348 [ 258.332381] ? __might_fault+0x188/0x1d0 [ 258.336444] ? vhost_vring_ioctl+0xaa/0x1340 [ 258.340850] ? avc_ss_reset+0x110/0x110 [ 258.344834] ? vhost_vq_access_ok+0x1d0/0x1d0 [ 258.349325] ? vhost_dev_ioctl+0xf3/0xe90 [ 258.353568] ? vhost_chr_write_iter+0x1260/0x1260 [ 258.358406] vhost_vsock_dev_ioctl+0x7a2/0xa80 [ 258.362991] ? vhost_vsock_flush+0xc0/0xc0 [ 258.367225] ? __might_sleep+0x93/0xb0 [ 258.371131] ? __fget+0x210/0x370 [ 258.374585] ? vhost_vsock_flush+0xc0/0xc0 [ 258.378819] do_vfs_ioctl+0x7ae/0x1060 [ 258.382721] ? selinux_file_mprotect+0x5d0/0x5d0 [ 258.387477] ? lock_downgrade+0x740/0x740 [ 258.391624] ? ioctl_preallocate+0x1c0/0x1c0 [ 258.396029] ? __fget+0x237/0x370 [ 258.399483] ? security_file_ioctl+0x89/0xb0 [ 258.403894] SyS_ioctl+0x8f/0xc0 [ 258.407257] ? do_vfs_ioctl+0x1060/0x1060 [ 258.411403] do_syscall_64+0x1e8/0x640 [ 258.415281] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.420122] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 258.425307] RIP: 0033:0x459f49 [ 258.428494] RSP: 002b:00007f9af617fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.436195] RAX: ffffffffffffffda RBX: 00007f9af617fc90 RCX: 0000000000459f49 [ 258.443456] RDX: 0000000020000040 RSI: 000000004008af21 RDI: 0000000000000003 [ 258.450721] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 258.457982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f9af61806d4 [ 258.465249] R13: 00000000004c53ed R14: 00000000004da138 R15: 0000000000000005 [ 258.473484] block nbd3: shutting down sockets 13:45:54 executing program 4 (fault-call:4 fault-nth:4): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x100, 0x0) ioctl$NBD_DISCONNECT(r3, 0xab08) [ 258.519624] block nbd2: shutting down sockets [ 258.526976] block nbd3: Receive control failed (result -22) [ 258.538823] block nbd3: shutting down sockets 13:45:54 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x50080, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x1227c0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x18000) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x8000, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, &(0x7f0000000080)={0x1}, 0x1) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$NBD_DO_IT(r3, 0xab03) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000000)) 13:45:54 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000040)={{0xe}, 0xb8, 0x5, 0xf, 0x6, &(0x7f0000000000)="c904ceff1e236b710a4f7ede3f2b5a"}) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000080)='security.ima\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="a1d7ae64d08ef9ebd88f69140c8806fccfb18c717aaad4bb056fffeaec8cb92f65f030b22343afb3153ca2be35da66471c6d5f8e5051dc8ab05c37326cd6"], 0x9, 0x2) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:54 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$CAPI_CLR_FLAGS(r1, 0x80044325, &(0x7f0000000080)=0x1) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x84842, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x100001a, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 258.645013] block nbd2: Receive control failed (result -22) [ 258.671958] block nbd2: shutting down sockets [ 258.718974] audit: type=1804 audit(1572702354.272:220): pid=15494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/470/bus" dev="sda1" ino=17259 res=1 [ 258.746468] block nbd2: shutting down sockets 13:45:54 executing program 3: socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x80) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) ioctl$NBD_DO_IT(r0, 0xab03) 13:45:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x288100) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000000240)={0x8e7, 0x0, 'client1\x00', 0x4, "0a052f8ffc9b14d6", "f473b926511161adc0320a8730ec93c833e83a3af8b76129491fb539bb3f1966", 0x4, 0x41}) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) io_setup(0x8, &(0x7f0000000200)=0x0) io_getevents(r4, 0x4, 0x4, &(0x7f0000000040)=[{}, {}, {}, {}], 0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) accept$inet(r7, &(0x7f0000000180), &(0x7f0000000300)=0x10) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) io_cancel(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, 0x6, r5, &(0x7f0000000000)="19480e498192db74013d973482b36b9956b2b2bd731ff7c6437a09402b2dd13d40c73beca2136f1da6c0bc7f97351a9356c5544154225cad9cf2cbf44906590da58b7dd483b5513b44b889809f1b85cf3456c9906d1c0ba41766b54426fe", 0x5e, 0x1, 0x0, 0x2, r6}, &(0x7f00000000c0)) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) r8 = getpid() r9 = getpid() sched_setattr(r9, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) tgkill(r8, r9, 0x32) r10 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x100000000, 0x121000) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000140)) [ 259.013798] block nbd2: shutting down sockets 13:45:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 259.106451] block nbd2: Receive control failed (result -22) [ 259.122557] block nbd2: shutting down sockets [ 259.165406] block nbd2: shutting down sockets 13:45:54 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000240)={"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"}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/enforce\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f00000007c0)={0x0, @frame_sync}) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0x7, "e1c290ab22ec8c223d7d5a414955721caa9929caff64d04e9f2325a545b8beab", 0x3, 0x10, 0x7e00, 0xcf, 0x4, 0x1, 0x5, 0x893}) ioctl$NBD_DO_IT(r2, 0xab03) [ 259.296406] block nbd2: Receive control failed (result -22) 13:45:55 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x1) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2008001) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:55 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'sit0\x00'}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000140)={'caif0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 13:45:55 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000080)="e20bc7ddc5024c6419d20e6e", 0xfffffd50) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'lapb0\x00'}}) [ 259.709009] audit: type=1804 audit(1572702355.262:221): pid=15531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/471/bus" dev="sda1" ino=17385 res=1 [ 259.808628] block nbd3: Receive control failed (result -22) [ 260.078726] block nbd2: shutting down sockets [ 260.131644] block nbd2: shutting down sockets 13:45:55 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000000)={0x100, 0x7, 0x7, 0x27, 0x74, 0x28, 0x27, "a243ad9fd498079e626763719b85706c1914937e", "86f916ba8f01e223a5879d0a5dd85c243f8dfa13"}) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 260.316578] block nbd2: Receive control failed (result -22) 13:45:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200800, 0x0) bind$bt_rfcomm(r2, &(0x7f0000000100)={0x1f, {0x8, 0xea, 0x7, 0x5, 0x80, 0xe1}, 0x4}, 0xa) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x5011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:56 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 260.590619] block nbd3: shutting down sockets 13:45:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/\x83\xf0\x1fG&5\x00\x00\xb1<\x00\x00\x00p\xab\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, @null, @rose={'rose', 0x0}, 0xff, 'syz0\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1ff, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:56 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r4 = getpgrp(0xffffffffffffffff) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20080, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r0, &(0x7f0000000040)={r5, r2, 0x1f}) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x1) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nullb0\x00', 0x4000, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) inotify_init() openat$mixer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer\x00', 0x200, 0x0) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r8 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r8, 0x3b64) r9 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r9, 0x3b64) socket$bt_rfcomm(0x1f, 0x3, 0x3) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0xcf06fb30a9aedc62) dup2(r9, r10) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) r11 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) name_to_handle_at(r11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="9d0b000000006400"], 0x0, 0x0) r12 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r13, 0x5452, &(0x7f0000b28000)=0x6) fcntl$setsig(r13, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r14}], 0x1, 0xffffffffffbffff8) dup2(r13, r14) fcntl$setown(r13, 0x8, r12) tkill(r12, 0x16) r15 = getpgid(r12) r16 = syz_open_procfs(r15, &(0x7f00000000c0)='c\a\x00\x00\x00') preadv(r16, 0x0, 0x0, 0x6c00000000000000) ioctl$DRM_IOCTL_ADD_CTX(r16, 0xc0086420, &(0x7f0000001dc0)={0x0}) ioctl$DRM_IOCTL_LOCK(r11, 0x4008642a, &(0x7f0000000040)={r17, 0x4}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000001c0)={r17, 0xcc6a2fc82b60b7cb}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:56 executing program 4: r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev}, &(0x7f0000000140)=0x10) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000180)={'IDLETIMER\x00'}, &(0x7f00000001c0)=0x1e) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) fremovexattr(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="73656375726974792e2f6465762f76686f7374f84cedb26e6e957093ca41572d76736f636b00ac8ef00300d916574a34e36ecc85e98d51fe0c"]) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) [ 260.676824] audit: type=1804 audit(1572702356.232:222): pid=15552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/472/bus" dev="sda1" ino=17383 res=1 13:45:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 260.763413] block nbd3: Receive control failed (result -22) [ 260.773166] block nbd3: shutting down sockets [ 260.817502] block nbd3: shutting down sockets 13:45:56 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40200, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f00000001c0)=0xa71a) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl$KDGKBLED(r4, 0x4b64, &(0x7f0000000000)) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) exit_group(0x95) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:56 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x20000) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0xd6) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x100) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x8, 0x90002) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x0) [ 260.936172] block nbd3: server does not support multiple connections per device. [ 260.952978] audit: type=1804 audit(1572702356.512:223): pid=15580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/473/bus" dev="sda1" ino=17394 res=1 [ 260.991056] block nbd3: server does not support multiple connections per device. [ 261.006290] block nbd3: shutting down sockets [ 261.044249] block nbd2: shutting down sockets [ 261.056327] block nbd3: Device being setup by another task [ 261.074339] block nbd3: shutting down sockets 13:45:56 executing program 3: r0 = socket(0x10, 0x0, 0x9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40801, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000040)="41e1539da92001bec6c9332d0f7bd7cba51fc33b1a5d37f212cb7f854a686310e1490fb982241d433921c57be3a90c1b02d3fead1a71a952c20d7cc57fd4fed9ceba200ce60071fceddedd7d4cf8f97aa28d7d4bc40117b2c301ed07a0865d0e3f9592b23a8b0a88c0bf6fb66e1d554c2dc5a8806428c6", &(0x7f00000000c0)=""/141}, 0x20) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$NBD_DO_IT(r3, 0xab03) [ 261.152192] block nbd2: Receive control failed (result -22) [ 261.161100] block nbd2: shutting down sockets 13:45:56 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_DISCONNECT(r1, 0xab08) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/hci\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x56) 13:45:56 executing program 3: r0 = socket(0x9, 0x8000c, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) socket$bt_rfcomm(0x1f, 0x1, 0x3) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x700000, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x1}, &(0x7f00000000c0)=0x8) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000100)) 13:45:56 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@mss={0x2, 0x7ff}], 0x1) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0xbc, r5, 0x200, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xa4cd}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_NODE={0x38, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbf1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf172}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x20}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20040000}, 0xcad15f558274e76b) [ 261.257827] block nbd2: NBD_DISCONNECT [ 261.289719] block nbd2: shutting down sockets [ 261.331160] block nbd2: NBD_DISCONNECT [ 261.351549] block nbd2: shutting down sockets 13:45:57 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x800, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$BLKROGET(r5, 0x125e, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev, 0x100}, r6}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e22, 0x0, @loopback, 0x1000}, r6}}, 0x38) prctl$PR_GET_CHILD_SUBREAPER(0x25) ioctl$NBD_DO_IT(r2, 0xab03) 13:45:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xa4a71c6df11097bd, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) flock(r2, 0x0) bind$vsock_dgram(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @reserved}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl(0x1f, &(0x7f0000000240)='./file0\x00', r4, &(0x7f0000000340)="b87dd781897b040b2f3158cb635aa01ef608") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) syz_open_dev$mouse(&(0x7f0000000380)='/dev/input/mouse#\x00', 0x9, 0x408000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) migrate_pages(r6, 0xff, &(0x7f00000001c0)=0x7, &(0x7f0000000200)=0x6) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 261.516995] block nbd2: Receive control failed (result -22) 13:45:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x1, [0x0]}) [ 261.718523] audit: type=1400 audit(1572702357.272:224): avc: denied { map } for pid=15575 comm="syz-executor.5" path="socket:[61474]" dev="sockfs" ino=61474 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=udp_socket permissive=1 13:45:57 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000400)={@local, 0x0}, &(0x7f0000000500)=0x14) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) r6 = socket(0x11, 0x800000003, 0x0) bind(r6, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r7, @ANYBLOB="00000000ffffffff0000000008000100687462001c000200180001"], 0x3}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000a80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400080}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)=@bridge_getneigh={0xb4, 0x1e, 0x400, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x60820, 0x2400}, [@IFLA_XDP={0x78, 0x2b, [@IFLA_XDP_FD={0x74, 0x1, {0x3, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000080)='syzkaller\x00', 0x800, 0x65, &(0x7f0000000140)=""/101, 0x41000, 0x4, [], r4, 0x6, r5, 0x8, &(0x7f0000000900)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000940)={0x2, 0x6, 0x101, 0xbb6}, 0x10}}]}, @IFLA_ADDRESS={0xc, 0x1, @local}, @IFLA_EVENT={0x8, 0x2c, 0x1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r8 = creat(&(0x7f00000001c0)='./bus\x00', 0x1) ioctl$EVIOCSABS3F(r8, 0x401845ff, &(0x7f0000000300)={0x1, 0x1, 0xfffffffc, 0xffffffff, 0x9, 0x7}) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r9, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x30001, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r10, 0x40086408, &(0x7f00000003c0)={0x3ff, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:45:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500)}], 0x1, 0xd) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000100)={0x4, 0x7, 0x0, 0x504}) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd}, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) ptrace$poke(0x5, r3, &(0x7f0000000080), 0xfff) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000240)=0x14) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1d, 0x4011, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 261.916371] audit: type=1804 audit(1572702357.472:225): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/474/bus" dev="sda1" ino=17394 res=1 [ 262.056155] audit: type=1804 audit(1572702357.612:226): pid=15642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/474/bus" dev="sda1" ino=17394 res=1 13:45:57 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000100)=0x9, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:57 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="66696c746572000000000000000000000000b7ea1320eb20ef33c641cc00000000000000000000000000000400"/104], 0x68) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 262.300584] block nbd2: shutting down sockets [ 262.324405] block nbd3: Receive control failed (result -22) 13:45:58 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab03) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000000)={{0x32, @rand_addr=0x800, 0x2, 0x0, 'sh\x00', 0x2, 0x1ff, 0x16}, {@multicast2, 0x4e20, 0x1002, 0x5, 0x9, 0xc1b}}, 0x44) 13:45:58 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, &(0x7f0000000100)={0x400, [0x1f, 0x3f, 0xb5, 0x7, 0x0, 0x353e, 0xfbff, 0x40, 0x0, 0xb8b, 0x3f, 0x5, 0x6, 0x5, 0x9, 0x1, 0x7fff, 0x6, 0xc6f, 0xb80, 0x6, 0x727, 0xe08, 0xa658, 0x4, 0xfff7, 0x8, 0x4, 0x6, 0x4, 0x3, 0x0, 0x7, 0xd7a, 0x8, 0x8, 0x7, 0x5, 0x9, 0x4764, 0x7, 0x453, 0x4, 0x2, 0x7, 0x1, 0x5, 0x1], 0x15}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$null(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/null\x00', 0x800, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000700)={0xbe, 0x4}) recvmsg(r2, &(0x7f00000005c0)={&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/148, 0x94}, {&(0x7f0000000380)=""/242, 0xf2}, {&(0x7f0000000480)=""/122, 0x7a}], 0x3, &(0x7f0000000500)=""/137, 0x89}, 0x40) getsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x810, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000740)='/dev/vsock\x00', 0x2000, 0x0) ioctl$TIOCGLCKTRMIOS(r7, 0x5456, &(0x7f0000000780)={0xaa9b, 0x8, 0x2, 0x5, 0x18, 0x8, 0x7, 0x8, 0x8, 0x2, 0x7}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f0000000680)={0x0, 0x80000}) ioctl$DRM_IOCTL_GEM_CLOSE(r6, 0x40086409, &(0x7f00000006c0)={r9}) 13:45:58 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) fcntl$setsig(r1, 0xa, 0x24) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 262.942198] audit: type=1804 audit(1572702358.502:227): pid=15668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/475/bus" dev="sda1" ino=16594 res=1 [ 263.008017] block nbd3: shutting down sockets [ 263.023580] Unknown ioctl 21590 13:45:58 executing program 3: r0 = socket(0x11, 0x2, 0x81) r1 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x102980) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) write$smack_current(r2, &(0x7f00000000c0)='\\proc)ppp1posix_acl_access\x00', 0x1b) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000000)=@generic={0x1, 0x3, 0x5}) ioctl$NBD_DO_IT(r3, 0xab03) 13:45:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) ustat(0x8, &(0x7f0000000080)) [ 263.115112] block nbd3: Receive control failed (result -22) [ 263.124634] block nbd3: shutting down sockets [ 263.174065] block nbd3: shutting down sockets 13:45:58 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x385bb88f5ba40b7c, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="0100a552c06e04f630f1ec67a917287a060040", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000880)={r5}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={r5, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={r6, 0x40}, &(0x7f0000000180)=0x8) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 263.255591] block nbd2: shutting down sockets 13:45:58 executing program 3: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @remote}, 0x10) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvmmsg(r4, &(0x7f000000b2c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/53, 0x35}, {&(0x7f0000000180)=""/38, 0x26}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/173, 0xad}, {&(0x7f0000000340)=""/211, 0xd3}, {&(0x7f0000000440)=""/44, 0x2c}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f0000000540)=""/41, 0x29}], 0x8, &(0x7f0000000600)=""/62, 0x3e}, 0x8}, {{&(0x7f0000000640)=@hci, 0x80, &(0x7f0000001b80)=[{&(0x7f00000006c0)=""/252, 0xfc}, {&(0x7f00000007c0)=""/96, 0x60}, {&(0x7f0000000840)=""/50, 0x32}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/74, 0x4a}, {&(0x7f0000001940)=""/188, 0xbc}, {&(0x7f0000001a00)=""/56, 0x38}, {&(0x7f0000001a40)=""/151, 0x97}, {&(0x7f0000001b00)=""/66, 0x42}], 0xa, &(0x7f0000001c40)=""/170, 0xaa}, 0x2}, {{&(0x7f0000001d00)=@x25={0x9, @remote}, 0x54, &(0x7f0000003240)=[{&(0x7f0000001d80)=""/68, 0x44}, {&(0x7f0000001e00)=""/93, 0x5d}, {&(0x7f0000001e80)=""/175, 0xaf}, {&(0x7f0000001f40)=""/81, 0x51}, {&(0x7f0000001fc0)=""/96, 0x60}, {&(0x7f0000002040)=""/31, 0x1f}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000002180)=""/157, 0x9d}, {&(0x7f0000002240)=""/4096, 0x1000}], 0x9}, 0x7}, {{&(0x7f0000003300)=@xdp, 0x80, &(0x7f0000003540)=[{&(0x7f0000003380)=""/147, 0x93}, {&(0x7f0000003440)=""/248, 0xf8}], 0x2}, 0x8}, {{&(0x7f0000003580), 0x3f8, &(0x7f0000004b80)=[{&(0x7f0000003600)=""/100, 0x64}, {&(0x7f0000003680)=""/194, 0xc2}, {&(0x7f0000003780)=""/119, 0x77}, {&(0x7f0000003800)=""/203, 0xcb}, {&(0x7f0000003900)=""/187, 0xbb}, {&(0x7f00000039c0)=""/14, 0xe}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)=""/74, 0x4a}, {&(0x7f0000004a80)=""/209, 0xd1}], 0x9, &(0x7f000000b540)=""/129, 0x81}, 0x80000001}, {{&(0x7f0000004d00)=@ax25={{}, [@bcast, @rose, @bcast, @null, @rose, @default, @null, @null]}, 0x80, &(0x7f0000008200)=[{&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)}, {&(0x7f0000005dc0)=""/117, 0x75}, {&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000006e40)=""/180, 0xb4}, {&(0x7f0000006f00)=""/239, 0xef}, {&(0x7f0000007000)=""/239, 0xef}, {&(0x7f0000007100)=""/196, 0xc4}, {&(0x7f0000007200)=""/4096, 0x1000}], 0x9, &(0x7f00000082c0)=""/223, 0xdf}, 0x5ef0}, {{&(0x7f00000083c0)=@caif, 0x80, &(0x7f0000009840)=[{&(0x7f0000008440)=""/8, 0x8}, {&(0x7f0000008480)=""/82, 0x52}, {&(0x7f0000008500)=""/59, 0x3b}, {&(0x7f0000008540)=""/31, 0x1f}, {&(0x7f0000008580)=""/4096, 0x1000}, {&(0x7f0000009580)=""/116, 0x74}, {&(0x7f0000009600)=""/253, 0xfd}, {&(0x7f0000009700)=""/168, 0xa8}, {&(0x7f00000097c0)=""/95, 0x5f}], 0x9, &(0x7f0000009900)=""/251, 0xfb}, 0xfc0}, {{0x0, 0x0, &(0x7f000000ae80)=[{&(0x7f0000009a00)=""/105, 0x69}, {&(0x7f0000009a80)=""/178, 0xb2}, {&(0x7f0000009b40)=""/126, 0x7e}, {&(0x7f0000009bc0)=""/4096, 0x1000}, {&(0x7f000000abc0)}, {&(0x7f000000ac00)=""/230, 0xe6}, {&(0x7f000000ad00)=""/211, 0xd3}, {&(0x7f000000ae00)=""/113, 0x71}], 0x8}, 0xfffffff8}, {{&(0x7f000000af00)=@ax25={{}, [@default, @default, @remote, @netrom, @netrom, @null, @default]}, 0x80, &(0x7f000000b000)=[{&(0x7f000000af80)=""/111, 0x6f}], 0x1}, 0xfffffffc}, {{&(0x7f000000b040)=@nfc_llcp, 0x80, &(0x7f000000b200)=[{&(0x7f000000b0c0)=""/255, 0xff}, {&(0x7f000000b1c0)=""/19, 0x13}], 0x2, &(0x7f000000b240)=""/67, 0x43}, 0x8}], 0xa, 0x20, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', r6}) r7 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) openat$cgroup_int(r9, &(0x7f0000005d80)='memory.high\x00', 0x2, 0x0) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendto$unix(r8, &(0x7f0000004c40)="eaf18d440ac20a24da20181030a1dec010cbdfff242717a9446c7511", 0x1c, 0x1, &(0x7f0000004c80)=@file={0x0, './file0\x00'}, 0x6e) ioctl$NBD_SET_SOCK(r2, 0xab00, r1) ioctl$NBD_CLEAR_SOCK(r7, 0xab03) ioctl$SIOCGETNODEID(r0, 0x89e1, &(0x7f0000000080)={0x1}) ioctl$NBD_DO_IT(r7, 0xab03) 13:45:58 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x4100, 0x5) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$rose(r3, &(0x7f0000001640)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) ftruncate(r1, 0x2008001) r4 = dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x40000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) eventfd2(0xd8c, 0x800) ioctl$VFIO_GET_API_VERSION(r8, 0x3b64) r9 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r9, 0x3b64) r10 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r10, 0x3b64) r11 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r11, 0x3b64) io_submit(r5, 0x5, &(0x7f0000001580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x2000, r6, &(0x7f0000000140)="670ef6d2ee92cfc40fceab157c64de9c686941ce59b461c329a3111e0fcfdac8016fa7ad11ae04ab0f1c788b039d92ed5850241302579bf8eedb1ec4e0bfccd532b900ad292bbde47e2111bcbdc495c73251f5440bf58d177d6838eb3396429d53c843d874d4cd10eb330a3552676eb8e1835e018711012f982cff240f4a09236fe0bdb94bda364730371b339e82ef0c2ea276c7", 0x94, 0xfffffffffffffffd, 0x0, 0x3, r7}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x9, r8, &(0x7f0000000280)="c3a89e30633adb35739f997274ab17cc23095cce6770e53f89679c419c1ede40de957b3561431e1772c44173a7fe418bc26002179eaf585f238690e6abde52e0dbe0eb2aa191e96618a0ea90a9e9e372d9fcc2c11d29f446d022a9ec52da5aefe18dd688baa49c031275d3ecb83026890aabcc3eadd5863ba30cb88b4fa7683c3ca734df86b9cc54915a29ab9042041a45d24c9b8d9a2e90fd2600b9eee09e263136d17a5fa0a53a0669ca259a1dde6bb0a69b39b8dbf26508edbc5bc16821257d73b624f1", 0xc5, 0x1ff, 0x0, 0x1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x1, r9, &(0x7f0000000380)="bde6da2f95324aed1ea5b32202d98dd3f8fa52a84849c118cfb59c43c3db78a8851553c358d3db0d1ef1db4a362f174e56a3670e277ad5cc1cea8ea85419c281f256ff8d9de8302691b81a13ff2eb798169189d64bb72a3f974ecdb2a389dade6df6a80eff1df1e420ea25cefcf55d70bdd09d816c98b2e37049f9", 0x7b, 0xff, 0x0, 0x0, r7}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x9, r10, &(0x7f0000000480)="a8dbc9703e02058291416e64ed9a30aa1ffc85bad5e61f4a58e7d80638ae8b4a8eef3ee6dc4ee7db3f051ca06048ed6a2115a3c7839738", 0x37, 0x4, 0x0, 0x0, r4}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x2, 0x101, r11, &(0x7f0000000580)="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", 0x1000, 0x3, 0x0, 0x2}]) r12 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x2400, 0xfffffffffffffffe) r13 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x22100, 0x0) ioctl$RTC_WKALM_SET(r13, 0x4028700f, &(0x7f0000000540)={0x1, 0x1, {0x1a, 0x21, 0x15, 0x6, 0x2, 0x7ff, 0x1, 0x49, 0x1}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f00000018c0)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000700000004000000a8040000800200000000000080020000c0030000c0030000c003000004000000", @ANYPTR=&(0x7f00000015c0)=ANY=[@ANYBLOB='\x00'/64], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000005ae5693ab6f00000000000000000000ac1414aae000000108000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb0000000000000000000000000000000000000000000000000000ac14142be0000001010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000271574d61b0000f0004001000000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000aaaaaaaaaabb00000000000000000000aaaaaaaaaaaa00000000000000000000ac1414aaac1414bb02000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f8) write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000001600)={0x18, 0xf, 0x1, {{0x8, 0x4, 0x2}, 0x10000}}, 0x18) [ 263.346423] block nbd2: shutting down sockets 13:45:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @multicast2}, 0x202, 0x0, 0x0, 0x0, 0xc352, &(0x7f0000000080)='veth0_to_hsr\x00', 0x100000001, 0x2, 0x3}) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$NBD_DO_IT(r3, 0xab03) [ 263.380383] audit: type=1804 audit(1572702358.942:228): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/476/bus" dev="sda1" ino=16691 res=1 13:45:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dcv/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/d%v/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)) sendmsg$nl_crypto(r1, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000340)={&(0x7f0000000200)=@alg={0x110, 0x10, 0x100, 0x70bd29, 0x25dfdbfd, {{'aegis128l-generic\x00'}, [], [], 0x2400, 0x1000}, [{0x8, 0x1, 0x1}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0xdfac}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x59}, {0x8, 0x1, 0x2}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x45a756d3ad5e1882}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0xfe000000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x80000) [ 263.430091] audit: type=1800 audit(1572702358.972:229): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16691 res=0 13:45:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r2 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r1, &(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, r2) keyctl$setperm(0x5, r1, 0x14210408) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:59 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$x25(r1, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x4082, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:45:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$KVM_GET_CLOCK(r5, 0x8030ae7c, &(0x7f0000000400)) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r6, 0xc0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x4843, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000840)={0x6, 0x200000}, &(0x7f0000000880)=0x80000001, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x4}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={r4, 0x10, &(0x7f0000000d40)={&(0x7f0000000500)=""/148, 0x94, r7}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r7, 0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000701000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x10) fcntl$setpipe(r8, 0x407, 0x0) write(r8, &(0x7f0000000340), 0x41395527) ioctl$PPPIOCSMRU1(r8, 0x40047452, &(0x7f00000001c0)=0x2) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:45:59 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r3, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x100}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/deU/zero\x00', 0x0, 0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r5, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 264.131095] block nbd3: shutting down sockets 13:45:59 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7f, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x5) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) connect(r1, &(0x7f0000000000)=@ethernet={0x60d, @remote}, 0x80) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x4, @broadcast, 'veth0_to_hsr\x00'}}) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 264.165836] audit: type=1804 audit(1572702359.722:230): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/476/bus" dev="sda1" ino=16691 res=1 13:45:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000080)={0x2, r5}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$DRM_IOCTL_ADD_BUFS(r3, 0xc0206416, &(0x7f0000000000)={0x3, 0xfe00000, 0x167c, 0x1f, 0x14, 0x80}) ioctl$NBD_DO_IT(r2, 0xab03) [ 264.193794] audit: type=1800 audit(1572702359.722:231): pid=15691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="collect_data" cause="failed(directio)" comm="syz-executor.5" name="bus" dev="sda1" ino=16691 res=0 [ 264.233536] audit: type=1804 audit(1572702359.792:232): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/477/bus" dev="sda1" ino=16691 res=1 [ 264.295823] block nbd2: Receive control failed (result -22) 13:45:59 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) acct(&(0x7f0000000000)='./bus\x00') fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 264.356540] block nbd3: shutting down sockets 13:46:00 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r4, 0xc0106401, &(0x7f0000000100)={0x8e, &(0x7f0000000040)=""/142}) ioctl$NBD_DO_IT(r2, 0xab03) [ 264.400543] audit: type=1804 audit(1572702359.952:233): pid=15742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/478/bus" dev="sda1" ino=16691 res=1 [ 264.451762] audit: type=1804 audit(1572702359.992:234): pid=15742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/478/bus" dev="sda1" ino=16691 res=1 [ 264.465319] block nbd3: Receive control failed (result -22) 13:46:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x80000000008007) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000001c0), 0x4) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r6 = dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f0000000900)=[{&(0x7f0000000440)=""/74, 0x4a}, {&(0x7f00000004c0)=""/204, 0xcc}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000005c0)=""/63, 0x3f}, {&(0x7f00000006c0)=""/191, 0xbf}, {&(0x7f0000000780)=""/133, 0x85}, {&(0x7f0000000840)=""/147, 0x93}], 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@broadcast, 0x4e24, 0x5, 0x4e24, 0x0, 0x2, 0x80, 0x80, 0x67, r7, r9}, {0x9, 0xfff, 0xfff, 0x7fff, 0x2000000000000000, 0x401, 0x5, 0x2}, {0xfffffffffffffff9, 0x2, 0x8001, 0x80000000000000}, 0x2, 0x6e6bbb, 0x0, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d5, 0x183}, 0xa, @in=@broadcast, 0x3500, 0x4, 0x0, 0x40, 0x81, 0x0, 0x1}}, 0xe8) 13:46:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x440, 0x0) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) dup2(r4, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 264.607703] Process accounting resumed 13:46:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x1170114c03114ff1, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r2, 0x5381) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000140)={0x10, 0xfffffffffffffff5, 0x8}, 0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x1000, 0x0) 13:46:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000100)) 13:46:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x6) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) accept(r3, 0x0, &(0x7f00000001c0)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:00 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) dup3(r2, r3, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) bind(r1, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r9, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r11) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000880)={r13}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r10, 0x84, 0x6d, &(0x7f00000002c0)={r13, 0xdc, "8cdf83943a3466d09e109f8a6d2aa0978bbd1a7a692252e08e9504d703cee60246a6dfc597fa299473c0252f1e4725eb0d98e4822be9d49f046447a876e102123fe77058cc41318295664cb33bde59a15f5e722b93794e81c583d2653c6d6a36113f80a4cf80eb3b1a2ff0c1451e3ea58a5488ce82e2bc6cff77507832466852f55caf5593559525f93373b576bafa3b3610dcd446fe9e1286a2c1e9fc02394f3e2ed5c37441fb3f29d4e46e5222679d4acec775200e76da23666667e162da323b8fa7c98b601b03877a20a9a6216fc2547140a4b35816863c56e14e"}, &(0x7f00000003c0)=0xe4) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f0000000880)={r14, 0x80}, &(0x7f00000008c0)=0x6b97e33f) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={r8, @in6={{0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1}}, 0xff, 0xf000, 0xff, 0x2, 0x96a9e48c5d884073}, 0x98) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r15, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)={&(0x7f0000000080)='./bus\x00', r15}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_TSC(0x1a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$netrom(r0, &(0x7f0000000340)="73ed78e62d69dc52a71a2b7855cdfbc6e98281e9b0f7a582e017309cad8c47aef2876e7d1fdd7d03c219a7ebb2acb19d70039f8002c16966827c1c1f76e1124afbdc123d1d4b285f48d8ffbcd363012affef003677ceac5c655e6f01e5ee611734a2e824c5f2a42e12bd337f0fb3e7f0f349e4bd98a76a3935279cfbd8b74dc92fd49f3bc185f14ff014be1e63bc5b4421121fbfbe704456ee0e2600ffcbe93c686d5702664f17b6b8443341b76d9b0a729c8f468ecf111aabd49cde3f9521147f320e943b3718fe689083a87bccc04dbd711b2787", 0xd5, 0x1, &(0x7f0000000240)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='B\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x200}, &(0x7f0000000200)=0x8) pipe(0x0) r4 = syz_open_dev$midi(&(0x7f0000000440)='/dev/midi#\x00', 0x200, 0x109080) sendto$inet6(r4, &(0x7f0000000480)="a0c7fe93a9548084b1af07a9ab7a3d0fee167f6df84d1d4c05acb91ec7b948b0317cae24f6bef44ead7c0aaedbe67c40dc3a5bb0f3e687844dd5d21e17821621d0c0297b4b0037c1487b1ec59d6ad5a6bf09239ee4a64f9c4b44f9da42491c1eb3c4da08127f686be4b2eda39bd2e7d8755c14462004f88f68faa1b518b0c1b46e0ab9475ea0e0bf638a3f39656128576ec48901eefaa043", 0x98, 0x41, &(0x7f0000000540)={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}, 0x1c) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$UFFDIO_UNREGISTER(r5, 0x8010aa01, &(0x7f0000000580)={&(0x7f0000701000/0x2000)=nil, 0x2000}) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f0000000480), 0x0, 0xffffffffffffffff) [ 264.735252] audit: type=1804 audit(1572702360.292:235): pid=15776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/479/bus" dev="sda1" ino=17009 res=1 13:46:00 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200080, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = syz_open_dev$media(&(0x7f0000001300)='/dev/media#\x00', 0x4498, 0x200) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f0000001340)={0x5, 0x40, 0xa0}) write(r2, &(0x7f0000000340), 0x41395527) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000080)={0x80, 0x3}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet_dccp_buf(r4, 0x21, 0xf, &(0x7f0000000300)="38abd631befb3a355658eeda7679949781da77fe8b4f6bac4c0d4736f54e47b0525ffde5d06f304d239b69199f89ad33756eb73045632edfaef6a7501e3356537be2e697f8f327ad15254f86ea7ed1cbf9cdb660dc5db7b93b2721a1afcbf744fc9a6e62ab88c54b3607c2c87882e53dc12f5af93932dcf3e7d516aef910a136608655d4e4544818041a354bde2bfbb5af6f0c981796e1d65dbaaaa1e031cce865dfc0ecf5064beac94525f096c6249a61e70c1d815997c62c52d3468826cb5f81e51d0e80e1fc5810fdf0fa859a75049ea3940ce288f38f73a877524fd044648ea523f2dbcf640b4bbfd98adde8943d3b0fa05dac2176decd65a64915fb3f3f5ff531b946259ebdb208001ea06c9debb5f22f82fc5f98b34c14cb7ddcc4416b5a05927c28ef8b77364d06cd496c3efe3a224785f72eecf9d062f8ea796bf699ffdde17be908459d0fd59ada373ea2bfcf1cb7fc57bcf879af8d2c0f3364ca78a0d1978dcfa51f44df9b962810ed11b5bb299fd7b84fbdc7bb5ce60613bb11882bcbf55b71bbe5b066b810bbde4fad2dcc3c976e63db296906cbc8da21ce53141fc15b9165f74278274be54d276c3c3c626acaa9f2e31dd0e5a0385b623f0ed54d515da73e8064d77afcefc03cab30393da320f2a5225a1a147b0edec97c337b141a9e183f11d4d952f05033c1baab98e8ae0b0b323602a15a85d61ddffb5d7126a183d1dd9a1ba89e10b820769abbb591313e568084ff81040d4323cec9054f82662b7f193bb52bc28573f3e1f36920c89c81bb31053ef4c9219941c0c57afc5eb29bd0a71341be2b33a2a5d70c6c42ef21975e526951836fb8e51fd4947edb6ba54e76f791f14ed19e67a388c8fb4c5318d022dc3b526b5127d18b77579d6415b90f6f47e99ce06224758690c0ee87f7e2fb3bbfa09b93a70d092fef35a32910b3d390628b883f8e5551b358f3994ce2d62238ef1db17e9f49ec95191eb139d7d0cd7631b72f54d7a769b0de487cd004a84b96da1a744cad90abe8d1dde290c092770546ed3a5f3449c7ed0ac532e3eb20b2b6ae20e83193fc9230658ea31078a99b01127e20cce780766ce30396be5832bf042a756048fb7257404741fa3d9aaf40be377ddc107ff507c8bd43cea4f317720e070dca28d439d8c2c32658f8c5ec8f5d8b95108ab4a2ac76295403b60bff0f48f21ef10f23d17db8a1174bcc3821dbde83f027048c70d6858b727f34cd9b274ad590453e639d1c4367ca335551e695f91168b288b857f41bf8b555d7865c3e069e33e26d435a0eeff1865aee65d85de443043dab6842e7406d92f57245c7af2a4d5a0438ccbb658517236c3a1e7963f1dd0e6191193571fd822ad46d6376a885c5ef7feab0beae7d6befd1a79bfa03bd52bfcbda04bd4c8a387f0aafcc5801dbe06f56412bfd24e8bb5eda51a446b217adf0980f7c7849ba9da1cb057b43528de52f4e056d1fdbd9abf2d9e310b6dafd858e4cdb45eb3393ec777b37e0bba1e5e09297f18b8ed4d145f1bfe2be912fb11fdbe61c19246c997d6fbf41a6d1f7c2938e366a0f8abf8b7287c529588ed0ede30ec69020dcf2f3525cccdcfd76775b6283722c11cf93a44f91c1019bf91a41858bbb07c3d691fe36d1ebfcf2d3a2c6fe505c7ca95298b4e172b2b489222de619dff20da0e500e6fb5ec8490ffc36b04e9588ad634e61bcd5ec6d6018933ea6bc3ea9d6d7335eee4d136fbf52ee9c402d307ab3b8ebc1e8541f8ee92672e6f06e62d0e10e25453e3e5977c8899735c35dee5372e80eed3bbfdba81b629fe8636669aee5967cb17ddc55abbc27c67fa1355f6f3858690d62d94fdaa2d648ba8445148326add7cfba2127c2de8b5b4db418fadafa6bf1d40571cf073cca57c0e8d21bf2cc3b527bdf9677d4aa037047ded2070c7919ac54d228207f38ea42d30a40b45a1deb85f7a38f08451e5c1793fb624456c202771c39354d99678c3e34afd93f93f221189751e81d36b5180e07214e4fb38f419c9954248ec9b1e881302e5c0eda101e55c9c209e428bdb3996a1f040bee15df1d9ea1fe472b016aeadbbaa07599141d39d4ed2f54213afb40de1436027d0c73f476c5b98169c1a6e8e7aea8dfb8320aad06b99eaaf615466578842351cf133c1d1537c59848dca0e77c79c79b99bcb4cf4e5aceb44eeee211ca35be6ba17ba0fc02c9a0488fc9358bb85db097f0886eca678f8dadbc3e187fce7f73c4fe33e45c543ba9f2cf5ed88f18a073e3d4dfb7b77b0c847c7fd494cb33a158295c1dca5f3b373d71c878f1b688f5cf6b1789f26366f273f326fb7b3ccfb83a8eb9c83dc75fa39568ec56d536141989af1f9cad350b09b0b18579222e23154170301f80f5eadc42a700f44648c027fd356ccdb4ae3516c4e4cf7083e043c4bc9279ea9bdee13b49ce0e804c84864d2dcb9b0ef2d111f1feca242877e2463d3d13a2aae3b1dd247ff056bc331582639ff20941e304f2ad97a47d5c9448afe6fe045c6285a361e72b505e8037734c9264155f70f93c0411968ee257d8d797ca0f5049fc0a158c24473b14678120b88774674179aefeeb50dd1008e2b8d2cbe58d2a4aa9732fb3bbaf1b97e3b0ff6f3de144a60d592a9b939521ba58f50e53768ec655bceda4f33ae82c97e1747d2f9a0a070ff39a7bdd188ce92df03f7058be543ea470f300c63f414e96fc4435c114cdbdb4679f0c8180cb574778b222eb2c1364aa8a8d813b7cd8b8ed4fd1e316f631333d6c72fcd58153165204648d26922f0aae867908805e37431cbab256eb837817b06570938170448fed6a97e07fe991848d9d860e0a463e9832b067ac911f7dd105c3c37b02c641b5a66fca3b37d0b352824bdd7c59173c605666ddc5770bf5d9147ab84e656bcc540e1219a193509d532b3e8d98de0258c18f4d42b4913840a8646635df03bb79687610a76034ef89f174b46d25c4a4d146d2aecaa08073c5465d54567ae95166a530de482983928eb158e22b6f61602bddfd5b4071881b1127820a8c3cffc1ee361a7af33eb3ee05ab82aff09c447e601cb3637bf8ce085545c6123b5a9053edfe8cae7b13b534d9cbf199c3f4472b739ab62008cac35f0fe8446142088dbff9578c811b05846e208d5107ccae3312f21c8f43baed82f6fd4794a1eae0fbf4515d3f97f6820f251232dfed2ccf3616d831e5c2a1acf90999b1203ad39117baf7c31254de8ac1d390aef186b9ad58456d42a9ecb88a633506202036f913931dfb0cd1d9472189339e6fc4b0589989af39dad55b979fefc11c38621d0f9f89ddcd7cea072f88f2cf4ce2534718130382accf25aa2529c3d3e1933257b95fd35c494fa366f77a877e7721a8e2f8b86214a2c525675294bbe8a8ee21521f2f80f7ee0d34d633d73c976b5a248d20186047fc039d9c9bacc62856472530aedbec218e68fe6b3546de5b329fee3a42ee163f6f85e13caeea5097787fd94bc35f87dc4c2ef3ab2e5b41512565a43106354375ec913900ff4b9f8e752f81eb82a9c6c0fb1f0ccfb412abd734a1b787a2b01f3d43e75984cdb797dce3c7997ffaad50026e20aa97e48cd90d6e433baebb0e0ef072e413e337f581f306ce1a63838e2fac5cc0460e7adf1c9240b4a7993f7971cb6117c6832f32a4014b4ed43543d909ce3e26456d3c17898145a9d6e82c1ae5c775ff2c51b3c1a86fa152a616c21bd94537523fefe65dfa772664de10d412760fbc9fb6802c6e857c588c9c60305d232e69b1d83e09e5e5593bd42cafeafe32d9b87e5b768ac5107c40cfc1596c23d4d9b0731345fcd09b4f19cafb9256737fbe686016c90cb5baa3a18ff444b52b407ce5a0632a66317ddf48d06204bb25bfb2b9498a331db7775379a870316d06f632ac070b2d3eb239a43af7de7187c72726dcae8388c8831b001cfbb4f2e232040d3bcf96d59783ec70a7d4605d7341d9c49c2440b262a7ece9f5b2a57eb649ce0848ff662ee8bc63a18057d5e612b6a121c8ec0401fcfcd51ad9d45691793b6ec328a1afbd053e57b7342a3c000479f0e2ff23e8e6193521223266e4a97944d5dc8b87540bdc7594391d92d85fc41b604787e13ef77a49920098469ad823672f721c8e78fda1b6a223eb1c3df4f9b90c5c093f0d6fdef8a601929df13c4e73dc0055a2858aff7c945c5f9317d96d70a580a9d51d396ec0a37de34c22b5f129cfc90d0bc70d43933432c54a71ecfc1740e3410b08b5bf211925cd6a2281333b1caec0ee20bd0b594ee2ae9d36904ace4df33549a3a6d905da8feb5f288d4c74e9b68edb1ab9cfa6df4da00b36f7e1f87273921d0c45bfe71a65f0802024bcfa1e25f290d06f0ea4f9124f9ae4abb3fabeba9981ff6679884bd9d002435890d8769d41d5bcb914a7d40abc915cf8419978b1ab82257c759d1b3a7ecdaa36ae557b5e02a9bbcd73f3438f656e149fb8883548c19e6b8c005d689a0738f65beef4c7bd08ceefb8d797dbd3b53fe0da5294329189e211a83046b8ed71bf5180ce02884b834eac4986677aecab68851e56343b510082f3394ba8eb36ae05aadaf547b5ddd2e9c503976938cae1c25df6c768398c68c48cf47cc80f8dbe61aaa14a2046aa94194a119ba47b55f9fa1a0d806614d52c1c65aa821cd58fb170f7a3b41ea8fe66498fa0777555f459e7f17e00cc325217a5a4276f894a81dc954feb2221755814f64772763cc763365285db497cadd86f7dc3ed2685f772bbbfcb52b2aa2c6ac1a5af3e18b22c85d1af73ca20b7fe534cc55d843c2fa8f10671843e2b45a7b4804257bc00610dc20fdf2b1d7887191883425c1e755fdc38420aeccbe887907d4728cc544964ffe9f2dd1f08128f158faa0ccfebb5acb2b5a70cd05a15c0575b32389f17e788fdec18aec056fabee4886e6c35c67fa789ac528f12ff622b11c7d9548ecfafdfe109c887656ff5558f3cbe11e13f4d2a6ad0117c9a805ef7da551ae1c22eaa1eecfbaafb56a35b577c50e9a189280a41a60df2eb3668805c666a77b2a6652617783522c94a64135a9e52d38483fd611af238417c9ce3a7d095405ddfb3e8baa4bb0fcb4e824c036304b7631cac0694906295ce59d4b917662a6ec78f3acf467567a510f14f1520009d62b4654c8943f34218e5f93dc03f096e8d2e667e2d2a1b7c49fc3c6865379db93ad18d8717a41ac7fd433004e71797ad0ca853b16bc26f712bd226b69fc5a74229ff468e46dc943dcfec3636afe0892d576566c5e4938ab66e46030411f48d7103dd57b514b402c27bb9c2e46eab761de7322a3aa8b9c237ef1a672fcb889773d26544e18e2d187ae942bfe35363bc13970baecab8d628fd1f10f256ec15918863372c8af274620b5dbafb7c24a6e3a2009e95ea1090842d517678098d9cbcae67ed6bebf20d124e273bcda33facc937713b99881a679ae5d3fa9e72644ce05cfe04ead32fb1ca317a7075efcc6c4a0d99d1ad2e47ab10e65c8fe866551f2c3b568a2c3abdeb1c04191507950333c9fe04ab4306c3fe98e89c00d7773d8d715b8533d28eedb6749c59de4b288b87acf5ce301800fe546b7efd50c80b4d63c46f1d896c41d7f1bae22cea9e79684af21203ceae85a7f8091a0e7f5f005666dfdc791cc3ea01133b7bbce0ca422f579b41f2453514b576c2c5d25be5df5cf6c58ea1298e49b00895fa7afa073218521815bbfb32992af32c016dc761c7f5e3794cbda4da997f6489dda42be04c6bac6decba9cd744717b724f240b7a5276e38b6c116dd35b69", 0x1000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000002c0)={0x1, 0x1, &(0x7f0000000100)=""/129, &(0x7f00000001c0)=""/219, &(0x7f0000000080), 0xd000}) 13:46:00 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000100)=0x1, 0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000140)={0x3, r2}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x8, 0x4, 0x4}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 265.087487] block nbd2: shutting down sockets 13:46:00 executing program 2: socket(0x11, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$NBD_SET_SOCK(r0, 0xab00, r2) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000000)={0x3, 0x2}) [ 265.246702] block nbd3: shutting down sockets [ 265.302188] block nbd3: Receive control failed (result -22) [ 265.309205] block nbd3: shutting down sockets 13:46:00 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x18, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000004}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xe0, r3, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5a4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x8840}, 0x4004000) r4 = syz_open_dev$ndb(0x0, 0x0, 0x204001) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r4, 0xab03) ioctl$NBD_DO_IT(r4, 0xab03) [ 265.415318] block nbd3: shutting down sockets [ 265.462207] block nbd3: shutting down sockets 13:46:01 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x27c}, 0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 265.579477] block nbd3: Receive control failed (result -22) 13:46:01 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x8) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x2, 0x4) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r3, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000080)=0x7) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:01 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x8000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:01 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000100)={0x0, 0x1, 'client1\x00', 0x2, "111603defe5da86f", "bf832ecbc856051a889323df24b39fbaaa9d804b9659896dd1cebd2ad8003d36", 0x0, 0x2}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) [ 265.716792] audit: type=1804 audit(1572702361.272:236): pid=15824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/480/bus" dev="sda1" ino=16849 res=1 13:46:01 executing program 0: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080), 0x10) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000100)=""/231) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11, 0x50, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 13:46:01 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000380)='/proc/capi/capi20ncci\x00', 0x57955512697ebedd, 0x0) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0}, 0x10001}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x561da3eac4f025a, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x400000, 0x0) r6 = creat(&(0x7f0000000540)='./file0/../file0\x00', 0x3112db6baec8f394) fallocate(r6, 0x0, 0x0, 0x8e18) r7 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f00000000c0)=0x80, 0x80000) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') r9 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="f4000000", @ANYRES16=r8, @ANYBLOB="000128bd7000fcdbdf25020000002400070008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0c00040004000000000000000c00020001000100000000002c00070008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="0c00040002000000000000000c00060000000000000000000c00060005000000000000000c00060000000000000000003c00070008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="8201ac7de0b9cb0000000000000000", @ANYRES32=r7, @ANYBLOB="0c0002000080000000000000"], 0xf4}}, 0x20000000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r10, 0x407, 0x0) write(r10, &(0x7f0000000340), 0x41395527) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8024000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[]}, 0x1, 0x0, 0x0, 0x20000004}, 0xe3fdd7a4386f4149) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x890c, &(0x7f00000001c0)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={'rose', 0x0}, 0x2, 'syz0\x00', @null, 0xb615c100, 0x5, [@null, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:46:01 executing program 2: socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xffffffffffffffff, 0x8000) recvmmsg(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/51, 0x33}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000000200)=""/251, 0xfb}, {&(0x7f0000000300)=""/156, 0x9c}, {&(0x7f0000003600)=""/63, 0x3f}], 0x5, &(0x7f0000000440)=""/183, 0xb7}, 0x2276}, {{&(0x7f0000000500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000580)=""/107, 0x6b}, {&(0x7f0000000600)=""/96, 0x60}, {&(0x7f0000000680)=""/158, 0x9e}, {&(0x7f0000000740)=""/52, 0x34}, {&(0x7f0000000780)=""/126, 0x7e}], 0x5, &(0x7f0000000880)=""/3, 0xfddd}, 0x3ff}, {{&(0x7f00000008c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/217, 0xd9}, {&(0x7f0000000a40)=""/188, 0xbc}, {&(0x7f0000000b00)=""/158, 0x9e}, {&(0x7f0000004700)=""/39, 0x27}, {&(0x7f0000000c00)=""/115, 0x73}, {&(0x7f0000000c80)=""/141, 0x8d}], 0x6, &(0x7f0000000dc0)=""/21, 0x15}, 0x800}, {{&(0x7f0000000e00)=@ax25={{0x3, @null}, [@bcast, @rose, @rose, @netrom, @rose, @default, @null, @netrom]}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000e80)=""/143, 0x8f}, {&(0x7f0000000f40)=""/190, 0xbe}, {&(0x7f0000001000)=""/4096, 0x1000}, {&(0x7f0000002000)=""/233, 0xe9}, {&(0x7f0000002100)=""/131, 0x83}, {&(0x7f00000021c0)=""/109, 0x6d}], 0x6, &(0x7f0000005d40)=""/4108, 0x1000}, 0x8}, {{0x0, 0x0, &(0x7f0000003440)=[{&(0x7f00000032c0)=""/197, 0xc5}, {&(0x7f00000033c0)=""/82, 0x52}], 0x2, &(0x7f0000003480)=""/218, 0xda}, 0x2}, {{&(0x7f0000003580)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000003600), 0x0, &(0x7f0000003640)=""/34, 0x22}, 0x3}, {{&(0x7f0000003680)=@hci, 0x80, &(0x7f00000059c0)=[{&(0x7f0000003700)=""/4096, 0x1000}, {&(0x7f0000004700)}, {&(0x7f0000004740)=""/200, 0xc8}, {&(0x7f0000004840)=""/123, 0x7b}, {&(0x7f00000048c0)=""/199, 0xc7}, {&(0x7f00000049c0)=""/4096, 0x1000}], 0x6, &(0x7f0000005a40)=""/235, 0xeb}, 0x401}], 0x7, 0x1, &(0x7f0000005d00)={0x0, 0x989680}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) ioctl$NBD_DO_IT(r0, 0xab03) 13:46:01 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000180)={{0x20, 0x2}, 'port0\x00', 0x2b883fc78bba1c9b, 0x410, 0x40, 0x3, 0x3f, 0x40, 0xca, 0x0, 0x0, 0x4596}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240)='/dbk\x00\x00\x00\t\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x905500, 0x8) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000c55000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000280)="66b9040b000066b80000000066ba008000000f30baf80c66b8b727bd8c66efbafc0cecba200066b80080000066ef66b98008000066b80000000066ba008000000f30360f3066b90c02000066b80028000066ba000000000f3066b8285f00000f23c00f21f86635000000000f23f80f38cd6700260f01cbba610066b80e00000066ef", 0x82}], 0x1, 0x20, &(0x7f0000000380)=[@flags={0x3, 0x112101}, @cr4={0x1, 0x4}], 0x2) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 13:46:01 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$KDSETLED(r3, 0x4b32, 0x101) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000000)="54e358c2bd29f2446965c745d35153c71199d951a4ba1dbe4cad5de792f7c28e967bcb80810f3aa46635d9cc31e93c") ioctl$NBD_DO_IT(r2, 0xab03) [ 266.193663] block nbd2: Receive control failed (result -22) [ 266.324012] block nbd3: shutting down sockets 13:46:01 executing program 3: r0 = socket(0xa, 0x1, 0x51) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="34010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x134}, 0x1, 0x0, 0x0, 0x40054}, 0x4048080) 13:46:02 executing program 5: timer_create(0x3, &(0x7f0000000080)={0x0, 0x28, 0x4, @thr={&(0x7f0000000000)="62f5606061f2f735d14c88d50ad9da291369ec19cbbde963d41321b5fa252f4e3fc641949934f505fac63d44b6dfa7ea44e396decd4212dda1bd4089861f6645dd", &(0x7f0000000280)="1a5327d2c5bb4dab1f344362188886af62db279c7ba6bda3b054f529873dfb72fec5a4c797d2a026460c43487d268bdd7058efc2045d434a61a334993e1496068f188d0a0d19b51f34c4018353b211509ab55aa317965e5ed509d1299aa0c60e2d85ad1e29b42e8b6f34d83de80f34496681efed7b461e604406ed79b5ed26e2432d4e3a382480cc0d5fb3aa5f690c77cf968d2bb5ded421edf68e9f1b4a8a2a1ca1de52133df61fda630ebad8b55e9b3385cf208c77b7710f3e4a3c9f24eb861269a02e0b39c67dd55b6c0fd8029afa7236b46503880b97e80785a0e257dd45524a"}}, &(0x7f0000000140)=0x0) timer_delete(r0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2008001) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r1, 0x0) 13:46:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x800, 0x10) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x1, 0x0) accept(r1, &(0x7f0000000200)=@vsock, &(0x7f0000000280)=0x80) ioctl$FICLONE(r2, 0x40049409, r0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r2) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 13:46:02 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) r2 = getpgid(r1) sched_setattr(r2, &(0x7f0000000000)={0x30, 0x0, 0x1, 0x80, 0x100, 0x8ef, 0x0, 0x8000}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r3, 0x2008001) dup3(r4, r3, 0x0) fcntl$setstatus(r3, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r5, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000), 0x200a00}]) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$negate(0xd, r6, 0x8000, 0xfffffffffffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) finit_module(r1, &(0x7f0000000240)='\'eth0/\x00', 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x0) connect$rose(0xffffffffffffffff, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, 0x1, @bcast}, 0x1c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x6, 0x4, 0x7}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f00000001c0)={0x990, 0xeb88, 0x2, 0x8}) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x85003ff) fallocate(r4, 0x3, 0x7906, 0x8000) lseek(r3, 0x0, 0x4) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r5, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) timerfd_create(0x4, 0x80000) keyctl$reject(0x13, r0, 0x10000, 0x4, r0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r6, 0xc0305616, &(0x7f00000001c0)={0x0, {0x8, 0x5}}) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:46:02 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = dup3(r2, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000080)={0x0, {0x80000, 0x1}}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_getrule={0x20, 0x22, 0x800, 0x70bd2b, 0x25dfdbfd, {0x2, 0x14, 0x10, 0x7, 0xc1, 0x0, 0x0, 0x0, 0x2}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10801) fcntl$setstatus(r1, 0x4, 0x44000) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000140)={{0x0, 0xff}, 0x0, 0xffffff29, 0x101, {0x80, 0x2}, 0x2, 0xfffffff8}) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="a81966c37e18a41a0163250d3355c62b21b5298905878ad4c2de4194b1cf86c6bb862818ebfb9241b526d1833609cf6071a3b871df6c645476179b7f591db5f57fa403580047d3ae9dee5668382faa1fdc8c74bb599ae97ca0fc3521d71d880ade78727db718135a72b154c0b0ca29ca88fb157041ae02bd717d05e379f19b", 0x7f}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) mmap(&(0x7f0000d05000/0x1000)=nil, 0x1000, 0x1000017, 0x10, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 266.979482] block nbd2: shutting down sockets 13:46:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000, 0x40010, r1, 0xffffc000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:02 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) write$binfmt_script(r4, &(0x7f0000000000)={'#! ', './file0', [{}, {}, {}, {0x20, '/dev/nbd#\x00'}, {}, {0x20, '\\\x90GPL:>$'}, {0x20, 'posix_acl_access'}], 0xa, "2941a7a81e06e560a9f63122a3796d651f2f7dd67d37e9c255839c9f7e7eb0df9d7aeeb2f6057e2ae280ae8915ae1c0515f02078b89225b305afec8c059d1544aaf5e16e3ff8dc240fe3f9903d075abccfcdc49a175552bcc48954ac04c8803ee0b77f42ad2ab4a862cdc727da7e"}, 0xa2) ioctl$TIOCSTI(r3, 0x5412, 0x7620000000000000) ioctl$NBD_DO_IT(r2, 0xab03) [ 267.085567] block nbd2: Receive control failed (result -22) 13:46:02 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x1, 0x2}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r4, 0xde, "943cc3d8d9bd89f14c96791b51d5c2abeb3a8f75b9aa6828f7dfe5813d55cc3325022fca332b8c5147cdfd140625cc4c07ad727be6a79603ef7af3ceee910082fad3347b1b4cc00c4102f4c825aa300d1fd850a95e12c583351c97c37e19403d714ee8eb5d88dbf29057f2cccc9472fbb31522414f3ff8541d0af5d22a74d7af3da6f6326e19b18d327975ab3af024ac0ad0a48712a02b01fef2119702414d2cb39c37a166c4fa5d0b8218d90bfd9b029e2daa4e7db02ba6975df8d39e458a62bdde3ef8460ce97518a2355d44dc7d651e02d646ff8f3921e2aab3053c14"}, &(0x7f0000000100)=0xe6) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x3, 0x9f9, 0x7, 0x9}, 0x10) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) ftruncate(r1, 0x9) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)={&(0x7f0000000080)='./file0\x00', r2}, 0x10) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000880)={r6}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r6, 0x7ff, 0x81, 0x7}, 0x10) 13:46:02 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000b3b000/0x1000)=nil, 0x1000, 0x2000013, 0x21130, r1, 0x1b9a000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x10000, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000140)={0xc, {0x80000000, 0x1, 0x7, 0xffffffff}, {0x6295, 0x7, 0x5, 0xffffffff}, {0x6, 0x6a48b2b4}}) timerfd_gettime(r1, &(0x7f0000000080)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:02 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/fuse\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)="4f35768634a76e3a83ffffffff7f18f154ec46e007754618888da32e1cacba095021000000000000", 0x28) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) ioctl$FS_IOC_RESVSP(r4, 0x40305828, 0xffffffffffffffff) r5 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x508, 0x200) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000580)=ANY=[@ANYBLOB="01000000ca2fd0f4aa2fe15b860400000046eec88c32ac766c43", @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000880)={r8}, &(0x7f00000008c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYBLOB="0200f300a6b3b95bdb34b1fb0eaa55c19f20181afb0445d7058e60f3039def1858122d0dab1d12e1095adee61bedc9e47342f6217ebff60687d3aa29d4b3d024a046ab8ebe50fc5493360f3f8c900e7dd4267017db02c2ef06d3f5ed59e9b50957951b112f671f3aaa2f5df8275b5b0d749d2f66aed807e955f718d9ba6beb377dda3772198507aed525edd8bab8da91dbf2529dd3fa96f7b9ad938bfcfe51b1ce4048607827b0af056694fdcc874bdb6b1380e46238a797ac3f3cbd4b4b214dfed2d72ef204d13f61fa1cdbc7dabd4313a792fe8d987e8703203039c5467c24f985864c42118510"], 0xfb) setsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000000100)="465f2bb7944183489066a3778bc3af37daebda857b6f1a6e49a69de861611e9fc77a9e079b731e5ff0a2aafadf2ce90d8dd3fbf607162facca7f9a915c1d037b1461ec2af08188ec30e8656795e844b0ab982316ce0ac564355d36d7326bdb7acfba7a1684245861f28f78fee526ba6beb2b0df3773e63c0a5b0b7c85e7d16a99d9e91269b0ccfb2252f77221c211c0fcad091ce76120b2733bebae0cde391a6b90d6975fa5e85ffa1a18e35701e8b", 0xaf) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r9, 0x84, 0x78, &(0x7f0000000380)=r8, 0x4) pipe(&(0x7f00000003c0)={0xffffffffffffffff}) r11 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r11) r12 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f0000000500)=ANY=[@ANYBLOB="0900ffdd8a8757f18a70e286f93883d39a818c3cf8f031507deff10e3c5c8bd9c01985d55ee0c9e223d46a89955f56319770b46d84a2685f595f8dc61020008a474abdd51be4be00"/82, @ANYRES32=0x0], &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000880)={r13}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000400)={r13, 0x6, 0x30}, &(0x7f0000000440)=0xc) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 267.260727] block nbd3: Receive control failed (result -22) 13:46:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000387000/0x1000)=nil, 0x1000, 0x4000012, 0x810, r0, 0x0) mlock(&(0x7f00007b3000/0x1000)=nil, 0x1000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:03 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000200)={'icmp6\x00'}, &(0x7f0000000240)=0x1e) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) preadv(r3, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000180)=""/65, 0x41}], 0x2, 0x1db5) 13:46:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x80000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000200)=0x2) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 267.884265] block nbd2: shutting down sockets 13:46:03 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x20) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:03 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000140), 0xffffffd4}], 0x1, 0x0) ioctl$KVM_SET_ONE_REG(r0, 0x4010aeac, &(0x7f0000000080)={0x9, 0x8}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x1ff, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 13:46:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000340)='vlan0\x00') r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r4 = syz_open_dev$video4linux(&(0x7f0000000440)='/dev/v4l-subdev#\x00', 0x1f, 0x280000) ioctl$VIDIOC_G_PRIORITY(r4, 0x80045643, 0x2) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) fcntl$setlease(r3, 0x400, 0x0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setxattr$trusted_overlay_origin(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.origin\x00', &(0x7f0000000400)='y\x00', 0x2, 0xa2a7526a2b0cc23f) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) sendmsg$NET_DM_CMD_START(r5, &(0x7f0000000280)={&(0x7f00000001c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4082) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:46:03 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000000)={r4}) [ 267.967559] kauditd_printk_skb: 4 callbacks suppressed [ 267.967568] audit: type=1804 audit(1572702363.522:241): pid=16003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/484/bus" dev="sda1" ino=17025 res=1 [ 268.006697] block nbd2: Receive control failed (result -22) [ 268.012993] block nbd3: shutting down sockets 13:46:03 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x4000) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) arch_prctl$ARCH_SET_CPUID(0x1012, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x180203, 0x0) write$P9_RWRITE(r3, &(0x7f0000000000)={0xffffffffffffff03, 0x77, 0x2, 0xfffffffd}, 0xb) 13:46:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r3 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0xffffffffffffffe0, 0x400081) dup(r3) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 268.016381] audit: type=1804 audit(1572702363.522:242): pid=16003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="ToMToU" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/484/bus" dev="sda1" ino=17025 res=1 13:46:03 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x8, 0x8, '9P2000.L'}, 0x15) r3 = open(&(0x7f0000000000)='./bus/file0\x00', 0x0, 0x1) ftruncate(r1, 0x2008001) dup3(r3, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) socket$packet(0x11, 0x2, 0x300) io_setup(0x40000000008, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0, 0x13e, 0x0, 0xffffffffffffffd3}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x1, 0x0) write$FUSE_INTERRUPT(r3, &(0x7f0000000200)={0x10, 0x0, 0x8}, 0x10) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 268.131913] block nbd3: Receive control failed (result -22) [ 268.156664] block nbd3: shutting down sockets 13:46:03 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) linkat(r1, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='./file0\x00', 0x400) r3 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0) pread64(r3, &(0x7f0000000100)=""/147, 0x93, 0x100000001) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r4, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 268.174524] audit: type=1400 audit(1572702363.732:243): avc: denied { map } for pid=15963 comm="syz-executor.0" path="socket:[62020]" dev="sockfs" ino=62020 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1 13:46:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0xc3754e6cb892cd04, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) r3 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x6, 0x2b8140) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x26c}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0xa, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x2c0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00ev/ashmem\x00', 0x220400, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 268.229517] block nbd3: Receive control failed (result -22) [ 268.249556] block nbd3: shutting down sockets 13:46:03 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000100)=0x7, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) sendmsg$nl_netfilter(r3, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x2090, 0x2, 0x1, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0xa}, [@nested={0x70, 0x5c, [@generic="a9f857c246db85fe7190f39a0cd8cf3f0984cfe5dee0e34f8d976e6dea6ad1310216cbdec3a02aef902e6f91ece7dff07578b4abadef3b8848db45beec9f157af8713014cde57caed05a89b7bebf95ec9a342a", @typed={0x8, 0x26, @str='\x00'}, @typed={0x8, 0x12, @ipv4=@loopback}, @typed={0x8, 0x77, @uid=r6}]}, @generic="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", @typed={0xc, 0x23, @u64=0x6}, @generic="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"]}, 0x2090}, 0x1, 0x0, 0x0, 0x20000080}, 0x814) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 268.391359] protocol 88fb is buggy, dev hsr_slave_0 [ 268.396858] protocol 88fb is buggy, dev hsr_slave_1 [ 268.550895] protocol 88fb is buggy, dev hsr_slave_0 [ 268.556520] protocol 88fb is buggy, dev hsr_slave_1 13:46:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) time(&(0x7f0000000080)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 268.759756] block nbd2: shutting down sockets [ 268.801577] block nbd2: shutting down sockets 13:46:04 executing program 2: socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r0 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x80000000) ioctl$NBD_CLEAR_SOCK(r0, 0xab03) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) fsetxattr$security_selinux(r2, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x24, 0x3) ioctl$NBD_DO_IT(r0, 0xab03) 13:46:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) timerfd_gettime(r1, &(0x7f0000000080)) r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@ll, &(0x7f0000000180)=0x80, 0x40000) getsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) [ 268.870106] protocol 88fb is buggy, dev hsr_slave_0 [ 268.875302] protocol 88fb is buggy, dev hsr_slave_1 13:46:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x11, 0x40010, r1, 0xcb252000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000015, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:04 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) signalfd(r4, &(0x7f0000000080)={0x2}, 0x8) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:04 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:04 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x10000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x128, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x2, {0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7eec9797}, r3}}, 0x38) r4 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r5 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r5, 0xab03) ioctl$NBD_DO_IT(r5, 0xab03) 13:46:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000340)={0x0, 0x2, "888ba5ba6ce67ec8bccdc3bd86b8cfae3013aeb2dc1df80693e2d9cb4034d2097d728c6af91a8c27119bbcf118c027efebfaf56dec58fcb1e54138eb9cdc70517bc1fd246d2e4c5a8d1d120f3484b57ed32b95ad49deaef65f763c21937c2e106a7c78c8ebfd1ab9f90dafe0a24f3075fc8cf4f28e68975c7ddde5ec67b872e02ab435d022ac6a4e095a8182096c91ad0c049700f6a5c0d33895f534bb2d5ecd2b115a30f053e502d60eb132979bdc9985edfe5325e2fd1059506bf8607ac104e9e685149a3f0faeecfb23794647401fdfd3d201ccd760f1740f68333e3221d1507ebd48497b3477140df11496ed4eab26880c89af8bb451be8874e3d448c24e"}) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) r5 = dup3(r1, r4, 0x80000) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f00000001c0)={0xc223, 0x3}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000001c0)={@empty, @remote}, 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:04 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000340)={0x13, 0x10, 0xfa00, {&(0x7f0000000100), r2, 0x2}}, 0x18) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@assoc_value, &(0x7f0000000240)=0x8) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f00000001c0)=0x80000001) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x2000000, 0x810, r3, 0x31230000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 269.207958] audit: type=1804 audit(1572702364.762:244): pid=16096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/486/bus" dev="sda1" ino=17045 res=1 [ 269.301410] block nbd3: Receive control failed (result -22) 13:46:05 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)) r2 = syz_open_dev$ndb(0x0, 0x0, 0x52601) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x449, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10286}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000480)='user\x00mQ\xc0\xfaH\xb4qgcp\xd7\xeco\xd3\x1dam\bz\xbe\xb3\xb6\x8e\xb1', &(0x7f00000004c0)={'syz'}, &(0x7f0000000100)='-vmnet1security{posix_acl_access-vboxnet1[)}\\\x00', 0xfffffffffffffffd) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x0, 0x0) r2 = getpid() sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000440)=r2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r4 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) io_setup(0x6, &(0x7f00000001c0)=0x0) io_submit(r6, 0x2, &(0x7f0000000400)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0xf453, r5, &(0x7f0000000200)="28f8d22336ab91b6084569a8a4a22de63134fc471015305ebd36a4c4a5f240d080", 0x21, 0x3ff, 0x0, 0x0, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, &(0x7f0000000340)="89e940eda3ccb0bc743b124230f50019310bbaa09806b2a5e0adfbb837ec12f1fe6cf90e4c79cb773d49b637602375acf3d09be4e8e96d509903ee314ebe8bfd08a06697113b801cd8c3c3f9cf93d41fdac2776678f0e6a20a37356a78f675bd786831637ec75d97b9e82a85645d09f54b887b5f835eef0e7a8ad80ff1704d7609017aa2bcaf82f433e7c9c4b880b7848e37a62b3c5f03c33c9acb7d10ac28eb93", 0xa1, 0x0, 0x0, 0x2}]) ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="4efe3769ec4929f0da6e9c4865f48ed71321891998bd1fe4c4a3dc273ab1774a50b08a2e4e9ba884a36aed324376fd1a4945bbc1b68ef3ca5d301f795e0503f0a7280f4ea8c9a4b36bece9ab044f3316d12b7791675340acf4d446d773f3c02f", 0x60}, {&(0x7f0000000500)="bad539a36fdd88d7d9b7894cc3bbae29324b7ad9de6600b2b1adae5df30e5a970432cb0b2dd290ecd80bbee2", 0x2c}, {&(0x7f0000000540)="76f3a33499525be38e917d399fbc108c2cc257e2bada40a5dc8bad8b96b164d4b3992b2845a4b68408c90605058aa5e5b0e63999", 0x34}, {&(0x7f0000000580)="1162df9d6b24304fa747ac764fbe75bd8eee8f210b7024cef1dee56428b6f8626914e1a1c335bdac092816383551c47951f40e81e33c2ea2ffa28ea77339c77634", 0x41}], 0x4, &(0x7f0000000680)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffffffff9420}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff9}}], 0x48}}, {{&(0x7f0000000700)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @default, @null]}, 0xfffffffffffffe96, &(0x7f00000009c0)=[{&(0x7f0000000780)="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", 0xfe}, {&(0x7f0000000880)="811743dd592abb149d455dd4349dd7028aa229625ad0e0df7d60bbe7f0ad23b77cf317301c6ad8da8b6cfdb2f8cf2ab3ee6547daf3caae2f60", 0x39}, {&(0x7f00000008c0)="77010092c796ea605cedf1a6e0d179fef0152437301154c4a0c5a502d35baa7b19e401c848e027b25256be53f7c617a5e0d96eae712767e4b9161316bd07eddabc5be9dd16545957622a86d577b23c8c4dcd7cb2f50d6570b5e498a509714e076d2d2991eec596e40da891a8e8e8e6aab78fb5c00d721c52d96cfe5e42ffd9ed6b4ac30ee3d40cb73e1700b12e56a8487335b8e1af0c48207fb386115625a04833a6c7d1007b5c3f3ff641b6ea036bd9da643f8af3bc4ae361cfa0ce90019df46cf5cdf6620394e1d7fe", 0xca}], 0x3, &(0x7f0000000a00)=[@txtime={{0x18, 0x1, 0x3d, 0x10001}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @mark={{0x14, 0x1, 0x24, 0x18}}], 0x48}}], 0x2, 0x440c1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r5, r3) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r4, &(0x7f00000017c0), 0x199, 0x0) 13:46:05 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0xd374b}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c5b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = shmget(0x3, 0x1000, 0x1000, &(0x7f0000701000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f00000001c0)=@v2={0x2, @aes256, 0x2, [], "9a8a45093ba666abdece8f4cbd72e860"}) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000200)=0x6, &(0x7f0000000240)=0x4) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 269.807717] block nbd2: shutting down sockets [ 269.815577] audit: type=1804 audit(1572702365.372:245): pid=16129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/487/bus" dev="sda1" ino=17170 res=1 [ 269.895469] block nbd2: shutting down sockets 13:46:05 executing program 0: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x4081, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000100)={0x7, 0x33, 0x2}, 0x7) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000640)={{0x3, 0x1, 0x80, 0xfffffff8, '\x00', 0x80000000}, 0x0, [0x3f, 0x6, 0x4, 0x6, 0x4, 0x8001, 0x8, 0x8001, 0x101, 0x9, 0x400, 0x2, 0x6, 0x4, 0x10001, 0x10001, 0x80, 0x6, 0x13aee283, 0x8, 0x5, 0x81, 0x3, 0xdef1, 0xdf, 0x5, 0x9, 0x9, 0x4a9, 0x6, 0x7, 0x10000, 0x40, 0x41, 0x80000001, 0x40, 0x87, 0xfff, 0x7f, 0xf2, 0x1, 0x1, 0x3, 0x6, 0x0, 0x4, 0x7, 0x3, 0x2, 0x1, 0x8, 0x5, 0x3, 0x80000000, 0xd5, 0xffffffff, 0x6, 0x4, 0xfffffffffffffffe, 0x4, 0x3d5, 0x6, 0x5, 0x5, 0x2, 0x80, 0x6, 0x7, 0x0, 0x3, 0x0, 0x9, 0x101, 0x1, 0x1, 0x1, 0x8, 0x101, 0x2000000000000, 0x1ff, 0x8000, 0x8de, 0x7fff, 0xffffffff, 0x0, 0x52, 0x2, 0x4, 0x2, 0x76f, 0x9, 0x4, 0x7, 0xda, 0x6, 0x80000001, 0x6, 0x80, 0x9, 0x1, 0xc50, 0x7f, 0x8, 0x20, 0x2, 0x9, 0x7, 0x2, 0x100000001, 0x8, 0x800, 0x1, 0x514b, 0x6, 0x4800000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x3aed, 0x3, 0x7e, 0x0, 0x1ff, 0x40], {0x0, 0x1c9c380}}) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:05 executing program 2: r0 = socket(0x4, 0x0, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) [ 269.990740] block nbd3: shutting down sockets 13:46:05 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0xc0c00) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:05 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) r6 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r6, 0x3b64) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) r8 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r8, 0x3b64) r9 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r9, 0x3b64) dup3(r9, r2, 0x40000) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r10, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xd0b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sendmmsg$sock(r1, &(0x7f0000001b40)=[{{&(0x7f0000000240)=@sco={0x1f, {0xb4, 0x8, 0x9, 0x5, 0x80, 0x4}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="57928e2a442e270f5cf4", 0xa}], 0x1}}, {{&(0x7f00000003c0)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @default, @bcast, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000440)="d20cccd98a7ccdbf0b0f5e31212ae22b18fef70fafcebb3866dbd3c5c772f8919c222233410b8cffae354c3c668e1b4b46f10cc7792032f1ffcff9c65bb08f4482fefd2faa2ee8c00407a1c2e435fbd8da1e526b45", 0x55}, {&(0x7f00000004c0)="434cfb777f4d9dc6bb29b04ceac634f173c6a5bd7bd69b9724dde9e3db6badae879d93190e5e98b12cec52942784ecfa6dfa50dfd288c0c8f1a72f6e4c631de223dfb1f35c904b6b856851c7678fb00a35ee9be7b9e45bf34df0796e8657ba1d54a50ed26ae85d94ca61879b659427d2ceeac33d164a892597efa09bb45e978892aae5a1f990443bd82680dbbbce493dfe53e259888fe7380d9ecc340cdfaace3b2a4d925e879cbd616a6830cbb76f8469fde0d9e2e08e12f6793bbfdb9d72c310d4d02e98dd472c6589ed30626dcae2aac7b296e06fb180f342d69bd27e1c0009597cba1464c319a7348d84a7b547fb", 0xf0}, {&(0x7f0000000640)="667d1777e4ec6d75db6ded67617391b2c2e54717ea96eed4bffe2c8e68a94048c4c41cf2f48e85b70dcc9bfbc3f0ff1ffbc52180116f35fece0d6a726bb6cf1dd271c9ca65937625f870c76c2b829b0f11a0a9da6c125a6a37a34df9634aa73b1b49264f5e33a8d6137c7c28b7b47d9ef47e0df6d999764e0ff28ae75fd22319628a469d2695f3a4d4a5406a5e42cad0fb8227b8275e13cb9d356f407d75b99f71961a236bfe441ba2eb7b5b51075118341aa51a3a6c53bda9d9e4fe269a7c8dca80a714874fdd21b9016333779bc74f70a2559c4ca6cd59bb6adb3288f086288cf689887bfc534b430360fc2ced015a40c0249dd8904f3676", 0xf9}], 0x3, &(0x7f0000000740)=[@timestamping={{0x14, 0x1, 0x25, 0x3fc00}}, @mark={{0x14, 0x1, 0x24, 0xffff0000}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x9f}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0x78}}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000840)="447c050f37bdad8e16b0b8f918599aa9f83d3b8589e06dc7037cfd78ef405c723aaf957883000d4c6390a5d02659877033235df4469c82b48a65c5af72b43d3cb0451ebb69e7ed0a88e4f5c1dab16e9c7e593b1acb19a51bb683592a7a9f386ffd663d28c022f8c912e887cc58913bd85993a9a28343efa9ce8d8118015252645c27acfc01e285a8d3500c83319c85913fa338d1197699682be5c14401940152cca94ef8b2de3bdfe8d678874e293502625f0465bb2b7b333c46690e190164c433d628211c3bc561a17d2f06124c9dfa7fcf5be2d0a85dab775c84435539a3427a94a539bdb46ea57569e54bb6e050315169b1457b", 0xf5}, {&(0x7f0000000940)="c32d77229dcbfebe4740005bb033f5d8b9d6be60f0589b0fbcf613e67fe83da0d0ed4b8a773559a40275f750e94dfa15fb9000a52e363b2dda3416138ffbe5fab9d96c13be8dbafb01e5e6433c5e8718a35f24c3dc011ce67cf80ae3d75bdb7b8f3ff1c25cd5745e9c9d55003c4b2b1550b5526794ed0aee3f1a39aef18a878c3f38e0f893c4bdbd7469a44a4b5eaf020439c52465fab69c0b9842f6225040b851a96489ff5a543a0fde97b7df0f5033df79f4b3cee8f4d376e50bd83f4f04d1d28dab1ec7b98777cc325a878d7353d94708e49e7e5a7eda7ed347be3c3fa6c4a6bd1f1b816d9ea54c97047688ebe2c9ff34065e2754603ebe085e26e1d13cbe829622e6afea58ecf9a1d9549b17bbc9311ce8e2fdd053ef456fccf7e539aff12b041ac1c0ec8489111737d40a1dc1cdf00763db5f7d85a0b7deaa10012d58fbc97b907270f68bc5053dd0f625fd45d7b200d9c54e6c002bcdc5b9d20cae8d70a6a0e2b27c41f66163820841a085e9f22c48380a1bf77f6c9cd722dfe1aa122f914e2e42a7f05f459ed493bcafffd7ea1ce50907521a35f0e0d25debe6ce123a67c9e938d9a33767e12a54acde105bc99d466a3e3a6df7d2944af962d1842a07b638a36e530758f13ab30ecbfb371817b9595a03af0391e10a76d4deca7c1d2167c820e6f1d0bedb012acf49a0c1e87a14b24051b707ffde4884691dec22530dafc07907f229a62ce70c0110041db02595fb1d7010e4ecba4bfe07957f164bf7109a2b02e4629587c56d91e933aa9a516e5b0b2c0e5de704586cfa077c68c9382a754bb91503bf00345d1867c46fd3cd64afc74752c128dd2eb7834c65486008052a2277904d2b476cce206a06018646476400d30b1850b35776688729dd26badf77d3af3f759c82e294280c2ddbbf0ec091f35c78e31d3a7ab4e823b894f991c489f8c8950c1637d6c71599496ee7b5998c8dc539f68ab35fec0d2b07b98bea088e09c714aecc9370e94a35aefd997bbd09a0385c5ef6970b7361005682c358509952edc86dc0064aafc0203c7a7e215b2ced86e1a76dca744421f29ae17a3923783c40ab0c410ebddf3b482c3c553287a47448f0e6fc1d12f3e5405f09ee82b24019e529975bb9eca5869408d2ef93fff538a95c633c135a0d2cce28d96e400e8e768c9aad03339c5ce282f25e32c86d30d3720d75427e099283fa39002e556487967631abad217e080b1e6320129125ed0d2047e33c70b739c505a3b6f3b24b6126c1bf90a162ca8e4a73a5eaab17c14353322dc51553618da4293a85d7898a5003645304a823784aab0d20fe6cac919d4e47349538e3fc8f992248d7de8d567b3f09072f57ed36682daeb1f0acb733419825bf931b686b93c82cdfc12c2ac9eb4b4828bba3956c9e3011ff2d6de03e5aa1a408fd5da1d8a79aa7ee4fb5e6eb4464c729180e4ef4c8f0ff02f5aa17808eb776aea3ded658b7420dcc56430c6b2b13c75048d737d020bee0777820a7dc0c43c9e8bb78662fc183511025f4575c1fdb297a1b3e3d3e2957cd90115483f34fdf2d94998b4bb8057acfa4466ce189e637c59bb4a12a8b0aa38717e925c35182f8a65a1e65f920869d8b34af17232c50f0f182dc6a02dd4922f8b03d07620d568e341fa794facfc496c6dc6e22d58c0cfd6836edc64ab179f468990d533c38529856267be1d7dbfb961056800671d7b315de9460dda4b11df9a023cf1d26f2574f4a2258e3ae649ef0568bd8aa8c2f06f1d89a5b15fdfc939ff5089fd0edbcbd48c42b45f61e4a55c1e8a6f9bf3169372236b11e343368ed41e415d5044f73780a9dbdb3cc6e3b02f4f7b98ee0b3a68956cb257a364ebfa3ecf10a66d100150b636f2546e0e3aa322015633bd171412efa0b36a8c1c216f0e1c0cb8f47508349a5bdd1e7e5b3815f1cf1ae0a4a77fc2f8f8b39d5a8492bf44ea60bf978f385fe2e27ac98d1b31d704a0290056bd8036a67213eb6d7529ea61aa55e2442161864fa4c54bef0c40f09174ad21f7e16f083e228e122db3057b14789250e3690065f7f0add786bcfdc34732d69c762b8c4cec8c901d39c5fdfe619fa3068122c5fe4d45dc2d0d095de77239c571781688818180edac3baad3dae12954137ef6ccf82391e9db0af768aa1bcd97bdf285a3ebf219bc8d4696e69f563e1e612a650cfb87e57ccea0230c3021089bbf4635bcab28211cd14a002d768b0a6e8654513f53eaf155f41e3a1e188d0ccb237909bec61548b2ac9dc4c82da432043d11c0fcbe2d30208944a996ab098cf0f81763294e810ced6e036d97c715f1fe75922cb06b4a63d2e18ab01006d011bfd4f06e31f98c57e7084cfa1d4dc51c27bb1ad48e5463450ddb71d071322f72bcb537b9e35f48e756793fc2eee66d6a75c26a27265d0b176c26d6d9336d181ebcf92f0c0763d251bbf7fa3f6da7fbc8b178f8ab43abc7523e867cdbde57c724eaa478b3e7d4fd556392dd2adde0070d3da5e7a8fbf164c38b66fbe8972d375ee03640d7c78ccea6f0c64fa60f07f0a55e6cf1c61acd6164717a9ab446a0005b962ed837d04e59612b7a98fb34dbca33358d81b56b31afda469b0c304a1c7bf3c7e93f27419e7164971743fe034817ed86c82244d5835257fd121e826a244c3e91a02038647ed1985203dc8b287ab94ada514d0e9aa9f86ce82a24f71db716918adc70dc8555c7fcbb864676ba4ed5e0b81cf501cef8208ebc550687ad3f4f1b5fe4d22ee77df526bf99e7a33f8f4e2c3bb12a3ffe8dbb1605c4c467e8d0b5885b2a69e9fa1f55beb4c6ab6988785788ce5478675bea565d2b49133c06724824c9082688d1fa2deb3dabfba6c630022d173ed5ea4a3789b291529f2e2b7f64b43f258746b13a23f2e5a91a0153bb95d9bfc3af413dcf8d7c8e87733d79464ad741c4987e02f75a0181bb4098b2b84fb36227519e261d84259e3873e6d2b7059fa4bda41a36ecc28d768245e00b3b35c00736effc1f65206b4fa20ebca81f15bfab794dd620d7ad1ed543a90511b0525a9fbc052d33ec544e56f236e8bb4973550a2096f9b9c2cb153e323a426d98c17517ef2da03070472df0d9c0649f475ba1142126b3c7d430d33b5a19dea54171534861a5dedd14ae15bff4338e4e490c4f244314438e7f9aa87409226c3f0ec2b3fdfd572a55348328904f86bb70689a076dcec2ba50e8424d5578332079cb9e7fefe3dcb4dd453f3bb6af8c7cd8e5a2bee24ef8c949832ed03bc1158e0498e9da76a95cad93bc519019bc724d6e7bca52c2decfa6b51021397488b6e0d5750efc403a6fec29ca4998880e871ef079dd3a57eaeb49731372f7b86b5351d6d9c443358c56a00babb04df4726add1d429a15f6580ea788ee1c21218f581dc4a8b4642c9d3f5893923c1e897007ffa5221be88977f3d56b8d5d7fc8ffed7bc4858cb8e29bd5f23b599d01b04a62846ed99c896e57067f4ea1e4ee3544c7c3bcb724d2694675fc472a2c3df549dc73f2e17002f378aa0a4daeacf0298c7f6bf90793e6a06151aefd86ec72c2a8f0402345905d806ec9ec702d313ebee6c6410a4659422462c081a27166fea26bffd06fc8e6fe54c202c422d26beec59e42bbfc2711de601c8ef746f4a924950038fe5eca113504e09356ccf96b1656c5260ac5c60498b74b362b811b6d4c7287c4cd632da9d80476c341d657a5873483a54d4ef2a6f4693dc52580fcd6144a57898ec13b9df378ccd317ea2fae95e70e73ce88a31c49e9a5a94c67066aaab8a4ccd1540f7ff638c51b425ffd93bdd9ca08baa7e4d57e0feb1619f2ffa2ebb83ce6b022da15217696a61ceefde71393f63a6dcf9499a3c04e4325e47f0d348043f16fe2c266c05bb71c96c3e4390171ae4efe34554c1fbef895dde691fd03e250653ab56c6c9e07476b0b61b89c1aa50cfb6de8e4cab83cbe1efa5cc74b22187f5b558855f76d735b169855e3449258bc4a9521d11c2f5ffa90efd8d0f81be3091c90f4f876362184601d66e19d1d3dc76c780d217e0f225c0ae88b40120b55ed8096635fcd625779f58713c358c2b4b5b83e88f19d99bbe12ba08705935c36b0f08e32f1b1994361f70ea8afcd01d56fd59e17bb1614acc57a66c43bbfc852595be24a5305df28b94c5e5c884fdf337f95a246630bc030a8a1450ca9861bcc60d8f924851f2d58eb24893d65e76b570b9ecd99e71d5aaddd36b1c8af3bdb860ed347a059ba9ffbdef5dc1400902eb3e851b608a736836d9b0fb0390002c281799df410503dd587a2de015b4411b603dfcc29b032254f29dd399654feca4c6517815a37757e390f433d5dac41a58066d033080cbd3850b3e9475db2821149ec35303d86a1e40f97fa04de8e85c12198626515a898df26a773235d9443646fb62e178fcd9d8f0e7dfc388b15cc8ed0f21c2e9aecbca1f1c5180ba8088ac20b2ea49618077ffff25bcea55e72e2f458fa897cecb554d021a5d2593df341d462021e6e345828e01af5301c47503f42168d785421a84eebcd2a6ee4cd79c9c4c256f83cf8dff04b104703ea779ca220ca9f61ae27fbdb79886b2e10b576137a31c2d09a6ff937ea861770e510e1673512d9f9dd6bfacca3a435951b5ce27ebb58c380b9b5c588ad6f5878dd5fadcccddc9c9a2445d8e5de4db0adccc0f0fe3fc9f2ea8ffef3d5539be5dffa28844c125e329f8540fed1193e87526911dca97635c4683025da738d8407c0801b31fb9392e83b237482d2b193083dc7fb708b89b371fd9d1a820526e66e027e9516306e096ca19bf0749855bbcc8cf6954250ee97404d71b6f0d42a254ceba0518b5d2d1ac77949b7f9239f4ffcecae8e2f7afed762171a71e53b9af1a615efc02f906f02397e866b65d63812770028a797723aa8041e0ec78175b133472ff5f890d28c89780f36c5fa7d8a06f172a4617d200e578b8fefe129ad74ccfa522cc95543255f91a86ea21b0f4c975b81e7a95ca12f877c35ec17bef09bcc5d81f377e5325deec85932f028d148de07f9cdda0933d88a3d759358caf8133738e5270a36e85986d581a829e6012001692c91b2c7c017985d05d7359aa971150d7d3e7d227cc83a1e162e48cd0106eb1f1770b91b44be150c762f33c4c0b84945d64f233f92419d934e275d4ca75450c3a798d393d07cd320ee0bd365e2c1550ef9ea92e6e7d1557783558e642934ee1e944962e39c97094007a6d069dd333749f1cb3d03f09c9749c72cc30ac4523274d963841384002530410e5408e4e4b61ebf8b3e6416533cc422a8fb842377865b42c7fe8352ddbb3e1e273e35ea6fd5d5a6c12754718908d0f87ca535f9df2a9f4390201b29a5377e0fdcc6db0b2a41c777d947d89ec7bd0fd05784669acdc63b425f6d31a9f4b4e6f55202e063e19fe1e2615a8c39fe77ebeb9d8f3444807e55499aad1db11a2c576fe1a151d09737824e4d831a0ce2f1922a61c1f24e5db6aa18da10fbddc59bbac7cbe3c16a605f63ec772e85e9114aaf30bbf829a31e68e712a740116f6c3478134d2b22a0433a30bdc02d1fa63ebf62a63efaa48f1158b7681bc74c5d2da5bdb7a92001f1ad3caeaeaf8b5e773f7f34737c39b31b703b7511ed4bc89db40e94e6e1bed831aac034f36e79b4719d6cd6cc3172ec5ea0a1431554dd9f52bd938a45e999cfbe58b461fba4534ba07d952487d62061d53a5cc27424e0925358fb1ffb7a61d0c0fb75308f03bfb07a3bdea6047b32ad131da141f01f60ca1346cbcb1e97d90a17de14e6213af04", 0x1000}, {&(0x7f0000001940)="cb41dbb4c707a7ad3028653ee8a9a917a07dbccb73ca9017ac07212ffe03310bbc4c611fcb09e67e2c979f79a2449945f277e4220c29e1", 0x37}, {&(0x7f0000001980)="d80bf5359cc8df4edc7e4c51a48785921c670526e635eb0329986f03cda575e1e1cee287af641c6204d232c42a1bc66c26097ed374e9bb549dbd9a425941ed5e5e53e3414973bbbdbf0663108dcbc542f57cac01c9c3bf553a7410a6b64c611b4452cee0a2b475ccc343e662c926e67ddc7025a2154be5ad29f9765adb3afab2da83bc570a83516efc45", 0x8a}], 0x4, &(0x7f0000001a80)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xff}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @timestamping={{0x14, 0x1, 0x25, 0x7f}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffc00}}], 0xc0}}], 0x3, 0x8000) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) ioctl$CAPI_GET_ERRCODE(r0, 0x80024321, &(0x7f00000001c0)) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r3 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r4, r2) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r3, &(0x7f00000017c0), 0x199, 0x0) 13:46:05 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x105682) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$NBD_DO_IT(r3, 0xab03) setxattr$trusted_overlay_redirect(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.redirect\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x1) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000080)={'ip6tnl0\x00', 0x800}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:05 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x2) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 270.108885] audit: type=1804 audit(1572702365.662:246): pid=16166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/488/bus" dev="sda1" ino=16738 res=1 [ 270.137473] block nbd3: Receive control failed (result -22) [ 270.148196] block nbd3: shutting down sockets 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000001c0)) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/validatetrans\x00', 0x1, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f00000001c0)={'\x00\x01\x00'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K\x00'/144, 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) fchdir(r3) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) [ 270.232364] block nbd2: Receive control failed (result -22) 13:46:05 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) dup(r1) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x3000) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:05 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) io_submit(r3, 0x0, &(0x7f0000000540)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 270.299397] block nbd3: shutting down sockets 13:46:06 executing program 3: syz_mount_image$msdos(&(0x7f0000000100)='msdos\x00', &(0x7f0000000140)='./file0\x00', 0x5, 0x6, &(0x7f0000000540)=[{&(0x7f0000000200)="9f0040a259113128411a08f8b9eb66ea8555d4241e05dbb6974532a6cd254a57bbbd800673966e18bd21588043bf8838d76ac7ee413868bbacba08cd7192909c312d49952efbc71707ce2b04f1abe3", 0x4f, 0x10001}, {&(0x7f0000000180)="f660d79412aaaa573282d71784d7801e1c9e28d1975fb49632cf4f4611ed65f54e28f7046083f0dd8bbce07eb919a5a3acf6a728f1b2ee746ec8", 0x3a, 0xffffffff00000001}, {&(0x7f0000000280)="bf3d7495e63911cfcae708be62e774cd09037a8690ee759c2d5fc4cd89fd11e0e234d149494c1ca0eb9e61950364d0b3bd8d9b01fc1dda2a6bf6d1e7e6f2a701217211ae611df374b7a664e848bc9596a8a42df079edabd4a35b8f81aba076d0ec4591e67c379133fadce86b405ffa0348ea1fa9b643e7ea106ce4adf8e8bd3e737dfa9cfc04419a127d7026d50ac9b15547ec2101a9672f9296c41fe195e071dd1f3c77b37e801d707ab581d6c87928e15b2a4b229fcf142f43d6d7007e504d3ff3b47bd70de5b4954b118d2d0a1f14ccf4cccf103805a272", 0xd9, 0x101}, {&(0x7f0000000380)="cf94995602ac5774caee89025508049347ae73449a429a3a37ccd0045d7798264e0afb7cce71631b35591232be1d9694474726ac7ae81cdd23538631728cef1f33d4ed4398fb71663aeed5dd8e43816d4a99679b0ad0ba9302fd7e", 0x5b, 0x100000001}, {&(0x7f0000000400)="485e195681a34e9c597f5edb7c6451e8e64bb82c5f5911b7b5dc998a4abf440cc0fe6874d08b3c0175a9ba6a1b8cffee68809ad6d7db3cca5d4933fd018c5a416d697490bfad26d9342495f2288827dc39e3caea54fba885e130769f01029e019cadd95c96ee492a396663d384b531eed8c6f6197bdd286ed3a9384faaca4b63412825606c17f108760938a6de3ad0ac3103b97001a9d35fb0ec39164b878d903f7939", 0xa3, 0x3}, {&(0x7f00000004c0)="a4a594a7fe604444e4c03076a892cfc79a943079dcbcd9c93e62523f9bfb094f227c52127e247da29639562bb9eac6d0c841ec7acafdc4fec09dfc3ff1ae020aeba4b566a33d8aa9e9d65c8917cde1efc6724ad5554719c3ea5f37ae", 0x5c, 0x1}], 0x2, &(0x7f0000000600)={[{@fat=@gid={'gid', 0x3d, 0xee01}}], [{@dont_hash='dont_hash'}]}) r0 = socket(0x5, 0x4, 0x85) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='\xe4\x00', 0x0, 0x801c0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80304d65, &(0x7f0000000040)) ioctl$NBD_DO_IT(r2, 0xab03) write$selinux_validatetrans(r3, &(0x7f0000000080)={'system_u:object_r:default_t:s0', 0x20, 'system_u:object_r:devpts_t:s0', 0x20, 0xe9, 0x20, 'unconfined\x00'}, 0x5d) 13:46:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) connect$rxrpc(r3, &(0x7f00000001c0)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x69}}, 0x24) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/enforce\x00', 0xa180, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1, 0x100}, r6}}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000280)={0xa, 0x4, 0xfa00, {r6}}, 0xc) [ 270.377831] audit: type=1804 audit(1572702365.932:247): pid=16215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/489/bus" dev="sda1" ino=17086 res=1 13:46:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) [ 270.445313] FAT-fs (loop3): Unrecognized mount option "dont_hash" or missing value [ 270.505943] FAT-fs (loop3): Unrecognized mount option "dont_hash" or missing value [ 270.989011] block nbd2: shutting down sockets 13:46:06 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x5ee, 0x40000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffff800, 0x460480) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000040)) 13:46:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, 0xffffffffffffffff, 0x40000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:06 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000140)={0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r2, 0x2008001) dup3(r3, r2, 0x0) fcntl$setstatus(r2, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0x200a00}]) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x8800, 0x0) getsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:06 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)={0x168, r1, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x565ae327}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x400, @ipv4={[], [], @remote}, 0xfffff800}}, {0x14, 0x2, @in={0x2, 0x4e21, @rand_addr=0x3}}}}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa62}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10001}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x700000}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x2c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xeabb}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK={0x38, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfdf}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x44000}, 0x40000000) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r3 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r3, 0xab03) ioctl$NBD_DO_IT(r3, 0xab03) 13:46:06 executing program 2: r0 = socket(0x11, 0x4, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x4df0c0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) socket$rds(0x15, 0x5, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VIDIOC_QUERYCAP(0xffffffffffffffff, 0x80685600, &(0x7f0000000100)) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) readahead(r2, 0x1, 0x38) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, &(0x7f0000000080)='md5sumvmnet0,$\x00', 0xf) [ 271.100152] block nbd3: Receive control failed (result -22) [ 271.106481] audit: type=1804 audit(1572702366.662:248): pid=16251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/490/bus" dev="sda1" ino=17265 res=1 [ 271.110834] block nbd3: shutting down sockets 13:46:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) [ 271.179002] block nbd3: Receive control failed (result -22) [ 271.188026] block nbd3: shutting down sockets 13:46:06 executing program 3: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) recvfrom$x25(r3, &(0x7f0000000000)=""/176, 0xb0, 0x40004041, &(0x7f00000000c0)={0x9, @null=' \x00'}, 0x12) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x605, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r4, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/de\xff\x03\x00\x00\x00\x00\x00\x00vsock@', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) execveat(r2, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='+em1\x00', &(0x7f00000001c0)='^self\x00', &(0x7f0000000200)='/\xcbUv/zero\x00', &(0x7f0000000240)='%wlan1#!-trusted\'\x00', &(0x7f0000000280)='system\xfa,]security^)eth0+lo\x00', &(0x7f00000002c0)='ppp0GPL[selinux!\x00'], &(0x7f0000000580)=[&(0x7f0000000340)='/de\xff\x03\x00\x00\x00\x00\x00\x00vsock@', &(0x7f0000000380)='/dev/zero\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='-\\vboxnet1selinux\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='\x00', &(0x7f00000004c0)='^self\x00', &(0x7f0000000500)='-wlan0)#^(vboxnet1wlan1\x00', &(0x7f0000000540)='/de\xff\x03\x00\x00\x00\x00\x00\x00vsock@'], 0x1000) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r4, 0x3b64) r5 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r5, 0x3b64) dup2(r4, r5) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:06 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000080)) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r3) timerfd_gettime(r4, &(0x7f00000000c0)) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x200800, 0x0) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000040)=0x1c) io_setup(0x40000000008, &(0x7f0000000240)=0x0) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) r8 = syz_open_dev$swradio(&(0x7f0000000380)='/dev/swradio#\x00', 0x1, 0x2) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x9, 0x7, r7, &(0x7f0000000280)="e0b278f2ac0db96c7f8dfed280c7a157f7447c6043dd310b1f0cd62081a0e725362eab1ca6f29b942705edcdad0b83d66f7dec2d3eb3edd72dd2ee3b223dac78d8740fe1948724d4156d96c800ee30b1497fc79fea2d8ea9ac3a80bb8431cb19a31abc73250daf85d5ef7f8ae5877f06f23ca542909d7364589f4688b690030a5f7318f25b1015a3fd843176891054a28038e8ddfbe6d099f10075c0055f3243c482034855f5cc26dfa53a8b4843922fb80be3e7ecb16f5bbe37a079fa00", 0x1d1, 0x2, 0x0, 0x2, r8}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) 13:46:06 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x101000) pipe2(&(0x7f0000000140), 0x800) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r5, 0x407, 0x0) write(r5, &(0x7f0000000340), 0x41395527) syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x2, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) write(r6, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r7, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) memfd_create(&(0x7f0000000080)='$posix_acl_access%ppp0*\x00', 0x8) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r8, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xffffff88, 0x0}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0xb2) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f00000001c0)={0x8, 0x8, 0x1417}) dup2(r2, r0) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r1, &(0x7f00000017c0), 0x199, 0x0) 13:46:06 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000340)=""/196) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r6, 0x407, 0x0) r7 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r7, 0x3b64) write(r7, &(0x7f0000000340), 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x7, 0x1ff, 0x7}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000002c0)={r9, 0x2}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000880)={r10}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r10, 0xd1f}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r11, 0x2}, &(0x7f0000000180)=0x8) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x26c}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0xa, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x2c0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00ev/ashmem\x00', 0x220400, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 271.379068] audit: type=1804 audit(1572702366.932:249): pid=16296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/491/bus" dev="sda1" ino=16753 res=1 13:46:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f0000001200)={0x0, 0x103, 0x0, 0x0}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 271.430605] block nbd3: Receive control failed (result -22) [ 271.496163] md: loop5p2 has zero or unknown size, marking faulty! [ 271.511105] md: md_import_device returned -22 13:46:07 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x81, 0x400000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000000)={0xffffffe7, 0x100, 0xe583}) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) r1 = getpid() sched_setattr(r1, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x0, 0x5, 0x800000000000, 0xffffffffffffffff}, 0x0) timer_create(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, @tid=r1}, &(0x7f0000000100)=0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x80800, &(0x7f00000002c0)={[{@mode={'mode', 0x3d, 0xffffffffffffff00}}, {@mode={'mode', 0x3d, 0x5}}], [{@subj_type={'subj_type', 0x3d, '/dev/zero\x00'}}, {@euid_gt={'euid>', r3}}, {@smackfshat={'smackfshat', 0x3d, '/dev/vhost-vsock\x00'}}]}) timer_gettime(r2, &(0x7f0000000140)) 13:46:07 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x3, 0x83fa529b51b1af13, 0x7, 0x7, 0xb1, 0x21a, &(0x7f0000000100)="58d09052fe8845fb819484b6625bc7ff0528b694e704133f4d21c27e0c88228dec82988d776589e40f6f086e3ac298d464896d147a935e11098ae20799c7825c4ba757b945e8338760dfa02fd0825cded66eadfa42fd84ac4806c1268ab1b66705460aa4cb9aab4a7a6210d070de6f476a2eaf14502aeae83b58e3569764007aa53253b669cbbf743f861e2c45da74fe3ef2e7e584ca099a8aaff4c4af485dd3953b02b6794791177e4f0763ca38e4f831"}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) ioctl$FIGETBSZ(r3, 0x2, &(0x7f00000001c0)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 271.974782] block nbd2: Receive control failed (result -22) [ 272.146470] block nbd3: shutting down sockets [ 272.201339] block nbd3: shutting down sockets 13:46:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000240)="b5e0f4067b81e76eb4bcb58a4adf71a4f93fed2341af92db21b733a42ce5b0a38dba448fbcb14ac8e1ebc3c1e6e7d2067625aa5695f0658ec68892240a57cf45f648f527374b20118820be318761d074f37c0227e723eb5bbf11680d22c8011dc4bd1a2fcf88b2083c336b19abeac207379a09a070948d6dbd508f21349bbe0b649598904db9ee03abe698b5222a4772a69084d48576ad700f7dec2cdd1a308af72599e2be2ba48fe6abc5ec58d4ae977c25951f563e276673d3cb6da3e5f34c24f52e1cfeaa3df3eda301b66d1b707009b7e084ef7b6638a4a278", 0xdb}], 0x1, 0x1ff) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0xffffd000) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r3, &(0x7f0000000080)="38fde8dae553f3f90bf864ed90d318297ca857d541a739d37efc07eb6f241c4067ef36111ee5a0f07006c69ef422300b5b5d9fc07516b4", &(0x7f0000000100)=""/18}, 0x20) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) 13:46:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x26c}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0xa, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x2c0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00ev/ashmem\x00', 0x220400, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) 13:46:07 executing program 3: r0 = socket(0x11, 0x2, 0x0) syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0xb805fdad503ebdcc) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000001, 0x40) ioctl$NBD_SET_SOCK(r2, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x20000, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000008880), 0x40000ab, 0x20, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r7) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000880)={r9}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000380)={r9, 0x1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000400)={r10, 0x82, "9569fd4329a88ecc9552e1bcdd6be583b67afe85e25ffbe35a6bce6bf38af64e9594992090003fc5cdf39093eb10c640c1416ef0295c53319bab48a5c7c9489dd512562c87e2cd3773029ed1658e4c774c5429c42c347653b64d420fcc1644b5f75255ba9daaf831f7a3e51b9e34ff26277e259f00676ceea7652514de004a96510b"}, &(0x7f00000004c0)=0x8a) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x11000002}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r11, 0x9ab8b08859c42bbf, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x4109, 0x0, {0x4c, 0x18, {0x0, @media='eth\x00'}}}, ["", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x2}, 0x20000000) accept$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x0, @local}, &(0x7f0000000180)=0x1c) ioctl$NBD_DO_IT(r2, 0xab03) [ 272.327640] block nbd3: Receive control failed (result -22) 13:46:07 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40182, 0x0) ioctl$TIOCLINUX7(r2, 0x541c, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r4, 0x407, 0x0) write(r4, &(0x7f0000000340), 0x41395527) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e20, 0x6, @local, 0x5}}, 0x0, 0x20, 0x0, "5525e99d34aac1d5ac32df0288f97f6703d8cc291bf610cb6b1739d63763fc0a3cdf0f51be9ac95ccb6bfbc02c3bca878e54939da4b7064ade7295b94f32ab1c5e607ce71b1504847f0e59341e309ee4"}, 0xd8) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r3}) [ 272.561304] protocol 88fb is buggy, dev hsr_slave_0 [ 272.566869] protocol 88fb is buggy, dev hsr_slave_1 13:46:08 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r1, 0x3b64) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/17, 0x11}], 0x1, 0x100000000) ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80085504, &(0x7f0000000080)={0x200, 0xc494}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x3, 0x0) r4 = getpid() sched_setattr(r4, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x9, 0x1, 0x9, 0x7f, 0x0, 0x7ff, 0x204, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f0000000240), 0xe}, 0x8000, 0x81, 0x5, 0x9, 0x1, 0xae5, 0x8001}, r4, 0xb, r5, 0x3) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r6, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) write$P9_RFSYNC(r6, &(0x7f0000000100)={0x7, 0x33, 0x3}, 0xfffffffffffffd80) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r2, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x3}) [ 272.710743] protocol 88fb is buggy, dev hsr_slave_0 [ 272.716371] protocol 88fb is buggy, dev hsr_slave_1 [ 272.754467] block nbd2: shutting down sockets 13:46:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/debf#\xfa\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) r4 = syz_open_dev$evdev(&(0x7f0000000b00)='/dev/input/event#\x00', 0x0, 0x0) dup2(r4, r3) ioctl$EVIOCGBITSW(r4, 0x80404525, &(0x7f0000000000)=""/162) 13:46:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x8, 0x5, 0x2, 0x20, 0x3}) 13:46:08 executing program 0: ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000100)={{0x7f, 0xcd}, 'port0\x00', 0x80, 0x0, 0x7, 0xa1b, 0xbf, 0x8, 0x6, 0x0, 0xf, 0x1}) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0xc84, 0x10000}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000200)={0x3}) 13:46:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x582882) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, &(0x7f0000000000)=""/222) syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x0, 0x2) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:08 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/d#\x00/zero\x00', 0x210200, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r2, 0x407, 0x0) write(r2, &(0x7f0000000340), 0x41395527) ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2, {0xc7e8, 0x1, 0x7ff, 0xffff}}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x5, 0x50400) ioctl$SIOCX25GDTEFACILITIES(r2, 0x89ea, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) [ 273.117468] block nbd3: shutting down sockets 13:46:08 executing program 3: r0 = socket(0x10, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000000040)={0xa, 0x9, 0x1, 0x6d}, 0xa) [ 273.184918] block nbd2: shutting down sockets [ 273.234751] block nbd2: shutting down sockets 13:46:08 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) signalfd(0xffffffffffffffff, &(0x7f0000000000)={0x5}, 0x8) ioctl$NBD_DO_IT(r2, 0xab03) 13:46:08 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) r3 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0xc0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x4843, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x9, 0x3}, 0x0, 0x0, &(0x7f0000000840)={0x6}, &(0x7f0000000880)=0x9, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x4}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d80)={r3, 0x10, &(0x7f0000000d40)={&(0x7f0000000500)=""/148, 0x94, r4}}, 0x10) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r6, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) r8 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x3, 0x20000) io_submit(r6, 0x2, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0x2, r2, &(0x7f0000000140)="c1f685838c4bee6d5bbd239a3f8282eda53e5ece5186ecc9b86a4893e53f58ce27579abad57691efc1615753e2f776bf0f8f818f99e49ebd7274196e048e88121037ff72d63f9b8b282516224b991002a0b371519faf7343cbe2e119c00180cdb7efc81bedf528412dac3f378cc1c82e1f2ad247e63d37e2ca2111099d1fa45209376b1140f3a06154531ee3324665699e7649c40e650a62bb7c", 0x9a, 0x7, 0x0, 0x3, r7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x40, r8, &(0x7f0000000300)="052ae3d775b785c00da2614a69ba7bc7a174dca00381d82344c2539e2c52986198e6401e7db45b502b0603762a2c85709085d0084b756293fb4e0fbf492af9c38b234250ca7e1451f06fff9b3fbdb777c48580ffd08258c7b0d9ebd21013a53b876e24ce6559cfeb37fe5c1bcd13d0e5ef2df56229d108520fd52c007be6a8ef9ba21433af8758cff8d05796c2e65e5219a0b05db6768485d098c4707412fb7318cb0574d63aaba2c1a31100d4f7b5dae0", 0xb1, 0x8, 0x0, 0x1}]) 13:46:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x0, 0xfffffffffffffe9f, 0x0, 0x0, 0x0, 0x9, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) write(r0, &(0x7f0000000340), 0x41395527) recvmmsg(r0, &(0x7f0000003140)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, 0x0, 0x26c}}], 0x1, 0x0, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000100)='-\x1e^\xef\xcd\xec\xb8\xef\xde\xee\a)\xb9^#\xa7\x11\f\xcb\x01\xe0\xa4e\x10\xa3\xb2\a\xcc\xf0\xf2\x01&9j\xfbNiSfw\x8b\xde\x8bko\x97\xbb\xafw\x81\xe7w!U\x8az\xed\xf0\xbb=\x8bN\xf8\x12\xc0\xca\x81q\x11\x81\x9fiB63\xb5\x17\xf1\xc7\xddpC\x9e\xe8\x816\x863\x17q\xe4\x96Di\x8d\xe9X\xbe\xf2\x84\xc9\xb9\xbf\x83\xf4\x9dA\xaa\x8c\xe6\xcd\xb4\xba\xdb\xb5\x00\xdb\xcb\x88\xea3s\x9b{7Dq\xcc\xc0$\x91\xa2\x11\x80){!\"\xe1=N\xa3\xc7K', 0xfffffffffffffffd) r1 = socket$inet(0x2, 0xa, 0x40) sendto$inet(0xffffffffffffffff, 0x0, 0x2c0, 0x10, 0x0, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000240)) r2 = syz_open_procfs(0x0, &(0x7f0000000600)='net/fib_trie\x00') r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='\x00\x00ev/ashmem\x00', 0x220400, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x0, 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000140)=0x31, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x15}}, 0x10) connect$inet(r4, &(0x7f0000000400)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x5}, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x9) dup2(r3, r1) pipe(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, &(0x7f0000000300)) preadv(r2, &(0x7f00000017c0), 0x199, 0x0) [ 273.374517] audit: type=1804 audit(1572702368.932:250): pid=16413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/492/bus" dev="sda1" ino=17412 res=1 [ 273.402392] block nbd2: Receive control failed (result -22) [ 273.409198] block nbd2: shutting down sockets 13:46:09 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) ioctl$NBD_DO_IT(r2, 0xab03) inotify_init() 13:46:09 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r2, 0x3b64) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="2321202e2f66696e6530206d696d655f74791fcc2d00000000000000076500000a6a9978f51396955ef75a74fbaa564dffff00"/61], 0x3d) r3 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r3, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 273.526660] block nbd2: Receive control failed (result -22) [ 273.547713] block nbd2: shutting down sockets 13:46:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r1, 0x0) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000080)) [ 273.593093] audit: type=1804 audit(1572702369.152:251): pid=16428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/493/bus" dev="sda1" ino=17412 res=1 [ 273.621375] block nbd2: shutting down sockets 13:46:09 executing program 2: r0 = socket(0x11, 0x2, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r2 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r0) ioctl$NBD_CLEAR_SOCK(r2, 0xab03) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000001880)='/dev/vfio/vfio\x00', 0x0, 0x0) ioctl$VFIO_GET_API_VERSION(r3, 0x3b64) r4 = dup(r3) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x8, 0x6, 0x1, 0x77a, 0x5}) 13:46:09 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-vsock\x00', 0x2, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000080)=0x0) syz_mount_image$hfsplus(&(0x7f0000000100)='hfsplus\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0x1000, 0x20}], 0x4100008, &(0x7f0000001240)={[{@session={'session', 0x3d, 0x2}}, {@barrier='barrier'}, {@type={'type', 0x3d, "3c925364"}}, {@session={'session', 0x3d, 0x1}}, {@session={'session'}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fowner_eq={'fowner', 0x3d, r2}}, {@smackfsfloor={'smackfsfloor', 0x3d, '/dev/zero\x00'}}, {@euid_eq={'euid', 0x3d, r2}}, {@fowner_gt={'fowner>', r2}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/vhost-vsock\x00'}}, {@seclabel='seclabel'}]}) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x11, 0x4011, r3, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001480)='/dev/hwrng\x00', 0x4c6800, 0x0) ioctl$VIDIOC_TRY_ENCODER_CMD(r4, 0xc028564e, &(0x7f00000014c0)={0x0, 0x0, [0xfffffff9, 0x37, 0x34c, 0x5, 0x7, 0x1, 0x749, 0x60000]}) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x0, 0x0) close(r5) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r7, 0x407, 0x0) write(r7, &(0x7f0000000340), 0x41395527) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r8, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000001500)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r7, 0x8901, &(0x7f0000001580)=r9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001440)='/dev/sequencer\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0)={0x1, [0x0]}, &(0x7f00000000c0)=0xfe10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000880)={r10}, &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={r10, 0x74, &(0x7f0000001380)=[@in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e20, 0x8, @ipv4={[], [], @broadcast}, 0x2}, @in6={0xa, 0x4e23, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xe}}, 0xfffffffd}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e24, 0x80000000, @remote, 0x80}]}, &(0x7f0000001400)=0x10) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)) [ 273.701123] block nbd2: Receive control failed (result -22) [ 273.711023] block nbd2: shutting down sockets [ 273.761653] block nbd2: shutting down sockets 13:46:09 executing program 2: r0 = syz_open_dev$ndb(&(0x7f00000001c0)='/dev/nbd#\x00', 0x0, 0x0) r1 = syz_open_dev$ndb(0x0, 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_CLEAR_SOCK(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x7ff, 0x4) 13:46:09 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x448e33475010a755, 0x0, 0xa1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) [ 273.865786] audit: type=1804 audit(1572702369.422:252): pid=16454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/494/bus" dev="sda1" ino=17412 res=1 13:46:09 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2008001) dup3(r2, r1, 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x40000000008, &(0x7f0000000240)=0x0) io_submit(r3, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10811, r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) accept4$rose(r4, &(0x7f0000000000)=@short={0xb, @dev, @default, 0x1, @null}, &(0x7f0000000040)=0x1c, 0xc0000) [ 274.075034] block nbd3: Device being setup by another task [ 274.081517] block nbd3: shutting down sockets [ 274.115590] audit: type=1804 audit(1572702369.672:253): pid=16461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op="invalid_pcr" cause="open_writers" comm="syz-executor.5" name="/root/syzkaller-testdir634125684/syzkaller.6HDyvZ/495/bus" dev="sda1" ino=17409 res=1 [ 427.990693] INFO: task syz-executor.3:16403 blocked for more than 140 seconds. [ 427.998105] Not tainted 4.14.151 #0 [ 428.002352] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 428.010360] syz-executor.3 D28848 16403 12304 0x00000004 [ 428.015988] Call Trace: [ 428.018558] __schedule+0x7b8/0x1cd0 [ 428.022289] ? pci_mmcfg_check_reserved+0x150/0x150 [ 428.027306] schedule+0x92/0x1c0 [ 428.030800] schedule_timeout+0x93b/0xe10 [ 428.034942] ? wait_for_completion+0x274/0x420 [ 428.039500] ? find_held_lock+0x35/0x130 [ 428.043573] ? usleep_range+0x130/0x130 [ 428.047535] ? wait_for_completion+0x274/0x420 [ 428.052148] ? _raw_spin_unlock_irq+0x28/0x90 [ 428.056634] ? trace_hardirqs_on_caller+0x400/0x590 [ 428.061665] wait_for_completion+0x27c/0x420 [ 428.066063] ? wait_for_completion_interruptible+0x490/0x490 [ 428.072286] ? wake_up_q+0xf0/0xf0 [ 428.075835] flush_workqueue+0x3d1/0x1400 [ 428.079963] ? uevent_store+0x70/0x70 [ 428.083775] ? flush_work+0x730/0x730 [ 428.087564] ? wait_for_completion+0x420/0x420 [ 428.092182] ? sock_shutdown+0x1d9/0x250 [ 428.096231] nbd_ioctl+0x9c4/0xb30 [ 428.099748] ? nbd_ioctl+0x9c4/0xb30 [ 428.103473] ? nbd_add_socket+0x5e0/0x5e0 [ 428.107613] ? finish_wait+0x260/0x260 [ 428.111522] ? trace_hardirqs_on+0x10/0x10 [ 428.115745] ? nbd_add_socket+0x5e0/0x5e0 [ 428.119917] blkdev_ioctl+0x96b/0x1860 [ 428.123821] ? blkpg_ioctl+0x980/0x980 [ 428.127707] ? __might_fault+0x110/0x1d0 [ 428.131795] ? __might_sleep+0x93/0xb0 [ 428.135668] ? __fget+0x210/0x370 [ 428.139099] block_ioctl+0xde/0x120 [ 428.142752] ? blkdev_fallocate+0x3b0/0x3b0 [ 428.147093] do_vfs_ioctl+0x7ae/0x1060 [ 428.151004] ? selinux_file_mprotect+0x5d0/0x5d0 [ 428.155749] ? lock_downgrade+0x740/0x740 [ 428.159999] ? ioctl_preallocate+0x1c0/0x1c0 [ 428.164472] ? __fget+0x237/0x370 [ 428.167919] ? security_file_ioctl+0x89/0xb0 [ 428.172518] SyS_ioctl+0x8f/0xc0 [ 428.175877] ? do_vfs_ioctl+0x1060/0x1060 [ 428.180011] do_syscall_64+0x1e8/0x640 [ 428.183920] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 428.188743] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 428.193962] RIP: 0033:0x459f49 [ 428.197140] RSP: 002b:00007fa83c915c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 428.204858] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 0000000000459f49 [ 428.212145] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 428.219402] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.226691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa83c9166d4 [ 428.233978] R13: 00000000004c3a06 R14: 00000000004d7a98 R15: 00000000ffffffff [ 428.241291] [ 428.241291] Showing all locks held in the system: [ 428.247609] 1 lock held by khungtaskd/1015: [ 428.252104] #0: (tasklist_lock){.+.+}, at: [] debug_show_all_locks+0x7f/0x21f [ 428.261153] 2 locks held by kworker/u5:0/1143: [ 428.265850] #0: ("knbd%d-recv"nbd->index){+.+.}, at: [] process_one_work+0x76e/0x1600 [ 428.275620] #1: ((&args->work)){+.+.}, at: [] process_one_work+0x7ab/0x1600 [ 428.284516] 1 lock held by rsyslogd/6633: [ 428.288644] #0: (&f->f_pos_lock){+.+.}, at: [] __fdget_pos+0xab/0xd0 [ 428.296898] 2 locks held by getty/6755: [ 428.300872] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.309541] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.318956] 2 locks held by getty/6756: [ 428.322938] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.332311] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.341671] 2 locks held by getty/6757: [ 428.345619] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.354304] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.363605] 2 locks held by getty/6758: [ 428.367555] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.376240] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.385539] 2 locks held by getty/6759: [ 428.389485] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.398166] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.407511] 2 locks held by getty/6760: [ 428.411502] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.420187] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.429447] 2 locks held by getty/6761: [ 428.433434] #0: (&tty->ldisc_sem){++++}, at: [] ldsem_down_read+0x33/0x40 [ 428.442123] #1: (&ldata->atomic_read_lock){+.+.}, at: [] n_tty_read+0x1e6/0x17b0 [ 428.451465] [ 428.453082] ============================================= [ 428.453082] [ 428.460111] NMI backtrace for cpu 1 [ 428.463725] CPU: 1 PID: 1015 Comm: khungtaskd Not tainted 4.14.151 #0 [ 428.470281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.479616] Call Trace: [ 428.482183] dump_stack+0x138/0x197 [ 428.485791] nmi_cpu_backtrace.cold+0x57/0x94 [ 428.490269] ? irq_force_complete_move.cold+0x7d/0x7d [ 428.495442] nmi_trigger_cpumask_backtrace+0x141/0x189 [ 428.500749] arch_trigger_cpumask_backtrace+0x14/0x20 [ 428.505924] watchdog+0x5e7/0xb90 [ 428.509355] kthread+0x319/0x430 [ 428.512703] ? hungtask_pm_notify+0x50/0x50 [ 428.517019] ? kthread_create_on_node+0xd0/0xd0 [ 428.521666] ret_from_fork+0x24/0x30 [ 428.525449] Sending NMI from CPU 1 to CPUs 0: [ 428.529973] NMI backtrace for cpu 0 skipped: idling at pc 0xffffffff861c3b5e [ 428.530937] Kernel panic - not syncing: hung_task: blocked tasks [ 428.543287] CPU: 1 PID: 1015 Comm: khungtaskd Not tainted 4.14.151 #0 [ 428.549927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.559258] Call Trace: [ 428.561828] dump_stack+0x138/0x197 [ 428.565443] panic+0x1f9/0x42d [ 428.568612] ? add_taint.cold+0x16/0x16 [ 428.572565] ? irq_force_complete_move.cold+0x7d/0x7d [ 428.577735] watchdog+0x5f8/0xb90 [ 428.581177] kthread+0x319/0x430 [ 428.584525] ? hungtask_pm_notify+0x50/0x50 [ 428.588874] ? kthread_create_on_node+0xd0/0xd0 [ 428.593548] ret_from_fork+0x24/0x30 [ 428.598803] Kernel Offset: disabled [ 428.602441] Rebooting in 86400 seconds..