syzkaller login: [ 41.354075] audit: type=1400 audit(1567970332.489:35): avc: denied { map } for pid=7407 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '10.128.0.63' (ECDSA) to the list of known hosts. 2019/09/08 19:18:58 fuzzer started [ 47.793317] audit: type=1400 audit(1567970338.929:36): avc: denied { map } for pid=7417 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=16481 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 2019/09/08 19:19:00 dialing manager at 10.128.0.105:38733 2019/09/08 19:19:00 syscalls: 2482 2019/09/08 19:19:00 code coverage: enabled 2019/09/08 19:19:00 comparison tracing: enabled 2019/09/08 19:19:00 extra coverage: extra coverage is not supported by the kernel 2019/09/08 19:19:00 setuid sandbox: enabled 2019/09/08 19:19:00 namespace sandbox: enabled 2019/09/08 19:19:00 Android sandbox: /sys/fs/selinux/policy does not exist 2019/09/08 19:19:00 fault injection: enabled 2019/09/08 19:19:00 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/09/08 19:19:00 net packet injection: enabled 2019/09/08 19:19:00 net device setup: enabled 19:21:12 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getstat={0xe0, 0x10, 0x1, 0x0, 0x0, {{'sha224-arm64(-\x00'}}}, 0xe0}}, 0x0) [ 181.453566] audit: type=1400 audit(1567970472.589:37): avc: denied { map } for pid=7435 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14985 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 [ 181.564839] IPVS: ftp: loaded support on port[0] = 21 19:21:12 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x100, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x0, 0x400000002}], 0xd9) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) lstat(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000002c0)) ptrace$pokeuser(0x6, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@initdev, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000cc0)=0xe8) fstat(0xffffffffffffffff, 0x0) setregid(0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0x388, 0x5) getpgid(r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getresgid(&(0x7f0000000d00), &(0x7f0000000d40), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r3, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x0, 0x400000002}], 0xd9) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x0, 0x38}], 0xd9) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) write$evdev(r4, &(0x7f0000000100), 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x38}], 0xd9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000dc0)) getegid() r5 = syz_open_dev$evdev(0x0, 0x0, 0x101002) write$evdev(r5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x0, 0x38}], 0xd9) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x101002) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 181.696026] chnl_net:caif_netlink_parms(): no params data found [ 181.791562] IPVS: ftp: loaded support on port[0] = 21 [ 181.792341] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.803687] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.811208] device bridge_slave_0 entered promiscuous mode [ 181.820970] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.827850] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.835389] device bridge_slave_1 entered promiscuous mode 19:21:13 executing program 2: r0 = userfaultfd(0x800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000180)='memory.high\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) pselect6(0xff3c, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0xfc}, 0x0, 0x0) [ 181.860668] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 181.874902] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 181.904005] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 181.911697] team0: Port device team_slave_0 added [ 181.920195] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 181.928139] team0: Port device team_slave_1 added [ 181.936507] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 181.944332] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.004687] device hsr_slave_0 entered promiscuous mode [ 182.042334] device hsr_slave_1 entered promiscuous mode 19:21:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x1e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vcsn(0x0, 0xaaf, 0x0) syz_open_dev$sg(0x0, 0x7b7, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001400)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000280)='/dev/bus/usb/00#/00#\x00', 0x40000fffffb, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) close(r1) [ 182.095129] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 182.110753] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 182.120986] IPVS: ftp: loaded support on port[0] = 21 [ 182.141044] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.147580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.154607] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.160992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.269569] chnl_net:caif_netlink_parms(): no params data found [ 182.289454] IPVS: ftp: loaded support on port[0] = 21 [ 182.350833] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.357445] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.364757] device bridge_slave_0 entered promiscuous mode [ 182.381436] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.389162] bridge0: port 2(bridge_slave_1) entered disabled state 19:21:13 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQFD(r1, 0x4008ae6a, &(0x7f00000002c0)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) [ 182.398533] device bridge_slave_1 entered promiscuous mode [ 182.407190] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 182.415801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.510956] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 182.538002] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.567989] chnl_net:caif_netlink_parms(): no params data found [ 182.604021] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.624539] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 182.630628] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.645664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.660181] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.677946] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.685782] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 19:21:13 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) write$binfmt_script(r1, &(0x7f0000000380)=ANY=[], 0xfffffed5) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x5a) r3 = accept4(r2, 0x0, 0x0, 0x0) setpriority(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='stat\x00') r4 = accept4$alg(r3, 0x0, 0x0, 0x0) splice(r0, 0x0, r4, 0x0, 0x1ffffd, 0x0) [ 182.730465] IPVS: ftp: loaded support on port[0] = 21 [ 182.736843] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 182.748632] team0: Port device team_slave_0 added [ 182.765580] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 182.781911] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 182.789065] team0: Port device team_slave_1 added [ 182.801540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.810292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.818353] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.824774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.836349] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.843915] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.851295] device bridge_slave_0 entered promiscuous mode [ 182.862302] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 182.871683] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 182.879600] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 182.897310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.905310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.912976] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.919296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.928115] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.934538] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.941440] device bridge_slave_1 entered promiscuous mode [ 182.961221] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 183.024719] device hsr_slave_0 entered promiscuous mode [ 183.062165] device hsr_slave_1 entered promiscuous mode [ 183.134415] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.142594] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.160874] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.177475] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.178843] IPVS: ftp: loaded support on port[0] = 21 [ 183.192426] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.204517] chnl_net:caif_netlink_parms(): no params data found [ 183.217096] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 183.228058] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 183.250340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.258327] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.266373] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.275282] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.296451] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.306791] team0: Port device team_slave_0 added [ 183.319304] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.327327] team0: Port device team_slave_1 added [ 183.333585] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 183.345868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.353609] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.369101] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.376824] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.392368] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.411048] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 183.422759] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 183.438596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.449272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.460050] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 183.475249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.483276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.490818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.498762] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.506423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.553609] device hsr_slave_0 entered promiscuous mode [ 183.592105] device hsr_slave_1 entered promiscuous mode [ 183.644291] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 183.651226] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 183.658855] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.665390] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.672475] device bridge_slave_0 entered promiscuous mode [ 183.681362] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.687989] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.695136] device bridge_slave_1 entered promiscuous mode [ 183.713675] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 183.732650] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 183.741457] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 183.780239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.789717] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 183.827783] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 183.834976] team0: Port device team_slave_0 added [ 183.840421] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 183.848231] team0: Port device team_slave_1 added [ 183.883324] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 183.891285] audit: type=1400 audit(1567970475.019:38): avc: denied { associate } for pid=7436 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 183.914067] chnl_net:caif_netlink_parms(): no params data found [ 183.932062] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 183.939114] chnl_net:caif_netlink_parms(): no params data found [ 184.030112] audit: type=1400 audit(1567970475.159:39): avc: denied { create } for pid=7458 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 184.038527] 8021q: adding VLAN 0 to HW filter on device bond0 19:21:15 executing program 0: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000000c0), 0x4) [ 184.067830] audit: type=1400 audit(1567970475.199:40): avc: denied { write } for pid=7458 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 [ 184.111295] bridge0: port 1(bridge_slave_0) entered blocking state 19:21:15 executing program 0: r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffff807000000000000000000000008000800050000b70000", 0x24) [ 184.131120] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.149015] device bridge_slave_0 entered promiscuous mode [ 184.165683] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.194780] device hsr_slave_0 entered promiscuous mode [ 184.232403] device hsr_slave_1 entered promiscuous mode [ 184.293973] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 184.301075] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 184.308058] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.314708] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.321677] device bridge_slave_1 entered promiscuous mode 19:21:15 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) [ 184.345107] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.351526] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.358877] device bridge_slave_0 entered promiscuous mode [ 184.366309] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.383499] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.397629] device bridge_slave_1 entered promiscuous mode [ 184.407130] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.420316] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.426419] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.442744] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.450190] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.458979] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.469970] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.482423] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.498567] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 184.517400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.525310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.533266] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.539731] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.550081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.561668] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 184.578721] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.589883] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 184.597925] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 184.607571] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 184.620806] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.628829] team0: Port device team_slave_0 added [ 184.635006] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.642911] team0: Port device team_slave_1 added [ 184.649832] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 184.656785] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.665358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.673466] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.679839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.686736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.693756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 19:21:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, {0x4}}]}]}, 0x48}}, 0x0) [ 184.702654] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 184.711027] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 184.720867] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 184.729939] team0: Port device team_slave_0 added [ 184.735715] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.754168] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 184.760266] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.772522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 184.780241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.806729] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 184.815346] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 184.822965] team0: Port device team_slave_1 added [ 184.828298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 184.837964] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 184.849824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 19:21:16 executing program 0: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x10, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x3020) [ 184.860689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.868629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.877866] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.886266] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.892671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.901250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.908349] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.918387] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 184.939059] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 184.944878] audit: type=1804 audit(1567970476.079:41): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir557965323/syzkaller.aQUPjm/5/bus" dev="sda1" ino=16519 res=1 [ 184.984907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.993986] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.002650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.010099] audit: type=1804 audit(1567970476.109:42): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir557965323/syzkaller.aQUPjm/5/bus" dev="sda1" ino=16519 res=1 [ 185.017493] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.050789] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.059253] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.072692] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.079061] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.091257] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 185.107859] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 185.119069] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 185.137371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.180117] device hsr_slave_0 entered promiscuous mode [ 185.222944] device hsr_slave_1 entered promiscuous mode [ 185.262445] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.269518] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.278909] hrtimer: interrupt took 27084 ns [ 185.284292] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 185.293247] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 185.300855] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 185.320099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.336826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.348574] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.358855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 185.370452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 185.388788] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 185.401185] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 185.455019] device hsr_slave_0 entered promiscuous mode [ 185.492423] device hsr_slave_1 entered promiscuous mode [ 185.532569] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 185.539672] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 185.557498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.565206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.573124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.580970] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.591119] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.597909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.607705] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 185.616635] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 185.623458] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.631185] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.649553] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 185.657545] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.667392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.675571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.692662] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 185.700623] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 185.710669] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 185.742828] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.758918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.767713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 185.769658] audit: type=1804 audit(1567970476.909:43): pid=7478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir557965323/syzkaller.aQUPjm/5/bus" dev="sda1" ino=16519 res=1 [ 185.781416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 185.815902] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.822304] bridge0: port 1(bridge_slave_0) entered forwarding state 19:21:17 executing program 0: r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/40) [ 185.839191] audit: type=1804 audit(1567970476.939:44): pid=7479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir557965323/syzkaller.aQUPjm/5/bus" dev="sda1" ino=16519 res=1 [ 185.839515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.886648] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 185.914679] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.924351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.932800] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.948407] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 185.958469] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 185.964666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.978565] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 185.986978] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 185.995100] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.001442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.011225] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.035164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.047262] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.070811] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 186.080143] audit: type=1400 audit(1567970477.199:45): avc: denied { create } for pid=7485 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 186.109703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.126418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.140097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.150507] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.161162] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.173459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.179669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.187712] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.195715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.203555] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.211154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.221009] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 186.231485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 186.239528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 186.268694] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.279882] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 186.291317] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 186.301648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 186.310203] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.330152] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 186.342441] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 186.348582] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 186.366848] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready 19:21:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800a1695e1dcfe87b1071") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c5602067fffffff81004e220000000058000b4824ca945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010009080800414900000004fcff", 0x58}], 0x1) poll(&(0x7f00000000c0)=[{r2}, {r3, 0x3}], 0x2, 0x0) [ 186.378561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.390059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.409673] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.419894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.430753] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.437349] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.450868] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 186.469056] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.477904] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.488963] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 186.497053] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.505715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.513915] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.521519] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.527909] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.537338] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.545749] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.556214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.566640] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 186.576154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.583538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.597882] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.605718] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.612136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.620243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.628191] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.635846] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.642217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.649382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.666762] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 186.681198] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.691193] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.699758] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 186.721721] bridge0: port 2(bridge_slave_1) entered blocking state 19:21:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x100, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x0, 0x400000002}], 0xd9) getresuid(&(0x7f0000000a40), &(0x7f0000000a80), &(0x7f0000000ac0)) lstat(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)) rt_tgsigqueueinfo(0x0, 0x0, 0x16, &(0x7f00000002c0)) ptrace$pokeuser(0x6, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket(0x0, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@initdev, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000cc0)=0xe8) fstat(0xffffffffffffffff, 0x0) setregid(0x0, 0x0) r2 = getpid() ptrace$pokeuser(0x6, r2, 0x388, 0x5) getpgid(r2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) getresgid(&(0x7f0000000d00), &(0x7f0000000d40), 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(r3, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x0, 0x400000002}], 0xd9) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x0, 0x38}], 0xd9) r4 = syz_open_dev$evdev(0x0, 0x0, 0x0) write$evdev(r4, &(0x7f0000000100), 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x38}], 0xd9) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000dc0)) getegid() r5 = syz_open_dev$evdev(0x0, 0x0, 0x101002) write$evdev(r5, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x0, 0x38}], 0xd9) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x101002) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 19:21:17 executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) [ 186.728152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 186.738674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.759538] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 186.780571] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.791160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 186.809639] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.828164] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 186.843828] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.860400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 186.869493] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 19:21:18 executing program 3: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 186.897113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.906303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 186.921286] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 186.930472] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 186.940843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 186.950601] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 186.958800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 186.975424] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 186.987490] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.002869] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 187.017266] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.026778] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 187.042190] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.054255] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 187.062258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.069709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.077360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 187.084968] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.095051] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.104313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.114488] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.120517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.127833] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.135423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.144045] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 187.151137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 187.159916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.190616] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 187.197775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 187.208862] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.230157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.248907] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 187.271371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 187.335478] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 19:21:18 executing program 4: r0 = getegid() r1 = msgget$private(0x0, 0xffffffffffffffd9) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/40) msgctl$IPC_RMID(r1, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x7, 0x95}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) close(r2) r3 = socket(0x18, 0x400000002, 0x0) close(r3) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) write(r3, &(0x7f0000000140)="ad18f05de2f4ef18", 0x23c) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000480)="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", 0x1000) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f00000000c0)=0x9) writev(r2, &(0x7f0000000080), 0x100000e7) getgroups(0xa, &(0x7f0000000180)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]) r5 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmdt(r5) chroot(&(0x7f0000000040)='./file0\x00') setgid(0x0) 19:21:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x1004, 0x0) mount$overlay(0x400000, &(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = open(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f00000004c0)='cgroup/procs\x00', 0x48, 0x0) 19:21:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @loopback}}, 0x1c) sendmmsg(r0, &(0x7f0000000440), 0x400000000000211, 0x11000000) write$9p(0xffffffffffffffff, 0x0, 0x0) 19:21:19 executing program 2: r0 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000040)=""/40) 19:21:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x28, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) 19:21:19 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1a00, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:21:19 executing program 4: r0 = getegid() r1 = msgget$private(0x0, 0xffffffffffffffd9) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r1, 0x4) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/40) msgctl$IPC_RMID(r1, 0x0) setrlimit(0x8, &(0x7f0000000300)={0x7, 0x95}) r2 = syz_open_pts(0xffffffffffffffff, 0x0) close(r2) r3 = socket(0x18, 0x400000002, 0x0) close(r3) setsockopt(r3, 0x1000000029, 0x2e, &(0x7f0000000000)="ebffcbff13b9fd812eaa4e713048e69931929648", 0x14) write(r3, &(0x7f0000000140)="ad18f05de2f4ef18", 0x23c) setsockopt$inet_opts(r3, 0x0, 0x1, &(0x7f0000000480)="65df6c2c2cc0a9ed685f9264142a793d24fb42de98dfe4183534aed2e3a9cb9c1f40bff1b64b684809bf43cec3aabd3f929d0c566577553c57c2c326cca970e2617c067698214cb0c5879606c5ace12d456ca414b77dacd732bd7db133e3f4f782772efacc3df4c7708c2522b8258bee19d06b3094ea895573e818f7b53305dd9659436cf0e3eff3644aa465beb4803dade313f4f7e7d7faeac101fc4b119f670ccd6ab727fb0e98e3bf01e4f90110273e985d2fefe804ccb2a72da29217a52b3b7c8dbba17a7dd5a4e2b224bd0b08fd10b1c4ced72ea41c2dabedc611b2a307ba0f3d231663cdb7b2506f8b67ac35e4df1df8e5388a0005458bee3de7faf8237b74feb066fff8ed619809a08c07735e10e7e60a30064c261e8dc712fef2f822cf37c09a89a7a5dc09616d3d7386ff8227a8104f03d370193a4061bcf9c09ea393b5f80e3c069a3fac091ef97af3083f9972d1caaa3d9bf049af3262169565c30df473e1a8ed81dbb8711bf77fc374d47ab374296f9f470f686839d9aa6dcefe79586dae1eb64288bb05aaedfb1a8ab49e54dc94807856a2f2de76d1fceaa444168c881acc061a989e30b48e677aaf5860312cc56e5f15f3af9029a8900bad0a8f66f44c2d5b111d2fda77dd54e0628859b7c62780562ae93747d83a185b8099d35f9f6644d4c5e94b69e3b683ce7cc6d6184f46c834660cc3601e9b50f5e44c23978d5b2e436b803ee2d9625004c7ac7c6b8b961d61a355407696a9bc2ccf2d8f534551c4042201aaf5a22b38d7f0fa1cdb0ec3760452f9a9900c3a0a031d6d9a2d976ffec9ca0e990d9d8f04f0829c357d84d82703a9a5533711679e02a66e1e069ffe8b532a034fdc14468c90d28abe50d30bc18c05b60f6643fea14a5f931539a42a74d8e851cfab37fd8467ad609c85aed32574f39a4b7f2c77966bfceb30a5cb75b5cd291c2988e53b7ddd18e9b0baa1409879dd4d551be2e7725b7132cf8f2cf9036327867fd4b2e2ce1cf9c6dbfa978836b7b0850548d22d1059bdf8e19c23b70a6f4a8f33dcac97ee98992e7ce754974e1ccfafab4c662ec72336889340d07742d6cd49ccc445189c601c23e581c77d4433101e286c856c7af52f022809272d119a364838f39b53b5c429dfdf54211d7f682150ac97bbb4dedbdeaa0a5aff242643bc054a191c73e640e7fd8b9212cffaffcf0f9a874a858afc13fd10332debd81ff10b3d5dd89e6e1260b7550511d004d879499117ee123984b2a2c27feb5cb366690e187ca3b785a1cd863c2688a7fee4f12291316730bd220b40159494ead9c0b4a0a36978a66a9faa965e027075b351be72cb5cebfbd0e3a125de249c492d195495be701361abe630ebe544b89c984b728fefb9ae5d509c1a731f48a8b63f783f6c8ab035cd489a0e5b4cbe30a42f61123c6ea9ada98292ddafba0502219d68b46ddf5fdbcda8777b96babf063ed757c97cd9f56dd5234a6bab89d9cdf4d955503ff99f49d94cdd7e89baef30a7843b836e8f102db4af355dfd3f7eba66f144526cb98f4d3f835aa1b5c259a0c7598d4f7f6668b46c68ca8d0a9419ee4113657f0ef274ea9a8951a98f699cca4b4c7c753282d30794ca3e3ff00a9b56d6d427d9233e344226ea297fcf7ed04261610660129e24b6aebaa20e67b4d3968771c9f38a2f2fc06c213fbe40be9a6dbbee836508d7b5d017a9100dc99dfd01fbc8de540e4edfa3778ba36e6075b1305dd532d064fc026fb4ac0a7a45258a6f2d74809c423b26b632c5fefcb6f9cd1cce2a33128becb728cb3844863f001834e671587d3bc553e52b879a7c8e695c469a9a7ab60988c2474d281aa94b25e7b909a2fedd49518cd83bf21d1046a6216103ab89db5587cbcc5a3309d55f25dda63b17cecab74a3ca81c4c4863d9e493150982c1f4fdb81fbe1562b9e335f693d1e29e26d61b43ab8051cd84ed728c5b9733742383a77a77e06590b954d29990cadbe682c4ad251d27bc58f41d1e442cb8d63ff57786bbfae92102c9d389297df569a41d0baa2cba979defa2a09afac6a3908640d98d117ab54b69343dcf74ec8545dbdf8fa365af533f2909c863cfaece06d44227e6253cf2dcfc3e4631df610ee3c33e41e8e1a0b9f4557991b66bad326d1166a22e73a3577455d03e124b8db8f58fdfd3b5f4655d936be3dbe442708ee73730cb4998b04eb60f28c05ab205a573b4ef0f747a9b23f23459058f8fde835155148ecc03ffe929d70c902f8f4fd8a07cebf66506bd9914f54265221d5681d59d290a3861f8e62aaf2af71edfe7b4b272372fd45c94ec668cde509df5fdd2a83a67a3b011b081a49b3930774b594f7089c4637c47c4512c420e420ec1c9374e176af054be52d1d6f1b6f15d9dff93aa1b91623015083a6c7ba47e96e3ca454ef6f49d7112e02700677cad34b4e907b6f5064ecb01fc143e9c13c4a66c3f37d1c1501111776d441d7d68fad2fe2684a22dad66651a6863dc067c0ec40221c26fe92351df0d974e749764e145890235a33705f0d25d340f78b31310fcacb849a779f4e7aa6bc57c06a478ad78e2436c57c58c3e19283b28da5a7e88350be2637aa684540b77ea50cffcae9f2b1afe0bf8d2f157c9f3b932ae27d4c28afdab1e03d48f76e31c2e89d2597c81663a513cf32e1b64cf8c46236dc42bb8607a25814f2d2841b796a3e11581362a7684ae0674a718b1f43deaec73c2ab80d799ad5dfbfa641aeb48141f8536176d67eb67054e1ce2213b90666f1e1e5590d6f0b308166b108e1b4fd41d9d265ed97529b5ace375cd10e01c9331f48555ee39904b1c7bda78aec943e261a5f8f1e55d36361a1d5386fe362e9f299c119b873effb7fcc398a5332160038966a5da053742f78b678df5cd7d9aa5353e1738ffdc0c2c92bce31093024c127f79acf1e385e931fe248608984c5abe04a5106cdc7c27b0494099ec7263561a182519a0af67971ac626b9e76d35ab30dfa6498e640ad94c6c1d5e7520ca6c4a2d877f66e60d17b6a1ade2a7456a487ac2f4b63560c3d7c9397424f964fd80dbfc339685856b661f99363f3d9dbb53b996156e87c5b95408005b8936e5b4f42714c37f53db1027714ed9e6f1c920a8e12815c79c398bbe6d3da377271b823377901e4815746fbda5667b4d9ae4ebaf3c3aaa7c76fcce72fb5ee74b187e21919e38cd2eb6cc3a93e0bca53f3df5f58d950ea3b33affa7276e85318744dabc8900751b5303f9253e92611855fbd5492a9b70050a2470e9018746815b2a67e05ec2a69cbac46cb3c513e387c232dc95ff61511c8d71974fc42003bf7598190fb99edb820e0a3fdba2ab5377ee00528dccbaf71ea12764b189598ab04a0ac77bcdfaa5770b2ad4ed0d0eefa3234f477dfe7cc2e19b906393c6615d1ba2c952b02fc581666d63ad42074320fe0062138d38a8b556b11fbb914dc99a3fbb934914a6a48993c40db2dfb85f01d24de000d86d26d63b9842ddd8bb467522695cd4e64f31b48291490274ddfa616bbedcf7a7c857e4554a0176ee943ff593a38e527a8f9151bce0a6ec817c797005fffc0dbb0c7d11fa79ae8d66e7f1dbb6095a283d0aad1a45bb21a2eb0f2cbda214a8806b23f91e9471e3d9e9d847a9cd28e416251d48389664e3999a9eae6bbc4e6b0b847490b62bf2a8fefdffe18fbd0071fb1f776006490d73cece86de3d574574cf48aee33bed1e96493e929f6fec1c2222b39155209cf8a65ea6a914c017a5178862200238bcaf0a06e01a9fcad3b4b65194907ef66fd27e154cc5c485e3233a16ac6e346b92d249e0d4f35084baeb73c669a850cecff7608752ab14f0532728c8f545864ad32128188b2c247d5f476daa6d229bae55a27f50f48f5df357c9aec71d6111266ab7f10dda3d166f856522da7882c58a7bdad06cdd0e2d7534d0414aa63425a7c043a55f418a7dd5f93ce4b002e22041904d54beb5d735cbc1a7d37ad11f32c2e2e1f5ad60594cd035c92f2bb4e2b31867aae552968f3ec2f6680ccfc66158f2b40d60b10c96fc95b7d4cd8d9c22ac5de4e1bfe391ddbb87cffaf66789b58604b9840d1af53c0c10c49c2031594824fe8ef017bb87d1f4b7c4e7f16b4c4e015a2ac16990602ef0961c420cf8e624c79ff3811cbdccf4fd268d05904c50f5e29a83e06aced96cc884fb7c3d4ad04b49b7799d1225838046c773ba3d0192239f6f6ff65b1210ab35c43a5eefa495efeafd55fdf61625991cc8a0ae8feba9eae47d49e505121655ec7896211c5ef7e2e37893ce6534141d5e1570e878af1220381b3b9a9561baa7a86d30c71955f14bbeb96bcef58518a18b4f23d93dbc1e29b85cd9d32a2d7afb4d57341e7cbaca03d4b5532ce46a8a5bbbb88e12c1d6f30bc709626821d3e7d584d26685ba875f57b314d25af9e22e85060295b3e2889a1a33a6d7936f25ca82b872902923337136d0cbbfdb26f92922faae256d1c8c545267b96f71ca0194ce7ac1e0a8fe1689948698be0d5b042e0e99ace5884e916c77dbf2919c7f19bcad83ba27ff00b0c3b1fb2ca8f7ae3855b8aa20c96f4b86f9b48737d610e650b722ef32e395dcf092e8443c68165502bc256c4d6a52e751c59728a7ac6004d630c564ef7c5700237c27e05350c8fa51d8dbdbd09cd137c8cc2b4d754bdcaf392764a21800e4aee15863ef07139c21e80dce97fc95598f0e9a779591da93e780b23c1eea969184aadebad70efe58231fbcd7efa421e2e5991bdc293e6c453abea8a1cb401db1ec3959b99642e432d5fee2144bb8a3a7cf61bb85ff735778ba3a6cab5b003e7964e46bba5bc4f42b5124fd004e7a1a63a4f553a4f8b3adb588875376f22f785498d16e076acf6355c46090d390712aec78c578e1873ba51fbf679a2aa45081b216ebb319d5c0d4507f11f6783452b51d6689654ab5b5b0b511a47561c96ebceaa0a4cf1eb31528edcb6e22acdab41ad500293e94426efdd2a6b630acbb8990774ace768c361b28c91ed0ca2decf2f50ca351185fc26434ba97d4bea15fd74cda1c081416e3c7135d0232ba6e2c15d23ee54105f7d35efe6eaf31934393d25b84fd24fe8574eb8ed0aa0c1ace05bf99257c2e94c33721f3036b3a75a95085c53d40dc7cff54bc0dd1794edc06b63b289560fe5a91d5d2dc7a948fa68b827c7fbcfdc0ac7a3e6a414dfed3dbf8fb7eda7b36830d241735971e59cb204a578298961d6ef827594bdf921f13e30e2e8041392a8cdc3611cd388528ac3615a5f7f6e473d71d2bf659969f01eeeda12c3904633ab005e6c0ac5343764994afeac57cd951d8c035157590d6ae3bc66f10eedcd976f5f737d82287f2ef603d9c6eba5c18ec89bec52c017c58d6d5c5ca59a011df08b745517ec8b8a8e2db7d4ee813f2f5bc6602148b6a5be3f2ed8c68c12947986016bc9b4db9d7f9aeb955aaa10faaaf2f77294a333b7554716b570091fd2442d6c2bc272d214c92a7dad17fbd81169a49f956751787eaed5544155079ed57fd060c08c975a099bc0ba1b37f1eb61fd777b9624999e86ffe62a25e3d8717d50fcb9738420b19fe28cdb00ffae3920f5e26143de532158ebb3e16a30fef79647d30394a2166c6911950c7b4ae4e4b312d7383457379f5000d840bc081cd489ec6462f5d1c9f4dd251d96e9a49a16bb36848a66b61abb4d8a4687349e229042920cea47db8e8c32a195e01b1b89e884275aae5fc62063b784c527f33ce0e98a7d5dd646b4500d2203bc070ff691ada5228cabbd11a11521937b9d953", 0x1000) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r4, 0x8004741b, &(0x7f00000000c0)=0x9) writev(r2, &(0x7f0000000080), 0x100000e7) getgroups(0xa, &(0x7f0000000180)=[r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]) r5 = shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x1000) shmdt(r5) chroot(&(0x7f0000000040)='./file0\x00') setgid(0x0) 19:21:19 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x86, 0x0) msgrcv(r0, 0xfffffffffffffffe, 0xffffffffffffff90, 0x2, 0x800) 19:21:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) 19:21:19 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x507, 0x0, 0x0, {0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, [{{0x1c}, {0x4}}]}]}, 0x48}}, 0x0) [ 188.192870] audit: type=1804 audit(1567970479.329:46): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir130926928/syzkaller.sJ5h5y/2/bus" dev="sda1" ino=16542 res=1 [ 188.256869] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 19:21:19 executing program 5: creat(&(0x7f0000000040)='./bus\x00', 0x0) r0 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x0) 19:21:19 executing program 3: [ 188.339127] audit: type=1804 audit(1567970479.419:47): pid=7542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir130926928/syzkaller.sJ5h5y/2/bus" dev="sda1" ino=16542 res=1 19:21:19 executing program 4: 19:21:19 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0xc32f, &(0x7f0000000440)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x48280) r1 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r1, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x3020) 19:21:20 executing program 0: 19:21:20 executing program 4: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r1, 0x0) ftruncate(r0, 0x48280) r2 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r2, &(0x7f0000000080)={0x14}, 0xfffffff4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000000)='./bus\x00', 0x0) 19:21:20 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) dup3(r0, r1, 0x0) 19:21:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x62, 0x0, &(0x7f0000000040)) 19:21:20 executing program 2: [ 189.178317] audit: type=1804 audit(1567970480.309:48): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/5/bus" dev="sda1" ino=16556 res=1 19:21:20 executing program 3: 19:21:20 executing program 0: [ 189.241652] audit: type=1804 audit(1567970480.309:49): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/5/bus" dev="sda1" ino=16556 res=1 19:21:20 executing program 0: 19:21:20 executing program 5: 19:21:20 executing program 4: 19:21:20 executing program 2: 19:21:20 executing program 1: 19:21:20 executing program 0: 19:21:20 executing program 3: 19:21:20 executing program 2: 19:21:20 executing program 4: 19:21:20 executing program 5: 19:21:20 executing program 2: 19:21:20 executing program 4: 19:21:20 executing program 3: 19:21:20 executing program 0: 19:21:20 executing program 5: 19:21:21 executing program 1: 19:21:21 executing program 4: 19:21:21 executing program 2: 19:21:21 executing program 0: 19:21:21 executing program 3: 19:21:21 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) fchmod(r0, 0x0) 19:21:21 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') readv(r0, &(0x7f0000001500)=[{&(0x7f0000000040)=""/37, 0x25}], 0x1) 19:21:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="11dca50d5e0bcfe47bf070") r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000340)='rdma.max\x00', 0x2, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000300)='io.stat\x00', 0x0, 0x0) sendfile(r2, r3, 0x0, 0x2) connect$pptp(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='scalable\x00', 0x9) 19:21:21 executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x10006, 0x0, 0x0, 0x50000}]}) recvfrom$inet(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x2, &(0x7f0000000040)={0x2, 0x0, @local}, 0x2a977d9df129807d) 19:21:21 executing program 3: 19:21:21 executing program 4: 19:21:21 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$int_out(0xffffffffffffffff, 0x5466, &(0x7f0000000000)) gettid() r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r0, 0xfff, 0x0, r0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000280)={0xf8, "245a865694aae0ab362014414af5d16347d9cdc7991ca38cdddcf25ec8ab62c6", 0x3, 0xff, 0x1, 0x7}) syz_open_dev$dspn(0x0, 0x4, 0x9bc6648ccb836afd) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x80003) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r7, r5, 0x0, 0x8000fffffffe) 19:21:21 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 19:21:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000700)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="f0", 0x1}], 0x1, &(0x7f0000000180)=[@assoc={0x18}], 0x18}], 0x1, 0x0) 19:21:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./bus\x00', &(0x7f0000000400)='overlay\x00', 0x0, &(0x7f0000000440)={[{@xino_auto='xino=auto'}]}) 19:21:21 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f00000000c0)=""/23, 0x17}], 0x4, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000001400)) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'bridge_slave_0\x00\x04'}) r1 = socket$inet6(0xa, 0x803, 0x20) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000001600)={0x0, {{0x2, 0x1, @rand_addr=0xf33}}, 0x0, 0x4, [{{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @local}}, {{0x2, 0x4e22, @empty}}, {{0x2, 0x3, @rand_addr=0x100}}]}, 0x290) ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000001540)=""/186, 0xba) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000001440)=@req={0xfffffffffffffffe, 0x9, 0x2, 0x4}, 0x10) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@rand_addr="a6ac30405bd92f9bea3c5597afc948ee"}) socket$key(0xf, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r4 = memfd_create(&(0x7f00000004c0)='/dev/snd/seq\x00', 0x0) r5 = memfd_create(&(0x7f0000000140)='lotrusted\x1a\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) open(0x0, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x21) r6 = dup2(0xffffffffffffffff, r5) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) fstatfs(r4, &(0x7f0000005200)=""/4096) [ 190.357774] overlayfs: missing 'lowerdir' 19:21:21 executing program 4: perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 190.404023] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.483812] overlayfs: missing 'lowerdir' 19:21:21 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1058c0) read$rfkill(r0, &(0x7f0000000000), 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x802, 0x73) r2 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:21:21 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000008040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000003500)=""/4096, 0x1000}], 0x1, 0x0, 0x6}, 0x0) [ 190.562090] protocol 88fb is buggy, dev hsr_slave_0 [ 190.567371] protocol 88fb is buggy, dev hsr_slave_1 19:21:21 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1058c0) read$rfkill(r0, &(0x7f0000000000), 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x802, 0x73) socket$inet(0x2, 0x4000000000000001, 0x0) io_setup(0x0, &(0x7f0000000000)) r2 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:21:21 executing program 1: perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) dup3(r1, r0, 0x0) [ 190.763913] audit: type=1804 audit(1567970481.899:50): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir811057494/syzkaller.gk91z0/11/bus" dev="sda1" ino=16564 res=1 19:21:21 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1058c0) read$rfkill(r0, &(0x7f0000000000), 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x802, 0x73) r2 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:21:22 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x2000000000000534, &(0x7f0000000400)}, 0x10) 19:21:22 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) ioctl$int_out(0xffffffffffffffff, 0x5466, &(0x7f0000000000)) gettid() r2 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r0, 0xfff, 0x0, r0}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084) r3 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x0) r4 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000002480)=""/4096, 0x1000}], 0x1) ioctl$VIDIOC_ENUMOUTPUT(r4, 0xc0485630, &(0x7f0000000280)={0xf8, "245a865694aae0ab362014414af5d16347d9cdc7991ca38cdddcf25ec8ab62c6", 0x3, 0xff, 0x1, 0x7}) syz_open_dev$dspn(0x0, 0x4, 0x9bc6648ccb836afd) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) r5 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x80003) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r7, r5, 0x0, 0x8000fffffffe) 19:21:22 executing program 1: ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = open(0x0, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x5, 0x8, 0x9, 0x0, 0xfff}, &(0x7f0000000200)=0x14) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000440)={0x0, 0x30, 0x1}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111}}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000004c0)={0x0, 0x3, 0x200, 0x1, 0x7fffffff}) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) 19:21:22 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1058c0) read$rfkill(r0, &(0x7f0000000000), 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x802, 0x73) r2 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:21:22 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000580)='ceph\x00', 0x0, &(0x7f0000000600)="99", 0x1, 0xfffffffffffffffd) [ 190.971848] protocol 88fb is buggy, dev hsr_slave_0 [ 190.976959] protocol 88fb is buggy, dev hsr_slave_1 19:21:22 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20402, 0x0) write$FUSE_IOCTL(r2, 0x0, 0x0) 19:21:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) connect$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) sendmmsg(r1, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0x1, 'w'}], 0x18}}], 0x1, 0x0) 19:21:22 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x1058c0) read$rfkill(r0, &(0x7f0000000000), 0x3) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video2\x00', 0x2, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) socket$inet6(0xa, 0x802, 0x73) r2 = memfd_create(&(0x7f00000003c0)='/\xd2\a\xaa(\t0\xedj\\\xe6W\x14E\x80VfM\'\x80\xb1\xce\x86Wp#\x00\xc2\x11\x04\xb5\a\x9e\x83X\x8e?yE\xec\xeb2-\xbb\vO\xf9P\xd7\xd7\xf5\xa8\xaeW\x8e\xe5Q\xd9\x9ew\x8e}\x868\x9f2\xf9\x17\xf5\xf8;\xd5g\bS\x91Q\xf1a\x0e$9[k@\x0fj\x83\x9d\xb1\xd5\xd7\xa5\xc1\x05ox\xe4\xdc6\x04\xc1n\xf6\xf8\x1c\xf2\xa9\xbb\xbc\x12u\xfd\xeb0bK\xb8A\x93\xb3\x8co\a\xe1}R\xa6x\xde\xb5;\xea\xa0', 0x4) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, "7001e0f57c8cf6270b24e415e96042aae51d871554c11cd59cc8fb47081025bad6b39d77f70a7c0f30f66157a96aae15813f0dceb29700", "a8a4cd01e527e6fd3de45387daf7b1ac786d0e8a75e8904655361fe06f308fe6033a61edb75c8d51c055faf7f4fdb16e0cdaa4276939a341033400", "2f18ffe4532a434e624ac93616105829576904e70bfeb59800f97c97644ab8a7"}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) 19:21:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)={[{@notail='notail'}]}) 19:21:22 executing program 3: ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000580)='ceph\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000600), 0x0, 0xfffffffffffffffd) 19:21:22 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') 19:21:22 executing program 5: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0xb84}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) 19:21:22 executing program 0: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, 0x0) 19:21:22 executing program 4: r0 = socket(0xa, 0x802, 0x88) r1 = socket$netlink(0x10, 0x3, 0x4) pipe(0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x1c) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff01000100d18c00002821d5cc0600d4d190dc4a1df6377cba0ad02f31e7ceff5bffff00c7e5ed5e00000040000000000000eaf6", 0x48}], 0x1) 19:21:22 executing program 3: r0 = gettid() clone(0x13102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket(0x0, 0x0, 0x0) poll(0x0, 0x0, 0x8000000000000200) pause() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = gettid() tkill(r1, 0x14) tkill(r0, 0x1000000000016) [ 191.649436] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" 19:21:22 executing program 2: r0 = msgget(0x2, 0x0) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) [ 191.752960] overlayfs: missing 'lowerdir' [ 191.769054] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" 19:21:22 executing program 4: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a9"], 0x1, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x95648bda8f835f45) 19:21:23 executing program 0: r0 = socket(0x11, 0x4003, 0x0) sendto$unix(r0, &(0x7f0000000000)="b10005016000009005001b0007000000050004fecea11ea8fef96ecfc73fd3357ae26caa0416fa4f376336acf00b7804be781e4991f7c8df5f882b297be1aa5b23ed00f4c8b2ca3ebbc257699a1f132e27acb5d602000d7d026ba8af63ff37282118e4fd89720fd3872babfbb770c1f5a872c881ff7cc53c894303b22f310b404f36a00f90006ee01b1257aea8c500000002000000000000020208a371a3f8000400000000000000010000000000000000", 0xb1, 0x0, 0x0, 0xaa) 19:21:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x5}]}}}]}, 0x3c}}, 0x0) 19:21:23 executing program 0: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) r1 = inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup3(r0, r1, 0x80000) [ 191.908816] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 191.959919] audit: type=1804 audit(1567970483.089:51): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir557965323/syzkaller.aQUPjm/22/file0" dev="sda1" ino=16574 res=1 [ 191.988946] audit: type=1804 audit(1567970483.109:52): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir557965323/syzkaller.aQUPjm/22/file0" dev="sda1" ino=16574 res=1 19:21:23 executing program 1: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 19:21:23 executing program 0: bpf$PROG_LOAD(0x2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x42], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 19:21:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) 19:21:23 executing program 5: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0xb84}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:21:23 executing program 2: mkdir(0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, r1, 0x2) ptrace$getregs(0x227b7ca0027f5f76, 0x0, 0x0, &(0x7f00000000c0)=""/134) exit_group(0x0) accept4$alg(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:21:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newlink={0x34, 0x6c, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0) 19:21:23 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000fb1000)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590a88ffffff01000100d18c00002821d5cc0600d4d190dc4a1df6377cba0ad02f31e7ceff5bffff00c7e5ed5e00000040000000000000eaf6", 0x48}], 0x1) 19:21:23 executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') ioctl$FIBMAP(r0, 0x1, 0x0) [ 192.392454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pig=7838 comm=syz-executor.0 19:21:23 executing program 0: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:21:23 executing program 4: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r1 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0xffffffffffffff67, 0x2, 0x0, 0x3, 0x0, 0x2, 0x1}, 0x1c) r2 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$MON_IOCQ_RING_SIZE(r1, 0x9205) openat$cgroup_subtree(r2, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = inotify_init1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/105, 0x69}, {&(0x7f0000000240)=""/158, 0x9e}], 0x4, 0x0) epoll_pwait(r2, &(0x7f0000000100)=[{}, {}, {}], 0x3, 0x9, &(0x7f0000000140)={0x8}, 0x8) dup3(r2, r3, 0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)) ioctl$FS_IOC_GETVERSION(r1, 0x40086604, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x1ff) [ 192.638064] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 19:21:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) open(&(0x7f0000000040)='./file0\x00', 0x8000001452c2, 0x0) link(&(0x7f0000000000)='./file0\x00', 0x0) 19:21:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rt_acct\x00') write$P9_RCLUNK(r0, 0x0, 0x0) 19:21:24 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000080)) [ 193.098335] audit: type=1804 audit(1567970484.229:53): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/20/file0" dev="sda1" ino=16564 res=1 19:21:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=@newlink={0x20, 0x6c, 0x601}, 0x20}}, 0x0) 19:21:24 executing program 0: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="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", 0xb84}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 193.137734] audit: type=1804 audit(1567970484.229:54): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/20/file0" dev="sda1" ino=16564 res=1 [ 193.169275] audit: type=1804 audit(1567970484.239:55): pid=7866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/20/file0" dev="sda1" ino=16564 res=1 [ 193.270056] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pig=7873 comm=syz-executor.4 [ 193.301296] kauditd_printk_skb: 1 callbacks suppressed 19:21:24 executing program 5: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000100)='7', 0x1, r0) keyctl$update(0x6, r1, 0x0, 0x0) 19:21:24 executing program 4: mlock2(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2) [ 193.301310] audit: type=1800 audit(1567970484.429:57): pid=7877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16580 res=0 19:21:24 executing program 2: socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) exit_group(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 19:21:24 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x103) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f0100000019", 0x19}], 0x1}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, &(0x7f0000000180), &(0x7f0000000580)=""/4096}, 0x28) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f00000004c0)=""/137) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000004c0)=""/137) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='workdir', r1}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, 0x0) r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) write$binfmt_aout(r3, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x314) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) prctl$PR_SET_UNALIGN(0x6, 0x0) 19:21:24 executing program 3: sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x4baa) r0 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="9c6209e6785ab32971192d6d0fa191d8b2b92f5c1cd7ed1c3287be4ef6f7c6db2bd8fe2d3b346f84a279ff7ca26ddcef7e2140fec335d089615f6a094c228365eca60e263161424439a5ac951c7aca29b4743eb93c5c3643d62018b6f775a8e297f9e1bbf82d4e11340934de69810caa0c5a6009346bcd7158d2cc59b35485d457b9f60e66a81a82d97e1b71258401", 0x8f, 0xfffffffffffffffe) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r3, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000340)=""/199) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev}, {0x2, 0x4e23, @loopback}, 0x146, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffe0}) keyctl$update(0x2, r0, 0x0, 0x0) unshare(0x8000000) r5 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x5}) r6 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@broadcast, @in=@local}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f00000003c0)=0xfffffffffffffd96) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x15, 0x8, 0x3, 0x4, 0x40, r6, 0x10001, [], 0x0, r6, 0x0, 0x4}, 0x3c) setsockopt$sock_int(r6, 0x1, 0x2a, &(0x7f0000000000)=0x1f, 0x4) mq_timedreceive(r5, &(0x7f00000000c0)=""/50, 0x32, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 19:21:24 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 19:21:24 executing program 5: r0 = socket(0x10, 0x803, 0x0) sendmmsg$sock(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@txtime={{0x18}}], 0x18}}], 0x2, 0x0) 19:21:24 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) 19:21:24 executing program 4: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x80000001}}]}) 19:21:24 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f) splice(r0, 0x0, r2, 0x0, 0x100000000ffe0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) [ 193.625871] audit: type=1400 audit(1567970484.749:58): avc: denied { map_create } for pid=7901 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 19:21:24 executing program 5: mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$unix(0x1, 0x5, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 19:21:24 executing program 5: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000100)='7', 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0x0, 0xffffffffffffffff) 19:21:24 executing program 2: add_key$keyring(0x0, &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 19:21:24 executing program 3: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:21:24 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/3) [ 193.914319] overlayfs: lowerdir is in-use as upperdir/workdir 19:21:25 executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000005200e70000010000000000030a7c", 0x12, 0x0, 0x0, 0x0) 19:21:25 executing program 5: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000100)='7', 0x1, r0) keyctl$update(0x15, r1, 0x0, 0x0) [ 194.050134] overlayfs: lowerdir is in-use as upperdir/workdir 19:21:25 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}]}]}, 0x28}}, 0x0) 19:21:25 executing program 3: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 19:21:25 executing program 4: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000580)=""/4096}, 0x28) openat$null(0xffffffffffffff9c, 0x0, 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000004c0)=""/137) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)={0x0, @aes128, 0x0, "d9e89ea4f62c795a"}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) prctl$PR_SET_UNALIGN(0x6, 0x0) [ 194.295770] audit: type=1400 audit(1567970485.429:59): avc: denied { create } for pid=7958 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 19:21:25 executing program 5: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 194.337437] audit: type=1400 audit(1567970485.429:60): avc: denied { write } for pid=7958 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 194.467665] overlayfs: failed to resolve './file1': -2 19:21:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x1c0, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0x10, 0x6}, @IFLA_LINKINFO={0x198, 0x12, @ip6ip6={{0xc, 0x1, 'ip6tnl\x00'}, {0x188, 0x2, [@IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast2}, @IFLA_IPTUN_FLAGS={0x8}], @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast1}, @tunl_policy=[@IFLA_IPTUN_LINK={0xfffffdb5}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_TTL={0x3}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_FWMARK={0x8}], @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_ENCAP_LIMIT={0x8}], @IFLA_IPTUN_PROTO={0x8}, @tunl6_policy=[@IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLOWINFO={0x8}, @IFLA_IPTUN_FLAGS={0x8}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @empty}, @tunl_policy=[@IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TOS={0x8}, @IFLA_IPTUN_ENCAP_FLAGS={0x8}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x8}], @tunl_policy=[@IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_ENCAP_DPORT={0x8}, @IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_ENCAP_SPORT={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_TTL={0x8}, @IFLA_IPTUN_ENCAP_TYPE={0xfffffffffffffd46}, @IFLA_IPTUN_FWMARK={0x8}]], @IFLA_IPTUN_PROTO={0x8}]}}}]}, 0x1c0}}, 0x0) 19:21:25 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) llistxattr(0x0, 0x0, 0x0) 19:21:25 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x67, 0x5, &(0x7f0000ffb000/0x4000)=nil) 19:21:25 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket(0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19:21:25 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)='.') [ 194.577271] overlayfs: lowerdir is in-use as upperdir/workdir [ 194.613343] overlayfs: lowerdir is in-use as upperdir/workdir 19:21:26 executing program 1: r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="01"], 0x1) close(r0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 19:21:26 executing program 4: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f0000000900)=ANY=[@ANYBLOB="01"], 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 194.815930] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 194.834611] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 194.851613] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 194.885979] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'. 19:21:26 executing program 2: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102c9130001000180000050000000586700a28663", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, 0x0, 0x1000, 0x0, &(0x7f0000000580)=""/4096}, 0x28) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f00000004c0)=""/137) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='workdir'}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000380)={0x0, @aes128, 0x0, "d9e89ea4f62c795a"}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) prctl$PR_SET_UNALIGN(0x6, 0x0) 19:21:26 executing program 5: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:21:26 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)={[{@fat=@allow_utime={'allow_utime'}}]}) 19:21:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000580)='logon\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000180)='keyring\x00', 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) 19:21:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x28, &(0x7f00000000c0), 0x4) 19:21:26 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, &(0x7f0000000040)) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000640)=""/246) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180)=0x1, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, &(0x7f0000001080)=""/246) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x7ff, 0x10, "94a182fc977a0da9ae12a58e7e0d6a23ee080cd24426dbc8", {0x0, 0x4}, 0x5}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() pipe(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) r4 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x0, 0x101003) perf_event_open(0x0, r3, 0x10, r4, 0x1) write(r2, &(0x7f0000000340), 0x41395527) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b7}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) [ 195.100325] FAT-fs (loop0): bogus number of reserved sectors 19:21:26 executing program 5: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) [ 195.171233] FAT-fs (loop0): Can't find a valid FAT filesystem [ 195.193636] overlayfs: lowerdir is in-use as upperdir/workdir 19:21:26 executing program 3: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=')', 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000000000)) 19:21:26 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000240)='./file0/file0\x00', r0, &(0x7f0000001340)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) faccessat(r1, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) [ 195.256726] FAT-fs (loop0): bogus number of reserved sectors [ 195.267384] overlayfs: lowerdir is in-use as upperdir/workdir [ 195.292320] FAT-fs (loop0): Can't find a valid FAT filesystem 19:21:26 executing program 2: unshare(0x40600) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19:21:26 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 19:21:26 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000000c0)=0x4, 0x4) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x80, 0x4) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x0, r1}, 0x10) 19:21:26 executing program 4: r0 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='?', 0x1, 0xfffffffffffffffe) r1 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)='?', 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x0) keyctl$revoke(0x3, r0) 19:21:26 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) memfd_create(0x0, 0x0) 19:21:26 executing program 5: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x5) 19:21:26 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fanotify_init(0x2c, 0x0) 19:21:26 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0500000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 195.869980] audit: type=1804 audit(1567970486.999:61): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir351156033/syzkaller.qq8I6I/20/bus" dev="sda1" ino=16609 res=1 [ 195.929737] audit: type=1804 audit(1567970487.039:62): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir351156033/syzkaller.qq8I6I/20/bus" dev="sda1" ino=16609 res=1 [ 196.027143] syz-executor.0 (8063) used greatest stack depth: 22240 bytes left 19:21:27 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) getsockname$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) 19:21:27 executing program 3: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0500000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:21:27 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001600100001000c00b200000000000000000008001b0000000000"], 0x3c}}, 0x0) 19:21:27 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x2b, &(0x7f00000000c0), 0x4) 19:21:27 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', 0x0}) [ 196.217240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. 19:21:27 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) 19:21:27 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x16b) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000000580)={0x2, 0x4e23, @local}, 0x10) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1}, 0x0) sendto(r0, &(0x7f00000000c0)="2f612062a151371bd70b9ff3939091d1a03e58598a330206bf9f7275aa7cefa7ff8b52a1f474eb28aa9b962507f321382c12f9f893ac4487e6c5aad35d5ef2ec3bf5e9f430466e964ca513b182bed44505faf8281e046b7b22ebbaaae1a5c64493500dc69cfeb72fe26773421d7a0134e1dba85b7c0f4c3eebc3574b1538ecd84e71518a8c9ddd74bbae6b7ba675d9881205483ae16737aa8ee95d9e225df5b90503139fdf0dedee9e41b60756418fa9b0c5beaec0cfb954df1396a707ec27a8632bd3c039afe7ce9b", 0xc9, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4000000000001b9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe2(&(0x7f0000000040), 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000240)={0x4, 0xfffffffffffffff7, 0x81, 0x9, 0xd, 0x5, 0x6, 0x20, 0x1, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x7c774aac) socket$inet6(0xa, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) syz_open_dev$usb(0x0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) shutdown(r0, 0x1) [ 196.271643] audit: type=1804 audit(1567970487.399:63): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir811057494/syzkaller.gk91z0/24/bus" dev="sda1" ino=16605 res=1 19:21:27 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r0, &(0x7f0000003540)=[{{&(0x7f0000000500)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x0, &(0x7f0000001700)=[{&(0x7f0000000580)="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"}, {&(0x7f0000001580)="7052f50f433b1cf18ee5eb1625fb31bb1e5a73579d0c2ceb760722be77d76f973edbb239fc974bd8ff26146334bff78fd1f1cad7a613aac667cf031b28443be2ab49789e8051668cb6105e7b2ef36f35f310b952664521c080db2b1604029917fbbe27bc699f83cdf599684392d1ebb186d51556bc06b71dcbc7458b13829bf07bc2d6856d7a3f49410075ee41f25c19a9ddedb61711c1d1fe40f9510f519eb25d891626c6419a"}, {&(0x7f0000001640)='\\'}, {&(0x7f0000001680)="de2096fed2c49a8c0373eebd7776f55e1c142b4c751bb6e74b4ee536621705ba5736e8a91b3fed6ba53201a826174bc96219163a138f140f65fd6349c90935d8ebf870d6eb52172ed6accbd49c4eee53cae6a8507e640cc08f9c91a1584d5fcfdca089"}], 0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="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"]}}, {{&(0x7f0000002a80)=@tipc, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002b00)="8e8efbc1477a7679862579dbedd18c86495e"}], 0x0, &(0x7f0000004980)=ANY=[@ANYBLOB="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"]}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003080)="04"}, {&(0x7f00000030c0)="9e952e6430862523cdd3d093b8ca34dfb017381f86175ee0cf5938c7bdf0a805e4a6"}, {&(0x7f0000003100)="c4a28e604994427ef69fde3bff37c410fbd74f81670484a09f793198b4d731550d17994c89c7f7881cbde0165bddf2524a3c6929f571e5e174fe9f14c4f982f4cbd0c7fe24dc4c161598f3c2adb629573cf42e8cc836f47bd750b3f04a5366d92fe14b28f6353a5671a327aa2b17e112035676273656cbe8fb0e1571ba1f3b31fffaef3b56c7f684625932e166929a51667ae9a9f0e6b81a6aa7849db6f13afce8f5b8b43f6aff"}, {&(0x7f00000031c0)="3909b86e2fe8689cd3beab532c11fe"}, {&(0x7f0000003200)="b835"}, {&(0x7f0000003240)="550d20498b6d72ede2e9d3753af542c8c4cc5c398716d32c07e0966fc0dd02045636929c016f19321b944ba234351b0dcf7f7d7d521d98d71216ab1453d184ad13a737adbadf758ea00ef48e7afe5268ac0df5327cb9dd77ad204a8dd8a5756534ee36646563a676e569aa47d4657e8e7a81dd7e35833e7bc09dbc8c2d6022ea009ea551e0ea15c487b3885dd84b402e2d1fe96bf7b517da5dfeffb3ce31abd0cd6128cb17fde745eeeeb91d3540a15327a2e3419ffb178add1ae2e966fab074b56136cc91a604af0bb0a1674161f5cd4a08"}, {&(0x7f0000003340)="a6410e57cb468a142a64386a1c93cf1fbaa8342364b2a06989c93e96e63001118e6dfcd94586d46bf4781157af332815413c7e4852"}, {&(0x7f0000003380)="c9987b1ce520fcc0beb53c60e56f4231a0c375dae1865e8805b2170cb7804c104daea59ecf65548dbc3ed39cd545a5b2e260d1aa71a89cb4ca5eb31a227b5290da2118c0fe3216297100c0e2d0bfc235eff7f7be588fd39a51959bcc955e43beff2efb573d322d65693f789984fed9ac05eca3b14854ae11ed4e725a71b5f5abb37780cad0f7de199ddb"}, {&(0x7f0000003440)="59ab058010e2bc8d687dad75acb7b998fe3778df2d821f4fc82d4fb79c617687a2914e8a4eb9ed732bab382717d56af476bfdbb944eddede56a7b1731b024f1f759be9352cc594482d594d4bbcda011a78fcb46b665967f6e4cac39a91f8e813af050642b9ab89bfdc663c68"}]}}], 0x7fffffffffffe3f, 0x6000000) 19:21:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x2c6) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000580)={@remote}, 0x14) 19:21:27 executing program 2: perf_event_open(&(0x7f0000000040)={0x1000000000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) [ 196.403692] audit: type=1804 audit(1567970487.409:64): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir811057494/syzkaller.gk91z0/24/bus" dev="sda1" ino=16605 res=1 [ 196.463881] audit: type=1804 audit(1567970487.409:65): pid=8099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir811057494/syzkaller.gk91z0/24/bus" dev="sda1" ino=16605 res=1 19:21:27 executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x100, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x38, 0x400000002}], 0xd9) fcntl$getown(r0, 0x9) getresuid(&(0x7f0000000a40), 0x0, &(0x7f0000000ac0)) lstat(&(0x7f0000000b00)='./file1\x00', &(0x7f0000000b40)) r1 = getpid() rt_tgsigqueueinfo(0x0, r1, 0x16, &(0x7f00000002c0)) ptrace$pokeuser(0x6, r1, 0x388, 0xfffffffffffffffe) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000bc0)={{{@in=@initdev, @in=@broadcast}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000cc0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0x0, r2) getgroups(0x0, 0x0) getpid() ptrace$pokeuser(0x6, 0x0, 0x388, 0x5) getpgid(0x0) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) chown(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) getresgid(0x0, &(0x7f0000000d40), &(0x7f0000000d80)) r4 = syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r4, &(0x7f0000000100)=[{{0x77359400}, 0x0, 0x38, 0x400000002}], 0xd9) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x1, 0x38, 0x400000002}], 0xd9) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}, 0x0, 0x38}], 0xd9) r5 = syz_open_dev$evdev(0x0, 0x20, 0x101002) fcntl$getownex(r5, 0x10, &(0x7f0000000dc0)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000f00)) getegid() write$evdev(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x101002) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x20, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000100)=[{{0x77359400}}], 0xd9) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 196.678959] audit: type=1804 audit(1567970487.809:66): pid=8128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir351156033/syzkaller.qq8I6I/20/bus" dev="sda1" ino=16609 res=1 19:21:28 executing program 3: 19:21:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = msgget$private(0x0, 0x0) msgctl$IPC_STAT(r1, 0x2, &(0x7f0000000340)=""/199) 19:21:28 executing program 4: 19:21:28 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0500000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:21:28 executing program 4: 19:21:28 executing program 1: 19:21:28 executing program 3: [ 197.068950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8150 comm=syz-executor.2 19:21:28 executing program 0: 19:21:28 executing program 3: 19:21:28 executing program 4: 19:21:28 executing program 1: 19:21:28 executing program 2: 19:21:28 executing program 1: 19:21:28 executing program 3: 19:21:28 executing program 4: 19:21:28 executing program 2: 19:21:28 executing program 0: 19:21:28 executing program 5: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x4002) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) r3 = open(&(0x7f00000004c0)='./bus\x00', 0x2, 0x0) ioctl$PIO_FONTRESET(0xffffffffffffffff, 0x4b6d, 0x0) write$P9_RATTACH(r3, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0xf0500000000000, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:21:28 executing program 1: 19:21:28 executing program 4: 19:21:28 executing program 1: 19:21:28 executing program 0: 19:21:28 executing program 2: 19:21:28 executing program 3: 19:21:29 executing program 4: 19:21:29 executing program 1: 19:21:29 executing program 0: 19:21:29 executing program 2: 19:21:29 executing program 3: 19:21:29 executing program 5: 19:21:29 executing program 0: 19:21:29 executing program 4: 19:21:29 executing program 2: 19:21:29 executing program 1: 19:21:29 executing program 3: 19:21:29 executing program 0: 19:21:29 executing program 3: 19:21:29 executing program 2: 19:21:29 executing program 4: 19:21:29 executing program 1: 19:21:29 executing program 5: 19:21:29 executing program 0: 19:21:29 executing program 2: 19:21:29 executing program 3: 19:21:29 executing program 4: 19:21:29 executing program 1: 19:21:29 executing program 5: 19:21:29 executing program 4: 19:21:29 executing program 3: 19:21:29 executing program 0: 19:21:29 executing program 2: 19:21:29 executing program 5: 19:21:29 executing program 4: 19:21:29 executing program 1: 19:21:29 executing program 3: 19:21:29 executing program 2: 19:21:29 executing program 0: 19:21:29 executing program 5: 19:21:29 executing program 3: 19:21:29 executing program 1: 19:21:29 executing program 4: 19:21:29 executing program 2: 19:21:30 executing program 0: 19:21:30 executing program 1: 19:21:30 executing program 5: 19:21:30 executing program 3: 19:21:30 executing program 2: 19:21:30 executing program 0: 19:21:30 executing program 4: 19:21:30 executing program 1: 19:21:30 executing program 4: 19:21:30 executing program 3: 19:21:30 executing program 5: 19:21:30 executing program 2: 19:21:30 executing program 0: 19:21:30 executing program 1: 19:21:30 executing program 5: 19:21:30 executing program 3: 19:21:30 executing program 4: 19:21:30 executing program 2: 19:21:30 executing program 1: 19:21:30 executing program 0: 19:21:30 executing program 3: 19:21:30 executing program 5: 19:21:30 executing program 2: 19:21:30 executing program 4: 19:21:30 executing program 1: 19:21:30 executing program 0: 19:21:30 executing program 2: 19:21:30 executing program 3: 19:21:30 executing program 4: 19:21:30 executing program 5: 19:21:30 executing program 0: 19:21:30 executing program 1: 19:21:30 executing program 3: 19:21:30 executing program 4: 19:21:30 executing program 2: 19:21:30 executing program 5: 19:21:30 executing program 4: r0 = msgget(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x2, 0x1800) 19:21:30 executing program 0: 19:21:30 executing program 3: 19:21:30 executing program 1: 19:21:30 executing program 2: 19:21:30 executing program 5: 19:21:31 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @null, @netrom={'nr', 0x0}, 0x0, 'syz0\x00', @null, 0x0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 19:21:31 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') preadv(r0, &(0x7f0000000480), 0x10000000000001e2, 0x2) 19:21:31 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) 19:21:31 executing program 3: pwritev(0xffffffffffffffff, &(0x7f0000000140), 0x10000000000002a9, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2) pipe(&(0x7f0000000100)) 19:21:31 executing program 4: mknod(&(0x7f0000000240)='./bus\x00', 0x80000081c0, 0x28a4) r0 = open(&(0x7f0000000040)='./bus\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="000000186a56010000001c00feaf0000feff0060d5706c85c2768511fe870000f31f00000000fa7db7e847e5", 0x2c}], 0x1) open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) 19:21:31 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x11011, r0, 0x0) 19:21:31 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x8}]}]}}, &(0x7f0000001380)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 19:21:31 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1=0xe0000300}}, {{0x2, 0x0, @empty=0xac1414bb}}}, 0x108) 19:21:31 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={[], [{@smackfshat={'smackfshat'}}, {@smackfshat={'smackfshat'}}]}) ioctl(r0, 0x1000008912, &(0x7f0000001f40)="11dca50d5e0bcfe47bf070") [ 200.081849] protocol 88fb is buggy, dev hsr_slave_0 [ 200.087000] protocol 88fb is buggy, dev hsr_slave_1 19:21:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000680)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000400)={0x1, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty=0xac1414bb}}}, 0x108) 19:21:31 executing program 5: openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) bind$isdn(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000), 0x1c) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000480)={0xaa, 0x3}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(0xffffffffffffffff, 0x6) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) setsockopt(r1, 0x10d, 0x0, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000200)={0x0, 0x40}, &(0x7f0000000240)=0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) [ 200.124737] kauditd_printk_skb: 4 callbacks suppressed [ 200.124752] audit: type=1400 audit(1567970491.259:71): avc: denied { map } for pid=8358 comm="syz-executor.0" path="socket:[31062]" dev="sockfs" ino=31062 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1 19:21:31 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x1) setresuid(0x0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8983, &(0x7f0000000280)={'\x06\x00\x00\x00ap\xb0\x02\x00 \x00', @ifru_mtu}) 19:21:31 executing program 1: add_key(&(0x7f0000000280)='big_key\x00', 0x0, 0x0, 0x2, 0xfffffffffffffffd) [ 200.184323] FAT-fs (loop3): Unrecognized mount option "smackfshat=" or missing value 19:21:31 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "887760f5a7645bc4f8cfafd6c8fe2c98de7ba44947a79015f0fe57917c0aa993987a938fdedece7bbbc3fec2d8a09c41fb23010000804b9e07b8ab79ec15ef2818a17900"}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) 19:21:31 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26}, 0x20) 19:21:31 executing program 3: mknod(&(0x7f0000000240)='./bus\x00', 0x80000081c0, 0x28a4) r0 = open(&(0x7f0000000040)='./bus\x00', 0x20, 0x2) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="7e936167800a796a792b6a67110ebe463eb0c2c7ce154c262cc404e761a5b96cc969f2b53bf628d0dd3cc3", 0x2b}, {&(0x7f0000000380)="a8c462839374f8b09aa8934fe82e65ff4c7efa14080aad2931c9083c25fa534439023502f6119fa3778115e95744ccfc842bf5b9b6ace669a54abe57f284aaa5993dfe07f1cf947ed2250715a722b397f6572a7194eddae86176909ebc22c357ac32e3cb5caa4970906829a9bfb405e0387e1da69e42728cdf7938e470f7be1b7f61cc96b45ad44cc97b6ed0eee013f3d374871b8f1380af59fae831d7ce9472e641114fd8dfea51e9e4387a3fa8cf6e27061915eb1df1447d3da7c4c95a66cc39557240", 0xc4}, {&(0x7f0000000100)="2956cccaf1ce0c08e00b57d6d42ca5d2ffc276c70e9b4cb02f3697b300360ff4ebe1c506af04dbeed4243fe7", 0x2c}, {&(0x7f0000000280)="50fc0676fd9a36c2cf1a86f0c23a4681092f447f8444e0a93d96984a02726ecc9b21d8c5c79f982698cd17a41bab5cbf648ac4dfa841d3c4f6daba9ca81be1df4460b99a0776cc4bad04844791043a2d1e783436c24e5d46847bd040625167be69180ba0a97f7d31b1bfe1b0e91a7f62a58c3781784ee3ee45e65f3e7b383b438f00ce579a08845ed455e4e76e839fe452ba01409229ff1eae9a74e1fc2206df920a38e76c8c00150870558a06cf3e355df0fe55262ef7f725bcb5177c832320b837688c2c1466b9832b03d944b6a169d9037060d9fb49bf6a72609d4fbbba9ac4df3d62", 0xe4}], 0x4, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="000000186a56010047a27904feaf00feff0060d5706c85c2768511fe870000f31f00000000fa7db7e847e500", 0x2c}], 0x1000000000000093) open(&(0x7f0000000040)='./file0\x00', 0x611, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f000060cff8)='/', 0x0, 0x0) symlinkat(&(0x7f0000000340)='./file0\x00', r1, &(0x7f00000003c0)='./file0\x00') select(0x40, &(0x7f0000000200)={0x53fd, 0x4, 0x5, 0x5, 0x400, 0x9, 0xfffffffffffffff9, 0xffffffffffffff01}, &(0x7f0000000480)={0x9, 0x2a, 0x4, 0x40, 0xf905, 0x4, 0x7fff, 0x8000000}, &(0x7f00000004c0)={0x1000, 0x800, 0x1b17, 0x40, 0x3, 0x9ebe, 0xfffffffffffeffff, 0x4}, &(0x7f0000000500)={0x3, 0x400}) [ 200.347802] audit: type=1400 audit(1567970491.439:72): avc: denied { node_bind } for pid=8373 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 19:21:31 executing program 1: add_key(&(0x7f00000000c0)='\xe7\xfb\xdb\'\xa8/\xecE\x12\xc6\xed\x9f\x98z\xba\xa2v4\xbd\xbbU\xe5?\x16\x15\x86\xae\x91\xfb\xaa\xef\xea\xb0\f\x8f\xc7\x8a\xe0\xed\xb4\xfc\x166E\x1d\xf7T \x04D\x9eI\x8d\x8c\xe5Pp\x1b\vw\'\xef\x05\xc7e2\x15\xa2\xc4\xdc\xfa\xbfR\xd7YS\x89{\x99\xe5G\xaa\xe7\x9fa\xebF\x82X\xf3\xadz\"\f\x89E\x7fh\x04\xe3\xd3*\xa5\xb9\x94]\xd3\x81m\xf4\xc2\x82\xe4G\x81\xdc\x0eTk\x9a@\x1f\xf6e\xbaz-\x14\x8c\x8c\xb7j\xe2V0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503030089063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) 19:21:31 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r2 = socket(0xa, 0x4000000001, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x1, 'lblcr\x00\x00\x03\x00\x00\x00\xb6\xc9\xee\x82\x00', 0x0, 0x0, 0x36}, 0x2c) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000001580)={0x0, @dev, @broadcast}, &(0x7f00000015c0)=0xc) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000300)={r3, @loopback, @remote}, 0xc) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @remote, @empty}, &(0x7f0000000100)=0xc) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f00000003c0)={'veth1_to_team\x00', 0x9}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000140)={r4, @remote, @loopback}, 0xc) getsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 19:21:31 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'erspan0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca50d5e0b38e47bf070") bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000389063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) 19:21:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000), 0x20) [ 200.531868] audit: type=1400 audit(1567970491.479:73): avc: denied { name_connect } for pid=8373 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 19:21:31 executing program 5: r0 = eventfd(0x0) fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000580)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15) [ 200.604963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8412 comm=syz-executor.1 19:21:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000480)={@in, 0x0, 0x20000000005, 0x2, "887760f5a7645bc4f8cfafd6c8fe2c98de7ba44947a79015f0fe57917c0aa993987a938fdedece7bbbc3fec2d8a09c41fb23010000804b9e07b8ab79ec15ef2818a17900"}, 0xd8) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) [ 200.655740] audit: type=1400 audit(1567970491.769:74): avc: denied { map } for pid=8414 comm="syz-executor.0" path="/dev/sg0" dev="devtmpfs" ino=15948 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:scsi_generic_device_t:s0 tclass=chr_file permissive=1 19:21:31 executing program 1: 19:21:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @remote}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x5, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @local}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, &(0x7f0000000400)={0x100000002, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @empty=0xac1414bb}}}, 0x108) 19:21:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0xc, 0x0, &(0x7f0000000040)) 19:21:32 executing program 1: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0xc32f, &(0x7f0000000440)=0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xb, 0x12, r2, 0x0) ftruncate(r0, 0x48280) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x1000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 19:21:32 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@dev, @in6=@mcast2}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="7f000000000000003beb8b3600000000000000000000000010000000003800000077710000000000000000000000000000000000000000000000200000000000000000000000000000fd00008000000010000000000000"], 0x78) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000440)=@req={0xfffffffffffffffd, 0xfffffffffffffffd, 0x9, 0x4}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0xffffffffffffffff, 0x1ee) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x1, 0x7ffb}, 0x14) shutdown(r1, 0x1) [ 201.060696] audit: type=1804 audit(1567970492.189:75): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir130926928/syzkaller.sJ5h5y/45/bus" dev="sda1" ino=16649 res=1 [ 201.205129] audit: type=1804 audit(1567970492.339:76): pid=8443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir130926928/syzkaller.sJ5h5y/45/bus" dev="sda1" ino=16649 res=1 19:21:37 executing program 2: 19:21:37 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0), 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 19:21:37 executing program 4: 19:21:37 executing program 5: 19:21:37 executing program 0: 19:21:37 executing program 1: 19:21:37 executing program 5: 19:21:37 executing program 1: 19:21:37 executing program 4: 19:21:37 executing program 2: 19:21:37 executing program 0: 19:21:37 executing program 1: 19:21:37 executing program 5: 19:21:37 executing program 3: 19:21:37 executing program 4: 19:21:37 executing program 2: 19:21:37 executing program 0: 19:21:37 executing program 5: 19:21:37 executing program 1: 19:21:37 executing program 4: 19:21:37 executing program 0: 19:21:37 executing program 2: 19:21:37 executing program 3: 19:21:37 executing program 5: 19:21:37 executing program 1: 19:21:38 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt(r0, 0x10e, 0xb, &(0x7f00000004c0)="9adc01ce", 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0xe1fc686b68d4aa15}, 0x14}}, 0x0) 19:21:38 executing program 0: 19:21:38 executing program 2: 19:21:38 executing program 3: 19:21:38 executing program 5: 19:21:38 executing program 1: 19:21:38 executing program 0: openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x2, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) [ 206.999088] audit: type=1400 audit(1567970498.099:77): avc: denied { write } for pid=8498 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 207.024291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=8508 comm=syz-executor.4 19:21:38 executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000180)) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="11cba50d5e0bb0e67bf070") syz_mount_image$jfs(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb='[d::],0::0:\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ceph\x00', 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) tkill(r0, 0x0) 19:21:38 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x11, 0x0, &(0x7f0000000540)="5650b441e692763113ef8745ffa395f438", 0x0, 0x400}, 0x28) 19:21:38 executing program 3: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000181, 0x0) 19:21:38 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f00000001c0)={0x0}) [ 207.092616] audit: type=1400 audit(1567970498.159:78): avc: denied { read } for pid=8498 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 19:21:38 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x2, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}}) 19:21:38 executing program 5: ioctl$CAPI_INSTALLED(0xffffffffffffffff, 0x80024322) r0 = open(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, &(0x7f0000000200)) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000440)={0x4, 0x30}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x200, 0x1, 0x7fffffff}) open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x1000000000000000}, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r2, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r3}}, 0x18) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) 19:21:38 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000181, 0x0) [ 207.241572] audit: type=1400 audit(1567970498.289:79): avc: denied { prog_load } for pid=8522 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 207.250693] libceph: connect [d::]:6789 error -101 [ 207.329706] libceph: mon0 [d::]:6789 connect error 19:21:38 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000181, 0x0) 19:21:38 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/17, 0x10000, 0x1000}, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000800)=0x8, 0x4) 19:21:38 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000008040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000003500)=""/4096, 0x1000}], 0x1, 0x0, 0x6}, 0x0) [ 207.456328] audit: type=1400 audit(1567970498.589:80): avc: denied { prog_run } for pid=8522 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 19:21:38 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 19:21:38 executing program 3: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000008c0)="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", 0xfc) [ 207.784188] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 207.833573] netlink: 'syz-executor.3': attribute type 3 has an invalid length. 19:21:39 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video35\x00', 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup2(r1, r0) 19:21:39 executing program 0: clone(0x41fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000200)={0xfffffffffffffffe, 0x1000000, 0x9}) syz_open_dev$rtc(&(0x7f0000000080)='/dev/rtc#\x00', 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000000)) ptrace$setregset(0x4204, r0, 0x200, &(0x7f0000000000)={0x0, 0x237}) 19:21:39 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x0, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x2, 0x400) ioctl$CAPI_INSTALLED(r0, 0x80024322) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x200, 0x1, 0x7fffffff}) r1 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x8, 0x9, 0x8, 0xfff}, &(0x7f0000000200)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e22, @multicast2}}, [0x0, 0x8001, 0x20, 0x0, 0x5, 0x0, 0x3f, 0x0, 0x9a, 0x800, 0x0, 0x80000000, 0x0, 0x2]}, &(0x7f0000000240)=0x100) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000), 0x2, 0x9}}, 0xb5b3c643549e30b6) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0) r7 = fcntl$dupfd(r6, 0x0, 0xffffffffffffffff) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000340)={0x4, 0x18e, 0x2, 0x3, 0x5, 0x22, 0x1a, "e256a76f0e4135427c31d55dd947eeb83d035656", "666ddebeff4afd02962f14d81cda32b31f643564"}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x200, 0x1, 0x7fffffff}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x1000000000000000, 0x0, 0x0, 0x4}, &(0x7f00000002c0)=0x18) write$RDMA_USER_CM_CMD_DESTROY_ID(r4, &(0x7f00000001c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000180), r5}}, 0x18) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000200)) 19:21:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x14, 0x0, &(0x7f0000000540)="5650b441e692763113ef8745ffa395f438bdef6e", 0x0, 0x400}, 0x28) 19:21:39 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000005200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) 19:21:39 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd45fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602db8a4c118a353e0d70d404da006a3d6eef8fb7fcdd0000000000000000000000000000000525d5d3a27cdfe71aa2f0e59c2661b0bb52a6f4728540838bf467b4d045803d035a19b1413de26919fb26db33a40dbb9e82fd6ee0ecb64e6fbf7210a4940a6a443947cc443947329ac8116b32e6a46caa0f5432b5c9edb695e3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x14, 0x0, &(0x7f0000000540)="5650b441e692763113ef8745ffa395f438bdef6e", 0x0, 0x400}, 0x28) 19:21:39 executing program 2: ioctl$KVM_PPC_GET_PVINFO(0xffffffffffffffff, 0x4080aea1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) 19:21:39 executing program 1: semop(0x0, &(0x7f0000000080)=[{}, {}], 0x2) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000300)) 19:21:39 executing program 5: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x72010000, 0x700000000000000}, @random="d6de8e219d55", [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x30, 0xffffff88, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0) 19:21:39 executing program 5: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) socket$inet(0x10, 0x0, 0x0) openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000380)={0x0, @aes128, 0x0, "d9e89ea4f62c795a"}) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) 19:21:39 executing program 1: creat(&(0x7f0000000140)='./file0\x00', 0x82) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x800000000009031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[], 0x1f004}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) creat(0x0, 0x0) 19:21:39 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 19:21:39 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40086607, 0x0) [ 208.380479] audit: type=1804 audit(1567970499.509:81): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir019290882/syzkaller.umctsH/57/file0" dev="sda1" ino=16688 res=1 [ 208.518288] audit: type=1804 audit(1567970499.539:82): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/67/file0" dev="sda1" ino=16687 res=1 [ 208.566060] overlayfs: lowerdir is in-use as upperdir/workdir [ 208.581198] audit: type=1804 audit(1567970499.549:83): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir019290882/syzkaller.umctsH/57/file0" dev="sda1" ino=16688 res=1 [ 208.664876] audit: type=1804 audit(1567970499.549:84): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir226481655/syzkaller.Ks2tFn/67/file0" dev="sda1" ino=16687 res=1 19:21:39 executing program 0: munmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca) madvise(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0xcb) 19:21:39 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x40086604, 0x0) 19:21:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1e, 0x0, &(0x7f00000000c0)) 19:21:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) 19:21:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000e3a333a0daf2f73451c0e17a606fe530cb7d7f933eda02ba18ad181867514fe60077d4dd90123d3ee7cf43548ee858e07dfbdfd45fe31789e70233bfd8115efd90c8c48258f8dbe82e16cf8db95f5b068a9e0000000000000000000000000000000000000000000000000000000000000018287ba7d8807cf077cc420efca6785deb269d0a91985602db8a4c118a353e0d70d404da006a3d6eef8fb7fcdd0000000000000000000000000000000525d5d3a27cdfe71aa2f0e59c2661b0bb52a6f4728540838bf467b4d045803d035a19b1413de26919fb26db33a40dbb9e82fd6ee0ecb64e6fbf7210a4940a6a443947cc443947329ac8116b32e6a46caa0f5432b5c9edb695e3"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x14, 0x0, &(0x7f0000000540)="5650b441e692763113ef8745ffa395f438bdef6e", 0x0, 0x400}, 0x28) 19:21:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) msgctl$MSG_STAT(0xffffffffffffffff, 0xb, 0x0) [ 208.876631] audit: type=1804 audit(1567970500.019:85): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir019290882/syzkaller.umctsH/58/file0" dev="sda1" ino=16684 res=1 19:21:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0xaeec, 0x0) 19:21:40 executing program 5: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1001001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000001c0)=@ccm_128={{}, "e15ed9c5a484a2a0", "0fa59b4505034aad5eb6cb9d2cdb0b30", "2d3d4d88", "9b199ff0580c2bda"}, 0x28) 19:21:40 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0x14, 0x0, &(0x7f0000000540)="5650b441e692763113ef8745ffa395f438bdef6e", 0x0, 0x400}, 0x28) [ 208.979634] audit: type=1804 audit(1567970500.019:86): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir019290882/syzkaller.umctsH/58/file0" dev="sda1" ino=16684 res=1 19:21:40 executing program 4: creat(&(0x7f0000000140)='./file0\x00', 0x82) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) 19:21:40 executing program 0: shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000780)=""/235) 19:21:40 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r0, 0x11, 0x67, 0x0, &(0x7f0000000200)) 19:21:40 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") keyctl$update(0xb, 0x0, 0x0, 0x0) 19:21:40 executing program 2: creat(&(0x7f0000000080)='./file0\x00', 0x0) munmap(&(0x7f0000ff6000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) munmap(&(0x7f0000ff0000/0x4000)=nil, 0x4000) madvise(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0xca) 19:21:40 executing program 0: mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='ramfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x0) 19:21:40 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x3c) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[]}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000340), &(0x7f0000000400)='\a'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r1, &(0x7f0000000500), &(0x7f0000000000)="10"}, 0x20) 19:21:40 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:40 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010aef5, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:40 executing program 2: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 19:21:40 executing program 0: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000100)='7', 0x1, r0) keyctl$update(0x2, r1, 0x0, 0x0) 19:21:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae46, &(0x7f00000002c0)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000001680)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {r2}}}], 0x20}], 0x1, 0x0) 19:21:40 executing program 1: io_setup(0x4, &(0x7f0000000500)=0x0) r1 = socket(0x10, 0x803, 0x0) io_submit(r0, 0x2, &(0x7f00000014c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}]) 19:21:40 executing program 5: creat(0x0, 0x82) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x80, 0x0) dup(0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x800002, 0x4002011, r2, 0x0) creat(0x0, 0x0) 19:21:40 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) waitid(0x2, 0x0, 0x0, 0x0, 0x0) 19:21:40 executing program 0: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x72010000, 0x700000000000000}, @random="d6de8e219d55", [], {@ipv6={0x86dd, {0x0, 0x6, "08de06", 0x30, 0x6, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0) 19:21:41 executing program 1: clone(0x7ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000000)) sendmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x40c001, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) [ 209.940848] overlayfs: lowerdir is in-use as upperdir/workdir [ 209.958775] overlayfs: lowerdir is in-use as upperdir/workdir 19:21:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100001c9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000480), 0x1000000000000181, 0x0) 19:21:41 executing program 4: linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x200) 19:21:41 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000580)={0x7, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x3c) 19:21:41 executing program 2: add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000380)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0) creat(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd9c) finit_module(0xffffffffffffffff, &(0x7f0000000000)='/dev/kvm\x00', 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f00000004c0)="11ab9d201ed3b5f660047864ac669acf38d21d24b0a70a14ebc3b063f1c5af4f055f9e7241c91f154a57c8764a00f8f3aa4c96095ac1f021994f8ef3e0b2346857613b10ddbe10abc3e45181d04d8d01b07fd13c1d7c7b76a489a5815bd7b8a296a1b7596cfe4df7a1578f83dbec03867164d5d2ee74b04f4aa036c886046cdb8e15e685de6e35eb48a1b6fdf09fcf6c1621d20293098176b70397d93ee4ecca2c8195d98243cc29b002dd8048d5a2dc8d07a47018e9d94f6603c6d49252a62d85b50c2dfa02ac5975eff6c065e2d58624734b6f2270d1bfb27783feb6969dcc81372a7947f990f852bbf71cf922ace6d038d270c2027b76635c4fb22806822435a7cf7071da5ad1ca2f5b55116837841dad8ee5966c329dc018d46027dbb000d09dcef6427089af7309d074d7a4d4ba10103dd09b9ab29802ba8df807a3913e1f93596f98219c94863786aa205477bcc08d520958341db0dbbafc3768fc134a648bad1f90f998527f34b5b473cf5bae50ed8ca0d89dd468d3d6014ebe00262990042325a2d44ee9250eb30b44d69788498217f948e20cda43f5e3cfddd49cdf3511324816d77d77263cdeb71ce863da92c44301408081e7730a6049cf48e5c98de41c95e0bd64c089b074cefe20e2bea913ba756828e761d3a82a88482fee0019bc8f9ba1daeba9c28439ba06436c1cb0a2d0b4ab86a4296163383faa9ec63e6a9a8c9dadd52541bd68c432bfeac322515d8adef9cec44fc0d33f2c720b2259ee8b28cdf82b46ee3ca086025c8c5b20339c9bca034db5a0ec9d5dc90391b98573ceea3c12effa12a69dffff0e8179ff45ab6097018295786828beeb4f2d0f89675dad70dd0e2b7eb4541fa89d03cb4b1d82b05ec79a0d84153098a779221f610eee5fce6af8b21fbf9c4d4c4fb7f4d176270d7de793f5e738b30193be783eeeea8492f4b8598ed0be9477b41d6bd54c5f074d50c4914e2100cbbe3a8fd58bfa7c491dafff8e78223e038e3c36d2cf562e62b60b0a910caf61c078fad26afc71d3909899e49d132f0289a61b28189c0422ecbe23a42351a3ad5a5d779ef20e999e457b52f778b0552c3fe380154d7b54450f0aa48787248c45833d5685651748d85e8a84e0a628393eb794a40f489247cc39fb4a3dc9eaf866bf9e3c98fa58dc575e15e2c49446075ce3ba56ecb0788abe463eac3e8e665e6ef54f280591a6aea7141bd2725c535fa7c47dcf5487b22c36f64344dd10acec9788b446844e049be8ec79f2ce5149818de6a4704c4edc30724bbffb691d90b5da4d9455efe0f61365d096a69f83287b1ebe5e21e83535fe7b3d8eeb29d60a698bbbcce0b030b63ad80c27dd4a5de4ce56b67f3109ea84dbe708eaf64cd3f64bf93f514d3d5dfc605a518859df587a31bd15cbbcd06af345f3eb89e17bf1785625e65984efc4f7d1155534d5fb229a77df8b117a6002cda05ee247bcd3795f235f8d89b2c8fa16083861a5eb62ec48ad3cba523b776724c15c92d3f2adc707fbe2693fdcd4fd49ac035cd59d252973ad7c9f79a4800516097f2813c16968bea86b942364f5b3eee2244ae4ec8264cf23c733280f12c9b3f80c31f215a037ab1433e6f0f0db77e0a0b85fc33b6f23fee88c1d8b10d3df6f373883b67c4083f1361febb0a80205d350ff5c88d2ea642f3752d94ca3d668df3bbec567982834fc90a4ddaaad4ff7bf9c5c29ae6cf95554bebeab646ae37c7cd3bd896bee7758e1f9feee5ef853294c92c947d754eefff3b6e8468ba104312e738768cf6fecd540b3e5bfa989350e58deca86e0423b09c237eb9c9b76efc51157d963a6f96649439b439dc5a04febfd49e97b91464a4b9c9e26eecabf859851446bef6daf7c6e9baa6eb4b425a573d9f852f52bb890c1f70a85898468f470026b98c28079c076cc2007da1718978e9fb54ffb7b0a3919bdeae84e1438b1700834f12eef6b74a6f115a70489ad7529128b5696b6d3bbc971eacbc78b00396ebeaddab3aa01055a1c65a72a59240a2cbcc7964d667a10878b4d19d9419c587a8f92963d09c76051c29e2da20151347d178750da97d9f47c94a35522adfe350124f593a06e8b7ca541eb4672f1e9b9e71864bf367b393fc1da6fdfa25eaa47305abede894241717eb4cd037d9b7b82fa4594431e0f6ff314515f7144e091bf6a0dd31b5971091845734ef2b87c4ca7a500ea640041f0574b179a52c2cecf8bd3c7e452d372de1a409795dd783b081d81f8ac96f3484d08f7a059bf3971858f99b9cde3dcd7a6a909181cf0df0d742dec4218c1cd977b9c5beeacab1954771b652efd9796b74f84993d1d787100dd33c879409696195157bc542dcffa3f011599eb6e1d2a89639ac3c553530ba45ffd821ac10aaf50cf2a7807990421cfd92a21353cefa90fcfe3ce2ff6e23d3e3750475cb3dc7b2a8b2b307489d155b1131be87523b842ef38109f91c88a4612887515a2dc5556dbdeaf7b8ecd09d283c5c8281f50e876b3bbbd31f7f95a904a61af1b81591b665b2da5a1b506a7502072e361360459aab638a3efa5f53c1cf230897e076afdc9c56a5f6d0331f9572260c82379bd74cfefb94838441689b0bb22f9d865912c2a2860de0df780db691a40394bf57f146663342248aa861868c3a793e7778353c31e12b06c4003b98b55fd393f431b7c67c7fec5e0f7314971b9a46318ae187929dc019a2037640c42318675840ce42f034696c0f366c2e2841fe575ef923d6449e2192492cd4addd87498d000eeb3848b291146f7980f731c3a6667c9d784376bb449e9a1b91745f776f0a7587b4ee2cce69e321c451c8d5b03263d2d73cbba6e16ab0282895d8f15464bf733c37c8fff58e138cbe036f862f78df285efb59e4ff1c342497f11d39b2ca3db3fad1896242dbb7e6840e2a9a9a155effbe886def184aab53893fa17e91a2731ae749a0a6b554210a0594aa4eb40db47e18839f4ef082f7a22a724b8e75a02535396441a6e6b9adf92dbfafd77e49c3b7fe0389d24d5574973a81ccaf9fa8311a1bb92dcc4cd365823ba32bc36d7fda33929a71bbd571e49dd7a4af4184145772afd01ebeb07f64232b514dd474a4e086d30a3d878504e8d614d26fc5409af7e2ebc75193bef8c233dafbd29ea4ca1851219af811c07c56d35a34428c79355cc96c76e1aeeba38e227be318846d4a9b8219912e4fb1e3e5b864a1516cd5d18c0299c91f643d2b16ec7d5dd68347544ce11f5ce2ce0cf83594065e557c73b21af27c1df5fad1ed4927240614f11d37dea37f38993c1b059ebf3f211385abdbd3d641fa1c9ce2a954a46001d402a72903dd48ac9f0e64905bd9e6e621d27b00904663170b0a7abc560721c01b403490a1dd4acb1aa759b113b9499834a1ee9c8fe718339e3545d7946ee69e539bc298301180bb95ca22f2da35c54b38adf96a0201cf79d760b76a0578ef303faaf3b3a1dddbb292c144ce50439b2917ef788849afded45093cad739738e7668ebffb9d97f5b11039384e9ff8634168497fe886e0c82e9516491bcca66467edb6e26bf76e7bae4098f7ef5558198bca73bacc4a2dc506c9152a91df32c1482c9936b2d208526700dbd85df7433b12b2b5dccc4544bdc57a5956f1167af250d801912ea3eb86acf84a13f608764c8a8558c5017bd56686d556795fe276310f7f6d3b81fbeab130d910df792c17d4a39033877669c300511ac949c782d19ed567c414b4a28ef31ccfbfa16bee0edf84ef9de1a62449cbec43d6d8301a797b77422cec73d8c3e7f7622b68ff12b2dae980ce53e35b3176b21625b1e440cefda6f89ecabade81a956eb8d7f3af1c3ffb2abeb55b28e8db322d59897ae2b78df34b0086293c3037a358b69df93f6e63f55b15f88420c3e53878ed5076ea6c3b296fd9f217d8bbf0a704a526e6864a920af5b06f727e3226b7c9a2c9fed31870e2e6812bd08d4b85e68de4166791f407fe84480a3e53000c4c8803cca658034f2f93c9d027e52585d6c4796601c5e4c1e3678a095e7fa3ab2f5c6e7054cd92f347d13cb2d6fb99c6e786ad074b8ba68c046254dca5441248643261ce290e7f4edb10cc4a8cb447bb9ce7dfa98cc20c236832d2f003563ca50d37b7dde76fd614e41d300715e905c3c547f0486311c", 0xb84}], 0x1}, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) 19:21:41 executing program 0: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="a9"], 0x1, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x95648bda8f835f45) 19:21:41 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") keyctl$instantiate(0xc, 0x0, &(0x7f0000000580)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'trusted:', 'system)\''}, 0x21, 0x0) 19:21:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) clone(0x3102003bfe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 19:21:41 executing program 4: creat(&(0x7f0000000080)='./file0\x00', 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 19:21:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2, 0x0, 0x3, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:41 executing program 3: syz_emit_ethernet(0x66, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x72010000, 0x700000000000000}, @random="d6de8e219d55", [], {@ipv6={0x86dd, {0x0, 0x16a, "08de06", 0x30, 0x0, 0x0, @ipv4={[], [], @multicast2}, @mcast2, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "9433df", 0x0, 0x0, 0x0, @loopback, @loopback}}}}}}}, 0x0) 19:21:41 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) getitimer(0x3, &(0x7f0000000000)) 19:21:41 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0xe, 0x4, 0x3e0, 0x0, 0x0, 0x230, 0x108, 0x108, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @dev, [], [], 'dummy0\x00', 'ip_vti0\x00'}, 0x0, 0xc8, 0x108}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "5a0ffc773cf35a4d82faeafaf98631d719356cf6d1d5e661a3db05b5e21d"}}}, {{@uncond, 0x0, 0xc8, 0x100}, @common=@inet=@SET3={0x38, 'SET\x00'}}, {{@uncond, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) 19:21:41 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x4010ae68, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000300)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000100)='7', 0x1, r0) keyctl$update(0x2, r1, &(0x7f0000000200)="ea", 0x1) 19:21:41 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x3}, 0x3c) 19:21:41 executing program 2: socket$inet6_udp(0xa, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000000c0)={0xd84, 0x80, 0x100000000, 0x0, 0x7, 0x56, 0x81, 0xffff, 0x1}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x48, 0x0, 0x0) 19:21:42 executing program 0: symlink(&(0x7f0000000140)='..', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaae53, &(0x7f0000000100)=[{&(0x7f0000000040)="800000003804000019000300e60100006c000000000000000100000001000000000b00000040000080000000000000006d5ebe5a0000ffff53ef", 0x5cf, 0x400}], 0x1, 0x0) 19:21:42 executing program 1: syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={[{@fat=@umask={'umask'}}]}) 19:21:42 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000002c0)={r2, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:42 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e1dcfe87b1071") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket(0x0, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000780)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SG_SET_TIMEOUT(0xffffffffffffffff, 0x2201, 0x0) 19:21:42 executing program 3: keyctl$chown(0x4, 0x0, 0xffffffffffffffff, 0x0) 19:21:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IRQFD(r1, 0x5452, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 19:21:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x8}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000005200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x37863951393a1060, 0x0) [ 211.202436] kasan: CONFIG_KASAN_INLINE enabled [ 211.207249] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 211.244786] general protection fault: 0000 [#1] PREEMPT SMP KASAN [ 211.251064] CPU: 1 PID: 7443 Comm: kworker/1:3 Not tainted 4.19.71 #0 [ 211.257643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 211.257770] kobject: 'loop0' (00000000136a1159): kobject_uevent_env [ 211.267009] Workqueue: krxrpcd rxrpc_peer_keepalive_worker [ 211.267029] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 19:21:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x8}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000005200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x37863951393a1060, 0x0) [ 211.267040] Code: c3 e8 62 12 c1 fe eb e8 55 48 89 e5 53 48 89 fb e8 d3 7e 8a fe 48 8d 7b 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 20 be 04 00 00 00 e8 0a fc ff ff 5b 5d [ 211.267046] RSP: 0018:ffff8880916bf9f0 EFLAGS: 00010202 [ 211.283727] kobject: 'loop0' (00000000136a1159): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 211.284348] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83229a95 [ 211.318169] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 211.325283] RDX: 0000000000000004 RSI: ffffffff82e0e7bd RDI: 0000000000000020 [ 211.325292] RBP: ffff8880916bf9f8 R08: ffff8880916b0000 R09: ffff8880916b08c8 [ 211.325300] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 211.325307] R13: ffff8880916bfb20 R14: ffff8880916bfb20 R15: 000000000000001d [ 211.325316] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 211.325324] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.325331] CR2: 00007f579b243518 CR3: 0000000087daf000 CR4: 00000000001426e0 [ 211.325343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.354255] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 211.356902] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.356908] Call Trace: [ 211.356929] security_socket_sendmsg+0x77/0xc0 [ 211.356946] sock_sendmsg+0x45/0x130 [ 211.418303] kernel_sendmsg+0x44/0x50 [ 211.422097] rxrpc_send_keepalive+0x1ff/0x8e0 [ 211.426579] ? rxrpc_reject_packets+0xa60/0xa60 [ 211.431249] ? find_held_lock+0x35/0x130 [ 211.435300] ? _raw_spin_unlock_bh+0x31/0x40 [ 211.439696] ? __local_bh_enable_ip+0x15a/0x270 [ 211.444352] ? lockdep_hardirqs_on+0x415/0x5d0 [ 211.448921] ? rxrpc_peer_keepalive_worker+0x62e/0xd02 [ 211.454357] ? __local_bh_enable_ip+0x15a/0x270 [ 211.459017] rxrpc_peer_keepalive_worker+0x7be/0xd02 [ 211.464103] ? process_one_work+0x890/0x1750 [ 211.468502] ? rxrpc_peer_add_rtt+0x620/0x620 [ 211.472996] process_one_work+0x989/0x1750 [ 211.477218] ? pwq_dec_nr_in_flight+0x320/0x320 [ 211.481867] ? lock_acquire+0x16f/0x3f0 [ 211.485827] ? kasan_check_write+0x14/0x20 [ 211.490061] ? do_raw_spin_lock+0xc8/0x240 19:21:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x8}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000005200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x37863951393a1060, 0x0) 19:21:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) [ 211.494282] worker_thread+0x98/0xe40 [ 211.498070] ? trace_hardirqs_on+0x67/0x220 [ 211.502381] kthread+0x354/0x420 [ 211.505732] ? process_one_work+0x1750/0x1750 [ 211.510214] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 211.515737] ret_from_fork+0x24/0x30 [ 211.519435] Modules linked in: [ 211.536380] EXT4-fs (loop0): bad geometry: block count 1080 exceeds size of device (11 blocks) 19:21:42 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000280)=[@mss={0x2, 0x8}], 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000140)="120000005200e7ef007b0000f4afd7030a7c", 0x12, 0x0, 0x0, 0x0) openat$vfio(0xffffffffffffff9c, 0x0, 0x37863951393a1060, 0x0) 19:21:42 executing program 1: ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000780)=""/235) [ 211.559661] ---[ end trace ead8ae0389fa6f0d ]--- [ 211.569121] RIP: 0010:selinux_socket_sendmsg+0x22/0x40 [ 211.576897] Code: c3 e8 62 12 c1 fe eb e8 55 48 89 e5 53 48 89 fb e8 d3 7e 8a fe 48 8d 7b 20 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 75 11 48 8b 7b 20 be 04 00 00 00 e8 0a fc ff ff 5b 5d [ 211.597985] RSP: 0018:ffff8880916bf9f0 EFLAGS: 00010202 [ 211.605562] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff83229a95 [ 211.616357] RDX: 0000000000000004 RSI: ffffffff82e0e7bd RDI: 0000000000000020 [ 211.627907] RBP: ffff8880916bf9f8 R08: ffff8880916b0000 R09: ffff8880916b08c8 [ 211.635233] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 211.642552] R13: ffff8880916bfb20 R14: ffff8880916bfb20 R15: 000000000000001d [ 211.649823] FS: 0000000000000000(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 211.658105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 211.664014] CR2: 00000000014da0d0 CR3: 0000000089b7b000 CR4: 00000000001426e0 [ 211.671280] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.678595] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.685888] Kernel panic - not syncing: Fatal exception [ 211.692720] Kernel Offset: disabled [ 211.696342] Rebooting in 86400 seconds..