ge\x00'}, {0xc, 0x2, [@IFLA_BR_MCAST_MLD_VERSION={0x8}]}}}]}, 0x3c}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r4, 0x8b}, 0x8) 21:50:44 executing program 4: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x100, 0x0) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f00000000c0)) syz_open_procfs(r0, &(0x7f00000000c0)='oom_score_adj\x00') r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer2\x00', 0x2000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000007c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000780)={&(0x7f0000000800)=ANY=[@ANYBLOB="28000000f6ab95", @ANYRES16=r2, @ANYBLOB="00042bbd7000ffdbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}}, 0x820) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, &(0x7f0000000000)) r4 = open(0x0, 0x0, 0x80) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r4, 0xe036f000) perf_event_open(0x0, 0x0, 0x0, r4, 0x0) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x81640303}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYRESOCT=r3, @ANYRES16=0x0, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x40000}, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2400000000000, 0x8}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r3, 0x29, 0x2d, &(0x7f0000000500)={0x1000, {{0xa, 0x4e20, 0x1, @remote, 0x1}}}, 0x88) clone(0x20010000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2}, 0x8000000200000402, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) r5 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[], 0x0) fsetxattr$security_smack_transmute(0xffffffffffffffff, &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x1) write$P9_RATTACH(r5, &(0x7f0000000080)={0x14}, 0xfffffff4) bind$rds(r4, &(0x7f0000000180)={0x2, 0x4e25, @rand_addr=0x7}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000840)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0xffffff8c, &(0x7f0000000a40)=ANY=[], 0x7c, 0x4000}, 0x4) accept4(0xffffffffffffffff, &(0x7f00000003c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @local}}, 0x1, 0x0, 0x6, 0x1, 0xff}, &(0x7f0000000440)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000005c0)={r6, 0x10000}, &(0x7f0000000700)=0x8) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) [ 437.315381] netlink: 'syz-executor.3': attribute type 44 has an invalid length. [ 437.517100] audit: type=1800 audit(1577397045.020:175): pid=12367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=17060 res=0 21:50:45 executing program 2: syz_mount_image$msdos(&(0x7f0000000000)='\x00\x00\xaf7\xe1\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x5, &(0x7f0000000480)=[{&(0x7f0000000100)="fc494e156018008427a2c98c53668678823ddb7a749f9732d89bc358923f6d612d8c9ace576b52d483d182887167dd1b177c815da487b43cbccb207a95086f3d730a2b13f82c3e822686c0a72a2b408851b34a4bab1ab0", 0x57, 0x3}, {&(0x7f0000000180)="a734a772ebb507bb9f1e88af16f80a2d7d9403b6a6306da3f54c041f0d13a9ed4b43f694dbdb97412050af957ff7d65afba5e28f2e15b8a18e986ffbec260adf9d892c469388615c322f3d04b90bfac358a61b5338440cb87eec6d10faee44bcf673efd92b32d377b8d0aa285db85eda5ec43213d1b008cd21edc084fb0937ffdd1841000763654ec7acf45733d2a31f224f297b6aec78ce6d64d249d3e76a248d4215c95ab7adb17be5abe70fefb1bb5c31a603376baf184fd3f61203c7a8e9a241c944b34860e793ffa0598410cdd9bd2dcc81d61fd1397a8eeea853", 0xdd, 0x200}, {&(0x7f0000000280)="80288c2fe78910ce1e506edce62bb614d85267f40a7321b2cb2673cd684ea047bc9d686c0f31d88c0f69e07a598307e3909e60410b00093ea30e26e9d64753c449733b4dbba8477bde7313e9ee1b915042b77aa62ef754a0197e04feff8ec421381d60b785435862b8c9d51da6d01c69d4be4812b89e5e5fad86e0", 0x7b, 0x6}, {&(0x7f0000000300)="f77445125f133ce78e8120397b1fca23c0359f28d58c71fe56cc8a79db8f78f50d5ba850ae01c50f352137a605a3f2c9151a4679afa949fe932b6749fec6648378f80dd5b43563a549c5118d5fea", 0x4e, 0x1}, {&(0x7f0000000400)="55d4b66633eb4898ce697b23c95168411b26c30d0f96cee506b413d317a095d6fdd8212294afbab4b5f0e4730c5ad3cf57bee83123fd59f10affc781b97273b9b1261a99bcf24644b69900f430805ddaa82a4e644e47dcee387a95382bc4a27046ee3cf67b48b0ee59b7", 0x6a, 0x7}], 0x3c4c220628a8ea30, 0x0) open(&(0x7f00000000c0)='./file0/file0\x00', 0x80040, 0x0) 21:50:45 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000071, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_script(r0, &(0x7f00000009c0)=ANY=[], 0x378) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x269) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e1926cc89c9d991c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RVERSION(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b796445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81a796f27f537cc5a3fb54aff8eaff4f6acb59c41705b96a6711d4679079d00000000000000000000811eadec13ad1f6f7e1e9c74a435c78d3e93aa51551e80348959d94a746eac59b9f425b633d7d03230aafa4ab7a3dc2891"], 0x89) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000000)={0x7, 0x5, 0xffffffff, 0x48e, 'syz18O\xed\xbd\x00\x00@\x00\x00\x00\x00\x00\x00\x001\xa3T;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\"\x00', 0x2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) readv(r0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x84) sendto$inet(r0, &(0x7f0000000300)='\f', 0xc3f2, 0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000040)=ANY=[], 0x342) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_SMI(r8, 0xaeb7) 21:50:45 executing program 0: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x5]}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}) socket$packet(0x11, 0x0, 0x300) sendmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)=@can, 0x80, 0x0}, 0x0) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) setreuid(0x0, 0x0) ioctl$void(0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) geteuid() stat(&(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)) setresgid(0x0, 0x0, 0x0) stat(&(0x7f0000000ac0)='\x00', 0x0) stat(0x0, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r2, 0x0) stat(&(0x7f0000000e00)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r3, 0x0) keyctl$chown(0xc, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setresgid(0x0, 0x0, 0x0) [ 438.168129] netlink: 'syz-executor.3': attribute type 44 has an invalid length. 21:50:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:50:45 executing program 4: ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000040)={0x1000, 0x2}) getpgid(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x8, 0x0) 21:50:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) lremovexattr(0x0, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000240)="db40", 0x2) r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f0000000040)=""/83, 0x53, 0x0) r5 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r8, 0x2007fff) lseek(r8, 0x0, 0x4) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r11) write$P9_RSTATu(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r7, @ANYRES32=r9, @ANYRES32=r11], 0x5d) r12 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r12, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x6}, 0xffffffffffffff61) openat$adsp1(0xffffffffffffff9c, &(0x7f0000001780)='/dev/adsp1\x00', 0x10000, 0x0) syz_open_dev$evdev(&(0x7f00000018c0)='/dev/input/event#\x00', 0x5, 0x8000) r14 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000001900)='/proc/self/attr/exec\x00', 0x2, 0x0) fstat(r14, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r16, 0x2007fff) lseek(r16, 0x0, 0x4) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r18 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r19) write$P9_RSTATu(r12, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r15, @ANYRES32=r17, @ANYRES32=r19], 0x5d) getgroups(0x3, &(0x7f0000000380)=[0xee00, 0xee01, r17]) r21 = getpid() rt_tgsigqueueinfo(r21, r21, 0x14, &(0x7f00000000c0)) r22 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r22, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r23 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r23, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r23, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r25 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r25, 0x2007fff) lseek(r25, 0x0, 0x4) getsockopt$sock_cred(r25, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r27 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r27, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r28) write$P9_RSTATu(r22, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r24, @ANYRES32=r26, @ANYRES32=r28], 0x5d) sendmsg$unix(r2, &(0x7f00000016c0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000100)='S:', 0x2}, {&(0x7f0000000480)="16d4d5be1b1dd008c2bd6ad918d4e0dbaf99637ad151be062b539868f5c08e1a5b64673c70d7ffc22131fdabf34144b3d4dacee9d2aa8881705d85d1ba3897ff43beeda4560f09b8c718e9f130e1820f99eea278c18e06111c9de0e78d706124485cf5ed4385c1bc0352222eddb9eca569f97422d5120bf287a9b6d9ddba1fc921408cdceff15e37c726df3f320ce516ab717e39e9299e96db3a634b5d267ca66362ba10e663870446caf1", 0xab}, {&(0x7f0000000540)="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", 0xfc}, {&(0x7f0000000280)="1515b5fa19", 0x5}, {&(0x7f0000000340)="2defe77b79adbad828dec93f3409548d82977c0a2b1c376965c82c3a80f11e", 0x1f}, {&(0x7f0000000640)="688f7a149193e5602de9ddd2a608c09e7950effc9e9e8dc2738170ace4254d9da2b2a2f05e467dcda3665c3d5758582930438963613af9edd71d76de2d7c2e76411c664994783b6d23fd82e50213a580dada8e19908818f62db95bfd3daaabb2cded266a7b26a72c44d571c83cf01aaa903b29eeaf747fc4090f205ba6132d5aa4d62ab79f28b2a84be5fc66c6dbd9abbe083fbed813b89deb2f9476bab8ca0f3e3c6573ad56520ec95cf4374c56ddc4600c012b03fa1a8b6e5984fde67d4f53795420cf5488acc97e656fdd3e4a0af55ca259a44d7d5ef12eb7bfcb057a88ccb2449385ffbe66395d11ef06a54ae0eaf23a9da88b74c4cd48c3b456df6799741f26c105f9f1892eea6dc75ce01087bb308f6eb9479e79fc0c9f6817bccfa7577ab4b43b5ac41b3425d63b809248ad51e36da40eb75b3adeb919ec88d851dd0d9d12ce7c944389554316e40151b0c8541ca5a74c6846a4d7c6d47a83315dd9db4bfe9dd335d87d888df72805aef4998d6160b0460e793f4a20db9895fdaaa1240d1adbceaa23acb22f6ac81491ae7f900d61bd52c10a78f5b02dd998fa86354f3369921156483c8bbebb42aefd664b4fb5531a51b11ed93cb6e24f647b077c243049de2a4cbb73637931e3cfd52c83627bdeb9a87951bebdf0250f2de6e14656ca4262987c0fb9f5222aa025d70e8c719abcfc2a49f22c5fc658ee6fe5a689bbee724a567d630f43845cd7871cb16f8f0f1dc0111ac32b30af2355025d1da6112ce3ac0996283341195fe3539977654d0a182602406fd9d02e3e3800a0bf3795cd5d1b5fe6df39041eed2241155ae95a17c92e05e6f90cb590c307032ad61a31e497ba39e04ea7d2c0a4a7208cf1fc522c3afb3b72c39af109fea40d2bfb913c4003500e8c8c47e2b17c18efee56d4d168977e3d09a41184cfa549f590bf24c0ac73ab52cafd779cf23313dcaba007102ac182229a6e3e6a4419b87f59a918183ddcbe9678594b1e1128aa8c5596b10c5f5a378e9fcc7f7c739a8d89e202872738a69559d02bfa0aa3ec8bd508c08d055e09003aac35ada424b6a05bdea11ecaadff2fa9819c00f5bcba8f3ac6c26ae9c8ef9d4d5197ee7e9d095abd056b05e8e330ed149ac78daa951f01944d681203b48587fa86f41962f9d82ae8cd224318929e9e25c1a7a937e21d45dd4a80a92acf6a05a6d3aaad82c7d24302a8aecf0880d8ce28f76f28f7235720e714b2914ac0525001d8594ab47228bb63f033487606e17656ff8df7bfc7457e3655d84c75a9e5110769c76a00fb9d04f040cc6471e43713138092fa559ab4a69aa65914416653bf13986fd43e706cb6443a857b530ec795b8fa17f7cb626d1e6773f2377a79ed22cc0fb7a46bf9a9bda837f6bbbf273b28e2b14b7faee63caf1f3862939489f6f957634820aa377c85865c3e10c06ef01b5782e9c16b6066659ec129f1d41ec851e1c85ad8b6d80b1f0b4242e69b33a719ea08c4fb68af80d82fea88ce81c79dd8666558857dcfa44ce87693bfdc45161e040a3fe93b8c99fe01f75a93ded58ec8e717ee076f8fd08c2a83d33c989c19c18309e2ee31df9f5960b4173ede2541eae9ec239fd81b78597e04bac4bd2e6d5ce62a0b9b6313557c54da5681538e2ce4b7c6d95e25feff451ff68d6d19d3c444f7e7a3cc89ee1ede1a4b2a267c3a133df90c8d488b19a2b8d170c08bf9d8218da061404294e2178d433536d7a78e0a02087b950901c9067a4962052f777dc9fcaf59569955e81298acfe0bc82456a6783287c3d04f542f3140df5d233f073448c454dbe413de4a583126634e3a82f013b5c6c154068519e5be47da422fb0dd5ec93a1379e9df829774a1f34f46f56a35b9b788406f023c0abb3271b006275cf6a8916063286a5b7a54a803981de64651cb3ab8e40ef22cf5dca3152541dd0538498318e4c32a1f0b52eceebd05873a67131bf7608b3a395c5eccb900220e135685b079cd35f71c0ca6e717bd7843b567e3db436e943c3e3e4a771e6f13f12c51a55e6f11414343dc8f9fa0b83d84d96b17a29426945b322086c91a32a754093c346935856be2398acd84020b4c4b292265faacf4b5bd9d7b7e767eaddd89046002967254d046483dcf22af7ad95d8fd16677c45795f3ed03d978627cac5c6ab9f9c482186b04fbcad899f39e8993c748e13428195580958e92b6a1b75d0118a90ecdbd8db673a38059b17e54bc1cd2a96e81de7f73939c2bce6b5db376821e4de705363727abb25b421dc5053afc21b45af0b20a9aa4efe1d793b8c4070e019dd4b4fb23447557cbb60694ea44092fe700a45ccfbccf492b4d95d38af0ada1246fd71760100b126846e79a3ac7bfe779bbde36f79dda4304823aa6f4038e61b97223c57ffa2e3a4035a50afc44a1b914699366dfa011cf6d6063dc385457465c74fa90c50533b592d49e08f858e83ff22858090da0e43cb88f8748c039b9a80f4d71950f070a39f255d4f7d13c0a6dbb26dbf49852d08c67345d8fc94e9ea186b809434d45b4d1084e049fdfb7c09964c6860d0d320dbdcc3b9925ed77aa2068a92176bdfc6c0ed8c4c98d494567032024a3d6bf57bdedede25ee0f6d185198203c41b3467862c492ad93381091dfa50d4abd5868b57ddf23a9f40040d6e45e50935d5c6e9e5fd20083be1f247f722b763950801a85e5b16129049c39a2168f921141d45ae3f66bdcd40e41a7f5be25bdbf81886634c15ce9bb898a16124b68f0b1c415e61f95598ad86d3c4da49e02df32a07d371272317e34bcb4bda49d9029881772a09c01c225a4f21e1c08fbe59786c5b1c003e90145e8e9f2a076c3ec4a3a2253f04bcf1e39fa645c004ef218bea90df2a4b4549836974430bc3685b121a96ec36db96ad1c07d515cc4e2709b9294c30d8a877d558d168364633c0fccecefb0b78ef6b988a503ea57138a0cd866256152c7a9ae88c4f43766bd249c806b697f8a6059ffabd1092d9ba5460577ff9c71cb027548905c18d56e0dd74d6f31556c4408b8621b58c2e3eca98d5b6261a314f2a467e7390d6a9f23ef45fa030842122bf754cdeb4c791e405e06dcbd77a009391d94b6a35282af45b9d9ea9ca60122f3f3115a858eb60bed29d83d91080bd26db0351db2c2b654bdad2dce7b4e1ef4d4c49c8f2d91e78360f550a30daa7f45034f952eb6ab82ed9128e62b32e318fcc6b2813a7d6fbf9c867eaefe5faa2da9ac31948c1741d459a494f65a893aeb010da5886867f29747188ad7c7dc5a680758d47ab040d7fe40d6a2494847db3b912350b5e0aaaf7d9618f2f73b32526d708ac5d2c23271299ffde2be1b01af7f7651d37b38c3e614715b2753f05efe1ab304b7692072f1a9f5b2758f5e70f893c146165f95cd809606c0da077d99d7a2263f64e48535d4fb11bb675b83d604891ef4c975457385964f337a6f87fc5d45ae0797c623ac113a888b68bfaefce9b9535fa170594940e5cacfe7897ef7e763599bb960e07e3f82c65cc41e369e246568310c00172e3670d5892d2f4934a4aeaf1f6aaa4df056a673cd031be0352eec53afe73600fb8ab9c49596e71bd8f2749152fb83ee1428f949a2a8ca07ef116e338fcbc6ee16efbf10975922f939cbdb58381017b9d6acaf4c04bd2877f16471eab7f4e64ce5f5da1c5cef9e2eefce90ed612749c726938970469fb6d3857c84c160d684e0fc3cd585903cd4c6c9babd621b1638037f6b2a452d81bd1521f85cee10be123ae0f04306ca94e61af105cb915bdd93a512e4140a6a0ce9d45a799869b5362e6d2a49bf4225457433ea0b65ebd69e67fe1a67bd0cfc5816efe355dcc01e61977204a53ed62dc16e379e896b7465c4fa10b5521653c8a724f8b04d53a762442b8c4931137f7fda1f70983149680ca8e3491488c5a4c4cf17325186c6caa66438959a6974f6d1c3efc957d538256134add9538e39ff8e6f8173c1da2568847446096cca34d6638ad65b0ffaf3dbf3c4e979b0dd346ccdc5279e3748c0b02cc4af455bbe2010316550261260b9752a4d13ace868e36b35431ad111f8bb67afe251c736e6200feee58e168da316210305629c22d0868a1a86976df1a4bbcb07a37e9ff606a232dff549896f8a0fb5c29b6e6312ef3129a913ed2de62ca6fef211be4e44908a3d0d61382c26c7ea232f87f850de53d9ad34e35075e36981c7bf41d73be42ee90824404865de0e18d17787821a63beaaf15bad2fef30325aa19ab55ac7a15b68d72dd024bec05273930c46d961514452ded6db6df58521403e2171fe66debac7f92f2447139fa724ce626c97e4a6c4f2005f9162dcb3112887d6d19de71a395909d707ee795b2533b111f554c438ef90819a71b1647f755334e803dc07b031a2cd89ed1e6c42d5f7d02ad712afabf231ed135d5585550eb4696c504e1f37923d79021c6ee3d3868a1e5323d065e0202fd2a8a8fd7d27fbe6a5fcd9e3797be1e12de34d8fc139dd0cf3eb2f5d553ca552b6fff86d4afdd164b7bab8e85458ecfb9e194732dcfc871a08163bd8e4e1de00c0ccc444bd98ab995af9b478e48db3d979da09aa2a20a0db9cedf74556970e740699d1557a6e3aec299f99c2731ab6b5759641c810e4fbc3b68f3e5a7dabb555d2d417a47f2868bc28c92ab3f3bb008678244b0f47f0fb0d16cc997008ce9bc7c45136042a696c67432009deac99e5ab2fd1cdc901661e959e5cc0f24349308d21a0fc009eb6aedc96054d71adf55c6f005bb9f25995b8dd6fdddb5cf08075d6678ca11f6fe319a09e44536cad0920e903b10316ad6a9d2425ae0a3991ad6181bbe8838030cdf8ff1e92a92d3d3014f6935d8ef40d681bd7ea6ad653a446b04eaef30aebb71a0a8d29c89a74b9136cb5941c502e8fbba7569ef4ce55c0bd3c5830e1241854c5b7eeb9fa77f30fcb01ddefb65adac260bedc9c505c40abc5143de4007177abceec6be3406c974b6d4941440bd36ac4f46df0beb4fdfcd5524bd06e89737fbe4d8beab5c84d8caf1e25e263340c33db47128bebb0c18b925784bdbb6b74c0f2b172c2cc68a3c55437a7a3ec04a9abe228724deecab214425b34d6f6dcf1acf933c0c03043a788939ea207baf1c5bad0e13a31e8ecdeaec2e2482b35dbb9af877ae5f70ed1dc323bbb587ef58bd3b4af0717d8030adc4803720b21489513dfd9ce9314fb073bf143daf66b68c3c70ceb6601ba1103f76d662cc09681150ee37372cb40bfee36de03d5e97dd89c01672e9d01dab7f0db3a20ab4549d8e161e5738e7000c2ff42ed8d62eab56a4d5017fbeb5fd641ddcaede32feae48698a3c802ce5754c96643d5cc8da64211318032b178dbd047029dc1d3e0bff0414c792e58966915ab679d4255c25de9e9a5cc506c35579400f191226e8d1ef6bf2778c9dc86d06d859039b61946210e97c505aef1938d1fa0c3adfa6c62bbbe3dcd6a141a2d14abdd888d352ef910ba7d38950281e507775f7eae253458f484ebc2a644e339ad530b1390d259d378c04f80eb019072880cc39851d4f0c7731cd03b900e2e1b7e6b080ce978d1f91d2b03066e2545e8642161cbf97f3a8468181c54d455b38a3297cf5e859562b28bd0f23b1758893c502b2e8b4b376e89ac510a79bb715a384da01f1b6d78335194590adbf81f4010b295aedd28d49afef4a69dfddd80d5e4da7e68eb0b081e08168e32059ca1302ea631bfafb9e81c7cdc55352c1d374cbc05f598d18746d530a6441c916af8da0fed081a79bd6e0f822a8edb0dce2", 0x1000}], 0x6, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r7, r20}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0x0, r26}}}], 0x40, 0x4004005}, 0x40) 21:50:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f00000001c0)={0x9ba, {{0x2, 0x4e23, @remote}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x12800, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="b99d57905cd02808dc269a2b64b14ff5", 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000440)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) bind$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0xe, r5, 0x1, 0xe0, 0x6, @local}, 0x14) write$P9_RVERSION(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x15) r6 = getpid() rt_tgsigqueueinfo(r6, r6, 0x14, &(0x7f00000000c0)) ptrace$poke(0x5, r6, &(0x7f0000000140), 0x9) r7 = dup(r4) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x0, 0xfffffffc}}, 0x30) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) ioctl$FS_IOC_MEASURE_VERITY(r9, 0xc0046686, &(0x7f0000000300)={0x1, 0x7f, "5bebf72eac7b02954a7265ca7e4619dd51bae2dc4eb28cd8706853dc1fb0681e8bee0836cce739b1392326f2765b2aa438c289c49b92dc291bfa4aa9dd4d79ec01538c03c5a3e531b1c47bb6e06409db919eea0114760a947b47d9b94e6d009dae3e552fc3f698fb7daa995d429c8b88654a9823229a0d9f1d5724d617173f"}) [ 438.536572] audit: type=1804 audit(1577397046.090:176): pid=12399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir834957413/syzkaller.9p2lWv/6/bus" dev="sda1" ino=17053 res=1 21:50:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 438.696955] audit: type=1800 audit(1577397046.250:177): pid=12397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17053 res=0 21:50:46 executing program 4: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x80000}, @can={0x1d, r1}, @sco={0x1f, {0x20, 0x5, 0x75, 0x40, 0x9, 0x20}}, 0x5, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)='syzkaller0\x00', 0x3, 0x3}) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000001180)={0x1, 0x2, &(0x7f0000000180)="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", {0x5, 0xcbe, 0x31424752, 0x6, 0x5, 0x8001, 0x2, 0x6}}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000011c0)={0x0, 0x200}, &(0x7f0000001200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000012c0)={r2, 0x78, &(0x7f0000001240)=[@in6={0xa, 0x4e21, 0x6, @local, 0x8}, @in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x80000000}, @in={0x2, 0x4e20, @multicast2}]}, &(0x7f0000001300)=0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001340)='/dev/rfkill\x00', 0x2022, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000001380)) r3 = openat(0xffffffffffffffff, &(0x7f00000013c0)='./file0\x00', 0x80002, 0x70) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000001440)='nbd\x00') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001540)='mountinfo\x00') r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001580)='/dev/cachefiles\x00', 0x4e9200, 0x0) r7 = accept4(0xffffffffffffffff, &(0x7f00000015c0)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000001640)=0x80, 0x800) r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000003b40)='/dev/bsg\x00', 0x4000, 0x0) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f00000053c0)='/dev/vsock\x00', 0x401ac0, 0x0) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000005400)='/dev/ocfs2_control\x00', 0x400, 0x0) sendmsg$NBD_CMD_STATUS(r3, &(0x7f0000005500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x40200002}, 0xc, &(0x7f00000054c0)={&(0x7f0000005440)={0x80, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8}]}, @NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r7}, {0x8, 0x1, r8}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8, 0x1, r0}, {0x8}, {0x8, 0x1, r9}, {0x8, 0x1, r10}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24048810}, 0x40011) syz_mount_image$bfs(&(0x7f0000005540)='bfs\x00', &(0x7f0000005580)='./file0\x00', 0xbea, 0x6, &(0x7f00000059c0)=[{&(0x7f00000055c0)="77f82688e48e7ff3127e349e0e239c082387ef4a729d42101b854313995c0cc050c7688c37d1a67b5c644c2dd2bebe36655bc855a052c002132632fe2909f35f2e91d0d974bd73f6cad70cb87dfe8df3fb4427d7fcdae7f8676b0b551149aad63d381bc8c3296f2ae23b13fe89f59345f98891074654f34e6e370d88e30d1a84a3f6d6a9fce81b055eb1c2f491960312ea829a224bfc2fe3e8130d4c1ee1a300f2c4ad82", 0xa4}, {&(0x7f0000005680)="9362477181ef2e513bae7431b144c1e7a6397575f5fcd236ee63a359c08ed6e56cb475a96f3d8eb48b32aa18974ed315406560933bb29d25805bf4d99f7f2670848b281ee40a885c0083f5f20d22b9a3c157c7b2fb9acf75247b90bbe26427b77681da", 0x63, 0x8001}, {&(0x7f0000005700)="6d67565f60630857392b09499e930fa833a7259e8df620844e7cb1cedb3d42eb57c9563001ae0022ac04e514f7acb4abb8b1f4d748692c4297524eb8d564c501b76db81f91d0726d0ce5a4c58ef58036d2832e36053483bfb2616db865ba1f820f19446cd752428d8f50b875326c27099a1a0c9db3ff15a37a74f3f1cef2645552e4962e975e3cbd12ff0dc0abe723e180", 0x91, 0x2}, {&(0x7f00000057c0)="cdaa5015a177d8ff4ffb31d24bedafbf5684bef47edd24fd3639029dafc9f8f8fcae89bf789aa734219570c2340d20ed639e5e63a3e6898e0a64a1e2e8753e255cfa482fe821c799aeac68366c5d702524fa95d2f3cd999eb641d976f328d0bef5dc9996daa962a97a99597c", 0x6c}, {&(0x7f0000005840)="dc8cb67fc1a4ef9621ac8888ffb2396e753d255536ea81380aa9f164c7df4cf25a8670b95df73fb65ee3840ce471255784d8c0e9339f0dc33ec1ed75d0b99079d69c64e4b81335a1562db46c7b9194d4ef382c38915157c741d0614144107ac9f9f037609bde7466713e961178f2ea180d15842d2a1cc04d0bc6bdf274d20c45cc668b655b1f29f14eac96eb2fb95626e4bc85cf1b49eca69f801ca77eaa05c518d9cbe703e28a0f2f5c4080f4b9de15c63ad3d1736b6e468a", 0xb9, 0x8}, {&(0x7f0000005900)="32bc60b6ac92d2576553cb1032d8e53980afa0156c761e71ee00c9193f1821a7cb873b39d499ae10fc99b3cef215534bd18068ff4ae278297fb0699dc6bac81287fa7e022338507fc53136882fb253f3450f36cf170f7704d7860c1cc3b24f5feed131fff4b610f2bc96d21049d168a9f3de7c62c680b0e377b6aa37087f409a7cff697c", 0x84}], 0x20000, 0x0) symlink(&(0x7f0000005a80)='./file0\x00', &(0x7f0000005ac0)='./file0\x00') r11 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000005b00)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r12 = syz_genetlink_get_family_id$fou(&(0x7f0000005b80)='fou\x00') sendmsg$FOU_CMD_ADD(r11, &(0x7f0000005c40)={&(0x7f0000005b40)={0x10, 0x0, 0x0, 0x104000}, 0xc, &(0x7f0000005c00)={&(0x7f0000005bc0)={0x38, r12, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr="1b312b8d1cc8d748821e1f03f8145d1c"}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}]}, 0x38}, 0x1, 0x0, 0x0, 0xcd3bfbe97184cc9}, 0x8080) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0xe, 0x0) readv(r13, &(0x7f0000008ec0)=[{&(0x7f0000005c80)=""/40, 0x28}, {&(0x7f0000005cc0)=""/4096, 0x1000}, {&(0x7f0000006cc0)=""/35, 0x23}, {&(0x7f0000006d00)=""/165, 0xa5}, {&(0x7f0000006dc0)=""/211, 0xd3}, {&(0x7f0000006ec0)=""/4096, 0x1000}, {&(0x7f0000007ec0)=""/4096, 0x1000}], 0x7) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000008f40)={0x0, 0xffffffffffffffa8, 0x1}) pipe(&(0x7f0000008f80)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r14, 0x84, 0x6e, &(0x7f0000008fc0)=[@in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e23, 0x4d4b, @ipv4={[], [], @local}, 0x4}], 0x2c) signalfd(r7, &(0x7f0000009000)={0xca}, 0x8) r15 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000009040)='/selinux/policy\x00', 0x0, 0x0) recvfrom$inet(r15, &(0x7f0000009080)=""/25, 0x19, 0x100, &(0x7f00000090c0)={0x2, 0x4e22, @multicast1}, 0x10) 21:50:46 executing program 0: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000000)='./bus\x00', 0x20) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) creat(0x0, 0x6857b21ff1155d90) fallocate(r2, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9", 0x7}], 0x1}}], 0x1, 0x0) pipe(0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) msgrcv(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000070a1e859b98f52250000000000"], 0x1, 0x6, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ftruncate(r1, 0x8200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffe]}) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x62000, 0x0) r7 = openat$autofs(0xffffffffffffff9c, 0x0, 0x800, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x40000000013f}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0, r10}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r7, &(0x7f0000000a00)={0x8, 0x120, 0xfa00, {0x0, {0x2001, 0x3, "a11fd9bb777ed6d2de013aa84c1780812dde64019c3679140f98742d991c188999137e2c0c273c01ce5ee4a98e9a5f9621977495adc63b5e42cfed5f869c9b9c3762653da39cff6f836d3d8c2f820218e7f36d69edfe4f612f003ba171580d5d229a27995ec89a2ae6ea35537a994f882cb14b30ea1e81f4ffce42d406d795b1667439abc3912178aa17fed740c80915b5df43ad2e40db2e0c07023314ebb582148f97bf4b7f329a3f160dfa8dc19707f955096b143bd08da435072e87ba883dfc7fec35c82353166a54e432bd274068adc33e99bed553bae5b0410241e3d969c47980bfb66acc42eae3297dadf62b3f5d48f2bbbae626416b7f89ba77f540b4", 0xb9, 0x0, 0x1, 0x2, 0x0, 0x1}, r10}}, 0xa) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000340)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000300), r10, 0x0, 0x1, 0x4}}, 0x20) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000240)={0x7, 0x0, 0x3}) perf_event_open(&(0x7f0000000040)={0x1, 0x431, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x60100, 0x0) ioctl$KVM_GET_DEBUGREGS(r11, 0x8080aea1, &(0x7f0000000480)) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 21:50:46 executing program 1: syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4, 0x0, 0x0, 0x9ff8efa2325ad5a0}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x16, &(0x7f00000000c0)) ptrace(0x10, r1) ptrace$cont(0x9, r1, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000800)={"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"}) r4 = dup2(r2, 0xffffffffffffffff) dup3(r4, r3, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r4, 0x8008ae9d, &(0x7f00000000c0)=""/80) perf_event_open(&(0x7f0000000140)={0xc9672678a7b76f5b, 0x70, 0x5, 0x1f, 0x1, 0x41, 0x0, 0x1, 0x10002, 0x4, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x6, @perf_bp={&(0x7f0000000040), 0x4}, 0xb8b6e88301a1561a, 0x1, 0x400, 0x9, 0x3, 0x3, 0x40}, r1, 0x8, r4, 0x3) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x5, 0x505800) perf_event_open(&(0x7f00000004c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x369}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c004c00000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679bb0000000000000000000000009e9e26d26a0f52c5c0681bdf92b19c15dfa84e8e8a86d4d3f5e8b4d5cfa66905443f411b4f1f02cada18bef1980ae3c9602f9148eed1d9a5d8af9980"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)={0x2, 0xc, 0x4, 0x70000, 0x7f, {0x0, 0x7530}, {0x1, 0xc, 0xe1, 0x0, 0x9, 0xff, "7fc3749a"}, 0x3, 0x3, @offset=0x10001, 0x2, 0x0, r2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000280), 0xffffffffffffffff, r9}}, 0x18) 21:50:46 executing program 2: setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x7) accept4$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10, 0x40000) r1 = open(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) unshare(0x40000000) ioctl$VHOST_GET_VRING_BASE(0xffffffffffffffff, 0xc008af12, &(0x7f0000000140)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x101042, 0x134) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000040)={0x0, 0x0, 0x200}, 0x8) 21:50:46 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303000006845ac39b5fd51ff03004df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c0ffff001b425f9a24e75a930a050000000000e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3ffb265d008c3e57bd9c41705b96a6711d4679079d0000eb0000000000000000"], 0x15) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000140)) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0xffffffffffffffda}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x4) keyctl$join(0x12, 0x0) 21:50:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 439.257032] IPVS: ftp: loaded support on port[0] = 21 21:50:46 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="55000000180087154703d4dc1c00809302", 0x11}], 0x1}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RUNLINKAT(r2, &(0x7f0000000040)={0x7, 0x4d, 0x1}, 0x7) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = openat$cgroup_ro(r5, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf6\x17s\'C\xe3\x97\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00()\x89\xe5\x14^W\x86\xa3\x14K|\x0e\xfe-\x9d\xbe\xca`\n\x1a', 0x275a, 0x0) write$FUSE_INTERRUPT(r6, &(0x7f0000000080)={0xc, 0x0, 0x6}, 0xfc55) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7fffff, 0x40000000011, r6, 0x0) ioctl$FS_IOC_GETFLAGS(r6, 0xc020660b, &(0x7f0000000000)) 21:50:46 executing program 4: r0 = epoll_create(0x5) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000340)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f00000004c0)='./file0\x00', 0x8, 0x2, &(0x7f0000000640)=[{0x0, 0x0, 0x7ff}, {0x0}], 0x1000000, 0x0) 21:50:46 executing program 0: r0 = getpid() sched_setscheduler(r0, 0x5, 0x0) open(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) signalfd4(r1, 0x0, 0x0, 0x80000) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='proc\x00'}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) r7 = dup(r2) ioctl$SNDRV_PCM_IOCTL_START(r7, 0x4142, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x18000000000002e0, 0x69, 0x0, &(0x7f0000000280)="b95b03b700030000009e40f086dd1fffffe100004000636c77fbac141412e0000001c699da153f08a0e6e380f60108f683317585d7473f1cab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b33", 0x0, 0xfd, 0x6000000000000000}, 0x28) getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) capget(&(0x7f0000000080), 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='\'\a\x00\xf0\xff\x00\x00\x00\x00k\x00', 0x460480, 0x0) ioctl$DRM_IOCTL_LOCK(r10, 0x4008642a, &(0x7f0000000340)={0x0, 0x4}) ioctl$PERF_EVENT_IOC_QUERY_BPF(r10, 0xc008240a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCGPGRP(r12, 0x540f, &(0x7f0000000040)) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r10, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x21001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, r13, 0x100, 0x4, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x80) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) dup3(r8, r9, 0x0) 21:50:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 439.621042] f2fs_msg: 6 callbacks suppressed [ 439.621054] F2FS-fs (loop4): Unable to read 1th superblock 21:50:47 executing program 3: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = fcntl$getown(0xffffffffffffffff, 0x9) ptrace$setregs(0xd, r0, 0x3ff8000000000, &(0x7f00000000c0)="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") r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x2) ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f0000000200)) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001500)=[{&(0x7f0000000240)="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", 0x1fd, 0x3}], 0x44, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0x10000000}) setxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) [ 439.696715] F2FS-fs (loop4): Unable to read 2th superblock [ 439.796327] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 439.829184] ntfs: (device loop3): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 439.845687] ntfs: (device loop3): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 439.890050] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock 21:50:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 439.939702] F2FS-fs (loop4): Unable to read 2th superblock [ 440.027779] IPVS: ftp: loaded support on port[0] = 21 21:50:47 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100), 0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ttyS3\x00', 0x100901, 0x0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000001680)="cd", 0xfffffcf0}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x0) dup2(r1, r0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) 21:50:47 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) write$binfmt_script(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="16"], 0x1) socketpair$unix(0x1, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) close(r2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000000)={{0x1, 0x0, @identifier="50cbc466394490bb5eb492e94d9f2b38"}}) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8}) 21:50:47 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) getpgid(0xffffffffffffffff) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x14, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000400)={0x3, 0x70, 0x6a, 0xff, 0x0, 0xfe, 0x0, 0x0, 0x10010, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000, 0x0, 0x40, 0xb18ea032c2d52e3e}, r2, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x40) r3 = creat(0x0, 0x0) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f0000000540)=""/138) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') r5 = syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') ioctl$EVIOCGID(r5, 0x80084502, &(0x7f0000000480)=""/159) readv(r4, 0x0, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, 0x0, &(0x7f00000001c0)) write$sndseq(r3, &(0x7f0000000300)=[{0x81, 0x7, 0x7f, 0x1, @time={0x0, 0x989680}, {0x7, 0x5}, {0xd7, 0x4}, @connect={{0x6, 0x6}, {0x80}}}, {0x7, 0x7f, 0xb, 0x9, @tick, {0x0, 0xc0}, {0x0, 0x78}, @control={0x1, 0x4640, 0x7c}}, {0x16, 0x0, 0x0, 0x0, @tick, {0x3f, 0x81}, {0x1}, @note={0x7, 0x3, 0x0, 0xd4, 0x1}}, {0x1, 0x0, 0x1, 0x2, @tick=0x80, {0x0, 0x1f}, {0xc, 0xfa}, @result}, {0x7, 0x0, 0x0, 0x8, @time, {0x0, 0xde}, {0x3f}, @result={0x3}}, {0x0, 0x40, 0x46, 0x28, @tick=0x7, {0x8, 0x9}, {0x7f}, @connect={{0x7b}, {0x1f}}}, {0x7, 0x0, 0x7, 0x0, @tick, {}, {0x8, 0x14}, @time=@time}], 0x150) fallocate(r3, 0x0, 0x0, 0x1000f4) ftruncate(r1, 0x8200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f00000000c0)={0x1, 0x1, {0x0, 0x3, 0xe8000000, 0x0, 0x9}}) openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="7370646174652064656661756c742094736572e25c7472756474727588746564246c6f76007ebb1efa039737f2a94ce024142d550e127edf016912fa9b3640a2c80037bdcab0ef7cacdfbdc338122c01b0b697c2a1381df9508700a99c49beda923b218d7c48fbd724c8ebd6d7be9d010efbf58a39e864d61b4b2446319c03837dd26f000000000000"], 0x32, r7) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x100, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) r8 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) sendmmsg(r8, &(0x7f0000007e00), 0x400000000000058, 0x0) [ 440.264903] encrypted_key: insufficient parameters specified 21:50:47 executing program 0: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18}, 0x11) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="3710129daeb1f0", 0x7}], 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001480)={{{@in6=@mcast1, @in6=@initdev}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f0000001580)=0xe8) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef7}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x8) r4 = mq_open(&(0x7f00000002c0)='\\\xf7\xa0\xcc\x16H-o\x007\xe6\xb3\x1a\x8eiz\xdd06P\xd4\x88\x00s\xefu\xdfa\x01y\xde\xc26\xaa\x04\xe9F\x87y\xba\a\x00\x00\x00\x00\x00\x00\x005\x98U\xb4\x9b\x88\x9b\xb5\xe4\x9b5\x8ey:oz\xf5\'f\xd6\xfe\x93\xca\x06r\xac\x1b\x8a\x87\xcafw\xd5\"\x0f\xb7|\xb6\x13\xb3\xdb\x91\x04\xd1j\xa1\xcal\xc7jt\xe7\xbdK\xdcR&u{\x03\xf8[\x01\x03$Wl@\xc1\xc8e\\s\x9f\xc1\xa6\x8d\xf5\xe2\xbc\xb6\xe5\xedF\xc8(\x9eH\xeau\xe7\x85\xeb]d\x97\xcd#;\x10\xb9\x182\xcf^1v|\x1cA\x9dFF\xcd\x88?%', 0x6e93ebbbc80884f2, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xffffbffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000340)={'ifb0\x00\x03\x00`\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000180)) fstat(0xffffffffffffffff, &(0x7f00000000c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x117, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r7, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="000700000000000000000000000000b6a14e20b2fc523a263b384dc1d5095a1eda5ab4b9e01c11c6b8ba7c427900051b3aa5a6f0007e772c29c9b0ed0038a5131436e5ba2df3c4ce43e910fbbd15ac13d651c57bf29fc38ece5303d3b2f4da46e3f22965705bc0c2ee1baf07d5a14ac220616e6af0b957c8328fa073021adb7290b729492c523705a3970ff7dcfa773c6a0198a0edb168535be6df8673afd32da21b6bec991f70", @ANYRES32=0x0, @ANYBLOB="04000000"], 0xc7, 0x8000}, 0x14008010) lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) splice(r8, 0x0, r9, 0x0, 0x18, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001680), &(0x7f00000016c0)=0xc) getresuid(&(0x7f0000001700), &(0x7f0000001740), &(0x7f0000001780)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400000, 0x0) syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x0, 0xa08d02df60f2bd39) r10 = socket(0x10, 0x802, 0x0) write(r10, &(0x7f0000000080)="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", 0xfc) r11 = dup3(0xffffffffffffffff, r10, 0x80000) fstat(r11, &(0x7f00000017c0)) r12 = getpid() sched_setscheduler(r12, 0x5, &(0x7f0000000380)) 21:50:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:50:47 executing program 2: futex(0x0, 0x81, 0x0, 0x0, 0x0, 0x6) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RSYMLINK(r2, &(0x7f0000000000)={0x14, 0x11, 0x1, {0x1, 0x1, 0x3}}, 0x14) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x5) socket$nl_crypto(0x10, 0x3, 0x15) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r3, &(0x7f0000000080), 0x297ef) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r4, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0) [ 440.455991] device ifb0 left promiscuous mode [ 440.507140] encrypted_key: insufficient parameters specified 21:50:48 executing program 3: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x6a3c2, 0x0, 0xc14d1dc1436ad704) [ 440.561893] kauditd_printk_skb: 1 callbacks suppressed [ 440.561915] audit: type=1400 audit(1577397048.090:178): avc: denied { create } for pid=12521 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1 21:50:48 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fcntl$dupfd(r1, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setpriority(0x1, 0x0, 0x0) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000000080)=""/4085, &(0x7f0000001140)=0xff5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x4000000032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_GET_TSC(0x19, &(0x7f0000001300)) r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, &(0x7f00000012c0)) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r7) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f00000010c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001080)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r6, &(0x7f0000001180)={0x6, 0x118, 0xfa00, {{0x1ff, 0x7, "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", 0x27, 0x1, 0x7f, 0x1}, r10}}, 0x120) [ 440.841782] audit: type=1800 audit(1577397048.390:179): pid=12511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name=7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=17065 res=0 21:50:48 executing program 1: syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="73657373696f6e3d3078303030303030303038303030303030302c0066dd4ff22967bbee17a3892c8b9101614e187c68783a78bb6691a87d3bffb95f6bdd0bca57bfbe1ab974e179d2d84e316bbaa5e9ed7864d676fb1d8cab8013d798f8953ddaba952603587e64bdeb65c8af23f30800000000000000e0a0889823b0d3e50e0000f1b6c7385df37d701f3b58b979e76198072c4c1e8d9af03c8911ad5612bac15c22e8b04112e046c30126c4fde33006ce32a448c49a4130209f916c4fb883d54d6ee26c436935f09f0aad99bce21738704a11ea01a189f612f8c00e9956d6697ef67ab135fc58d4afd79fd10c06d951312cfae143db28"]) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f00000024c0)={0x0, 0xffff982f, 0x12}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x21daa17f, 0x5, &(0x7f0000002440)=[{&(0x7f0000000300)="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", 0x1000, 0x5}, {&(0x7f0000000100)="efe166c261cb1f66298a711ad0bf8ff94e0060dcc0e838135ecb99498f53914d169230e448f1d0972916ee8c76d874e0e05da88dc4787dcce7e18a7e625a320bfb8e25e01dd4dc6ec1317bc12044ed248c9726079aaee63264c737531a4f6a0a0a01dd8fb03ea301f1c6f30f2cfddba7b2d3f522213dde43260bdfc6fbec8f2a5926f44b8ba5611cd1e942679fe431b6a0636a5c8fad44a23c8bdfece57bd2df8a0dbb80", 0xa4, 0x8}, {&(0x7f0000001300)="f55e2e79fbc8955994989fb8f1a7e28562215fd75666fa03e328420b05d77d6d75147fd7846cf2d8686f3c4a5a85d1230fb7de1d1bec6ece3a4c83c0752a7b0af3f29309548378a69600bcf7e78b0765cece7adb6a965fadc4da3395c6df43075b7dd0b9cd5c5019b6529f8432999f5a132a5b283e7aeb9babc5bc836fefab47356bebe44aeafbc2b3fa902385", 0x8d, 0xff}, {&(0x7f00000013c0)="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", 0x1000, 0x7}, {&(0x7f00000023c0)="3c3097c7e88703beee45839e7548bfa6b3a2b0eaf258483583f259eb01e30090b82e5b5600fc63a215fa8ac89ab8463c89db253dc85df034bd72cd953c5cb5fc1ab3199c017d15817d58d3669f129a2551e73b4ddb73d98b", 0x58, 0xae2}], 0x2020000, &(0x7f00000001c0)='hfs\x00') [ 441.157201] hfs: session requires an argument 21:50:48 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74e1198b0c133ae40933bcbb3539df9bbd8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e000000009ca149906d209206000000d81c796f27f537cc5a3fb54aff8eaff4f6b59c41775b96a6711d4679079d000000000000000f000000"], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@nodevmap='nodevmap'}], [{@seclabel='seclabel'}]}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r8) r9 = dup(r8) ioctl$SOUND_MIXER_WRITE_VOLUME(0xffffffffffffffff, 0x0, &(0x7f0000000000)) fgetxattr(r5, &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f00000004c0)=""/251, 0xfb) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[], 0x0) setsockopt$packet_int(r9, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r11, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f00000001c0)=[{0x50, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r12, 0x1, 0x0, 0x6, @link_local}, 0x14) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r9, &(0x7f0000000140)="0503000006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0x4c, 0x0, 0x0, 0x0) [ 441.196500] hfs: unable to parse mount options [ 441.328629] hfs: session requires an argument [ 441.338249] hfs: unable to parse mount options [ 441.410307] protocol 88fb is buggy, dev hsr_slave_0 [ 441.416472] protocol 88fb is buggy, dev hsr_slave_1 21:50:49 executing program 3: syz_mount_image$hfs(&(0x7f00000004c0)='hfs\x00', &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00040000000000000000000000008cf4d4970bce7448afb7f2903c1eb73106881b5ecbcd81fb1e90ab923d09dd3a50c8b7d09e4400000000000000"]) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101000, 0x4) prctl$PR_CAPBSET_DROP(0x18, 0x8) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80080, 0x0) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_VL_CLR(r0, 0x7014) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_ifreq(r2, 0x8929, &(0x7f0000000100)={'veth1_to_bond\x00', @ifru_ivalue=0x1}) 21:50:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) getpid() write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x0, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x80, 0x0) accept$netrom(0xffffffffffffffff, 0x0, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x10000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x100000001, 0x90, 0x7f, 0x9, 0x4e, 0x6, 0x1f, 0x7, 0x8, 0x13649190, 0x4}) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000040)={0x3, 0x0, @start={0xfffffffe}}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) [ 441.613951] hfs: can't find a HFS filesystem on dev loop3 [ 441.858023] hfs: can't find a HFS filesystem on dev loop3 21:50:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0x0, 0x1000, &(0x7f000003a000/0x1000)=nil}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000000c0)={0x8, 0xc, 0x4, 0x80000000, 0x1, {r3, r4/1000+30000}, {0x0, 0x8, 0x2, 0x2, 0x1f, 0x3, "e300899c"}, 0x7, 0x0, @userptr=0x71b1, 0x400, 0x0, r6}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r7, 0xc08c5336, &(0x7f0000000140)={0x100, 0x81, 0x1, 'queue0\x00', 0x8d9b}) r8 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, 0x0, 0x1, r8, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0xffffffffffffff97, 0x0, 0x0, 0x293) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:50:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x18, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:50:49 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) write(r0, &(0x7f00000000c0)="de088a0be4beac294806e381324c2ac0718e0c163d", 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000000140)=0x9) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setuid(r6) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) 21:50:49 executing program 0: perf_event_open(&(0x7f0000000000)={0x2, 0x7f, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000140)=0x9) socket$inet(0x10, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000204}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="ac2e", @ANYRES16=r4, @ANYBLOB="0a4a9c49c1ec583f0f3545d7dd0e0800e266692a959134101afa12c096449bb458d0053ae1752f0c483a"], 0x3}, 0x1, 0x0, 0x0, 0x4044810}, 0x8004) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2081001, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b40)='/dev/vhost-vsock\x00', 0x2, 0x0) syz_open_dev$vcsa(0x0, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r6, 0x0, 0x483, &(0x7f0000000300), &(0x7f00000001c0)=0x68) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000700)=ANY=[@ANYBLOB="7261770000000000000000000c4aca0000000000000000a4000000000000080000000000000000000000000000000000a40000000000000000000000000000000000000009000000000000"], 0x48) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r7 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @rand_addr, 0x0, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) 21:50:49 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='\xfa\xe9\x00') r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f000000f000/0x3000)=nil, 0x3000}, &(0x7f0000000080)=0x10) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = fcntl$dupfd(r3, 0x0, r2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$sock_int(r6, 0x1, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$KVM_NMI(r0, 0xae9a) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 442.205652] protocol 88fb is buggy, dev hsr_slave_0 [ 442.210784] protocol 88fb is buggy, dev hsr_slave_1 21:50:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:50:49 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) [ 442.375531] protocol 88fb is buggy, dev hsr_slave_0 [ 442.380682] protocol 88fb is buggy, dev hsr_slave_1 21:50:50 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_open_procfs(0x0, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl$FS_IOC_MEASURE_VERITY(0xffffffffffffffff, 0xc0046686, &(0x7f0000000000)={0x4, 0x28, "d67c26cb2cf1df7752239256bc2b45f44f09de292b93b5b5d6a0519396d681eda190e40820a3ff7e"}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x101}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:50:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 442.525536] protocol 88fb is buggy, dev hsr_slave_0 [ 442.530663] protocol 88fb is buggy, dev hsr_slave_1 21:50:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r3) syz_mount_image$f2fs(&(0x7f00000015c0)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100070009000000030000000c00004c0900000001000000020000000000000000300000000000000e00000018000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, 0x0) 21:50:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 442.788023] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 442.805619] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 442.845673] protocol 88fb is buggy, dev hsr_slave_0 [ 442.850792] protocol 88fb is buggy, dev hsr_slave_1 [ 442.864456] F2FS-fs (loop1): Fix alignment : done, start(5120) end(13312) block(7168) [ 442.884012] audit: type=1800 audit(1577397050.430:180): pid=12623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16530 res=0 [ 442.916759] attempt to access beyond end of device [ 442.925540] protocol 88fb is buggy, dev hsr_slave_0 [ 442.930667] protocol 88fb is buggy, dev hsr_slave_1 21:50:50 executing program 2: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f00000001c0)=0x100, &(0x7f0000000200)=0x2) syz_read_part_table(0x4, 0x5, &(0x7f0000000600)=[{&(0x7f00000002c0)="d83906a529943d9a51f0f538585d79c454b1d50aea881ce74051388443d3ea6a86e6c71ecb55b8f39090d66d752fb0a09c4b39b50e358bbfb435d38ed54186a1349c554089202e75b4bb20a8ec71da3a9cafa0fc0919a944bca87b67107d7071894413ebba7e4ba499f3f5c7e6f352fa39800c3a5e1ebf4aeb6dec72d567b559af23beca644014ad229d46f9c46e02dc1f5713911eb4836ebb6e68803c38df10a498b8f4db7f787649c12db99a629ad9a2ddb62519e1c2df0d60075acd77e3d8b36e052cce45182e90f436d0e54d17967f44acbe6882e03b8f02af0ac36fca52", 0xe0, 0x7}, {&(0x7f0000000140)="a738b48cfcb8415aff9301d3afcffd429931feea4c6ba4dbf5d72123c26a48a172aaae526157b42bc57376e8bbab79386918460ac5bb4314d6439b9229e1957a46ef46113377cde5dc6878da343946871fc3d35cffb8a6e4e87d8e0977786bb58ad3dee672279a30d1", 0x51, 0xffff}, {&(0x7f0000000080)="19833570320f49f68022a5d843918653c89c33145b7f9a8fb60edf5481472c82333832c13a6a9831d78865baf46e0f0c447cd35b96429d3511d4ac698e1a56775eadd9b0400a55aee25069781fcb9ceb6b84087cb329a3dceb1265b06db3f551d66ddd308447ff566dc90f505c2e8d4c0e6595b09b104bc8112a6cb8488293d935fbde1f99152b35ee63f0c920cdf17251a7cc512d3aa4291cf5bc159f8ec08809d085435fa7051a", 0xa8, 0x8}, {&(0x7f0000000040)="2bf4a20e90002fa987d0397b4c99", 0x6, 0x8001}, {&(0x7f0000000500)="914fda98655c7d6f43e86c5a13072cdde7e4673757a82e5049c210add727ff0c092cb2dabd5d9d28b7567a7cf8f41d4d13ed7f48e837db1ae05ff2edd3350a798248f8201bc078fcd4449409d203aeec876bc8a66c05042369c05a6dc6c851f5d08b85ee673ccd469cdd583e22bade21aae96a5ccb39a45ef5f6d4634729138ad22e0b7e4adb192fb6a2b013bb0f3b00be8a817126abffc0003940ab0d29aa28de5efc93ffd78aa84fa4f2d377f6dac903a8d2d4d98cc1ceb7d15ffa2013fc40aa3fbdd9105f0a42bc14e56f59fcdfe30099216039577e7a7d1431", 0xdb, 0x5}]) [ 442.945507] loop1: rw=12288, want=8200, limit=20 [ 442.950471] attempt to access beyond end of device [ 442.987657] loop1: rw=12288, want=12296, limit=20 [ 443.016683] F2FS-fs (loop1): Failed to get valid F2FS checkpoint 21:50:50 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00\x88\x8b\xe7\xbe\xc7\bD\xe5!\xc1\xaf\x05\xaaz6\xd7w \x00\x00\x00Q*\xe7ap\xfc\xfe\xf9-St\xaa\t\x8a\xb3\x04\a\vMZ\xfd\xf6\x1c\xd0j\x01S\xf4r\xd7\xeed\v\x82\xb7\x7f\xf5\x13+\xbb\xae\x1dp7-\x10\xc5\xad\x11\xb1\x88E\xae9}\xfa.\xae\xa6E') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendfile(r0, r1, 0x0, 0x929c) [ 443.069895] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) 21:50:50 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)=ANY=[@ANYRESHEX], 0x12) r1 = perf_event_open(&(0x7f0000000080)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = getpid() rt_tgsigqueueinfo(r2, r2, 0x14, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$uinput_user_dev(r0, &(0x7f0000000480)={'syz0\x00', {0x2, 0x8001, 0x5, 0xfb}, 0x27, [0x9, 0x400, 0x80000001, 0x1, 0x2, 0x0, 0x0, 0xe8e, 0xfffffffd, 0xa954, 0x7, 0x100, 0x5, 0x80, 0x80000000, 0x1, 0xffffffff, 0x800, 0x3, 0x100, 0xfffffffd, 0x7fffffff, 0x81, 0x9, 0x1, 0x0, 0x9, 0x5, 0x0, 0x0, 0x3, 0x3, 0x40, 0x3, 0x6, 0x7fffffff, 0xfffffe01, 0x8, 0x5, 0x0, 0x7, 0x5, 0x5, 0x8, 0x3, 0xd54, 0xffffffff, 0xffff7fff, 0xffffff81, 0x1f, 0x3, 0x7, 0x1e, 0x93ba, 0x1, 0xb76a, 0x800, 0x4, 0x0, 0x4, 0x9e07, 0xff, 0x81, 0x4], [0xf7b, 0x6, 0xfffff801, 0x0, 0x0, 0x0, 0x1ff, 0x40, 0x1, 0x1, 0x7, 0x8, 0x3, 0x7fffffff, 0x2, 0x90800000, 0x3, 0x7ce, 0x1, 0x6, 0x2, 0x5, 0x4be7, 0x1, 0x1, 0x4, 0x2, 0x7, 0x8, 0x2, 0x10001, 0x0, 0x6135, 0x6, 0x4, 0x1, 0xffff9e7d, 0x7fff, 0x1, 0x1, 0x57, 0x400, 0x8, 0x7f, 0x1000, 0x2, 0x8, 0x5, 0xd9, 0xffffffff, 0x9, 0x4, 0x4, 0xfffffff8, 0x9, 0x2, 0x0, 0x1, 0xfffffffa, 0x80000000, 0x9, 0x9, 0x7, 0x200], [0xfffffff8, 0x401, 0x7, 0x7, 0x0, 0x2, 0x5, 0x9f2, 0x9, 0x1, 0xfffffffc, 0x1, 0x0, 0x2, 0x4, 0x8, 0x4ad, 0x100, 0x4, 0x10001, 0x200, 0x9, 0x200, 0x101, 0x9, 0x2, 0x7, 0x4c709e21, 0x71, 0xff, 0x59, 0x101, 0x64, 0x8001, 0x3f, 0x2, 0x3, 0xffffffff, 0xfff, 0x200, 0xffff, 0x9, 0x7, 0x2, 0xffffff7f, 0x8, 0x6, 0x4, 0x2daba2bb, 0x1, 0x9, 0x81, 0x2, 0x7, 0x2, 0x3f, 0x3, 0x3, 0x7, 0xfffff800, 0x6, 0x1, 0xab, 0x101], [0x5, 0x713bb317, 0x7, 0x9, 0xbf28, 0x5, 0x101, 0x1e, 0x101, 0x7, 0x3, 0x7, 0x80000001, 0xfb2, 0x9, 0x1, 0x81, 0x400, 0x7, 0xfffffff8, 0x9, 0x3, 0x1, 0x80000000, 0x25, 0x5, 0x9ed8, 0x5, 0x1, 0x9, 0x6, 0x0, 0x1, 0x7ff, 0x8, 0x3, 0x10001, 0x3, 0x5, 0xffff, 0x6, 0x1, 0x7fe, 0x9, 0x5, 0xfffff801, 0x7ff, 0x3, 0x0, 0x6, 0x2f1, 0x101, 0x7fffffff, 0x20, 0x8, 0x2, 0x5, 0xee, 0xff, 0x9, 0x5, 0x6, 0xc9c, 0x1ff]}, 0x45c) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDCTL_DSP_NONBLOCK(r5, 0x500e, 0x0) r6 = dup(r3) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_BULK(r6, 0xc0185502, &(0x7f0000000440)={{{0x7, 0x1}}, 0x8b, 0x2b9, &(0x7f0000000380)="ab2823e192fb21fc370ad6a1ab608ade85145136a64a73d0f6758fbac8b0d8e32f229b28164ddaf22e0c6bd84c2a7b2c4ba86bf6d02ac86801e8a5c73f023865662913529f1409f92bab0a3577a48896e5d4ef3f4d9506bd5439236290da370abda76efa7aecb11da3f961a1242257a656bc204c09a9e5fd3a2212d20d7f4da3b12551421bf1e94f30a071"}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0xe, &(0x7f0000000100)='securitywlan0\x00', 0xffffffffffffffff}, 0x30) get_robust_list(r7, &(0x7f0000000300)=&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f0000000180)}, 0x0, &(0x7f0000000280)={&(0x7f0000000240)}}, &(0x7f0000000340)=0x18) write$P9_RREADDIR(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00a7"], 0x2) mmap$perf(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x0, 0x412, r0, 0x0) [ 443.126315] attempt to access beyond end of device [ 443.160471] loop1: rw=12288, want=8200, limit=20 [ 443.195847] attempt to access beyond end of device 21:50:50 executing program 2: syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x1, 0x210002) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$EVIOCGABS2F(r1, 0x8018456f, 0x0) r2 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) r4 = open(&(0x7f0000000340)='./file0\x00', 0x208400, 0x141) setsockopt$bt_l2cap_L2CAP_CONNINFO(r4, 0x6, 0x2, &(0x7f0000000380)={0x7fff}, 0x6) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f00000003c0)={0x8, 0xf1, 0xff, 0x0, 0xfbcb, 0x5, 0x58, 0xdc, 0x7, 0x80, 0x9, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x2c}) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video35\x00', 0x2, 0x0) fcntl$dupfd(r5, 0x0, 0xffffffffffffffff) r6 = gettid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000040)={[], 0x8, 0x158, 0x40, 0x0, 0x1, r6}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400000, 0x0) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$cgroup_pid(r7, 0x0, 0x0) r8 = getpgrp(0x0) waitid(0x0, r8, 0x0, 0x5, 0x0) getpgid(r8) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_vs_stats_percpu\x00') openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = gettid() fcntl$setown(0xffffffffffffffff, 0x8, r10) getpid() r11 = syz_open_dev$amidi(0x0, 0x3769, 0x468800) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) write$RDMA_USER_CM_CMD_CREATE_ID(r11, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r12 = gettid() waitid(0x3, r10, &(0x7f0000000780), 0x8, &(0x7f0000000800)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r14, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r13, @ANYBLOB=',wfdno=', @ANYRESHEX=r14, @ANYBLOB="2c0012f759b7c0a50a9291b25e67ed5cd12812de43fd677094f6abd73209ed77c2dfb9b745057832cfd2b1fb94e8078612e7ca56b15092765f9707e7f62a7332c2c0411f8b96c558507549e84c2e1cbcdfb46958097eec26dfb0bfb56027d8bb57669baaa9c1ad0c2eb029cd316872a64389824365166dc1fb4e378fb0caf51f9b44621509fd8fcf6c42c314350816ab8323881d8eaf0133042c95dd3972b9ee00f5c238bb2399e8bda15208b7245b9d8a"]) sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES16]], 0x8}}, 0x40000) r15 = memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) r16 = syz_open_dev$sndseq(0x0, 0x0, 0x0) r17 = dup2(r16, r15) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={r12, r17, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000480), 0xc) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x5, &(0x7f0000000000)='comm\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xe, &(0x7f0000000000)='ppp0eth1]*em0\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r9, 0x0, 0x17, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, r4, 0x0, 0x0, 0x0}, 0x30) recvmmsg(r4, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xffffff5a, &(0x7f00000035c0)=[{0x0}], 0x100000000000021d, 0x0, 0x2c5}}], 0x2, 0x0, 0x0) syz_open_procfs(0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x48babc9a345861d4, 0xffffffffffffffff) r18 = open(0x0, 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r18, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff72) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x1) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff77}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getuid() getegid() lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000380)) getuid() getgroups(0x0, 0x0) write$cgroup_type(r3, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) [ 443.219419] loop1: rw=12288, want=12296, limit=20 21:50:50 executing program 0: syz_open_dev$dmmidi(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc28}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_disconnect={0x40}) r1 = dup(0xffffffffffffffff) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "f3e000", 0x30, 0x33, 0x0, @dev, @mcast2, {[], @icmpv6=@dest_unreach={0x4, 0x0, 0x0, 0x0, [], {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @empty, @remote}}}}}}}, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x30000, 0x1, 0x11, 0xffffffffffffffff, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000180), 0x4) getpid() getpid() ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) read$usbfs(r1, &(0x7f0000000080)=""/92, 0x5c) 21:50:51 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0xf0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x7b, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TCSBRKP(r3, 0x5425, 0x401) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @local}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\xfc', 0x248800) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x40000, 0x0) close(r4) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b00170002000000600004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) [ 443.440408] attempt to access beyond end of device 21:50:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 443.506134] loop1: rw=12288, want=8200, limit=20 21:50:51 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) listen(r0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r1 = gettid() bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8, 0x7f}, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x12}, &(0x7f0000044000)) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {0x0, r2+30000000}}, 0x0) tkill(r1, 0x5000000000014) [ 443.549004] attempt to access beyond end of device [ 443.586376] loop1: rw=12288, want=12296, limit=20 [ 443.603362] attempt to access beyond end of device [ 443.618973] loop1: rw=12288, want=8200, limit=20 [ 443.631903] attempt to access beyond end of device 21:50:51 executing program 2: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553f", 0x3) r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x1, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x9, &(0x7f0000000600)=[{&(0x7f0000000180)="005ce3ed5cd7acd1eafe48a998c69986e5872bce4b2ef3d2fb89508c835f116afb57dc304f14886aee6eb1e962cd51462fb15d906c0d175fc3bb6d77f7258819fe5af2f603655ea6342a91432a948181a0f87327381e34981bd5488ff11073479ef4cb7162b340e103d1e2", 0x6b, 0x3}, {&(0x7f0000000200)="dad1d55df4f41656f9078b52", 0xc, 0x6}, {&(0x7f0000000280)="4e5eee198f5bc3b505dc90da65ef6af85f24255c03f981ac81889a18c0d9583c29f4617f74a3b0d3187a9cd99e83045fbacfca0863f07e851c456f1489d48663286487acfd1102a1d1f040", 0x4b, 0x400}, {&(0x7f0000000300)="70c951b99fa254aef9eb0d00025fafb3c8aad879ce7e398e8cc3d0ea59ad94c1eb85e8dd28e808ed0a3056151ead1bf664fd17ac8afbed6742563c9369f2b5f5b0c5ceede2a7128e9970a605f8ed3c17da0e7eab824f52ae94f678075c5780b95b1ffac955bff1c1c12d48d1cb40f02684823debcceea076f669", 0x7a, 0x7fff}, {&(0x7f0000000380)="c354bf989906a6777b51647f1e06e81c63e45eadfd9aba7b24db921a3f61ce4b124d5a20e445af9a75a06fec4ecd169f111de37fa16c3d3d7173603d3217f7cb57acb1b3c2e452662cd818dc6a617c2c517e33832e", 0x55, 0xffffffffffffff00}, {&(0x7f0000000400)="190f6b1f6293", 0x6, 0x1}, {&(0x7f0000000440)="569f2848cffb652ebb42a590651892bd902be938e25191a5a09ac55741e4fddf4c3b1ed58069c96f86166b92508a84a214c9356cd3c7060dea5982e36c2fbcc39ebe7b545520ebfc3df620dbd938a6cbaaa566301bd81fd826dafc443c892c2a70194aad8c8e34afcab3f40d31c4f151cf57bfa7d955ff4205c817db6e30f4afde156cc862a3ab481a2226d0065bd7d317a91b448c6c37effc5ae4c58ce2303c24946d8a1c5ddaa420c4d5f2a56f235f096e926b7c754e5904dacb0a90ac458089f04b3119639489d242d51ba88dff33a7bc450ec49937e1d9946340a2d0199567c35a2160d92d52ab360b8b8561", 0xee, 0x4}, {&(0x7f0000000540)="c5c5d278fa722913ab05f71cf5dd33232376c16e6ed6e613bb14124450a6b39b9b3f697e9ce2f1dfc406ab4decee9f3dbee16b0b8f05bdb6660a5ae3", 0x3c, 0x80000001}, {&(0x7f0000000580)="6fa7bc44eb0417b77909844e64e0ac6d5de19e3bfac5268f3d01709a8fff85117c84043ebf53c9bba807020c1893c5c2c47aa6712ca69b396b034d2ee3e3a9b6c0f5109073a51a792f3876588e8ecec99902351cc5b59b64fe49f04aac99534a", 0x60, 0xb718}], 0xc1080, &(0x7f0000000700)={[{@acl='acl'}, {@noacl='noacl'}, {@noacl='noacl'}], [{@obj_user={'obj_user', 0x3d, 'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01'}}, {@fsmagic={'fsmagic', 0x3d, 0x3f}}, {@subj_user={'subj_user'}}, {@appraise_type='appraise_type=imasig'}]}) unshare(0x2040400) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getpid() sched_setscheduler(0x0, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) [ 443.655482] loop1: rw=12288, want=12296, limit=20 21:50:51 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x2a7) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5) clone(0x2000000002000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000080)=""/225) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x20) wait4(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) 21:50:51 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x2}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xec}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f0000000640)="3232ce27", 0x4, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, &(0x7f0000001280)=0x2, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x610081, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x138, 0xd0ba242d0265824b, 0x0, 0xfffffd89) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) 21:50:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) [ 443.776514] audit: type=1400 audit(1577397051.310:181): avc: denied { ioctl } for pid=12673 comm="syz-executor.2" path="socket:[51631]" dev="sockfs" ino=51631 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 21:50:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x102800) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x0, 0x40, 0x509, 0x0, 0x1b, "a12e1594f44fbca0"}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f0000000180)=0x1e) dup3(r1, r0, 0x0) [ 443.866012] bond0: Releasing backup interface bond_slave_1 21:50:51 executing program 1: r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={r4, 0x6}, &(0x7f0000000380)=0x8) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000001c0)={0x8}, 0x4) connect(r0, &(0x7f0000000000)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {}, 0x0, 0x0, 0xffffffff}}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000000200)=""/142, 0x8e}], 0x2, 0x0) sendmmsg(r0, &(0x7f0000001540), 0x553, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x200480, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x80) 21:50:51 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="95"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x10000, 0x0, 0x2, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb], 0x100000}) ioctl$BLKSECDISCARD(0xffffffffffffffff, 0x127d, &(0x7f0000000200)=0x7) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000240)={0x28, 0x2, 0x0, {0x6, 0xfc00000000000000}}, 0x28) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:50:52 executing program 3: setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000)=0x10000, 0x4) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@local, @empty, @rand_addr="fc5400000000000092c2fe4cbc2929db", 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x400003}) 21:50:52 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r0 = socket$inet_udp(0x2, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) fcntl$dupfd(0xffffffffffffffff, 0x406, r2) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000800)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="1a02ab52b6af48889055e4095bf8624a1d84c57acc71a6", @ANYRES16=r2, @ANYRESDEC=r3]], 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000040)=0x400) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x2, 0x5bc, 0x100}}, 0x30) 21:50:52 executing program 1: r0 = socket$inet6(0xa, 0x40000000000001, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000010c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) syz_mount_image$vfat(&(0x7f0000000180)='vf\x81\x00', &(0x7f00000001c0)='./file0\x00', 0xe000, 0xaaaaaaaaaaaa782, &(0x7f0000000040), 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cdca4530b1c5ba6802b4754b47c304436b89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c4115399f072172dddaee09705b96a6711d4679079d00000000000000000000009f89fddd21addf36825b3ff3f63d6a2d72ccf7f9dc6ee0dfe71b19fa31a0083354d8311e7e8487ea1b1bb950e440d133ef10684931e471c629307a1762ab90c137b93d8b71"], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) syz_init_net_socket$ax25(0x3, 0x5, 0x842247e4fa8fe559) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r6, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x3) bind$inet6(r0, &(0x7f000044f000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, &(0x7f0000000040)) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000d01800000810023000800450000280000000000069078ac1403bbac9414bb00004e20", @ANYRES32=0x42424242, @ANYRES32=0x42424242, @ANYBLOB="5002000090780000"], 0x0) r7 = semget(0x0, 0x4, 0x141) semctl$IPC_STAT(r7, 0x0, 0x2, &(0x7f00000001c0)=""/226) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d623286d8fa5f6cb8deb86cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f0000000340)=0x8, 0x4) semctl$SETALL(r7, 0x0, 0x11, &(0x7f0000000000)) 21:50:52 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000000)="088000000000010400000000000057cff62b3fa0dcb48202389ba884da25d095fe702bf596cc08975239dbb6225c59a757cd9c1b8dcae7e279335eb54a8d864ba99e8278b10634587a148eb66b23b0facab4a89a3b38084cbe43bae727c0e656d244210e820acb7969ceed5da28405fc30fe99a0c7a254392ed6229cf6e48d94077ffc5395f0abc73e9e0c364582ec40dc07a37ead31db4fe5cfc8b8d5591aba936c") r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000b67000), &(0x7f0000000240)=0xfffffe43) 21:50:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) r1 = syz_open_procfs(0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f00000000c0)={0x401}, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) syz_open_dev$audion(0x0, 0x0, 0x0) getpid() write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x2002, 0x0) accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @rose}, [@bcast, @remote, @rose, @null, @null, @rose, @netrom, @bcast]}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff46, &(0x7f0000000040), 0x1}, 0x800) getsockopt$nfc_llcp(r2, 0x118, 0x0, 0x0, 0x0) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000200)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r3, 0xc0485660, &(0x7f0000000300)={0x3, 0x0, @stop_pts=0x7}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 21:50:55 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) getrlimit(0x7, &(0x7f0000000100)) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x20, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x0, {0xfffffffffffffffe}}, 0x18) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_subtree(r4, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0xd9, 0x0, 0x0, 0x55, 0x0, 0x0, 0x2006, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'eql\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x1d, 0x2, [0x4d, 0x9150]}}) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0) r8 = socket(0x2, 0x803, 0xff) connect$inet(r8, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10) sendfile(r8, r7, 0x0, 0x72439a6b) ioctl$KVM_GET_REGS(r7, 0x8090ae81, 0x0) [ 448.573439] IPVS: ftp: loaded support on port[0] = 21 [ 448.740037] chnl_net:caif_netlink_parms(): no params data found [ 448.930328] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.937327] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.944781] device bridge_slave_0 entered promiscuous mode [ 448.953076] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.959788] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.967520] device bridge_slave_1 entered promiscuous mode [ 448.989741] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 448.999857] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 449.020891] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 449.028798] team0: Port device team_slave_0 added [ 449.034713] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 449.042666] team0: Port device team_slave_1 added [ 449.056388] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 449.064177] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 449.138652] device hsr_slave_0 entered promiscuous mode [ 449.235994] device hsr_slave_1 entered promiscuous mode [ 449.276426] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 449.283740] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 449.320977] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.327413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.334066] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.340473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.382486] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 449.390557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.400531] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 449.411076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 449.419006] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.426073] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.433456] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 449.446215] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 449.452308] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.463933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 449.472555] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.478964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.496027] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.503726] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.510122] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.529738] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.546383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.554966] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.580868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.590935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.610850] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 449.619826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.630032] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.638092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.656363] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 449.666891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.673669] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.688540] 8021q: adding VLAN 0 to HW filter on device batadv0 21:50:57 executing program 1: clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = getpid() r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x14, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8001, 0x210240) r5 = timerfd_create(0x1, 0xc0800) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r3, &(0x7f0000000040)={r4, r5, 0x9}) r6 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r6, 0xc018620b, 0x400000) 21:50:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 21:50:57 executing program 3: pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) setsockopt$packet_int(r3, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) r4 = getpgrp(0x0) capget(&(0x7f00000002c0)={0x99b8b23, r4}, 0x0) getpgid(0x0) r5 = memfd_create(0x0, 0x5) r6 = syz_open_dev$sndseq(0x0, 0x0, 0x1) dup2(r6, r5) ppoll(&(0x7f0000000200)=[{}], 0x1, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0xa, 0x300) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe(&(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x50) close(0xffffffffffffffff) fsetxattr$system_posix_acl(r7, &(0x7f0000000400)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[], 0x0, 0x0) r8 = socket(0xa, 0x3, 0x8) syz_open_dev$amidi(0x0, 0x9c4, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) gettid() r9 = getpid() sched_setscheduler(r9, 0x5, &(0x7f0000000380)) waitid(0x83b895581628fca4, r9, &(0x7f0000000040), 0x80000000, &(0x7f0000000480)) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x9a0efa2b65aacb27) gettid() writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0x2c}, {&(0x7f0000000180)="53000000c90dca807737f408177021bd01d3be55090000000001a0000000000000000000", 0x24}], 0x2) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000300)=0x0) ptrace$setopts(0x4206, r10, 0x100000000, 0x40) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r1, r0, 0x0, 0x14, &(0x7f0000000180)='&$vboxnet1security!\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000100)='\x00'}, 0x30) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) fcntl$setpipe(r11, 0x407, 0xfffffffffffffffe) bind$inet(r11, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r11, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r13 = dup(r12) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r14, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r15 = dup(r14) write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r15, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$SO_BINDTODEVICE(r15, 0x1, 0x19, &(0x7f0000000200)='sit0\x00', 0xa) r16 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x2, 0x105084) r17 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0) pwritev(r17, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r16, 0x4c00, r17) sendfile(r11, r16, 0x0, 0x102000004) 21:50:57 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r3, 0x4600, &(0x7f0000000140)) ftruncate(r2, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) sendfile(r0, r2, 0x0, 0x80001d000070) 21:50:57 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mmap(&(0x7f0000a40000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0xffffc000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000000c0)) fadvise64(r0, 0x0, 0x0, 0x4) 21:50:57 executing program 2: sched_setscheduler(0x0, 0x0, &(0x7f0000000380)) r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) fcntl$setpipe(r0, 0x407, 0x100) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, &(0x7f0000000780)={[{@lockproto_nolock='lockproto=lock_nolock'}, {@locktable={'locktable', 0x3d, '/dev/vcsu\x00'}}]}) 21:50:57 executing program 2: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, &(0x7f0000000440)=""/109, &(0x7f0000000800)=""/4096, &(0x7f00000004c0)=""/236, 0x100000}) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000000)={0xe, 0x18, 0xfa00, @id_tos={0x0}}, 0x20) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000000140)={0x0, 0x20}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={0x0, 0x1}) r3 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000100)=""/230, 0xe6) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)="da3a923459b092a0acb87ecfe52049", 0xf}, {0x0}], 0x2, &(0x7f00000003c0)=[@init={0x18, 0x84, 0x0, {0xfaa9, 0x3, 0x3, 0xfffb}}, @init={0x18, 0x84, 0x0, {0x8, 0x6, 0x7f, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="a0f7a251f2e4e5c1763fd679ec5d8016"}, @dstaddrv6={0x20, 0x84, 0x8, @loopback}], 0x70, 0x60008004}], 0x1, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0xf561f0d9d978f770) 21:50:57 executing program 1: r0 = socket$inet6(0xa, 0x100000003, 0x3a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x20) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) removexattr(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000400010000108000000000000e9def3fdb9ab", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800040000000000"], 0x30}}, 0x0) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000400), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000140)={'syzkaller1\x00', {0x2, 0x4e21, @broadcast}}) fchown(0xffffffffffffffff, 0x0, 0x0) getegid() openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x1, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001240)='/dev/hwrng\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000001280), 0x8) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000280)={0x2}) utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{}, {0x77359400}}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) sendto$inet6(r0, &(0x7f0000000000), 0xffa7, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141403}}, 0x1c) [ 449.930026] binder: 12768:12769 ioctl c018620b 400000 returned -14 [ 449.942820] audit: type=1400 audit(1577397057.490:182): avc: denied { map } for pid=12771 comm="syz-executor.4" path="pipe:[53048]" dev="pipefs" ino=53048 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 21:50:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$alg(r3, &(0x7f00000025c0)={0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f00000000c0)="116a19145711997456be65d8ec19a8ce1f92996bd33e37dcf2d3c27206137839a10312e9b6a5296d08f6d6e7aac4b79ca8d296586342326d0e29bfc96f537aa0ffdda4625cf0b3b89186397f6a6430137030e3e998f6f54c", 0x58}, {&(0x7f0000000000)="7c9350b95592a7d919b26c3b4c6801460f3c9b1ba3b307e8a2cf09be2dd8777372e8a4978cd1de7504bbb52ebc404ac0280f25b8e68641", 0x37}, {&(0x7f0000000140)="b84a468d5c5bf19d", 0x8}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="c1ead25f7ea4fe13a1476e14552cbc72e944bfb2a6f4a3a3e1fd9d58a555e0019702662c0664c080a309e17d740134e59d6cec04ebc10fa42155c1c40567f64f83ce5d510ed36b655e533e0bc423b4d38e37504941d5ef7b64dcf4b2b413e08bb9b033426357ae0ee498abccea19fdbe475ac48c6877fa5eefd6cbdab6980b35f8a99bda0e05b84774f1c405632c7b591bc266e35ab94daf57b961636652d0ab70168e54cf6c2fb50b9ea19352f23d95dd328be0ed3e824202d534c76f6ec02ba4", 0xc1}, {&(0x7f0000001280)="ea275f2a470b849be0da8c86695f3834cc6fa50ebd7b24f24a8412a69f3283a14f1f0720af3c1844f3337a0ffe0c11dd8926bd82a74219206ac0857b8085e61bebe27395dc5b3e45eda2338aaaca1be226ea4f410deb77890ebdf3e7a18170ef9bb5a683db7987ef710e812c8648c8f69b6c6c551619d39edf3f050867a879708a8388964a56977733d4807d83774d11883f907537deb3470a79afe077c5c727d485dd3a2c58a86571", 0xa9}, {&(0x7f0000001340)="3722fd0b8894395a609ae033dc1066aa1db6b338035bc6c94c9fb03b4bbf4ff91c935c23be443432608bddd05a92c7c930ec0edfa9beafbb34022edf36eb2c9a72783ef71a1b9d6e95e8583cd62a6dc8a32fc3aa6885da302eb8516cfbc22842ab3a981707a9879d144a47a42e147b016b109503a958a0370a9b6f549355e4258f724621d3285cb7a300a3a62563afc37947dcfcb7e95d1a54434e3feb4bd67698257e1ac67455cae9b45e3b830708cf459c17e9126ccf1d389ac7da55a3de231b4ebe416b5de6bbd737fbb1e58a0d3799345444b2cc6c492f3d8cc7effacb76abe696f78e62a00fb2a367e8debb96416855d6cbb5875231bda5f30874c6ec982536786d1b7828be37cab14dbb5253425a9e4f046f4915dc644118543410f6031609ba9ff912ffe71f0d63b6a2410fd3c87ae46bf629a993859f97a2f30f65560181364fb59939149829b5e2f21677e54ba5bba14fc829810741b54255d4e8b52368bc2c2163e4c906fa92070506f821ec4715a71cbff1fb8fd94fabd1a96e97c3d1f3f0bdf707f7f06cfed5a66300543c1ec6168e03dd68564594f59863f98cf60428c93b392b5fef880abeadab767acbbacf6941259f9dd56e503f15108d712e7dd0e358b77a8d995c8d115f684a7d559eef0e61737d96f8ef7cefe55f990c43aa11dd6b6f4f148b485ef78775754bfb920182d901f87d6af0e8548b1245400c8337fdb605c8601d342e02c667ae8d1a96261323c2fb0338bfb9225b3c7eda8a2294ea70dc9e2bf638e0f7933a185eac8f7a442282a94a3db684978b22bf924a158b6daa869fe07238e7a11ca3f0dc1bc9a80bd492d3666d408e26359c6eae0848b143368823891ce8749153bb7e066bd6a1bf87e72c3069b735ddc6550015b4486ad3eb51f251876ca9aa3d98739e83d2b19cae6db33cfa1e4b34c1d3fe72cc7b16e0312b727351ae816b20062b9dbcbaae904f156a5a1740f50581d6ee22b563d1d613c9c2b4e71d127e549111f882c4817a3bf9ee852808b12067438ed9f09cc0c236bd2b21979b96a2539423125320a6c8c7c88aa357da8849425deb0d717aacc7f72fcce132c92c6c5b94e18add236d4969862300fae40f84a6a58bc9dcd8d891710a7ed23b34719fac6973170ede6747b7dd26cd6982ffcff25eb0c444438608a7c3925beea59f6352216327e721e141f4fdb75c8566415b67083c16129336c483fd510b301f8e4a7888dec94c574d208c4b6588cb343ca9a149be950f26769bd287cf4c3dcd6dd71fd528c98f99b460fd94e577f11e0e9dbaa2ee751fba216636e8824c65af003e4b38b94918881c65a95aad7ab406f1d64009bb4f0578e6d0f333df7054aa48fa0c79f8da69ca0aee9604c4528d37c8e428c228d5ca75b53e7243f0def127de58836898caf7b6b24ec5142681662c902e054c211a177be9e101f2287a2b629936f5b9d8b6c840e3eded96cca2508309427de8061008ae06c601e314bc5d87f66eecf023e167cbe63905eea076c2b82357fe4575b7c21fbcd2b706f1b116c879864467aaac5646c5600a9f41fc4cd7f92b75986270ab1f1f9747bd5dd491b46807c3159556ac38a65a877f0089caea41e986f76369ebe042bdfd2a775bc0ab2ccfe3baa86b258a6a981d7bd10d02c264f9fadf6873de1b065ee69d7457b0d8bf2a40ab7f0a3ec8c5f6f80a4fef8cf4d536dbb9e7c292c9cb53edcde4c96229984491be0f2726a6386db7206449288a880e4f0c8fad23d39ef54088554cbe36e2057c9c61aca77b1264ac257feafc3d5ca02c82db65460d97e47a37877730e798b13531e9ddd4c50c39f76b4c40bb21681b0de3db8d1a9917f6b7b04ab4bf63015dd38fe188d58a2942bfef693cc50ea75db27bc9137e278e1df730103811585a77eb2258c9d868e8839b41a9488c9f12bce430751c27020ebd8fd78074c6784355bf572240931869891d6abe57b9a0380eac4fdf712f84ca176405523cbd3c89ee52fa0f71475328fa9b23f8e1ddc07b1e2e947eecaeab93125cafd7c0b2a225b61b5e074f95c05dfb5c9efaf9bdf23427327dc1929d758d49f34915800f1a3e4ebfba823319dfea589e5255b0fe9ed2398e50541f4d9c410af5866da2169662a7e478d51e46d7349b892500476bccd49ca86b118167c9e2484d2e71e59afd7ca7d8e5cbf3ed6272413e28b13c7e21bed8baf180ef55ba95ff6cd7dca1ea031c749405be45582588adfb7c02d7eb88472a20fc64abfd8bc99b85b0cd5a64a3672bc54a46c1ca307653311db27664a2875fc30c3c6f45c24ae976c3bcd5ab26d50775bce73d5c0bf0fb535c79d1f7d0bac13ec5682bee9adf6a6d31271bdfaf0e25ffcf31463d16bdd006057c15f4e1938834c8b2d1900426df018cd50fa95746c086d941d532740c9db19dac2397accd9b4f7dceb26fb457a5b8b9738bae26faf83dc8d36ecb44cf14c8f3d3e06b5104c54522246e145c9de78316ae165c2a6eb6f436bc79a9b8355f86c7936f647b8f5c874cebb43a4d361a39fe7db11f2bf71548287550492cbfdb529c1efed96f335861bfa75dbdb8b6600e23f1146616665097ca18a6968e284d20d120052b72126c8124b2e118f61ac83550c8c00ece8ec4c681a90c2710ef75c1059bc998c04393ada0af8cce6214f18bb995e25efc54bd90adea103551fb4255c20478f71341e2eb514901d77302a7ac9e103934f92d8e501f4e3db517dc9f59d66eec2a860cc1a1c9e3af6ecb33b401173d8d6e4f587eab8d928a397887c121abd561aebb132bf0fbf569d740319c753211739bdb018df371be61cbd83e751076112c2be735a7471c3a03f2965c331a1b30911cf53f56c054936bc23c57380a7bf78cd6d7499c4a73236b243cca910e5d8746128a31aaba8e9b8074984892b833f83ba354532a9209ba13c5d676b225681c2d1918bdf213e4f3c13ca71154b364d4f0b23950f4a1ebe96642d7991dd38d73379b8d1af6e45642f9b84c92a4ee3598348de36b362fd80210d60a593ca333ea35c714681c7879949cee41a353193df613031dd50eae119d40cacb5168193264ef7b1387d6e8a996a1265f21fd23ae76fcc27b234e8bb5cb4cc97eb3624f2731d38f91b2d20be78aade0e41f65d2b38ea230f5af1c8be7fcd74d8462fd85dd81808883c389e7d7395174c83c85f8ef030843569c40525b9dacfcab43aba73792f0db3a0d347779637819b066623996302572b07d741f7325246fe81b58c5df8ba0e31d97cf758b4856df31da7b2fbb811ef2df26812888410b35cc3d014b2cbfa6629d4c91f26677855794eb3ea6f848877e1dde03143752071eda8f946b617b301a20ef452b5d64931e77371fe567fdd7b22beaa142cf0b7d46ee67cba26ce6b76085f8b35ea5284c3d95e5acd9c131c4a5fa6cc9dc20d65255a4a2b2770b515c296a6d6cd9c7b733cef318713939378f628d7f08fa9a8baf984128564eec6f84ca5040eacf34c1f25cb8f37467ebf1c994d3245f73bb73590ff4d6ab1e6796ec9f84b340ca76f8322948c6b8c08a567894c966aedb31d910c5776fe8230929380171e4ec5fa19953c4d94a9d811623bc77e8fcaefd5a28d1434c65687977249e74cb2f2901b1fe5f9df7aa3d039a41395cf64888cb6af4209711cd4fae402e1cfaf46c19f2e6ea0ce473424d775d58eb8d974494ad2d696a1bb3c80659d78a657cbe749f57a7a215437512991062ed510864bd3ab84fc889d0e908457d6cad0f61e4d5a42fde4f80158e8120fe9ba88a0cb3af8bbc19b9ed22b3480b14f6ef4bdd62ec7fadcfe213fa66f955174bfb04957a5f0e57c32df90b6711ecffac70d31d7c84635f3d9343fc2ae6178ce621fd68358670c3d24598fcb5f597a75220b8ddfcef9dd80858629bb348efe8147b9a097493625167b6c3fd7ab0dfeb2479d18c1ba04f5772d30070e77593979906ebb425bf6fa22bed62d1773b9ac5b3eab34e29ba0895880709b663b2381b071a559424e7bb10fe894be300f4301b841bc9bd1f802f5f04bc69e8d396c63fb24971729634bf759093e6b7271ee984094d34259bccbc0e11a5831b8216019c8afcfc15fa3294127dcc12fe5fcdd8799b03d06e9f3432c601a5a8baaa643800fe8ba0ef8865fe2d70e9854c538fcc4cbd410a285945a1f1349e10820ef2ef035d7e6d69bb6601b600d600ed89fb64b6927c162585bf8a6cbb564c714287f654fc8323fe071dc6336bbbda3263f58984739e818260e9e516eb1e832ee261ce59d916c5b34ac5ccbeaf5aad073d65c0fb3a71a50477e16c29089a85b616ece91923b4db5f0b249ae9e3216b42993dc47f061ed13bf4108fa4641e491bc5eba385b67c7e8772892ec308e117fe8c0ed09fb2f4b9d94764b2310930b293aab8b5ba71fdaf9324ce5b61391582e158bcb9d068ea4be2578394600fe357bf02c4a000a8c6c51c2249c91636e2e9d081ea9079c12870c74523334510dc6909a89cd172bbd55fc7b627ff9dbb213db987fa13782e1b86955ca158e5177dcdf88ea0072aa4a8cfa26cedf2cf5b9fbac44a144cc68dc3fb2bdd5abea959151a7500230bc7a4e3847ae2bf77da344526357a870463020ce507d4ac4da483ebd069b483f4242cfdab3531eba6fecfd9413676ed76c54825f3289fca729ba0c2541400927d0bf63e071f638538305702a6ecc703eb958af6d257e46f84d87d271d9529b1caaba0048607c264d361eafc1bff105d93f5a56f597a771062361b6b7cca467cf7e51b4cfe2e6da9b519e8cd2e2d448aa3d9334389cb337326cd343a866956eb5353d6539e71a2c725c04e72b5cefb9c8953ea5c14eed72adf521e40984c82b906989316bc94af003431cf5bc069fed8b7568e84927f48e687045a250a104f4e39c5c2a08e1cca1c17e878fe35f51778251177d8ce6a6e28fb0474debb3ddb4cb1d6c28ad9f65d716d3b756c137a43d89ca7ca755224ae15867980ddffd19ab28803efa3fc6d6cd3dabe8e083824f880d0b1663725047ad3ddda9de05b4f2966f1d343b58eaf8ea1817272a0b0dd1065490f870c638cdeeef1f486a474e874be58e819aef4d975aaa2ef935859818ab2353d4a2286e7f0a77abf806d2afd61dfb66d0c6b22a43f43ce1290c972b93006773156c0517510dad3beb46d8445192ea4c78e0ea395efcd5c09ef9f7c1fa71b6b5a71a78e9281316b8ade978e7aba9e2140cf68e3877805ede833353e255a5259b88d4df003f962313e6281ef6b22b39329533e18b64da447c11add0662cd091ea2af0e82e5a05e7d27ccd0be37b9b779ced73df5f1b4383f32e65dae3c276cc672ff33521e1991b77d18df76bc16154b577c293c094caeb2419abd9687cbad2bb71e7538590fc4b8f23b5c00c7c400ab755a35da92f26da2387a58a5a664762c7f973ee06b0a4c4ada878c16b0011b2cedf30c87464c56c9263aadd9ee7079215af5ffb5c986c34f25db64c10d047ed7623af557b8d396a64a98c1a4a0ead7a5fe920093c26eb1df6fd4e5de734bad126e705ddfb4fb490a2ac15b5a4b4905c32fbd6066870474a5da300c34a5d071c60c5ef8ae51f754935586f9979fd74d94c6af29e25a97da3c0953afff84a1523774058b7c5dacae7b1a0b90ae34f6c68dc66cdd094b2974727bfba0475d4e205cf4f54d7f24acc61fcb99819eb9d3430b632aec2bcc1b948a5d727fa930f52d055a89bbc8021e4ec386d9d9487495ce6bd9dc0fa985f0d3b30d66a5cee6d50573ee57ad92027627ad31f07051", 0x1000}, {&(0x7f0000002340)="12234e29a049bbed711717369580f3154cef0970343edd7788bf479b065a899dc3f7624630365bd2cf4904397e74a1f87c10fef26d219c6181dd2d1388ba8ed5303d9a60f9d18bb071442af411cd07dcabe8b420b02263ef24510f85c3eed894bd9a7bd4eabea3ed3e91ce3643ce0aa1eeddddb23adc31a76339338a8dbf5806af102fe4df9ef8721313c3b0f6f87e8ebaa132d2cd219e66ecccd3c569308b19848d3556018c38806d30878fd6c8629a8d1cd50f72f919867d611b77c0ee78ba7acd9c84e000561850fd6327fb5958f484dbcc0e73a3d2097cbe92b1a504834fe692a779bec164508d25", 0xea}, {&(0x7f0000002440)="6b2828f7bf17f4c5f7293795cdea6d089beff3a722fcda933361f34e7901afa80bcfb9b9ea60431a5582fa205874c572bdedb9884c225c8e4ecf95f5a09ebd571d6fd4f5", 0x44}], 0x9, &(0x7f0000002580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8080}, 0x84) sendto(r1, &(0x7f00005c8f58), 0xfffffffffffffd65, 0x0, 0x0, 0xfffffffffffffe29) 21:50:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 450.042055] bridge0: port 3(gretap0) entered blocking state [ 450.075519] protocol 88fb is buggy, dev hsr_slave_0 [ 450.080673] protocol 88fb is buggy, dev hsr_slave_1 [ 450.110617] bridge0: port 3(gretap0) entered disabled state [ 450.181223] device gretap0 entered promiscuous mode [ 450.205680] protocol 88fb is buggy, dev hsr_slave_0 [ 450.210861] protocol 88fb is buggy, dev hsr_slave_1 [ 450.271543] bridge0: port 3(gretap0) entered blocking state [ 450.277836] bridge0: port 3(gretap0) entered forwarding state 21:50:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) [ 450.505326] audit: type=1800 audit(1577397058.050:183): pid=12792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16945 res=0 [ 450.527502] protocol 88fb is buggy, dev hsr_slave_0 [ 450.527548] protocol 88fb is buggy, dev hsr_slave_1 21:50:58 executing program 0: socketpair$unix(0x1, 0x100000000001, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RATTACH(r3, &(0x7f0000000040)={0xffffffffffffffe8}, 0x2fb) splice(r0, 0x0, r3, 0x0, 0x8ec0, 0x0) read$FUSE(r2, &(0x7f0000003340), 0x60) ioctl$sock_inet6_tcp_SIOCATMARK(0xffffffffffffffff, 0x8905, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCCONS(r5, 0x541d) write$FUSE_STATFS(r3, &(0x7f0000000240)={0xa1}, 0x60) close(r1) 21:50:58 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x1b, 0x0, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r1, 0x94443dc2d1a03bdb, &(0x7f0000000040)={{0x77359400}, {r2, r3+10000000}}, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x0, @loopback}], 0x10) madvise(&(0x7f0000559000/0x4000)=nil, 0x4000, 0xc) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) 21:50:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 21:50:58 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, 0x0, 0x0) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(0x0, r2, 0x0, r3, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r5, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff0000400e630677fbac141414e934a0a662079f4b4d2f87e5feca6aab840213e0325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) getsockopt(r6, 0xffffffc1, 0xfffffff9, &(0x7f0000000280)=""/96, &(0x7f00000001c0)=0x60) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000480)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000005c0)=ANY=[@ANYBLOB="0072646d61202b6d656d0cb3991540bdbf6cca280ad0c2f6a1af96b4647f0967e54cdecfadcd37ec4fcfdbfd2f5042aaaef026b09e9cb1a409eddab70256d36d4e5c3b1041f63833a09f26b632b6d51c54589b8cc8f69d98e61186c3fb4dbb7569dc3f272048cb02b0cf6619632b06aa07cf34b1ad10a163c83aa480669ec6fd18ee0e8e52ed7005f0ad52eaa5b9e1c5b902a1726326ed19ae24994c1b8efd3f74804aed8d0a36971f660a990d447134d0bd99c430ed2cf264cbb1a0b94ce447ede60da052c6900d2923460e6ca318f80828ff97f89b3070308f27c791a633285d2df8c7edb2bb562da14eb10696021f70f27ebc4e94679cd8"], 0xe) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_open_dev$ptys(0xc, 0x3, 0x1) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x0) 21:50:58 executing program 3: perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) r1 = syz_open_procfs(0x0, 0xffffffffffffffff) fstat(r1, &(0x7f0000000000)) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREMOVE(r3, &(0x7f0000000280), 0x1033b) fdatasync(r3) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0x0, 0xffffffffffffffff) fstat(r5, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) r8 = openat(r7, &(0x7f0000000080)='./bus\x00', 0x200001, 0x40) ioctl$VIDIOC_S_FBUF(r8, 0x4030560b, &(0x7f0000000100)={0x8, 0x80, &(0x7f0000000340)="46b5e7881b2e3e98f555da0e51f981108653708d8d2bd015ce188e5169b81f3d8f498969a78571318b0d7d438a8f6381fa52fc6c1829204a74ce9306ece4f0c53af6526b09d17f12539109937f02429a865cc6428d979438", {0xffffffff, 0x0, 0x0, 0x5, 0x2, 0x1, 0x4, 0x1fa}}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000000), 0x20) io_setup(0x1ff, &(0x7f00000001c0)=0x0) fcntl$setstatus(r4, 0x4, 0x44800) io_submit(r10, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000400)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ee827c19123d9457dd8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/145], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r14 = dup(r13) write$FUSE_BMAP(r14, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r14, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r14) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000200)={0xfff0, r2}) 21:50:58 executing program 4: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x2bfa6a426fbe19e1, 0x0) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) clock_gettime(0x0, 0x0) fremovexattr(0xffffffffffffffff, &(0x7f0000000240)=@known='trusted.overlay.redirect\x00') fchdir(r1) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'\x86yz'}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ebd74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b8564459b100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff415b69c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f00000001c0)={'irlan0\x00', {0x2, 0x4e23, @remote}}) add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r3) r6 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="82b1a6021a", 0x5, r3) keyctl$invalidate(0x15, r6) umount2(&(0x7f0000000540)='./file0\x00', 0x0) [ 450.964497] audit: type=1400 audit(1577397058.510:184): avc: denied { associate } for pid=12829 comm="syz-executor.4" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 21:50:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 21:50:58 executing program 1: perf_event_open(&(0x7f0000000a00)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000050d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x89a1, &(0x7f0000000340)={@local}) ioctl$sock_inet6_SIOCADDRT(r0, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000, 0x77a0100]}, @rand_addr="58c4c4a733d993a894f49491cb15d13e", @loopback}) socket$packet(0x11, 0x0, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@local, @in=@multicast1}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f00000008c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) setreuid(0x0, 0x0) ioctl$void(0xffffffffffffffff, 0xc0045878) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) geteuid() stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) stat(0x0, &(0x7f0000000ec0)) stat(0x0, 0x0) setresgid(0x0, 0x0, 0x0) lstat(&(0x7f0000000b80)='./file0\x00', 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept4$inet(r1, &(0x7f0000000640)={0x2, 0x0, @local}, 0x0, 0x40000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000780)='/dev/rtc0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000180)=ANY=[@ANYPTR, @ANYRESHEX, @ANYPTR64, @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=r3], 0x7, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x40) 21:50:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="3e0f060f20e035000002000f22e0181da8205b5b8d7132713279e6c3c6850300000012440f20c0350f00000044332d223656c03656f4f3e1000fae44ee08", 0x9e}], 0x1, 0x0, 0x0, 0x222) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff76, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x11d000}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) read$FUSE(r4, &(0x7f0000000840), 0x1000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$GIO_FONTX(r6, 0x4b6b, &(0x7f0000000040)={0x185, 0x9, &(0x7f0000000440)}) 21:50:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 21:50:59 executing program 4: r0 = getpid() ioctl$SG_GET_ACCESS_COUNT(0xffffffffffffffff, 0x2289, &(0x7f0000000100)) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) userfaultfd(0x80000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') r1 = gettid() syz_open_procfs(r1, &(0x7f0000000240)='fdinfo/4\x00') preadv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000880)=""/260, 0x104}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="fc0000004900071f8a092504090007000aab80ffffff00000000e293210001c000000000000000000000ffff0000000000001ec28656aaa79bb94b46fe000000bc000200000300f9", 0x48) socket$nl_route(0x10, 0x3, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$CAIFSO_LINK_SELECT(r4, 0x116, 0x7f, &(0x7f0000000200)=0xfffffffd, 0x4) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00W\xf6Je|H\x10\x05\xf1\xab\xc4MJ\xcbP\xed@\xe8\xe39\xd2\xea\xaap\xf9\x1aTM\x1f\x8e\x86c\xb4T\xde\x10\xf6\xa1\x89\xea)6\xca\x00\xa2\x04\xe6}\xaa\xd4\xf6~\xd0\x04bq\xe5\xa2\x99t;zzV\x15t[f\x16\x9dL\xe3\xc9\xf8Q\xf3<\x98\x9a\x1b\xb9\x87@\xe9#\x99\xd6\xb8\xa4\xb1T\xdd\xe0\x93\xd0\xd5\xd8\x0f\x11y\xef\xf1R\v\xd6\x81\x97\xa96,q\xd053\x1a\x11VEG(\x93\x18\xf2\xbc\x17\x1f\xd7\x89F(G\x18S\xda\x99\xdb\xeb\xa0\xc9*\xbd\xb4=Y;\xa8\xed\xd2\xa9\xa2\x87\xa0\xfb\r\xf7I1]:\xd1;h\xc6\xe2M\xf2\x005\x96\x9b\xd1\x92\x048\xb2\x02\xf1C\xdf\xa6\xc2\xb2\x1d\n:mnO8\\\xa1\x7f\x92r\x95\x96\xda7\xea\x85\xc8\x8c\xa8^\xb7\x1f\x80\x05\x03\xbb\xef9C\xcb(\x9bF\vHFW\x04\x1d\xc7LkW\xb2\xe9\xdd\x17\xe8%\x86\xd1H\rR\xafX\x1f\xea') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r5, 0x0) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{0x0}], 0x1, &(0x7f00000000c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) timer_create(0x0, &(0x7f0000000400)={0x0, 0xa, 0x6}, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) timer_delete(0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r8, 0xae03, 0x5755) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000040000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB="f4eed3f63ec990449b112954861243e5744509a9f70280c3cc95568b917631e3fbf5e48a52354d66a8a6c70770046a239b05b2e842cababb6d2ba5319d493b799c1ee36bd303f47952ae50321e9aee054a8a42e22ec5fcd963b6fbca933076feebebcc1f4f50adaf80a2a6d06e6028b824f337d5b74785153b25594619a5976f32f2b006de84cca5536ebe22e954ec16fcc081af9e"]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="80", @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB]) 21:50:59 executing program 2: r0 = add_key(&(0x7f0000000680)='.dead\x00', &(0x7f00000008c0)={'syz', 0x1}, &(0x7f0000000900)="76ee75cc8e631a4af2920b2ac9cc88243c810ddca3dbadeb888244911c2dce83ac77101375908f0cf24a26c20f1fbda903084eb665114cceae58499be6a74b79059d7821145f66be25", 0x49, 0xfffffffffffffffd) request_key(&(0x7f0000000800)='encrypted\x00', &(0x7f0000000840)={'syz', 0x3}, &(0x7f00000009c0)=':chain\x00', r0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000700)='asymmetric\x00', &(0x7f00000006c0)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) r1 = syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x100082) r2 = memfd_create(&(0x7f0000000540)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f00000007c0)) sendmsg$nl_generic(r3, &(0x7f0000000780)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="64a9de076dca0e8605a31cef3ab1a5cd02377f28908d669b991d76740dadc3f5a3b7c0b3b172f911f68412b81c29ab57624c32bff42e05b50cbf6e03a74142de293129e7115e6638b1343cdcb16285e3fe0f374f9b76087fd4802c0000003d311688365b184052d1d7a52266025b56aa0d76afe4624740dd26c9ca9f273e2f93815f17000000fd8f6e9673d110e6f5ec486d030c1bab7b0000"], 0x3}, 0x1, 0x0, 0x0, 0x4048024}, 0x4000081) syz_open_dev$admmidi(&(0x7f0000000740)='/dev/admmidi#\x00', 0x0, 0x105000) pwritev(r2, &(0x7f0000000340)=[{&(0x7f00000001c0)='\'', 0x1}], 0x1, 0x81806) r5 = getpgrp(0x0) prctl$PR_SET_PTRACER(0x59616d61, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) preadv(r6, &(0x7f0000000200)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000180)=""/64, 0x40}], 0x2, 0x9) write(0xffffffffffffffff, &(0x7f0000cc2fed)="130000003e0005ffffe3ffbd000026180a3f02", 0x13) sendto$packet(r3, &(0x7f0000000240)="8c6afbc18295209d3afd2fdfa79f0b5dff7fa7f9745afe84b0e3064767e50f60a2d6b11d85967d31afaed05441e3605647bc0e7e209596824ddcf166c92999088280229a0ff4f172a00ccb4ac0965ad1e16ce1b3731291c1342e6b7a84285c2ce01ff376432225b320daa46f2fe7785c581f1abfb49337c33a5e9835de9d19f3af72c04f7b9a559807aa4bad25ba1522a02aca6fbd2a57da241f8b948953d367f8268f1bf76792dcbb2b5f3444bdb18a68a68b05b47dc0b04488d35a9e0a6febd6a9c5e16a7c5ac8f2eafa95b9f7ab4e778ae3d2872200ed1b135ee5fa", 0xdd, 0x4000, &(0x7f0000000400)={0x11, 0xf6, 0x0, 0x1, 0xfe, 0x6, @random="2e1700"}, 0x14) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r1, 0x0, 0x40fdf) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, [0x3]}, 0x5c) 21:50:59 executing program 3: clone(0x102, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0x0, 0x8000000000003, 0x0, 0x0, 0x0, 0x0, 0x220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffe}, r0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0xfffffffffffffd41, 0x6}], 0x0, 0x0) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000140), &(0x7f00000000c0)=0x60) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000200)={'lapb0\x00', &(0x7f00000001c0)=@ethtool_eeprom={0xc, 0x6, 0x0, 0x12, "ab7c3899c2e2102f1be3dc0a506574e64643"}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) [ 451.552725] audit: type=1400 audit(1577397059.100:185): avc: denied { map } for pid=12860 comm="syz-executor.4" path="/dev/nullb0" dev="devtmpfs" ino=1227 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1 21:50:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) [ 451.784910] audit: type=1400 audit(1577397059.320:186): avc: denied { execute } for pid=12860 comm="syz-executor.4" path="pipe:[54132]" dev="pipefs" ino=54132 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 21:50:59 executing program 1: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = accept(r1, &(0x7f0000000140)=@x25={0x9, @remote}, &(0x7f0000000040)=0x27e) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000100)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000440)='cpuset.cpus\x00\xaa\xef+e\xcb\x98\xe6xm\xbe\xf2F\x96%\x12G\xc8X`\xed\xbe\xce\xdea', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000280)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x1) 21:50:59 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r1, r0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4800, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="600b42e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0) 21:50:59 executing program 4: ioctl$KVM_S390_UCAS_UNMAP(0xffffffffffffffff, 0x4018ae51, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000580)={0x9, 0x0, [], {0x7f101a236064885f, @bt={0x40, 0x20, 0x0, 0x1, 0x9, 0x6, 0x8001, 0x101, 0x9, 0xfffffffb, 0xffffff65, 0x31e2, 0x9, 0x5, 0x1f, 0xb, {0x7, 0x800}, 0x0, 0x80}}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01040000000000000000110000000c00090021ff0100ffff00009ce1348b45fab4a13f275deec20af12169d61973e4ac2ce023febd27f24bfd956a89a42fd3ef0abf42d6ae59bee8721e0970ff67960895a7423a1e270d30f5b59ae9f37c094700fe2bb0a6a04cc0607e2f5ac6"], 0x20}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4}, 0x800) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679279d00"/137], 0x15) r5 = dup(r4) syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x9, 0x68800) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_PCM_IOCTL_DRAIN(r5, 0x4144, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name, &(0x7f00000001c0)=0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f0000000640)) dup(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r9 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x4000, 0x0) timerfd_gettime(r9, &(0x7f00000003c0)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0x663abba741622feb) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x200000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 451.953617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=12889 comm=syz-executor.4 21:50:59 executing program 1: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={[{@subvolid={'subvolid'}, 0x3d}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCGPTPEER(r1, 0x5441, 0x1d0) [ 452.027989] audit: type=1400 audit(1577397059.580:187): avc: denied { map_create } for pid=12887 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 21:50:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 452.218629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pig=12897 comm=syz-executor.4 21:50:59 executing program 1: r0 = socket(0x10, 0x802, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000040)={'nr0\x00', 0x3f}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$netlink(r0, &(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000032c0)={&(0x7f0000000240), 0xc, &(0x7f0000003280)={&(0x7f0000001b00)=@newtaction={0x34, 0x31, 0x219, 0x0, 0x0, {}, [{0x20, 0x1, @m_skbedit={0x1c, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4}, {0x4}}}}]}, 0x34}}, 0x0) 21:51:00 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYBLOB="304060ce60b7aa386afb07007498e991757869755135351ba1ef23e2f2810a23c7536c9b"]], 0x1) clone(0x700, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000a1e096aa0000"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$NBD_CLEAR_QUE(r3, 0xab05) add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x390, 0xfffffffffffffffb) socketpair$unix(0x1, 0x0, 0x0, 0x0) 21:51:00 executing program 2: lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7940000000000, 0x400000000000000}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fremovexattr(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000040), 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xffffffff}, @timestamp, @window, @mss={0x2, 0x91c}], 0x4) sendmmsg(r1, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0xfffffffffffffc6a}], 0x1, 0x0, 0xbf1f39d594be0f74}}], 0x1, 0x0) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000100)={'system_u:object_r:hwclock_exec_t:s0', 0x20, 'root\x00'}, 0x29) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x618) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x32a) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000000c0)=[@mss, @timestamp, @window, @sack_perm], 0x20000000000003af) sendmmsg(0xffffffffffffffff, &(0x7f0000004b40)=[{{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000002240)='Y', 0x1}], 0x1}}], 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffffffffffff22, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[]}}, 0x0) close(0xffffffffffffffff) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(0xffffffffffffffff, &(0x7f0000000100)={'system_u:object_r:hwclock_exec_t:s0', 0x20, 'root\x00'}, 0x29) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) write$selinux_user(r4, &(0x7f0000000100)={'system_u:object_r:hwclock_exec_t:s0', 0x20, 'root\x00'}, 0x29) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000018c0)={0x0, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000001880)='bond_slave_0\x00'}, 0x30) dup2(0xffffffffffffffff, 0xffffffffffffffff) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 21:51:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:00 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = dup2(r1, r4) ioctl$EVIOCSABS2F(r5, 0x401845ef, &(0x7f0000000400)={0x599d, 0x1, 0x58, 0x8, 0x9, 0xe5}) r6 = dup(r0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x92483, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'nr\x00\x00\x10\x00', 0x4002}) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0xfffffffffffffffd) ioctl$TUNSETLINK(r7, 0x400454cd, 0x336) close(r7) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet6_dccp_buf(r11, 0x21, 0x1, &(0x7f0000000340)=""/113, &(0x7f0000000100)=0x71) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="747261d011fc815cf6f841edc583a7", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',\x00']) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r13) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r12, @ANYBLOB="477766006e6f3d6786de06c00dde1c72e633f6767c658d819bc46a988fbcd3f9c3322e5ff8772e2d75d6eb8c5b5a2fff56d0ff1c8c22220f57cc3c53c4000000eaa034e11b", @ANYRESHEX=r13, @ANYBLOB=',\x00']) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r15, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r15}}) r16 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40000, 0x0) dup3(r14, r16, 0x0) 21:51:00 executing program 1: unshare(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet(0x2, 0xa, 0x5c) mkdir(&(0x7f0000000000)='./file0\x00', 0xb38d4e929d751498) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001251, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000b00)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/commit_pending_bools\x00', 0x1, 0x0) socket(0x10, 0x1ad0b00e23883188, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0xfd, 0xfd, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2}}, 0x0, 0xffffffeffffffffe, r0, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r1 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) 21:51:00 executing program 4: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB="737562766f6c69643d30783030303030303030303030f0303030303d00"]) creat(&(0x7f0000000040)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xff, 0x400}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={r2, 0x3, 0x0, 0x5, 0x1ff, 0x7}, 0x14) [ 452.610647] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.617402] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.652050] Unable to read inode block [ 452.673354] MINIX-fs: get root inode failed [ 452.693134] Option 'EUÀÅ@G7†Í‰é°Ž?Yrþœ¡b±' to dns_resolver key: bad/missing value 21:51:00 executing program 4: getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="2c0271ca8b080aae3300bfa4def38003c21c104094", 0xfd5c}], 0x1}, 0xc100) sendmsg(r0, &(0x7f0000000380)={0x0, 0xfffffffffffffeec, &(0x7f0000000400)=[{&(0x7f0000002e00)="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", 0x27d}], 0x1}, 0x0) gettid() openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x151200, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 21:51:00 executing program 3: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="440f20c0663503000000440f22c0baf80cf30f01bf9e4766efbafc0c66ed2e0f210e0f01c20f41f7660fc775d80f0094d1bbba4100b035ee440f20c066f922350d000000000022c0baa1000f20d86635200000000f22d866ef", 0x59}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x40, 0x0, 0xfffffffffffffdd4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:51:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x100000000, 0x0) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000440)={0x0, 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280), r1, 0x0, 0x1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xfc43) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000000c0)={@loopback, @rand_addr="b3ffadac825170675d5e96e14627ed30", @mcast2, 0x0, 0x9, 0x8e, 0x400, 0x8, 0x100, r2}) write(0xffffffffffffffff, &(0x7f0000000340), 0x41395527) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000500)) r3 = socket$inet6(0xa, 0x40000080806, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/snmp\x00') setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7fb, 0x4) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x404e20}, 0x1c) syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x3ff, 0x101000) listen(r3, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x4000000000000d0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) write$FUSE_INTERRUPT(r4, &(0x7f0000000340)={0x10, 0x0, 0x1}, 0x10) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDCTL_DSP_NONBLOCK(r10, 0x500e, 0x0) getsockopt$rose(r8, 0x104, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) [ 453.156641] audit: type=1400 audit(1577397060.700:188): avc: denied { name_bind } for pid=12968 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 21:51:00 executing program 0: perf_event_open(&(0x7f0000000600)={0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3c46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff9}, 0x34902, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x80) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000380)='\x00\x00\x80\x00\x00\b\x00', 0x6b3ff3ffcff75ecc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa10000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3b}], 0x3, 0x2a, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x0, 0x14}, 0x1c) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0)=0xc, 0x4) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, 0x0, r5}, &(0x7f0000000440)=""/243, 0xf3, &(0x7f0000000240)={&(0x7f0000000040)={'crc32-generic\x00'}}) ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f) r6 = socket(0x11, 0x4, 0x0) ioctl$PPPIOCGFLAGS1(r0, 0x8004745a, &(0x7f00000002c0)) bind(r6, &(0x7f0000000180)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) r7 = open(0x0, 0x0, 0x0) ftruncate(r7, 0x88001) ioctl$VT_ACTIVATE(r7, 0x5606, 0x9) setsockopt$sock_int(r6, 0x1, 0x66f3c6587f6b7e11, &(0x7f0000000340)=0x5, 0xfffffffffffffffb) 21:51:00 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x73) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000280)={0xa, 0x0, 0x0, @rand_addr="a8d10d2ae35d54b6aafb2becd963c6b5"}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002900000005000000fe8000000000000000000000000000aa", @ANYRES32=0x0, @ANYBLOB="47b8608480b9b3d58dfb8d17fb344e09d77525b4fe3d62"], 0x28}}], 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@loopback, 0x63, r6}) 21:51:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x0, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 453.296041] audit: type=1400 audit(1577397060.740:189): avc: denied { node_bind } for pid=12968 comm="syz-executor.2" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 21:51:00 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x3, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$inet6(0xa, 0x400000000001, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x0) sendfile(r2, r3, 0x0, 0x800000000024) getsockopt$inet6_mreq(r3, 0x29, 0x1d, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f0000000280)=0x14) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000002800)=ANY=[], 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast1, @mcast1, @mcast1, 0x0, 0x0, 0x4, 0x2, 0x0, 0x10000000280, r4}) r5 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f00000004c0)={0x100000000000, 0x40000009, 0x9, {0x0, 0x989680}, 0x40, 0x7}) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sync_file_range(r1, 0x0, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="0b008100"/15], 0x1}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r7 = socket$inet6(0xa, 0x8004808000080003, 0x4) r8 = socket$inet6(0xa, 0x8004808000080003, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@bridge_setlink={0x28, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4}]}]}, 0x28}}, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r9, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)={0x100, r11, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5e26}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e23}, @IPVS_DEST_ATTR_TUN_TYPE={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x65a1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x791d}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8cad}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xc45}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="9d31f3c3b827546fb332427d734e3386"}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x100}, 0x1, 0x0, 0x0, 0xec2f25e0af1d5e81}, 0x44000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000680)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000006c0)={r12, 0x800, 0x5}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000540)={0x9, 0xca0, 0x0, {0x0, 0x989680}, 0x8, 0x7}) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) readv(r13, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x2}], 0x200000000000000f) sendmsg$nl_generic(r6, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x0, 0x1d}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x4022, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x11, [@generic="e2ab"]}]}, 0x1c}}, 0x0) 21:51:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x2a) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fsync(r0) mount$fuse(0x0, 0x0, &(0x7f0000000300)='fuse\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x80001) ftruncate(r1, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) lstat(0x0, &(0x7f00000004c0)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000001500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'d\x01\x00'}}) getresuid(&(0x7f0000000240), 0x0, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='bpf\x00', 0x80808, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000001c0)=r2, 0x4) [ 453.439709] audit: type=1400 audit(1577397060.770:190): avc: denied { name_connect } for pid=12968 comm="syz-executor.2" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 21:51:01 executing program 3: r0 = gettid() r1 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r1, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000040)={0x1, 0xfffffffffffffec6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) clone(0xa4000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x42, 0x0) setxattr$security_capability(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:51:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 21:51:01 executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/load\x00', 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8ccf773ee3355af21b45204c"], 0xc) 21:51:01 executing program 2: open(0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000540)={0xffffffff, 0x6, 0xfffffe01, 0x0, 0x0, [], [], [], 0x400, 0x10000}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=']\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x208100, 0x0) gettid() pipe(&(0x7f00000001c0)) pipe(&(0x7f0000000680)) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) r2 = dup(0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x5452, &(0x7f0000000040)) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) waitid(0x0, 0x0, &(0x7f0000000040), 0x4, &(0x7f0000000b00)) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) [ 453.761317] Invalid argument reading file caps for ./file0 21:51:01 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640), 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x10, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x8, 0xb, 0x4, 0x40, 0x2, {r3, r4/1000+10000}, {0xf6b89b254612c600, 0x1, 0x0, 0x5, 0x1, 0x1, "4e63d4c0"}, 0x6, 0x4, @userptr=0x3f2, 0xfffffffc, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x8, r5, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000600)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000070001006671000034000200094534bf4bc76b7853000600000000000800030000000000080008400c0000000800010000000000ddfd48ce744e5d42"], 0x60}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205649, &(0x7f0000000300)={0x990000, 0xff, 0xff, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0xd9c2e456d158ed48, 0x8, [], @p_u16=&(0x7f00000001c0)=0xe4a1}}) r10 = socket(0x10, 0x803, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r10, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r11, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x80, r11, 0x708, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x58}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}]}, 0x80}, 0x1, 0x0, 0x0, 0x8}, 0x40001) [ 453.808770] SELinux: policydb magic number 0x3e77cf8c does not match expected magic number 0xf97cff8c [ 453.826827] SELinux: failed to load policy 21:51:01 executing program 3: write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0)='threaded\x00', 0x9) splice(0xffffffffffffffff, &(0x7f0000001280)=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0) semctl$SEM_INFO(0x0, 0x0, 0x13, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, &(0x7f0000001280)=0x2, r1, 0x0, 0x800000a, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800000a, 0x0) r2 = add_key$user(&(0x7f00000002c0)='user\x00', 0x0, &(0x7f00000005c0)="4acf665ff77df4f20690a5a83bc1a1e6519321db1dc2bf7eee06d978abdfbb33f3bc7025e6befda3c827875946eb75c1", 0x30, 0xfffffffffffffffe) lstat(&(0x7f0000000280)='./file0\x00', 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) keyctl$chown(0x4, r2, 0x0, 0x0) add_key$user(&(0x7f00000002c0)='us`\x99\x00', 0x0, &(0x7f0000000700), 0x0, 0xfffffffffffffffe) openat$dsp(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x9, 0xa, &(0x7f0000000780)=[{&(0x7f00000000c0)="320995197313fa094fdc33b32cbaea38f2934b1e0b44047ec2c03fe20cc0c074bec2ecc59dea060ac196f26564b4eb482b552ac6c532a0b0078f52d7c140c0b43346091aedb8d1728b08d0227e0ef652d42fa5df0c0dd28a84e0bea4f224a1539b546011f2c6acd9c044aff8164155d9200b347b8a2f496f6ee6e47457", 0x7d, 0x9}, {&(0x7f0000000300)="10997c7e8f445a53e1152cf0ac73ed7be3f85378812a02f24d7ca8509d2e27ef579c657aee65ab36ba0f0870e98b59895c1dbc7a49914d4f5d2ed02226a5072f8d65b848feaaff9f086ceb82a98f86980a5befcc0862937c03728d14a686d7c0fc70d1858a03c751c1847900b2347212504717cc0b9d90530dac438a510b93b8ae93ece2032b0c2b8ee9b549d9e1e1d4f1111ab34e50afa5b5e04c59e17294baf705462cd19a7493dcc5ff0888cb9863572aa79470", 0xb5, 0x6}, {&(0x7f0000000200)="7a0d599fcfc45d9dab487952dff3fca774c2bdf2dd26be9910f413739eee0dcc07130ec84bfda4e23de5d90f5fefdb0e1b5c48992dc6c514e778eab898eb80c164ec8e7a9daa2410521a1fc22378fe758e539fbb79ce46e86042c74e8c85bf2531d99e7be10b25921b1f667448cc51f79e0a755cd0b96b0aa55bc0a907430c6b", 0x80, 0x4}, {&(0x7f00000003c0)="d144838b9b74ecd30deb33837aa19a2bb64eaa8d447a1fe69132662bee8817f2f335454dff713269ed78df3a498c504c9bde39b16d34e2b81ad4787c9ebfc07a6dadf56fd19239127186ab4bb92990509f16627dd6dc27e6296648ca78df8511afa192314533d7bd6eb35d7ca65cd63e451a19e68fd0cfbd83bd1b20382e4e12ce4f58eb1c04038089067755fa2b321e071147b1060e6c712eb009db3106d82f0e7544a7", 0xa4, 0x80000001}, {&(0x7f0000000140)="0d507c66a37cc8e5d0206499d00721e68433d086aadadd4f6c", 0x19, 0xbd3}, {&(0x7f0000000480)="2c9fa5f2e003e42d32bc986e8c744a41d1f13164455c82d89354d7b8aa88b395aa72dac35899ea20ed4bff1b68227d922b4f5554d7ea5c1c2d76712c2263a48d13b829f7e2d8643a836316e894141e19bafba9fd6f5aa60f920420", 0x5b, 0x1}, {&(0x7f0000000500)="38389b7b1a83061c9fce92e5f1ca3a008a706b7d3c53a2a62d02d8bb7c", 0x1d, 0x5}, {&(0x7f0000000540), 0x0, 0x8}, {&(0x7f0000000600)="1fe2d84e4916028643c8a98fb8ece1d4d4ce521a12350e35b8c0ec63f48b1d79172d5cc949e26ba71449d06fb8302d7180451a1e6ce0acf9c8478ed2949a30048d171522331e7240efc3b64a1092decd42218b7e5e25ea5d217ae20873f40c291e547d4e01170fa4abcf28ec65696b79102cc8410b06c53dd8b004aeba712d81180bdb067519f7d2d4008ba2f47a8b4cb333e452c505a40334694fdfa6629f04a82d95d2904be9234874f83b499498482ee8917aa4390dedc36b1d801904eccacc88b4df2ed7ec1b5bd7d9c9d602d262625a0779fdc2f789f4", 0xd9, 0xffffffffffffff2a}, {&(0x7f0000000700)="aa9383ad8067cd11211091fc9f4c51fb7095c13377af8aa88f533e625cf65f4d7f478a96b9b9d370476b99077c744a9827f8d75b7ca52959dcf6e4db6aecc6c2885f6035806721ae65432fd5a9c963c93a02fa4fa089cc64a5e834ceed31fab2c713dcb13e33dbb8147de0545a94", 0x6e, 0x1000}], 0x9000, &(0x7f0000000880)=ANY=[@ANYBLOB="6e6f696b6565702c75737271756f74612c7379737667726f7570732c6e6f6c6172676569092c7377696474683d3078303030303030303030303030303030322c6e6f61747472322c6c617a7974696d652c646f6e745f6861ed4d261f053f452e73682c736d61636b6673666c6f6f723d75736572002c6f626a5f726f6c653d2f6465762f66756c6c002c6f626a"]) unshare(0x600) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000280)={'bond_slave_0\x00'}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={'bond_slave_0\x00', {0x2, 0x0, @loopback}}) 21:51:01 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x5452aa0235abe81c, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, 0xb) ftruncate(r2, 0x200004) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNSETNOCSUM(r5, 0x400454c8, 0x0) dup(r5) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 21:51:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) [ 454.244140] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 454.270866] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65381 sclass=netlink_route_socket pig=13015 comm=syz-executor.0 21:51:01 executing program 0: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x0}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = openat$cgroup_ro(r2, 0x0, 0x26e1, 0x0) openat$cgroup(r3, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup(r3, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) sendmsg$kcm(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r5, 0xc0106407, &(0x7f0000000400)={0xfffffffc, 0x6, 0x3, 0x7f00}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000000200)={'nat\x00', 0xe3, "e80988b0fd83ad09fffe9f00d6ffedcaaf68c6cd831c7059558391a82ed6018056d851045c19848833749b660682df8bfbe6dab8a787a1453754044637f6ddcf1caaef581fb7a83fbb619b4f91b5be523e24cc284fdd904057c5254f323e1ac9b3aee5db278e3a0c042585fd95c4568f2fd1e7b0cf13b5a24febc102a47ed2043346bc38cb922cb92ac8b8192c8a92cb051eafdb273af14fbdca0d20873e58c28ca6036ab64af733cb15060a56360ce4168b195ae5d8fcde88e20d66d3d566ef722a6981741109e5adc6dfb09e1a57c094e5f08901be35e905beb440051619579e741b"}, &(0x7f0000000340)=0x107) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) write$cgroup_pid(r7, &(0x7f0000000000), 0x10000000c) ioctl$TUNSETFILTEREBPF(r7, 0x6609, 0x0) 21:51:02 executing program 4: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r0, &(0x7f0000000000)='threaded\xfc', 0x248800) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000140)) openat$autofs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/autofs\x00', 0x8000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0xb7, 0xf6, &(0x7f0000000240)="058966798c9b6a39c5f1490ff22a3442f91f2d42f1ed19a443f140a2050f22712effbadd556ba2a6d0781fde42f7ef4ed401ade55a6c48928c4713ca8265c8b6f8d66735c7f7aad48abb949b3ececd39003b873a16c301ac636f4c28fe7034e2e4c83d4d336d97505f42f6b9af25cde14ed917af7f18c1a6a631ba32587d7dc08d8b809b962fe11f9b637a6be2d9da6ac4f4fb0e7fd21020a41ba1db0e159b315ab07b2277fc4a79c1cf2934ba8ff73c1e7ef4ead31b02", &(0x7f0000000340)=""/246, 0xef45, 0x0, 0x31, 0xc6, &(0x7f0000000080)="9b82993723a51b01d88c26e51e4d1656ada9d6b584c083903fe4bb9874fb0906d1bd55e334097f4ac376d0ec4781911ec6", &(0x7f0000000540)="78c8ba4460e24e419dee17495440fef51b81a0e52f5e6279605919dd66a757c24daae32c6d3ddd47bc03997785e150baf84165426fa2586dbc9f1cf5ec4d30ba8aab738ffe9159964b573bacc2e5eded7cd7d2cbce45a3b8e4977615f4f32178e01c593b9a395babdb42cebc9467d641a84691ec3b6207f0aa9d8ab936d91ff3d97e11d977ea8eb5cf27b44a0f1b1e88a92c7e92bb0316bb36e3cb6770b5dac7273c2400a351e3bf5540f2c2f0bff0d115890b8fc06ce3cb5bcdaf26173e670d25fcbbe475f9"}, 0x40) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) openat$cgroup_ro(r1, &(0x7f0000000480)='cpuset.effective_cpus\x00S\x8c\xfbf\xdb\xbb\x8b\xbc\xd6Vr\b\xe2\xab\xb6r\xc0\x94\xcc\x15\x10\x8a\x98\xb1\xea\x83\x9b\x0e\xbb?\x9b\r7v(\x12\xbb\xd7,#O\xed\x99v\xed2\xbd\x99\xeb0\x85\x854M\x89\x90\xaco\x16\x8a\xba\x1e/=\xf1\x02\x87D-n\x01+f4\x11\x99:\x9eS\xda\x14\xbfS\xbd\x91\xd4\x99\xd3\xf6\xe2\xf6\x03`\x8d?r\x06-b\xa3!\xaa\xb1_(\xb7\xaa\xc7\xc1\x99T\xdas\x12\x97\x9b\xa0\\Q-\xb2\x93W\xaf\xc6\x8d\xbb\x1b\xd15x\x8d\x96W\xb5kg?C\"t\xad\xe3:A\x915\f\x9a\r(_\xbef\xfe\xa0\x97\xf1`-$}i\x82n\x00\x00\x00\x00\xff\x16Np\xab\x9f\xe2E\xa7\xcay\xba\x99\x1e\xfd\x9dh\x8c\v\xa2\xf0\xfbn\xb3\x9cz\xbe\xdbz\xe6kX\x96\x8e\xb4\xa9L\xe3\xa9\xc3\x02\xbf\xa6>\xb4\x83\xc4F:\xe5\xbd\xd18\"\xf8E \xf3\x97\xa0\xd0\x1c\xd2\x99\x8e\xecY\"\xa0\x0e\xb2\xc3\x17\xc0O\x114\xd8y?\xd7x\xcc\x89C\xf1\xff\\\xe0\xc5\xea\x02\x00<\xcd\xd4}Q\x01\xb6\xa6\x1a\xcbfr\x9e\x8db1`\x9f[\xbbC\xe8\x10\xfe\xf2\xd1\xa1~\xd4v?|8\x92\x98\xe5\xa0\xb7\xa6\x9c\x9d\x91\xf1\xc3\x10', 0x2761, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8b04, &(0x7f00000002c0)='wlan1\x00\x0e\xd3UM\xe1\x04\xbeK\x19\xec$\x00\x00\xff\x00\x00\x00\x00\x00\x02\x01\xe5\xe8\",\x91\x91\x13\x9f\x19\x9e\x02\x00?\x00\xff\x8d\x00\x00\xf6\x00\xd4\xf2\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\xa4]\xbb\x10F\xe4\xa8\xa8\x00\x00\x00\x00\xdfA\x83\xcdx\x90\x9a\x82\xc0)(4\xdf\bL\x7f\xff\xff\xffs\x18Z\xcc\x026\xf4\xb0\x9b@:HX\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\x12\x19Z\xb3@o\xc7\xce\xec\x02:I\xf6\xcam\xbc (\x02z\x8eni)\xb5i\x0f\xc7\v\x9dz\xfa\x88\x87\xa2\xa8\xd9\x95:E\xfeO\xe7\xf8EX\xe3\xbcf\x02\x98P\x1a\x1f\x16\xb9\b\xa2\xb0\xb1\xc4vCh.\xa3\xd7G0\x86C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7\x03\x9c\x9a\x1a\xde\b\xcaot\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa`\x93d\xff9\xfa\r\xbe\x16\xef\xf0\xfeThQ\xb8\xe8\xba7\xd0\xab.\x13L8V\x1d\xa0\x02y\xe4\x00\x8b\xcd\x1b\xe8#\xb4\xea@\x1b\xd0y\x02iE\xb30\xe8\xdb\xb1\xdb/e\xb3X\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cyQOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39#\x9a\xcd\xe0\xd8q\x9a\xcd\xdeAF,\x04\"\x84)O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\x810\x12\xcc@\x89\xf8F\x82\x88O\x03\xeb\xad\xc7\xee\x17\x1f\xaaX\xeeO\xb5\xcf\xff@\xc09[\xec>\xf1_\xfd\xeb\x1e\x83\xbb\xd7\xdb\xf8\x94\x9d\xdf\xcc\xd8F\x005\x03\x00\x00\x00\x00\x00\x00\x00\x97\x87}\x8e\x03\x8b\xbbU_\xa4\tG\xbdZWQ\xf2\x91\xcb\xbf\x06\x93N\xf61\x9ea\xc3\xfd\xca\x9e`[\xd4\xb2\xe1\xa2\xc6h\xf8\x0f\xbaDP\x91\x13H\n\xe5F*\xe8\an\xeb\x18\x80A\xfe\xc3\xb4pJ;\xaa\x84*_k\xea\x87x\xda\xe8\xf5+\x89\xdc\x19|:,\xb7b\xc9\x10\x8a\xbe\xc3\x15)\x80\xd0t`7\xed\xe4&\xe25\x98vW\xf1\xdcL=\xf7\xa9\x9b\xe6\x03W^t\'*b\x98:\x8aU\xe0\x99!E\x87@*C\x97|?\xff7\xca\xfc\xaa<\xc8L\xbf/9\x1df\x8c\xa6\x8f3\xcc@g\x80)\xf4\v\xcd\x98[Y\x04\xb6b\xff\x86\xdb\x7f\xb9\x10\xd9\x18j\x1d\x16p\xc3\x02\'\x8eY\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\xd8s\x1a\xc8\xf0z\xfc\xf6\xba*\xfar\xef\x98\xad\xaf\xb6r\xff\xfc\xcf\xebo\x8c\x05\x00\x00\x00\x00\x00\x00\x00\xca\x83\x88L\xf6\xa7\xf4|,\xdb\x85y\xfc\xad\xc6\xa0\x8aK\xb40\xfb\xc5\x85%\xc0\xa7\x81\xb5\xef\x9eehQ!\xe7\x0f\x96Ksx\xfc\x93\x84w\xae\xe9\x9f\xb2\v\x97n\x17\x9b,\xe5\xd8\xa4\x9c\x8f\xba\x8a_$\x95\xf1<\xe4zv\x83\xb2\xba\xe4\x96\xeb0gl\x1f\a\x9a#D\xaa\xa6\x0e6\xf6H\xc7\x8f\xdanwB\x97\xb6_\xcb\xd8L\x9d\xf5\xf8\xf3xvs\xc3\xf2\xf8\xe4!\xe7\x92\a6Q]r\x16\xa9O\x888\fm\xe7q\xc8\xc3\x90\xae\x8d\xc4e~\x9e\xdc\xae\x00;\\6\xa9\"\xed\xfd\x95=Ge\xb5\xdd\xcf\xe8\x1b\f`\xf8\x83\xc5\xb0n\xa1\xfbRd\xee0\xdd\xe1\xe5\x06c\xe5\xc1!\xf5\xbb\xf21\xfd\x19&\x16\x85N\xf3\x9a\xbb\xf6\xc7\xc5\x10\xf5\xe1\x80\xa4w3Fd\xc0\xaa\x1b3\xc4\v7\xb1') syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xfc9b, 0x82) r2 = socket$kcm(0x10, 0x2, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ftruncate(r4, 0x1000) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b00170002000000000004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 21:51:02 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ff519780000008003950323030302e4cc74502f187c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca16223e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6701d4679079d00"/136], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0xffffffffffffff0b, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffc}}, 0x44a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0xf9}, 0x0, 0x0, 0xfe, 0x0, 0x9, 0xfffd}, 0x20) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 21:51:02 executing program 0: sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='\x00\x02\x00\x00!\x00', 0x0, 0x0) setrlimit(0x0, 0x0) eventfd(0x0) ioctl$FBIOPUTCMAP(r0, 0x4611, &(0x7f00000001c0)={0x0, 0x8a22b1c591a5a3f0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032060000004cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3f01000100000000009c41705b96a6711d4679079d00"/137], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000140)) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x0, 0x7, 0xc, 0x38, "b934287befb2d53d5f50a9b2f1b2bf7390eb4561f7f95ec305983a864b8732e981896bd9a982b8acdb091c01b072f47c8b00c6ed7234d6f7f4e969a37829e1f8", "0e78e39b5a9a359fa632ed5474d005848932c341c46d9001942509b0c9ec6faf", [0x1, 0x9]}) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000) lseek(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e20, 0x1, @local, 0x99b}}}, &(0x7f0000000180)=0x84) ioctl$FBIOBLANK(r0, 0x4611, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 21:51:02 executing program 1: pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@updsa={0x104, 0x1a, 0x205, 0x0, 0x0, {{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, {@in6=@mcast2, 0x0, 0x3c}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0xfffffffffffffe2f}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_PCM_IOCTL_XRUN(r3, 0x4148, 0x0) write$binfmt_misc(r0, &(0x7f0000000140)=ANY=[], 0xffc1) accept4$rose(r0, &(0x7f0000000040)=@full={0xb, @remote, @rose, 0x0, [@null, @rose, @netrom, @remote, @default, @bcast]}, &(0x7f00000000c0)=0x40, 0x400) splice(r3, 0x0, r1, 0x0, 0x6, 0xfb6cc2b351840e41) 21:51:03 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x300}, 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x0, 0xff, 0x7, 0x0, 0x0, 0xfffffffffffffffd, 0x3040, 0xa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x6, 0x0, @perf_config_ext={0x7fffffff, 0x9}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3}, r2, 0x0, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r6, 0x4) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x42, 0xe000000, &(0x7f00000000c0)="b9ff030000ffffff7f9e14f005051fffffff00004000630677fbac141414e934a0a662079f4b4d2f87e5feca6aab840213e0325f1a390101050a0100010000000000df74e30d7eabe773afef6f6e4798ab117e9f84fa406b913de8ad827a022e1faee50887dc302819a8a3d0cde36b67f337ce8eee124e061f8fea8ab95f1e8f99c7edea980697449b78569ea293c3eed3b28fc3205db63b2c65e77f19ab28c632cc80d9f2f37f9ba67174fffcb5244b0c909eb8e12116bebc47cf97d2ea8acadfb34ca580b64df7c800113e53bae401cd22f50072deabf93dd4d3e626", 0x0, 0x100, 0x0, 0x296, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x28) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r8, 0xc0505510, &(0x7f0000000580)={0x5, 0x2, 0x0, 0x0, &(0x7f0000000500)=[{}, {}]}) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000480)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000004c0)={[{0x2b, 'rdma'}, {0x2d, 'rdma'}, {0x2b, 'memory'}]}, 0x14) recvmsg(0xffffffffffffffff, 0x0, 0x80000021) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'lapb0\x00', 0x71d89abced462823}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x0) 21:51:03 executing program 0: semget(0x1, 0x5, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\xfc\xff\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfffffd96) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) 21:51:03 executing program 2: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x14, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}, r1, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="696f6368617670976b6f636861767365743d6ddedc43b9a8bed268d09e3d8c38a646cc7f5f803d714c3bff51b574d58e27e5884a275177e3689a41b3d96b81"]) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-net\x00', 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self\x00', 0x200, 0x0) 21:51:03 executing program 3: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000997000/0x2000)=nil, 0x2000, 0x2d144db84c1fb795, 0x8972, 0xffffffffffffffff, 0xbe6be000) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10) pselect6(0x40, &(0x7f0000000100)={0xffffffffffffe93a}, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000000)={0x0, 0x1c9c380}, &(0x7f0000000280)={&(0x7f0000000240), 0x8}) 21:51:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 21:51:03 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_XMIT_HASH_POLICY={0x8}]}}}]}, 0x3c}}, 0x0) 21:51:03 executing program 3: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9dbafdc0a00e9bfde51afe9c81a9cf05725caf1cae63487ff7f0000cde5c019080096e2c43f6b8fd41b7e7666adb41543b7185a4650732b48588a84f8347a1b5efd079137038277beb5e0615c40dbb7005fbd189981feb0a514c168646ea716bb5b94bdab4cfd808f25bfc91c15d7dc2adcdefba065af283792104d6280636df94ab13064868942577d8953191eeb79379829652b10737d4e25a22695df1cff25340af4fc990000099fff70b24f8228bd07741c710ebde4bf17dc8f3259ec78e5b39515991b1428faf201000000398f6500000000000000a312e45eb76f1b2c8fea54fb3726850310bd480355921c9c0c120d049000b3190974f06e53eb9e0000cc4bd12f5d44b172a4a281ced161c40784e62a8af72bb3fd2656551881b945861d8f3eb0a543de4c71e4f306767a7b542258becc9fa52a5d2c539b749491ce88e47b147884df676eb8a8f4d844ff1e3c2160000000000000fbb33d745eea08d0d7d76990956e7d9b893b519525f94361fb7a6c77c304f14188838fbf7b3b31a3928f873ba75e2120e04dc28b4de3988ce2dd2a1342b60822aaaa02ae19b3770ce7ec39df1228cf2a0ab1c622c04c74be73efb455202cfa46a95b368e51b473c04f368aef43ede76d0c1aac2a652bce"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={r5, 0x800}, &(0x7f0000000240)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x200}, 0x28) 21:51:03 executing program 3: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x5c}]}) mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="75707061726469723d2e2f0200000000000000776f726b6469723d2e2f66696c65315c00"]) 21:51:04 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@generic={0x40}]}, &(0x7f0000000000)='(9+\xee\xe4\xfc\x7f\xf7\x8f\xe8\xc4E\x1c \x03\xa1V\tO<\xa0\xf4\xbc\x8cg_[\xe6\x0f\x8bq\xce?\x92[\xeds\xe1)\xd8\xd3\xeae~\aKp\xc7\xb6o\xe4\xbf\x9b~\xff\xfd;\x12\\\x03\xb0z6\xeeY\xae\xd4\xa8\xf51\xe1\x89H\\F7\x04', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdff, 0x10, 0x0}, 0x45) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f00000000c0)="1b5949e3ab28fe5f18a71d58f6ffb0663a1094b6d3e5e7174e36b352cd48917299c0640de84ce98f5b1c0e0d453736a916d96d35b6b8a42488f8e9d3b6") [ 456.374114] overlayfs: unrecognized mount option "uppardir=./" or missing value [ 456.399594] overlayfs: filesystem on './bus' not supported as upperdir 21:51:04 executing program 5 (fault-call:7 fault-nth:0): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000040)=0x3) ftruncate(r0, 0x88001) r1 = open(&(0x7f0000000400)='./bus\x00', 0x4003a, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0) read(r1, &(0x7f0000000180)=""/19, 0xfffffe47) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x10}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000200)=0xffffffff) r5 = dup(r4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f00000000c0)={r1, 0x0, 0x5fdd, r7}) [ 456.682689] FAULT_INJECTION: forcing a failure. [ 456.682689] name failslab, interval 1, probability 0, space 0, times 1 [ 456.723270] CPU: 1 PID: 13099 Comm: syz-executor.5 Not tainted 4.19.91-syzkaller #0 [ 456.731135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 456.740543] Call Trace: [ 456.743215] dump_stack+0x197/0x210 [ 456.746902] should_fail.cold+0xa/0x1b [ 456.750817] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 456.755941] ? lock_downgrade+0x880/0x880 [ 456.760122] __should_failslab+0x121/0x190 [ 456.764391] should_failslab+0x9/0x14 [ 456.768327] kmem_cache_alloc_node+0x26c/0x710 [ 456.772929] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 456.777962] ? rw_copy_check_uvector+0x2a6/0x330 [ 456.782731] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 456.788362] __alloc_skb+0xd5/0x5f0 [ 456.792007] ? skb_trim+0x190/0x190 [ 456.795645] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.801193] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 456.806795] netlink_sendmsg+0x97b/0xd70 [ 456.810883] ? netlink_unicast+0x730/0x730 [ 456.815137] ? selinux_socket_sendmsg+0x36/0x40 [ 456.819816] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 456.825362] ? security_socket_sendmsg+0x8d/0xc0 [ 456.830128] ? netlink_unicast+0x730/0x730 [ 456.834384] sock_sendmsg+0xd7/0x130 [ 456.838118] ___sys_sendmsg+0x803/0x920 [ 456.842113] ? copy_msghdr_from_user+0x430/0x430 [ 456.846888] ? lock_downgrade+0x880/0x880 [ 456.851055] ? kasan_check_read+0x11/0x20 [ 456.855213] ? __fget+0x367/0x540 [ 456.858682] ? iterate_fd+0x360/0x360 [ 456.862505] ? __fget_light+0x1a9/0x230 [ 456.866500] ? __fdget+0x1b/0x20 [ 456.869880] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 456.875438] __sys_sendmsg+0x105/0x1d0 [ 456.879347] ? __ia32_sys_shutdown+0x80/0x80 [ 456.883784] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 456.888551] ? do_syscall_64+0x26/0x620 [ 456.892535] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.897912] ? do_syscall_64+0x26/0x620 [ 456.901911] __x64_sys_sendmsg+0x78/0xb0 [ 456.905988] do_syscall_64+0xfd/0x620 [ 456.909806] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 456.915001] RIP: 0033:0x45a919 [ 456.918205] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 456.937112] RSP: 002b:00007f4d8dcc0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.944918] RAX: ffffffffffffffda RBX: 00007f4d8dcc0c90 RCX: 000000000045a919 [ 456.952204] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 456.959658] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 456.966943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dcc16d4 [ 456.974229] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 0000000000000006 [ 458.677709] IPVS: ftp: loaded support on port[0] = 21 [ 458.863942] device bridge_slave_1 left promiscuous mode [ 458.869622] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.916164] device bridge_slave_0 left promiscuous mode [ 458.921669] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.218279] device hsr_slave_1 left promiscuous mode [ 462.260373] device hsr_slave_0 left promiscuous mode [ 462.320087] team0 (unregistering): Port device team_slave_1 removed [ 462.330610] team0 (unregistering): Port device team_slave_0 removed [ 462.342023] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 462.383601] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 462.467555] bond0 (unregistering): Released all slaves [ 462.529250] chnl_net:caif_netlink_parms(): no params data found [ 462.529788] IPVS: ftp: loaded support on port[0] = 21 [ 462.598612] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.605045] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.612664] device bridge_slave_0 entered promiscuous mode [ 462.623418] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.629973] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.637438] device bridge_slave_1 entered promiscuous mode [ 462.671558] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 462.683265] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 462.740623] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 462.748969] team0: Port device team_slave_0 added [ 462.775771] chnl_net:caif_netlink_parms(): no params data found [ 462.784968] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 462.793282] team0: Port device team_slave_1 added [ 462.817364] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 462.841862] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 462.928659] device hsr_slave_0 entered promiscuous mode [ 462.965890] device hsr_slave_1 entered promiscuous mode [ 463.006483] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 463.013791] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 463.039098] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.047227] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.054675] device bridge_slave_0 entered promiscuous mode [ 463.072789] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.079192] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.085873] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.094313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.103906] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.120853] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.128477] device bridge_slave_1 entered promiscuous mode [ 463.170080] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 463.190099] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 463.230256] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 463.244863] team0: Port device team_slave_0 added [ 463.271818] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 463.286865] team0: Port device team_slave_1 added [ 463.310298] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 463.332822] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 463.345487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.352217] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 463.468683] device hsr_slave_0 entered promiscuous mode [ 463.515985] device hsr_slave_1 entered promiscuous mode [ 463.556740] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 463.563095] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 463.581988] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.588986] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.597339] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 463.618201] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 463.635126] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 463.647173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.654271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.673829] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 463.681437] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 463.687645] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.697755] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 463.704781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.713375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.721459] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.728003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.744972] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 463.764907] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.773499] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.789285] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.795790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.808957] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 463.821794] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.841374] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 463.851597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.872563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.882227] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 463.890806] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 463.901487] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 463.909284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.919476] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.928068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.935085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.945874] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 463.956061] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 463.962137] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.970314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.978494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.987118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.997679] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 464.005215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.013209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.023821] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 464.041009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 464.056165] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 464.063876] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.070284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.086395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 464.097801] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 464.117589] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 464.124561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.136608] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.144161] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.150589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.158173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.165983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.176002] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 464.185053] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 464.192604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.201391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.211203] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 464.217427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.227758] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 464.235540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.243387] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.258643] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 464.271171] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 464.278852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.287371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.296322] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.308673] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 464.318495] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 464.327280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.335008] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.344055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.351356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.361685] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 464.373977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.380928] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.389204] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.401590] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 464.408331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.426253] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 464.434444] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 464.441877] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 464.449749] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 464.462863] 8021q: adding VLAN 0 to HW filter on device batadv0 21:51:12 executing program 1: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x14) bind$inet6(r0, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c) listen(r0, 0x1d7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/167, 0xa7) gettid() pipe(0x0) getpid() r2 = dup(0xffffffffffffffff) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) gettid() r4 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r4) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, r3, 0x0, 0x147, 0x0, 0xffffffffffffffff}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000740), 0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r2, 0x0, 0x5, &(0x7f0000000000)='ppp1\x00'}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x2c3) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={&(0x7f00000009c0)=@in={0x2, 0x4e23, @local}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000a40)="b2", 0xff04}], 0x1, 0x0, 0x0, 0x9000004}, 0x0) 21:51:12 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x11e) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/policy\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cachefiles\x00', 0x804, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x2, 0x26}, 0xd8) sendto$inet6(r2, &(0x7f0000f6f000), 0xffffffae, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x7, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2000010001, 0x5}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40086602, 0x400007) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpu.stat\x00', 0x7a05, 0x1700) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) connect$inet6(0xffffffffffffffff, 0x0, 0xfffffffffffffdfc) syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x3, 0x4000) r5 = socket(0x22, 0x2, 0x4) bind$isdn(r5, &(0x7f0000000080)={0x2}, 0x6) socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2000000}}, 0x7) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@dev, @initdev, 0x0}, &(0x7f0000000280)=0xc) bind$can_raw(r8, &(0x7f0000000340)={0x1d, r9}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x10008001, &(0x7f00006f7000)={0x2, 0x4, @empty}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) 21:51:12 executing program 3: r0 = userfaultfd(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000080)={{&(0x7f00005e3000/0x800000)=nil, 0x760000}, 0x200000}) 21:51:12 executing program 5 (fault-call:7 fault-nth:1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:12 executing program 0: r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$TIOCSCTTY(0xffffffffffffffff, 0x540e, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvme-fabrics\x00', 0x12000, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r3, 0x4141, 0x0) ftruncate(r2, 0x208200) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f00000004c0)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) write$USERIO_CMD_REGISTER(r2, &(0x7f0000000100)={0x0, 0x8}, 0x2) [ 464.834849] FAULT_INJECTION: forcing a failure. [ 464.834849] name failslab, interval 1, probability 0, space 0, times 0 [ 464.874417] CPU: 0 PID: 13142 Comm: syz-executor.5 Not tainted 4.19.91-syzkaller #0 [ 464.882284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 464.891652] Call Trace: [ 464.894270] dump_stack+0x197/0x210 [ 464.897929] should_fail.cold+0xa/0x1b [ 464.901839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 464.906961] ? lock_downgrade+0x880/0x880 [ 464.911134] __should_failslab+0x121/0x190 [ 464.915386] should_failslab+0x9/0x14 [ 464.919207] kmem_cache_alloc_node_trace+0x274/0x720 [ 464.924326] ? __alloc_skb+0xd5/0x5f0 [ 464.928147] __kmalloc_node_track_caller+0x3d/0x80 [ 464.933098] __kmalloc_reserve.isra.0+0x40/0xf0 [ 464.937788] __alloc_skb+0x10b/0x5f0 [ 464.941600] ? skb_trim+0x190/0x190 [ 464.945243] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.950817] ? security_socket_getpeersec_dgram+0x8d/0xc0 [ 464.956373] netlink_sendmsg+0x97b/0xd70 [ 464.960449] ? netlink_unicast+0x730/0x730 [ 464.964702] ? selinux_socket_sendmsg+0x36/0x40 [ 464.969383] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 464.974948] ? security_socket_sendmsg+0x8d/0xc0 [ 464.979714] ? netlink_unicast+0x730/0x730 [ 464.983961] sock_sendmsg+0xd7/0x130 [ 464.987685] ___sys_sendmsg+0x803/0x920 [ 464.991669] ? copy_msghdr_from_user+0x430/0x430 [ 464.996435] ? lock_downgrade+0x880/0x880 [ 465.000591] ? kasan_check_read+0x11/0x20 [ 465.004751] ? __fget+0x367/0x540 [ 465.008219] ? iterate_fd+0x360/0x360 [ 465.012051] ? __fget_light+0x1a9/0x230 [ 465.016052] ? __fdget+0x1b/0x20 [ 465.019427] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 465.024976] __sys_sendmsg+0x105/0x1d0 [ 465.028874] ? __ia32_sys_shutdown+0x80/0x80 [ 465.033306] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 465.038074] ? do_syscall_64+0x26/0x620 [ 465.042051] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 465.047419] ? do_syscall_64+0x26/0x620 [ 465.051403] __x64_sys_sendmsg+0x78/0xb0 [ 465.055477] do_syscall_64+0xfd/0x620 [ 465.059289] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 465.064497] RIP: 0033:0x45a919 21:51:12 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) recvmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000200)=""/176, 0xb0}], 0x2}, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1}, 0x4) connect$inet(r2, &(0x7f0000000100), 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x400000000000030, 0x0) [ 465.067699] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 465.086602] RSP: 002b:00007f4d8dcc0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.094318] RAX: ffffffffffffffda RBX: 00007f4d8dcc0c90 RCX: 000000000045a919 [ 465.101592] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 465.108885] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 465.116156] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dcc16d4 [ 465.123426] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 0000000000000006 [ 465.405866] protocol 88fb is buggy, dev hsr_slave_0 [ 465.410989] protocol 88fb is buggy, dev hsr_slave_1 [ 465.562138] audit: type=1400 audit(1577397072.990:191): avc: denied { map } for pid=13125 comm="syz-executor.4" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=file permissive=1 [ 465.750173] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 465.783713] netlink: 'syz-executor.2': attribute type 14 has an invalid length. 21:51:13 executing program 2: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) creat(&(0x7f0000000000)='./bus\x00', 0x20) r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0) creat(&(0x7f00000001c0)='./file0/bus\x00', 0x6857b21ff1155d90) creat(0x0, 0x6857b21ff1155d90) fallocate(r2, 0x0, 0x0, 0x1000f3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003200)=[{{&(0x7f00000000c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001280)=[{&(0x7f0000000280)="3980e432b919c9", 0x7}], 0x1}}], 0x1, 0x0) pipe(0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) msgrcv(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1, 0x6, 0x1000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ftruncate(r1, 0x8200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f0000000240)={0x7, 0x0, 0x3}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x294ad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xdf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vga_arbiter\x00', 0x60100, 0x0) ioctl$KVM_GET_DEBUGREGS(r6, 0x8080aea1, &(0x7f0000000480)) write$cgroup_type(r1, &(0x7f0000000200)='threaded\x00', 0x175d900f) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SG_GET_COMMAND_Q(r8, 0x2270, &(0x7f0000000100)) getresuid(&(0x7f0000004180), 0x0, 0x0) 21:51:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="000052764d10000108000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\r\x00', @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x30}}, 0x0) 21:51:13 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x20201) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TCGETS2(r3, 0x802c542a, &(0x7f0000000080)) ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) fcntl$setstatus(r1, 0x4, 0x2804) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f00000000c0)="1e", 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) close(r0) 21:51:13 executing program 3: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) fchdir(r1) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xd1, "71bba7a091e79efff0536be4498abfa4ce27e36bdcf3a40e107060f16919c1f0a662726770186289a726e10c80166a99f563f831b82a569e668d82264c40f7249ee95df5bafc7510fd5776896a7177af490f27472207a96f04d176d7060498585a940075c9705722485bb1518c3b22ded9bfe03383fb445cf63345fabb47d6d94f66f07d42831454af6070018686b391c684b2f90c8203fa8aaf752fef7c0876870a6c1fb6495d352fa8dcef38dd2b06a5d2036d39fa74b9fc0e71f360db5f25f51a6afc98c15ed69bb880bc6b3763098b"}, &(0x7f00000003c0)=0xd9) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, &(0x7f0000000500)) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_INPUT(r2, &(0x7f0000000980), 0x10a9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000200), 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x1) creat(&(0x7f0000000000)='./file1\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', r8}) connect$can_bcm(r4, &(0x7f0000000380)={0x1d, r9}, 0x10) sendfile(r2, r2, &(0x7f00000000c0)=0x500, 0x8080fffffffe) 21:51:13 executing program 5 (fault-call:7 fault-nth:2): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 465.906993] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4173 sclass=netlink_route_socket pig=13167 comm=syz-executor.1 [ 465.988111] FAULT_INJECTION: forcing a failure. [ 465.988111] name failslab, interval 1, probability 0, space 0, times 0 [ 466.075514] CPU: 1 PID: 13179 Comm: syz-executor.5 Not tainted 4.19.91-syzkaller #0 [ 466.083358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 466.092817] Call Trace: [ 466.095428] dump_stack+0x197/0x210 [ 466.099071] should_fail.cold+0xa/0x1b [ 466.102982] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 466.108220] ? netlink_deliver_tap+0x146/0xc20 [ 466.112799] __should_failslab+0x121/0x190 [ 466.117047] should_failslab+0x9/0x14 [ 466.120961] kmem_cache_alloc+0x47/0x700 [ 466.125018] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.130602] ? check_preemption_disabled+0x48/0x290 [ 466.136083] ? lock_acquire+0x16f/0x3f0 [ 466.140143] skb_clone+0x156/0x3e0 [ 466.143679] netlink_deliver_tap+0x97b/0xc20 [ 466.148098] netlink_unicast+0x5ae/0x730 [ 466.152156] ? netlink_attachskb+0x770/0x770 [ 466.156564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.162095] netlink_sendmsg+0x8ae/0xd70 [ 466.166154] ? netlink_unicast+0x730/0x730 [ 466.170382] ? selinux_socket_sendmsg+0x36/0x40 [ 466.175042] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 466.180745] ? security_socket_sendmsg+0x8d/0xc0 [ 466.187553] ? netlink_unicast+0x730/0x730 [ 466.192100] sock_sendmsg+0xd7/0x130 [ 466.196182] ___sys_sendmsg+0x803/0x920 [ 466.200390] ? copy_msghdr_from_user+0x430/0x430 [ 466.207030] ? lock_downgrade+0x880/0x880 [ 466.213107] ? kasan_check_read+0x11/0x20 [ 466.219202] ? __fget+0x367/0x540 [ 466.222679] ? iterate_fd+0x360/0x360 [ 466.226613] ? __fget_light+0x1a9/0x230 [ 466.231078] ? __fdget+0x1b/0x20 [ 466.235487] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 466.242166] __sys_sendmsg+0x105/0x1d0 [ 466.246058] ? __ia32_sys_shutdown+0x80/0x80 [ 466.251097] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 466.255858] ? do_syscall_64+0x26/0x620 [ 466.259847] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.265306] ? do_syscall_64+0x26/0x620 [ 466.269285] __x64_sys_sendmsg+0x78/0xb0 [ 466.273352] do_syscall_64+0xfd/0x620 [ 466.277237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 466.282812] RIP: 0033:0x45a919 [ 466.286065] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 466.305947] RSP: 002b:00007f4d8dcc0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 466.314266] RAX: ffffffffffffffda RBX: 00007f4d8dcc0c90 RCX: 000000000045a919 21:51:13 executing program 1: socket$inet(0xa, 0x801, 0x84) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) syz_init_net_socket$llc(0x1a, 0x6, 0x0) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, 0x0) getpgid(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xb, 0x100, 0x0, {0x0, 0x1ff, 0xfffffe01}}) creat(&(0x7f00000000c0)='./bus\x00', 0x0) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRESHEX, @ANYRES32], 0x2) write$apparmor_current(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64, @ANYRES32, @ANYRES64], 0x3) creat(&(0x7f00000000c0)='./bus\x00', 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) shmget$private(0x0, 0xa000, 0x4, &(0x7f0000ff4000/0xa000)=nil) sendmmsg(r0, &(0x7f0000006d00), 0xc6, 0x24000000) listen(r0, 0x8) [ 466.322005] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 466.329980] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 466.337328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dcc16d4 [ 466.344683] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 0000000000000006 [ 466.642247] mkiss: ax0: crc mode is auto. 21:51:14 executing program 0: r0 = memfd_create(&(0x7f0000003380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>\x9b\x94a\xac\xf8R?\x1c\xe2\xb5!\xfa\xcb\xd4\xb6\xe1_\xb4d>\xf6\xb7h\xb9Uql\b0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x81, 0x1, 0x8, 0x81, 0xf22c, 0x7ff]}, 0x10) 21:51:14 executing program 2: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000400)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x2f0, 0x5, 0x0, {0x0, 0x0, 0x0, 0x100000}}, 0x30) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000000)=0x7fff, 0x4) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff3950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/131], 0x15) dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000080)={0x40000000}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) r8 = getpid() rt_tgsigqueueinfo(r8, r8, 0x14, &(0x7f00000000c0)) r9 = getpid() rt_tgsigqueueinfo(r9, r9, 0x14, &(0x7f00000000c0)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r13 = dup(r12) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_LK(r13, &(0x7f0000000340)={0x28, 0x0, 0x7, {{0x0, 0xffffffffffffff9d, 0x3, r9}}}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$nl_generic(r7, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000001c00)={0x64c, 0x20, 0x4, 0x70bd26, 0x25dfdbfd, {0x9}, [@nested={0x178, 0x7e, [@generic="e264bd97c6fb9fb2e041892da966246906522e7e2d40aa9d707385645d682e2ee2a6f096cb1c4a3926d0d5ebc3dc8318fb74aab223d62e3e1151d38eb7ca6f5ac96c", @typed={0x8, 0x22, @pid=r8}, @typed={0x4, 0xd}, @typed={0x3c, 0x1b, @str='securitycpuset]cgroupvboxnet1ppp0vboxnet1wlan1em1+user\x00'}, @typed={0xc, 0x1a, @u64=0x3f}, @generic="e1a4403dd92c2df0575c11f6a16da3b88a83f399bb999d708f86623167af227776431ae2906637dc7844eae54df8c0da93f69f21eb89522daa067d61598e65b08f590dc8c61734bc763a03527fb4251065234b928b042dedba49e573829819cc1e351bb5065ec7b55bdbabeb4e0a3d0bb73a8c257306095b0a1ce134b46c44e4a4fe7112cb5066a095264618de50d7afc818df4cec000d600afd5b0bcfff274f2be207d097e6f855db5cc4cfd926fddf1f47ea51711574edcedb65538eeda12e4aa94a68c66bad67fcfeb73c780bdd17efe968ead2c54e4e1764e7"]}, @generic, @typed={0x8, 0x82, @fd=r12}, @typed={0x8, 0x22, @fd=r11}, @typed={0x18, 0x2d, @str='vboxnet1cpusetppp0\x00'}, @typed={0x14, 0x69, @ipv6=@loopback}, @nested={0x470, 0x4b, [@generic="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", @typed={0x8, 0x43, @u32=0xcca9}, @typed={0x8, 0x41, @str=').\x00'}, @typed={0x18, 0x5, @str='broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'}, @typed={0xf0, 0x4c, @binary="9586bf70b52c93f76df7ed71a5ecb597ca97cd098bf5013b3c9fec9d308a64ca29354756d242f526ceee39b41632e40b23ccd7bc7d95a33f63242f05ba06150553f2eb67adea424f5137e2177281a88ee0350f668bf270633cd91dbf790d12b3810f8f16854a0521b18a6d0d759d36724f461d517d646e632e02282d0f0466b1606bec9fcd5ea3b6aac0a3b06da660ae5736cb515183ad78efeb92f3ef5e3f1f13677c3db1afb929a311ba43071a3d3fd0f16dc2e19d63e8a2086415aeaa81163babc2c7730fb98d36b5e7bddd57d43bdb1df981d74132a649b2b8f697606940e70bb091999c13dc8a6328"}, @generic="4d682a446009d0f0d2121226749ef836897ce721c6472fdcb3f5d6c9b0989fef70e01bd54d31dcb6465900b50c3e87607990084a191094b677075ad62a82c88535ae129450cef39fcfb2bc2a12d03b02ae0e07c0601b05d44c54652682", @generic="b38d8f1164116fc4f11a3f7fafd3492a079333723f50dcb7e11297fb54433ef7c2ba9c49823ef53b32a89297d3609941cb3a7f5d1d2b809f8ad69a69232afbb6ca8ec2ca3a05ae703fb1635e54d5e08b93ba948e39facac0f5f2b9e3ac48627c4c619a9b39e352dd3eaace0ad2a961ab92c9c8db34c56b3fd34063b67e53d990cbfee21b0f8ca2cefaaf9d262f2ac5a922e4f8bc5f807adc8f962a968f414e2e8d80c4d0c59a8291f1d695c2f6a17246047bbfca85edc707ab7cb9d57a81d3e3e3dd14", @generic="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"]}, @typed={0x14, 0x2c, @ipv6=@empty}]}, 0x64c}, 0x1, 0x0, 0x0, 0x90}, 0x5068df4432c3efea) 21:51:14 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x80, 0x0) epoll_pwait(r1, &(0x7f0000000000), 0x15555555555552f2, 0x8, 0x0, 0x0) connect$netlink(r1, &(0x7f0000000440)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x80000000, @loopback, 0x40}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x87) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, 0x1c) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0xffffffffffdffffe) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000004c0)) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) r5 = perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18120, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0x10001, 0x1}, 0x800, 0x0, 0x3, 0x4, 0x200000004000007, 0x9}, r4, 0x10, 0xffffffffffffffff, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) write(r6, 0x0, 0x0) open(&(0x7f0000000280)='./file0\x00', 0x8000, 0x40) openat(r1, &(0x7f00000004c0)='./file0\x00', 0x4101, 0x8) accept$inet6(r5, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000480)=0xfffffffffffffdba) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/raw6\x00HT\xf4\xfa\x92\xcaH\x1ci\xccui\x13W}9\x00ah\xde\x84\xf0\xbdU\x96\xbd11=*w\x81\x8d\x1c\x82\x04\x99n\xdf\xbcD\xe6{\t\x04\xaf\x92W\x00\xe4wt&\xff-\xae\x19\x9b\x97\nS\xe5\xafu_s\xf6\xf7\x14P\a\xe3\xc0\xed\xe28F/S\xcc\xcc\xeae\r\x97Z\xd1Q0\xa8Aj\x15\xaf\xf0\xc96bJ\xeeH%\x0f=\x01\x82\xf00\x9bE!\x9e\xbf\x12w\xcb\xc1\xd0\xf1*\xf9\xe7\xc7\xd3uI\x1c#\xfa\x92\x95\xca\xd6\xa39\xd1\xf0g\xe2!\f\\;qO\x97\xce\xcc\xbcU\xadLR\xf5 \xb0\xe8\x00'/176) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x249, 0x0, 0x0, &(0x7f00000002c0)=ANY=[]}, 0x0) r9 = getpgrp(0x0) fcntl$lock(r7, 0x25, &(0x7f00000001c0)={0x3, 0x0, 0x800000000, 0x3ff, r9}) ioctl$RTC_SET_TIME(r8, 0x4024700a, 0x0) sched_setaffinity(0x0, 0x4, &(0x7f0000000780)=0xa000000000000001) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000240)=0x3) r11 = getegid() ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, r11) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r12 = socket$packet(0x11, 0x2000000000000003, 0x300) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f0000000300)) r13 = getpid() process_vm_readv(r13, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/194, 0xc2}], 0x1, &(0x7f0000000100)=[{&(0x7f0000000600)=""/132, 0x84}], 0x1, 0x0) r14 = getpgid(r13) sched_getattr(r14, &(0x7f0000000040)={0x30}, 0x4bab8bce07239885, 0x66b061a7034f162f) io_setup(0x200000, &(0x7f0000000500)) preadv(r8, &(0x7f00000017c0), 0x1fe, 0x500) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r16, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x5) bind$inet6(r15, 0x0, 0x0) 21:51:14 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20206, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x4e22}, 0x1c) close(r1) [ 467.312301] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 467.381909] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:51:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:15 executing program 1: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x3}, 0x8) perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2700}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 21:51:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = fcntl$dupfd(r2, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={[{@codepage={'codepage', 0x3d, 'none'}}]}) 21:51:15 executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) unshare(0x40600) ioctl$TIOCSSERIAL(0xffffffffffffffff, 0x541e, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpgid(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) finit_module(r2, &(0x7f0000000040)='/dev/loop-control\x00', 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f0000000180)=""/229) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000140)={0xb, 0x100, 0x2, {0xfe1, 0x1ff, 0xfffffe01, 0x5}}) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f00000000c0)) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr="ff3e6808e92b7abafc47d822996f60e4"}, 0x1c) sendmmsg(r1, &(0x7f0000006d00), 0xc6, 0x24000000) listen(r1, 0x8) syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0x8, 0x24000) accept4(r0, 0x0, 0x0, 0x0) [ 467.731825] hfs: unable to load codepage "none" [ 467.739381] hfs: unable to parse mount options [ 467.852257] hfs: unable to load codepage "none" [ 467.859082] hfs: unable to parse mount options [ 468.052555] mkiss: ax0: crc mode is auto. 21:51:16 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r6 = socket$kcm(0xa, 0x2, 0x73) setsockopt$inet_dccp_buf(r2, 0x21, 0x80, &(0x7f0000000280)="60f033e7223a251d7a0c61ae985cdde1bf7751c1428522e5146d2f727e75b815681a4fbbf0e3047fe91ec020467814db4d154fea0846d582a302e275f3056a83266ad8d2f21b4926b1412985a7ed977fdb7f293afead323fe1e4c7abdb238e20a3df0e3befd0ba4c21a1b14e835c8ebfe1a8bf5eb3304c4381d2a94db28cb0320f3c", 0x82) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) connect(r6, &(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @empty}, 0x80) writev(r6, &(0x7f0000000580)=[{&(0x7f00000000c0)="ee", 0xc}], 0x1) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, &(0x7f0000000040)=0x1000000, 0x4) getpeername$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x10) recvfrom(r6, 0x0, 0x0, 0x0, 0x0, 0x0) 21:51:16 executing program 3: syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES32, @ANYRES32, @ANYBLOB="98616bd49181ba529bf0", @ANYBLOB="110b53c8", @ANYRES32, @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=r3], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0) 21:51:16 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:16 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x33, 0xba5ce75278d19026, 0x0, 0x0, {0x2}, [@generic="ffd38d9b", @nested={0x4, 0x1}]}, 0x1c}}, 0x0) 21:51:16 executing program 4: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") r0 = socket$inet6(0xa, 0x80003, 0x8) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) pipe2(&(0x7f0000000140), 0x4000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x4c4) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x281, 0x0, 0x0, {0x1f}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f0000000000)) 21:51:16 executing program 0: open(&(0x7f00000000c0)='./file0\x00', 0x9040, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad000003038701a2", 0xa}], 0x800005, 0x0) 21:51:16 executing program 4: perf_event_open(&(0x7f0000000240)={0x2, 0x70, 0x4, 0x8000000000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2929309ef24d8b30}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x40042, 0x0) ftruncate(r1, 0x200004) sendfile(r0, r1, 0x0, 0x80001d00c0d0) [ 469.190439] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 469.253640] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 469.265615] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 469.309977] EXT4-fs error (device loop3): ext4_fill_super:4398: inode #2: comm syz-executor.3: iget: root inode unallocated [ 469.342853] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=00000000) [ 469.353569] EXT4-fs (loop3): get root inode failed [ 469.372933] EXT4-fs (loop3): mount failed 21:51:17 executing program 0: syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = socket$inet6(0xa, 0x4, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x21}, 0xfffffffd, 0x3, 0xfe, 0x1, 0x4, 0x0, 0x1}, 0x242) r1 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) dup(r2) io_submit(0x0, 0x0, &(0x7f0000000280)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x1, 0xffffffffffffffff, &(0x7f0000000140)="dce6935910cdda41fd97ae37d0d4dc73d39ccf0963ef5b744dd962f6ad43dd7f135f665a4bd9be86557527379cf17d417b7ab683ac9a0c65d523a78cfabf2377627cf75b0f2b0e6a857ffa5cf1a3ecc2fdc7c59534b3e48db339857671d0691f6a08d82cee24bca4c11b7574b65fbfd9a7bc3ed25a946e0c061c32468639206981efefde230d9a83d7b5e815a3292443ea7f12c16740cfd2187fa410f7ac072f5ab7ce7f16799959623c4e5d8366e4244c0d1486", 0xb4, 0x7}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x212, 0x5, 0x0, 0x0, r1}]) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x80) fcntl$setstatus(r4, 0x4, 0x6100) r5 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000050700080000000000000000000010bb60770de5155f38f0b4410449c027194ce45d958a6224c4c6b7a6e7a0b7dc23baafcb78a9495a81620181273bb7a6b6db55261dd8d49631ef5cfcdb0a611b771c54c26246ca4359f79feea274ab146a21cc9cd7feed5c36aac060cbdb68", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076", @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x5}}, 0x34) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40807b8d6c001f000000000000000000000000235d008f7603f9b80581abdfa764a8004b979a5c3c148c60d2627a80cc403272d5edae39876942d812f419e423e19fe4922594e98f4adbb000f3c1fcdae543e63da9ba6b1568373cfd4bc974b76085b92e6add46bf7bfc3dbf0cba085f1be67b374aee9d2fdfaf32c7924cd1c63c8ac43a50c17df7ff0cd420f1b5c23797d6492e324db6e9bf0a9b5d66aa55b7e18fb7e87d6299816f66a9", @ANYRES32=r11, @ANYBLOB="14004100fe8000000000000000000000020000000000d520c048f85afc34d50500000041e8c320c2d2efae2f4d7de0b05c389305bf9cf713d7ca164d8170694de718b948223b907a0eefdb4e1aea6be68149350ce435190811d696465e2e9d5cadd3b5777e8833f4f2f61198202eb834b03e78509ddba58f3d0fbc6459083073169cf1240170039f0ec61fc5058bce1ff5edb8c3540380fe5fd3edcc6573f03e14dec3"], 0x40}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0200cb513a25de0b608088ed10ecd8f255705addfd40df1c69c799b0f81a11ab4971f9166617a497a18603807eeab93d20ca8f83d9cced9e34e7d843976e821bd4c9e34997ea210181451b383f21435cb49840b0f61274420a5d97"], 0x5}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001400dd4da2c2d2579ff3000000000000", @ANYRES32=r7, @ANYBLOB="14000100fe80000000000000000000000000000014000200e7693653d520c048f85afc34d511c9ac"], 0x40}}, 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000340)=0x8) ftruncate(r4, 0x8200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r13 = dup(r12) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137) recvmmsg(r13, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001b80)}}, {{0x0, 0x0, &(0x7f00000035c0)=[{0x0}], 0x1, &(0x7f0000003680)=""/187, 0xbb}}], 0x2, 0x0, &(0x7f0000005480)) r14 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ioctl$FS_IOC_RESVSP(r14, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xe0b7}) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) setreuid(0x0, 0x0) getresuid(&(0x7f0000000880), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000475000/0x3000)=nil) 21:51:17 executing program 3: socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet_sctp(0x2, 0x4, 0x84) sendto$inet(r1, &(0x7f0000a34fff)="03", 0x1, 0x4, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0xffffff88) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="480000001400190d09004beafd0d8c560284ed7a80ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed4e00009052946f02", 0x48}], 0x1) r3 = socket$inet6(0xa, 0x80003, 0x6b) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff}) close(r4) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000080)=0xfd1, 0x4) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"]}, 0x258) r7 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="00000000000000000000000000000000000300000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000020003b0500007fffffff000000000000000000000000ffffffff0100000003000000000000000000726f736530000000000000000000000069705f767469300000000000000000fc687064647001000000000000000000007465716c30000000000000000000eddcaaaaaaaaaa00000000005d6e0000ffffffff0002000000000000f000000010010000280100003830325f33000000be520000003f000000000000000000000000000000bf0600080000000800000000000000000000006e666163637400000000fbfaffffffffffffff0000000000000000bb00000000280000000000000073797a31000000020000000000000000000000000000000000000000006b000000000000000300006d61fe6b00000000000000000000000019bf3efa54c2da8100ff0100000000000000000000c8ffffffffffff4eff0000000000000000000000000000000000ea200000002000000000000000000000000000000000000000000000000001000000ffffffff00000000c838646b6b97b0bfa3db007dfd624cf94f8e675b3deb684bf7b9530f283854d70d4d207f2b0a905f6d65eb881c1af6430266ee9cb649f3e1201b709775544f5f46985ea9d038f3e37d11705b6b2ff8567c676d0097a73b64215ca173501a20851652fa8ed5aa44db43d7cad418ca0c75f1ff1997344faa0032feef060264f28711f42972ecfe04756e80ad3b85588000740675cb619346a7b0e5db28fd32d8020fec5ba587ecc1da0c51059a55d1d89478a21c2ea4cc77521caf2c215de9c7ea7311048910fb930ce4709c6d20894202d94c74ca4999e2c69422ed2d24ca0d1a07306a19f03f9675ce9fde8ca7fef97e3498"]}, 0x323) splice(r6, &(0x7f0000000000)=0x10000, r7, &(0x7f00000000c0)=0x1, 0x800, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8982, &(0x7f00000004c0)) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00)='\x00\x00\x01\x00\x04') sendmsg$TIPC_CMD_SET_LINK_PRI(r8, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1010005}, 0xc, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r10, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') bind$inet(r5, &(0x7f0000001440)={0x2, 0x4e23, @broadcast}, 0x10) socket$inet6(0xa, 0x80003, 0xff) r11 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r11, &(0x7f0000000100)={0x1a, 0x304, 0x0, 0x64, 0x1, 0x2, @link_local}, 0x10) sendmmsg(r11, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) ioctl(r3, 0x1000008912, &(0x7f00000001c0)="0805b5055e0bcfe8474071") mq_open(&(0x7f0000000140)='nat\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x800, 0x28, &(0x7f0000000180)={0xfffffffeffffffff, 0x8, 0x9, 0x6}) 21:51:17 executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x2, 0x10) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r1 = socket(0x200000000010, 0x0, 0x0) mkdir(&(0x7f0000000b00)='./file0\x00', 0x0) r2 = socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000000000, 0x4}, 0x0, 0xfffffffffffffffd, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00') syz_open_dev$midi(0x0, 0x0, 0x1) r3 = add_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="fc1f0cdc3a40c6116342add660fccbec98aa9d0e55d5a1705b2b3750fda9741158e9cff7a6ec2e2307", 0x29, 0x0) add_key(0x0, &(0x7f0000000480)={'\xae$z', 0x2}, 0x0, 0x0, r3) connect$rxrpc(r2, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x200100, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x210001}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000000c0800042d4a7000fddbdf25030000080c0001000500000000e70000"], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6e26cab450786d95}, 0x200000000, 0x80000000000003, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r4, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x100}, 0x8) [ 469.643227] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pig=13308 comm=syz-executor.0 [ 469.762852] audit: type=1400 audit(1577397077.310:192): avc: denied { getattr } for pid=13318 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 469.788398] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13312 comm=syz-executor.0 [ 469.835142] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13326 comm=syz-executor.0 21:51:17 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x285) perf_event_open(&(0x7f000001d000)={0x2eb746a2588803fd, 0x70, 0x0, 0x0, 0x52, 0x0, 0x0, 0x7f, 0x20044, 0xe7cc37be2abee122, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x5, 0xffffffffffffffff, 0x8) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0xfffffffffffff474, 0x20001, 0x7fff, 0x7, 0x96d, 0x8, 0xa68, 0x4, 0x9, 0x1, 0x3, 0x79, 0x14, 0x10000], 0x6000, 0x38d396c471124632}) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x400000000000030, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000140)={0x1f, 0x7, 0x6d, 0x0, 0x8001, 0x80, 0xff, 0x1, 0x3f, 0x9, 0xa1, 0x6, 0x0, 0x401, 0x8, 0x3, 0x8, 0x2, 0x2, [], 0x2, 0x9}) write$ppp(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) 21:51:17 executing program 0: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000100)=0xbaa) perf_event_open(0x0, r0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$DEVLINK_CMD_PORT_SET(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000004c0)={0x0, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0, 0xc}, 0x0, 0x800000, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgroups(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$FUSE(r1, 0x0, 0x0) write$FUSE_POLL(r1, 0x0, 0x0) write$P9_RLOCK(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r2, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r3 = getpid() sched_setattr(r3, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0) getpgrp(r3) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000300)=0x5b11, 0x4) ftruncate(r4, 0x80006) sendfile(r2, r4, 0x0, 0x8000fffffffe) 21:51:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:18 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/d4\x85\xa0^\am\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='\x06\x00\x00\x00;\x16\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nvram\x00', 0x421501, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f5373fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/135], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0xfffffe34, 0x0, 0x2, {0x82}}, 0x13f) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffc}}, 0xfffffffffffffe57) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r7, 0x2405, r5) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0xfffffffffffffefb, 0x5, 0x0, {0x0, 0x0, 0xfffffffffffffffd, 0xffffffff}}, 0xff30) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000000)={0x900000, 0x100, 0x84, 0x10401, 0x1a, "cafbe1c41e7d8597eef869c597427b5d6d0c3d"}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffe18, 0x0, 0x0, 0x1a3) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000380)='/dev/nvme-fabrics\x00', 0x4000, 0x0) write$FUSE_BMAP(r4, &(0x7f00000003c0)={0xfffffd80, 0xfffffffffffffff5}, 0x4) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_opts(r9, 0x0, 0x0, &(0x7f0000000040)=""/41, &(0x7f0000000200)=0x29) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup(r10) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000100)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000680)="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", {0x0, 0x0, 0x0, 0xd}}) [ 470.626004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:51:18 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) close(r0) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x75, 0xa401) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030384cc74502f987c2cec6504df663e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r6 = socket(0x4f18e0c5a94cc5d0, 0x8000e, 0x2) r7 = dup2(r3, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r8, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2ec, 0x0, 0x0, 0xfffffffffffffe93) 21:51:18 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup3(r3, r4, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) close(r0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x51dc2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x2, 0x0, 0x0, 0xe1) 21:51:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xfffffff7ffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={r4, 0xeb}, 0x8) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001640)=""/4096, 0x1000}], 0x1) 21:51:18 executing program 3: mkdir(&(0x7f00000003c0)='./file0\x00', 0x101) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = dup(r0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b35, &(0x7f0000000000)='wlan0\x00') ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f00000005c0)) unshare(0x40000000) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x0) r2 = dup(0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, 0x0, 0x40000) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x0, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r3, 0x10f, 0x84, &(0x7f0000000300), &(0x7f0000000340)=0x4) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) sigaltstack(&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000100)) r4 = socket(0x15, 0x80005, 0x0) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000540)='/dev/bsg\x00', 0x64080, 0x0) ioctl$MON_IOCG_STATS(r5, 0x80089203, &(0x7f0000000580)) getsockopt(r4, 0x3, 0x2710, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffd61) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_INFO(r6, 0x29, 0x40, &(0x7f0000000180)={'raw\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}, &(0x7f0000000100)=0x54) ioctl$BLKIOMIN(0xffffffffffffffff, 0x1278, &(0x7f0000000200)) 21:51:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 471.318970] IPVS: ftp: loaded support on port[0] = 21 21:51:19 executing program 1: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x2007fff) lseek(r3, 0x0, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) write$P9_RSTATu(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r6], 0x5d) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) fstat(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0xfffffffffffffe52, 0x0, 0xc44, &(0x7f0000000000)={[{@check_strict='check=strict'}], [{@fowner_gt={'fowner>', r2}}, {@fowner_lt={'fowner<', r9}}, {@dont_hash='dont_hash'}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = fcntl$dupfd(r11, 0x0, r10) ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200) [ 471.613164] audit: type=1804 audit(1577397079.160:193): pid=13393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir668982751/syzkaller.KQEol4/9/bus" dev="sda1" ino=17130 res=1 [ 472.096769] device bridge_slave_1 left promiscuous mode [ 472.102335] bridge0: port 2(bridge_slave_1) entered disabled state 21:51:19 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x15c}}, 0x0) 21:51:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 472.198606] netlink: 308 bytes leftover after parsing attributes in process `syz-executor.4'. [ 472.217939] device bridge_slave_0 left promiscuous mode 21:51:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) fcntl$lock(r1, 0x6, &(0x7f0000000040)={0x2, 0x2, 0xc1d0, 0x2, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000001000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="3e652e0f29f0260f0f2390f20f219a66b9ac0a00000f323ef20f1a5b00ba4100edfe47070f210866b8000000000f23c80f21f866350800f0000f23f8f3a5", 0x3e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) r4 = dup(0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x4c80, 0xfffffffffffffffe) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000100)={0x2, 0x1, 0x9, 0x88a1, 0x10001}, 0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x31e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 472.264690] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.517971] audit: type=1804 audit(1577397080.070:194): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir668982751/syzkaller.KQEol4/9/bus" dev="sda1" ino=17130 res=1 [ 472.647781] audit: type=1800 audit(1577397080.160:195): pid=13394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17130 res=0 [ 472.766233] audit: type=1800 audit(1577397080.160:196): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="sda1" ino=17130 res=0 [ 473.939348] IPVS: ftp: loaded support on port[0] = 21 21:51:22 executing program 0: r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000100)="fc0000004a000700ab092500090007000aab80ff600000000000369321000100fc0000000000000000ff000000000000008656aaa79bb94b46fe00000007ec020800008c0100036c6c256f1a272f2e117c22ebc205214000000080008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e2082038f4f8b29d3ef3d92c8334b3863032000048b6e4170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43d3f000000000000003b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b00417cc821d9565187dc48deac270e33429fd3000175e63fb8d38a873cf10000000000f7", 0xfc) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0xb1, 0x2, 0x9}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="825d5a1ebbc7", 'veth1_to_bond\x00'}}, 0x1e) [ 475.021769] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.066101] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'. 21:51:22 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000004c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000002c0)={0x0, &(0x7f0000000080)}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0xff, 0x480) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000180)=0x20, 0x4) ioctl$KIOCSOUND(r4, 0x4b2f, 0x81) r5 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x0, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2ac5000000012e0b3836005404b0e0301a060075f2e3ff5f163ee340b700000080000000000000fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c65400"}, 0x80) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000040)={0x0, 0x2, 0x6, 0x9}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000004c0)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) 21:51:26 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000b9910f4605609808ce84309d905e1fbf60956c0416f69d784bbf21ef30b3c00d4057d8146c2d2cb5b54195eceee8896e55ae1519fdbfad9aea912e5fabef1061807380d91903"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={r3, 0x0, 0x6}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'or0\x00', 0x100}) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r5) socket$kcm(0x2, 0x3, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000780)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10*\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x1f\xf6P\rSj\x95\xd9o\x03\xd4\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&') ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8943, &(0x7f0000000680)='nr0\x01\x00\x00\xc3\x00') [ 480.087800] device hsr_slave_1 left promiscuous mode [ 480.128999] device hsr_slave_0 left promiscuous mode [ 480.168996] team0 (unregistering): Port device team_slave_1 removed [ 480.181391] team0 (unregistering): Port device team_slave_0 removed [ 480.194742] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 480.257928] bond0 (unregistering): Released all slaves 21:51:27 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f0000000380)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000000)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x400880, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000003c0)={{0x2a, 0x0, 0x9}, 'syz0\x00', 0x1f}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00') fchdir(r1) r2 = open(&(0x7f0000000100)='./file0\x00', 0x40c2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) write(r2, &(0x7f0000000140)="340e7adf00000000", 0x8) preadv(r3, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/226, 0xe2}, {&(0x7f0000000580)=""/43, 0x2b}], 0x2, 0x1) r4 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$FS_IOC_GETVERSION(r4, 0x80087601, &(0x7f0000000240)) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x10000, 0x0) fcntl$setflags(r5, 0x2, 0x1) truncate(&(0x7f0000000040)='./file0\x00', 0x7) sendfile(r2, r3, 0x0, 0x7fffffa7) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000180)={0x7fffffff, 0x83ad}) 21:51:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:27 executing program 4: open(&(0x7f0000000040)='.\x00', 0xca500, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000000000000028c4b31f65c6f8ab40098314c498c06b1b21927d4c86f150f74c99"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000000000)) r7 = fcntl$dupfd(r3, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$apparmor_exec(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/839], 0x2c1) [ 480.498044] audit: type=1800 audit(1577397088.050:197): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="loop1" ino=201 res=0 [ 480.603690] audit: type=1804 audit(1577397088.080:198): pid=13462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir668982751/syzkaller.KQEol4/10/file0/file0" dev="loop1" ino=201 res=1 21:51:30 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000180)={0x2, 0xf, 0x3, 0xef1}) ftruncate(r0, 0x208200) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000140)) open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xa10000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x990967, 0x8, [], @ptr=0x8001}}) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x0, 0xff, 0x1, 0x0, 0x50b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4}, 0x0, 0x6, 0xffffffffffffffff, 0x1) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 21:51:30 executing program 2: r0 = gettid() pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mmap$snddsp_status(&(0x7f0000ffe000/0x2000)=nil, 0x1000, 0x0, 0x28011, r2, 0x82000000) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x1) write$binfmt_script(r3, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000000)='security.capability\x00', 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SG_GET_KEEP_ORPHAN(r5, 0x2288, &(0x7f0000000340)) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendto$netrom(0xffffffffffffffff, &(0x7f00000000c0)="1774821aa54a3e83bffed855f1b90d626c2da2138f2ba8676d63acc62e5913876c5b0825c7b971abb9751a3dd5613f7a2afbf1378cc9039f34f905aab31bdbdad07f478896b3df7cf117fd413ed53700e835106add015877e2fa08e78892e3e261096389686e20e346fa4965110948bb61e92ae9007d2142b0aea44f149d82f0bc096cb8b7bfa0b5", 0x88, 0x4, &(0x7f00000001c0)={{0x3, @default, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 21:51:30 executing program 4: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x2) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000600)=ANY=[], 0x0) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) dup2(r2, r4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) r7 = dup3(r1, r6, 0x40000) ioctl$EVIOCGPROP(r7, 0xc004743e, &(0x7f0000000140)=""/246) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0xffffffffffff0000) dup2(r1, r2) 21:51:30 executing program 1: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010a0200027400f801", 0x17}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="646582ee420000060a8a135f42b81bcc0095d06ac29b9565c8d304ee780e7df0390a495f4a4f24dc4507d3d912c2866a7468c3ac5372a6916c0e886559ee7957fa9095a232a39b2c087f37865eea06bf2ce27e15bcf0cc84f887df623d2ac1f11d5334eef10bb72925"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 21:51:30 executing program 0: ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x1578d9da31206913) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x1000000, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0']) chdir(&(0x7f00000002c0)='./bus\x00') r0 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r0, &(0x7f0000000540)=ANY=[], 0x133) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) sendfile(r1, r1, &(0x7f0000000180)=0x2000000, 0xa198) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140)={0x0, 0xf703}, 0x0) 21:51:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:30 executing program 2: mkdir(&(0x7f0000002000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount(0x0, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f0000000500)='sysfs\x00', 0x2010002, 0x0) llistxattr(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) [ 483.161440] FAT-fs (loop1): Unrecognized mount option "de‚îB" or missing value 21:51:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 483.239789] FAT-fs (loop1): Unrecognized mount option "de‚îB" or missing value 21:51:30 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet6_tcp_int(r3, 0x6, 0xb, 0x0, &(0x7f0000012ffc)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="000000000006000000000000000500000000000000034c00"/33], 0x2c) [ 483.263921] audit: type=1804 audit(1577397090.810:199): pid=13499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/56/bus" dev="sda1" ino=17148 res=1 21:51:30 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) getpeername$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000300)=0x1c) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @broadcast}, 0x10) perf_event_open(0x0, 0x0, 0x0, r0, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) getpeername$unix(r3, &(0x7f0000000440), 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, &(0x7f0000000200)) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100), 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r2) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x9) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x1) write$binfmt_aout(r1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="aa6e041a7700fdff860609aa00630d6070266987e7467db94056a794a14f7096bf000036b564df5e0acad550fe203534da91b5b9fb0fb1d96023aafdff06b4112e46c94cb166c8d6e89f0a32942cd516f60c131aef8e5480dcd79db63bfc1deea690e1b28513c7fb00b3be5cfd43fbae6c8d8b88e110a26b000000000000000000"], 0x81) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe) [ 483.383892] overlayfs: './file0' not a directory 21:51:31 executing program 2: perf_event_open(0x0, 0x0, 0x4, 0xffffffffffffffff, 0xa) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) mlockall(0x1) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0xc125, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10010}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) shmget(0x2, 0xe000, 0x400, &(0x7f0000ff1000/0xe000)=nil) socket$can_raw(0x1d, 0x3, 0x1) lgetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f0000000200)=""/200, 0xc8) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) [ 483.415745] audit: type=1804 audit(1577397090.960:200): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/56/bus" dev="sda1" ino=17148 res=1 21:51:31 executing program 4: r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x11e) mmap(&(0x7f00005a0000/0x4000)=nil, 0x4000, 0x3, 0x10, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$eventfd(0xffffffffffffffff, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00\n\x05\xb0\xc3\xffc\x1f$\xb4m\xe1\x01\x01\x00\xff\xd82R\xaf0\'\xe6\x96\x9f\xa5\xeb]]\'HP\xf8\x9bG\xb3\xfc^\xb6\xe8\x8f\xbf\x9a\xea\x9e\x8a\xb0)N\xcb\xcc\n\xcc\x03\x9ca\x90\xeaP\xa8\xb6\xcd\x18\xe9\xab\xc8~&\x1eK\xdb#\x85\xc1\xaaPy\xb8\xd1\x99\xcf\xc3\x12\xae5\xa21W\f\xa77\xc4\xb8\xd5.#wnl\xde\x82.\x04QM\xdc\xa8\x1al\xbf\xd1\xa9\xd5\"\x16\xddu\xfd\xc9\x05w\x84\xfa\xecpb\xe1S1\xa8\xda\xfb', 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYPTR64], 0xff39) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x4000) socket(0x1, 0xa, 0x5) bind$isdn(0xffffffffffffffff, &(0x7f0000000080)={0x2}, 0x6) r3 = socket$inet(0x2, 0x4000000805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = dup3(r3, r4, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e1e, 0x9, @mcast1, 0xfffffffe}], 0x1c) sendto$inet(r5, 0x0, 0x0, 0x10008001, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r6) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="8a2f06206ecac8bef8f818f82c36ad3a0af13db83577ba141c9e977503d12d4178318e3537ea8b23e442873c3730bb13f5d7a3519c35149916e9bc72ff7fe8bba0d1795bb356dba6", @ANYRES32=0x0, @ANYRES64], &(0x7f0000a8a000)=0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x7a, &(0x7f000059aff8), &(0x7f000034f000)=0x2059b000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @multicast1}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)=ANY=[@ANYBLOB="d11396cae59f9caa970b8d546bc0b91b4bc3b93365e9e2f59f02437d1c5c13336f8464a03b5d1140d9", @ANYRES32, @ANYRES32=0x0], &(0x7f0000a8a000)=0x3) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000340), 0x8) write$cgroup_pid(r2, &(0x7f0000000000), 0x10000000d) 21:51:31 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x103502, 0x0) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000080)={0x8, 0x80, 0x401}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r4, 0x28, &(0x7f00000000c0)}, 0x10) io_submit(0x0, 0x0, 0x0) 21:51:31 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000540)=0x2000000000000074, 0x56c) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(r0, 0x0, 0x0, 0x210007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write(r0, &(0x7f00000001c0)="ee0107200c9f8fbf5ca312794d57d7c84858f6d02ac7044478a1ceaba80c756a581354e1c3bc0f39ab71266531e5c6b4d6", 0x31) socket$inet_udplite(0x2, 0x2, 0x88) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff01800000010039504d10129a2e4cc74502f987c2cec6504df6efd74ed8a70ab563e98b4b2a0400000000000000d55f1c6bc9ba3da80b856445ab100621d6234555c08dc540473786cd89e9b0b6e816731ed001d027340b8e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000"], 0x94) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="010000696da140751c81ee0014bf256758afd9cb84b4956799eff2adf7bdf28847", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000000)={r4, 0x9, 0x1ff}, &(0x7f0000000080)=0x8) close(0xffffffffffffffff) r5 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x66, 0x2) ioctl$TCSETX(r5, 0x5433, &(0x7f0000000280)={0x4, 0x84f, [0x31, 0x1ff, 0x800, 0x1000, 0xe2c9], 0x1}) 21:51:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:31 executing program 3: r0 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000340)={0x0, 0x9, 0x1, {0xb, @pix={0x0, 0x1f}}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000080)=@get={0x1, &(0x7f0000000000)=""/118, 0x9}) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1d, 0x11, r0, 0x0) 21:51:31 executing program 0: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001be000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x14e) r1 = dup2(r0, r0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000040)={0x8, 0x1ff, 0xa0000000, 0x3, 0x5}) mmap(&(0x7f00001bd000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000140)="44e24c247e1891d9e7b32eda7a8a51a06ae12ddd4212ad2fe839468410280fe6a30a6fc977495850cafb17f5ef423b89e35bb94ac69a0efd67943a5edcd2947b313a1872973c4d7f413e740c929c62512a") write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$netrom_NETROM_T2(r3, 0x103, 0x2, &(0x7f0000000080)=0xf93b, 0x4) [ 484.340508] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 17) [ 484.349284] FAT-fs (loop1): Filesystem has been set read-only [ 484.356940] FAT-fs (loop1): error, fat_free: invalid cluster chain (i_pos 17) [ 484.372421] audit: type=1400 audit(1577397091.910:201): avc: denied { map } for pid=13552 comm="syz-executor.3" path="/dev/swradio0" dev="devtmpfs" ino=18825 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 21:51:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:32 executing program 3: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab57100621d6234555c08d6a1453d886cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3f354aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) dup3(r1, 0xffffffffffffffff, 0x80000) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x4, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@empty, 0xfffffffd, 0x0, 0xfe, 0x0, 0x4, 0x0, 0x1}, 0x20) r3 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r3, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) fcntl$setstatus(r4, 0x4, 0x6100) ftruncate(r4, 0x8200) recvmmsg(0xffffffffffffffff, &(0x7f00000052c0)=[{{0x0, 0x0, &(0x7f0000001b80)=[{0x0}], 0x1}}], 0x1, 0x0, &(0x7f0000005480)) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_type(r4, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) 21:51:32 executing program 1: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff0", 0x16}], 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000000)=0x80) 21:51:32 executing program 4: openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000340)={0x28, 0x2, 0x0, {0x4, 0x5, 0x400}}, 0x28) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_STREAMOFF(r1, 0x40045613, &(0x7f0000000200)=0x6) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa\x00', 0x0, 0x290002) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000180)=0xffffffa6) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000000c0)=@v3, 0x18, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f00000000c0)=@v3, 0x18, 0x0) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x1) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x200) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) close(0xffffffffffffffff) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000011000d04000600007643560000000062100000000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) [ 485.095538] protocol 88fb is buggy, dev hsr_slave_0 [ 485.100666] protocol 88fb is buggy, dev hsr_slave_1 [ 485.245637] protocol 88fb is buggy, dev hsr_slave_0 [ 485.251507] protocol 88fb is buggy, dev hsr_slave_1 [ 485.405550] protocol 88fb is buggy, dev hsr_slave_0 [ 485.406770] protocol 88fb is buggy, dev hsr_slave_0 [ 485.410695] protocol 88fb is buggy, dev hsr_slave_1 [ 485.416518] protocol 88fb is buggy, dev hsr_slave_1 [ 485.885511] protocol 88fb is buggy, dev hsr_slave_0 [ 485.890653] protocol 88fb is buggy, dev hsr_slave_1 [ 486.026586] team0 (unregistering): Port device team_slave_0 removed [ 486.201636] team0 (unregistering): Port device team_slave_1 removed 21:51:33 executing program 2: r0 = socket$inet(0x2, 0x4000000805, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000500)) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000700), &(0x7f0000000800)=0x4) write(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0) mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) modify_ldt$write2(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={0x0, {0x2, 0x4e20, @multicast1}, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x230, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x3, 0x7fff}) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) gettid() socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r3 = dup(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r3, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000140)={0x0, 0x2c1, 0x800, 0x20, 0xff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0xed00, 0x0) r5 = socket(0x22, 0x2, 0x4) fsetxattr$security_smack_transmute(r2, &(0x7f0000000380)='security.SMACK64TRANSMUTE\x00', &(0x7f00000004c0)='TRUE', 0x4, 0x3) ioctl$IMGETCOUNT(r5, 0x80044943, &(0x7f0000000040)) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x0, 0x70bd2b, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe}]}, 0x60}}, 0x4872df1af972a635) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x802}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [], @broadcast}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20000804) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000740)={0x3, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) socketpair(0x0, 0x0, 0x0, 0x0) 21:51:33 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'eql\x00\x00\x04\x00\x00\x00\x03\x00\x00\x00\xf2\a\x00', 0x2ee6bc40dbce6995}) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000bc0)=[&(0x7f00000001c0)={0xf, 0x5, 0x0, 0x0, 0x0, r0, 0x0, 0x383}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000100)={0x0, 0x3, 0x1014}) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) dup2(r5, r0) ioctl$sock_ifreq(r2, 0x8914, &(0x7f0000000040)={'eql\x00`\x00\xa9[,\x00\x14\x01\x03\x03\xf0\x00', @ifru_addrs=@nfc}) 21:51:33 executing program 3: add_key(0x0, &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000280)={r1, r2, 0x0, 0x82, &(0x7f00000001c0)="6d16f9d71202c92ab95c45c7ef1f961da0dd8abaaa65b095bbeb16ffa75babdc50d1ba186421dbb83776d3d78ff71b70036b04b76ff3316ddb01d0ff3d373bafea51550aa7313089175ef8f791e31d5ec9bed6146f4301f0766e36ad93276a41c428ebb906110b69e622d8d731a00d2875342520460948358149a6ff999709e94014", 0x3, 0x6, 0x2, 0x8, 0xf782, 0x1, 0x9, 'syz0\x00'}) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x4, 0x4, 0x0, 0xafde}, {0x7, 0x0, 0x6, 0x7}, {0x3, 0x1, 0x83, 0x837e}, {0x1, 0x0, 0x5, 0xfffffffe}]}, 0x10) 21:51:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:33 executing program 0: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') r0 = getpid() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r1, 0x80}], 0x1, &(0x7f00000002c0)={r2, r3+30000000}, &(0x7f0000000300), 0x8) sched_setscheduler(r0, 0x5, &(0x7f0000000380)) lsetxattr$security_evm(0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @rand_addr=0x6}, {0x2, 0x0, @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='veth0_to_bridge\x00', 0x7}) r4 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) write$UHID_INPUT(r4, &(0x7f0000001cc0), 0x1006) sendfile(r4, r4, &(0x7f0000000240), 0x2008000fffffffe) creat(&(0x7f00000000c0)='./file0\x00', 0x0) semctl$GETALL(0x0, 0x0, 0xd, 0x0) 21:51:33 executing program 4: r0 = gettid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000540)='/dev/qat_adf_ctl\x00', 0x20001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffd) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f0000000580), &(0x7f00000005c0)=0x10) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) write$binfmt_script(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x215) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) read$eventfd(r4, &(0x7f00000000c0), 0x8) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1a0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) r5 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in6=@local}}, {{@in6=@mcast2}, 0x0, @in6=@remote}}, &(0x7f0000000000)=0xe8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f0000000140)={0x1f00000, 0x20, [0x7fffffff, 0x7ad132bc, 0x5, 0x7ff, 0x6, 0x5, 0x400, 0x9]}) ptrace$setopts(0x4206, r0, 0x0, 0x0) 21:51:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 486.448442] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use) [ 486.473614] overlayfs: workdir and upperdir must reside under the same mount 21:51:34 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8e, 0x6}, 0x2a939, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003300190100000000000000000300000004fc0100"], 0x18}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/attr/exec\x00', 0x2, 0x0) fcntl$addseals(r3, 0x409, 0x260aa6d554cea85d) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TIOCGISO7816(0xffffffffffffffff, 0x80285442, 0x0) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000280)=ANY=[@ANYRES32=r8], 0x1) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000001c0)={r8}, 0x8) write$cgroup_pid(r6, &(0x7f0000000300), 0x12) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='overlay\x00', 0xe9ff53660c9d7455, &(0x7f0000001700)=ANY=[@ANYBLOB="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"]) preadv(r9, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) vmsplice(r10, &(0x7f00000003c0)=[{&(0x7f00000014c0)="84ae0b602f2386a3c941831ada5f96983c2e33cd708b51fc4681ba338baff39b56a2838f8899b2901b97ba24df39d226897c377d6b29e5096663a81eaca7c63071930a3e97203de5d13c6c50b269bdbb4149d4b70de53dc69f36eac72505ec819047ed380f9d03cbc828a7aaa0f8bba4a88b10c087e4d3c0d075cd0e65d3536851373af2b393b30a8abffa2cb860a3e1b1549204e9c3c424308fb8c8c90c22a78ee04c20ee5ed9d2c9a940ba7fc347e424", 0xfffffffffffffe06}, {&(0x7f0000001640)="f73ab04798677fec7ff581118e59af49678a022701b2d09cd848d963b8e9079c5a3d2e88b36cf681fc435a419d55e0267e39aa7e186899d695c3d9c47b04958a67f28a88a7ee880e9442d2f5c094f51867952ed40c8a5f63d218dd61fc928a81e0497810569b783e18e887861cefc3032e39a2510cfd2bb22b0a63e456f3206539f41a331587961201474e8b99478f8281de71df21fcaa64c4e3924dc187335d4d24b06db58a7b", 0xa7}], 0x2, 0x1) socket(0x2, 0x3, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) r11 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001400)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_udp_int(r11, 0x11, 0xf5, &(0x7f0000001440)=0x10000, 0x4) gettid() 21:51:35 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x12888, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket(0x2, 0xe243d917a4f8adfb, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32], 0x18) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8e0f) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x4000, 0x0) write$P9_RFLUSH(r6, &(0x7f00000000c0)={0x7, 0x6d, 0x1}, 0x7) syz_open_dev$ndb(0x0, 0x0, 0x300) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) 21:51:35 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup2(r0, r1) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) fcntl$setstatus(r6, 0x4, 0x42000) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000003c0)={0x11, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lblcr\x00', 0x2a, 0xffffffff, 0x10022}, 0x2c) [ 487.731362] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xdf3/0xef0 21:51:35 executing program 0: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) read(r2, &(0x7f0000000000)=""/19, 0x13) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'}) writev(0xffffffffffffffff, &(0x7f0000000b40), 0x0) add_key(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f00000001c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$clear(0x7, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 21:51:35 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKPG(r2, 0x40140921, &(0x7f0000000100)={0x0, 0x1f, 0x0, 0x0}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) read(0xffffffffffffffff, &(0x7f0000000040)=""/246, 0xffffff67) socket$inet6_udplite(0xa, 0x2, 0x88) 21:51:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 487.889535] IPVS: ip_vs_svc_hash(): request for already hashed, called from do_ip_vs_set_ctl+0xdf3/0xef0 21:51:35 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0xffffffc0, 0x3, 0x8, 0x9, 0x50]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x41801) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) get_mempolicy(0x0, &(0x7f0000000240), 0x7, &(0x7f0000ff5000/0xa000)=nil, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000080)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x2, @mcast1, 0x400}, {0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, r5, 0x9}}, 0x48) fsync(r0) 21:51:35 executing program 2: perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004e00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') preadv(r1, &(0x7f00000017c0), 0x3a8, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x1) [ 487.991224] bond0: Releasing backup interface bond_slave_1 21:51:35 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0xb, 0x0, "9cb4aa39e1bd413767b251106a71d3a1dcf3eb07b3ecd4d781f55175b3de575b1269b01fc34e10024d64b0c95e9e86d37d57e8a63c94c9489afca5c76ac77e3e2297c70b0a0e0039fd5af5389f988c9d"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x0, @multicast2}}, 0x0, 0x9, 0x4, 0x0, "0000000000000000000000020000000000000000000000000000000000000000000700000000000000000000000000000000000000000000000000000000008000"}, 0xd8) dup2(r0, r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x4, 0x2000, 0x2, 0x34}) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40000, 0x0) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000040)={r6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f0000000480)={r6, 0x3, 0xdd, 0xbf0, 0x101, 0x6, 0x1f, 0x8525, {0x0, @in6={{0xa, 0x4e23, 0xf7dc, @remote, 0x6}}, 0x7, 0x81, 0x0, 0x1ff, 0x5ff}}, &(0x7f0000000080)=0xb0) 21:51:35 executing program 2: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x365f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x6, 0x6, 0x5}, &(0x7f0000000100)=0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @mcast2}, 0x1c) connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) sendmmsg(r5, &(0x7f0000005fc0), 0x800000000000059, 0x0) accept4$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c, 0x80000) 21:51:36 executing program 2: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x8) 21:51:37 executing program 2: r0 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) ftruncate(r3, 0x2007fff) lseek(r3, 0x0, 0x4) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) write$P9_RSTATu(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r2, @ANYRES32=r4, @ANYRES32=r6], 0x5d) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={[{@device={'device', 0x3d, './file0'}}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@uid_lt={'uid<', r6}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x34, 0x61, 0x62, 0x34, 0x65, 0x35, 0x32], 0x2d, [0x31, 0x34, 0x63, 0x32], 0x2d, [0x65, 0x38, 0x63, 0x30], 0x2d, [0x36, 0x65, 0x64, 0x33], 0x2d, [0x61, 0x34, 0x61, 0x38, 0x33, 0x0, 0x35, 0x66]}}}, {@euid_eq={'euid', 0x3d, r2}}, {@euid_lt={'euid<', r2}}, {@context={'context', 0x3d, 'user_u'}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}, {@appraise_type='appraise_type=imasig'}, {@obj_type={'obj_type', 0x3d, 'ppp1.'}}]}) [ 489.527146] audit: type=1804 audit(1577397097.070:202): pid=13694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir371048370/syzkaller.Kn34RV/13/bus" dev="sda1" ino=17170 res=1 [ 489.666242] audit: type=1800 audit(1577397097.140:203): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17170 res=0 21:51:37 executing program 3: syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) gettid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x0, 0x4) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0x6}) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="8b59812d0000", @ANYRES32=0x0, @ANYBLOB="00000000000400000000001e00000000"], 0x28}}, 0x0) 21:51:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402b03a727f8e8e4424069e0000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x78bd766dbaac8fb4}], 0xaaaac44, 0x0, 0x0, 0xfffffffffffffd31) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10, 0xc00) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) munmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 489.865531] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=13705 comm=syz-executor.3 21:51:37 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000040)) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000002c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) close(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7f, 0x80000) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000000100)) r3 = dup(r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100696b9c3af9807f98db6dc1dbdd821d6234555c08dc540473786cd89e9b08e3f4972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/150], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000180)={{0x1, 0x0, @reserved="1bae9859893fc7f2ba3fca54a0a6f733960d9f5ea443806276355090263afc8f"}, 0x95, [], "2d6353a3d1ad00b71fc1e2a74e7efbc1cbedfa935eec364564e1e0c95862a11ad19c8f5ed4f5831bce7af923052a558451baf335c8eb7fea66d2a7a3b61dd37a7a55cfb6623f4e9d51a475b94be877cde650ae233eea05dd5cbd8d034b30e8c10f3a92840cce2e92376e3e8573a7cc7a19da1c2392d1fe2fd508fe014c5116a100ac2129f2882531dda0a557be9ad48e2aa0d56e6a"}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_DV_TIMINGS_CAP(r7, 0xc0905664, &(0x7f0000000340)={0x0, 0x0, [], @raw_data=[0xe759, 0x8, 0x8, 0x4550e6a0, 0x3f, 0x200, 0x20, 0xff, 0x8, 0x18, 0x17f, 0x28, 0x9, 0x4e, 0x7f, 0x7f, 0x0, 0x1, 0x6c2c, 0x3ff, 0x3, 0x7, 0x60d, 0x3, 0x2, 0x6, 0x81, 0x82, 0x8, 0x67e0, 0x7, 0xffff174f]}) r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000400)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r8, 0x84, 0x66, &(0x7f0000000040)={r9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000080)={r9, 0x1}, 0x8) [ 490.121418] input: syz1 as /devices/virtual/input/input13 [ 490.474725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.486138] bond0: Releasing backup interface bond_slave_1 [ 490.837148] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.858517] input: syz1 as /devices/virtual/input/input14 21:51:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:38 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000440)=0xe8) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@rand_addr=0xffff, @dev={0xac, 0x14, 0x14, 0x1e}, r7}, 0xc) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2}}, @can, @can={0x1d, r7}, 0x1ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='syzkaller0\x00', 0x3, 0x1ff, 0x5}) r8 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000310000082a26110000dbdfb9f5d25e1525000080002c000100180014000000b7c3169eef7dee77f19f9917822b10000100636f6e6e6d61726b000000000000100020f7c7be720faf625d876a0ff7620ce68039a6000000080003"], 0x54}}, 0x5f4bcbd400ec137e) 21:51:38 executing program 2: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fallocate(r0, 0x0, 0xc478, 0x5) write$P9_RCREATE(r0, &(0x7f0000000080)={0x18}, 0x18) fallocate(r0, 0x0, 0x0, 0x4005ef3) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) socket$inet6_sctp(0xa, 0x1, 0x84) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x2}, 0x10) fallocate(r0, 0x3, 0x5, 0x108001) 21:51:38 executing program 0: mkdir(&(0x7f0000000040)='./file0\x00', 0x64) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f00000003c0)={0x0, 0x1, [0x871, 0x5bd, 0x0, 0x8c]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000680)) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000200)) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x40040, 0x0) pipe(0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$pppoe(0x18, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) dup(r4) socket(0x10, 0x80002, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000006c0)="387be77b9037b9cafc148136fd1e7e84c2b13dbcdd38ec3000276293f41d7ffabe5917cb3b3fa28ade3deb4bc9fd048f31002376f643802cdd72d33dc24923bacab29a9467dc5322b39bab57af59ba0ae8008288f3fed228292cb917172ed2b1e1f802000000fbff4ef5daeccb79da1a1635a67516fc4886edc6a3d1c7986d7fab03326401d6862c9fb56df2d10e04d8965a1131b3e44ab1499f53118413076f176ef30cf48a313ba92b808c1660d37515ad3d5bd9f2d8f20fbb6334604301f22b1bb00accd8ca2fa36fda1fc547310bdf7ab9e47e54f82b9aa3e4e33638e676d9640f97731587bc046a404967520267efef84962e918303b8", 0xd7}, {&(0x7f0000000600)="5939ee6ef56c9eb9df145b58045daab24c05d196228fe778798c3cc6d6dbad2a585e963ae54f056da8eca67789337534114a795b188b78901b03272f632a7daad8c6cbd04aab73b00f1f92e6a5fb520a54d2ec6363f66573389aaec3a874d64b02bcc7d4d6b5fe8cad97", 0xffffff59}], 0x3d4, &(0x7f0000000100)}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000480)=ANY=[@ANYBLOB="00004f9c000010b9ad8de2289570d9ab13ded70d3d2f7cad98f86a572046750208dbd015c32b4959371a4c2aec470c75f518ae993b7b000000000000e0cb"], &(0x7f000095dffc)=0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc542473786cd89e9b08e3fd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d5d0ba941f589be824ef38cadc500"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000002c0)={0x0, 0x5d, "4082e1e2a097b1b5f61b30d7ffbd5f58ea14b25d6758d219319a4208bbbe872e574b8eb68d9c76dffcc8373d9985bbe6a9a9f2384aa873a52fcde18e91a20300632c43a23bb0975b4f84f64704b8674639fa559ba5c2b79545717a2828"}, &(0x7f0000000400)=0x65) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000440)={r7, 0x2}, 0x1bf255c169008cee) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x2}, &(0x7f0000000380)=0x8) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002a00)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x306, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r8, @ANYBLOB="00000000000003000000f60000000080"], 0x28}}, 0x0) 21:51:38 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) syz_open_dev$tty1(0xc, 0x4, 0x1) set_thread_area(&(0x7f0000000000)={0x3b, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$nV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\xc6\x96Y\xf7\xd3`\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/376) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000040), 0xa}, 0x600, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x3) socket$netlink(0x10, 0x3, 0x16) write$apparmor_exec(r0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x2c1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00B#g9\xc1m\x17\xf9\r\xc2#\"\xc9O\x135 x^\x91\xea\x85\xae\x10|\xc3\x81\x98\x19\xc2cT\v\x1d\xe1\xba \x1em\xe4\xb7ZP\x11P\x91\xee\xd50\xaaH.6YF\x01\xce\xb5\xd1i\xc5\xba\xf4\x1b5\xd8\xa5\xa0\x9a\x82If\x13\xd8`#\x86[W\xef&\x9f\x90\xd3\x04\x96\x9fh}\xf5;a\x1b@\xa4B\x91\xb5\xa8\x82 \x8f\xbb\x83^T\xa4\x13\x10\xa3\xb4\x81\xd5\xbd\xbb\t\x81t)\t\xa6;|\xd1\xa1\x8d@^[\x01\x1b\xfb\xe5\xa4\xd5\xbf)\x94G\xe4\xc0\xddKc\xa3g!\x1c\x00x#\x8bP\x9daA\x00\xd3KU\x84\xaa;<\xb9\xb9\x9en_\x84q\x92\x94\xd4\x1b\'\x11|G\xfbO++\xe4u\xeb%\xd5\x01\x00\x00\x00\xcf\x84\"\xca\xdeW\f\b{\x03\xf6\xb1\x81\x8b\xc9pw\xdb#,I\xee\x06\xd1\xad\xd2_\xa7\xf7U\xe1\x00O\xbc\x01\x93K\xc7\x99[\xf2\x87\x97\x86;\xbb\xca\xc0\x1c\xe05\xf6n\xc3\xa9\x83{xe\xdd\xc1\xe3!\xccS^\x9b\xc5\xe7\b\xad\xce') pread64(r3, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000204}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0xbc, r4, 0x804, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd98}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x12cc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff1f1}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4044810}, 0x8004) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x102000}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r4, 0x10d, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2e7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xed}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf7}]}, @TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffffb, @remote, 0x7fff}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @local}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1a, @ipv4={[], [], @remote}, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfff, @mcast1, 0xb3f}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) [ 491.239695] overlayfs: failed to resolve './file1': -2 [ 491.421442] overlayfs: filesystem on './file1' not supported as upperdir [ 492.292432] IPVS: ftp: loaded support on port[0] = 21 [ 492.476374] chnl_net:caif_netlink_parms(): no params data found [ 492.624864] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.631460] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.639192] device bridge_slave_0 entered promiscuous mode [ 492.773642] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.780207] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.787748] device bridge_slave_1 entered promiscuous mode [ 492.927933] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 492.937845] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 492.954276] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 492.961870] team0: Port device team_slave_0 added [ 492.967953] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 492.975175] team0: Port device team_slave_1 added [ 492.980691] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 492.988748] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 493.088701] device hsr_slave_0 entered promiscuous mode [ 493.135865] device hsr_slave_1 entered promiscuous mode [ 493.186526] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 493.194062] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 493.258608] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 493.292292] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 493.298690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.360118] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 493.370419] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 493.377326] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 493.385916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 493.392968] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 493.440158] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 493.447391] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.456735] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 493.464132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 493.472487] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 493.480211] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.486603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 493.529227] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 493.539172] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 493.546417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 493.554344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 493.562120] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.568482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.627545] device bridge_slave_1 left promiscuous mode [ 493.633034] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.676235] device bridge_slave_0 left promiscuous mode [ 493.681705] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.147981] device hsr_slave_1 left promiscuous mode [ 497.194238] device hsr_slave_0 left promiscuous mode [ 497.305525] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 497.345507] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 497.532115] bond0 (unregistering): Released all slaves [ 497.608758] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 497.617204] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 497.627114] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 497.633980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 497.642294] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 497.654214] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 497.661354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 497.669317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 497.688208] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 497.695279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 497.703056] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 497.712592] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 497.719617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 497.782546] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 497.792761] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 497.813754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 497.821167] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 497.841226] 8021q: adding VLAN 0 to HW filter on device batadv0 21:51:45 executing program 4: r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, 0x0) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6100) ftruncate(r2, 0x8200) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x81}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000280)='./bus\x00', &(0x7f0000000300)='./bus/file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000003dc0)) write$cgroup_type(r2, &(0x7f0000000200)='threaded\x00', 0x175d900f) getresuid(&(0x7f0000004180), 0x0, 0x0) r3 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x3) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000480)={0x6, 0x2}) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vsock\x00', 0x2, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) ioprio_set$pid(0x0, r6, 0x9) ftruncate(r4, 0x80003) recvfrom$x25(0xffffffffffffffff, &(0x7f00000000c0)=""/34, 0x22, 0x80012023, &(0x7f0000000180)={0x9, @remote={[], 0x1}}, 0x12) sendfile(r3, r4, 0x0, 0x8000fffffffe) 21:51:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="b4", 0x1}], 0x1}, 0x0) r1 = socket$inet6(0xa, 0x80003, 0x80) ioctl(r1, 0x1000008912, &(0x7f0000000080)="0805b5055e0bcfe8474871d34686f2d18d4695e3db1548037f5876ce810fb9f03eabc3ccd6be297cd14e9de17b7917f92356a29bb906649609427a4b99378eb4b442e172b131ae61e23b96443f765c278966039063a749e536199db4f1a34d9525d5af9b6d690abb8dfb398c8bbde7dc85bfb2d1396645ed352df98f06e60e30f699fc0b982593e5cb5ffe3c2d43d028e8f518e437b437b9bd8350") sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="b4", 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="30000000000000008400000001000000e8ffffff6000"/44, @ANYRES32=0x0], 0x30}, 0x0) 21:51:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2, 0x0, 0xfffffdac) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000400)={0x1, 0x0, @ioapic={0xe000, 0x4, 0x8abd, 0x5, 0x0, [{0x5, 0x1f, 0x20, [], 0x5}, {0x0, 0x0, 0x80, [], 0x7f}, {0x7f, 0xff, 0x9, [], 0x4}, {0x1, 0x8, 0x0, [], 0x40}, {0xda, 0x5, 0x2, [], 0x6}, {0x2a, 0x1f, 0x6, [], 0x3f}, {0x0, 0x81, 0x40, [], 0x20}, {0x7f, 0x2, 0xff, [], 0x1f}, {0x4, 0x1, 0xff}, {0x6, 0xb0, 0xff}, {0xfb, 0x20, 0x5d, [], 0x6}, {0x4, 0xbc, 0x40, [], 0x3f}, {0x8, 0x5, 0x0, [], 0xe4}, {0x2, 0x40, 0x0, [], 0x2}, {0x2, 0x7f, 0xb8, [], 0xfe}, {0x6, 0x5, 0x5b}, {0x8, 0x8, 0x0, [], 0x2}, {0x3f, 0x1, 0x6}, {0x6, 0x15, 0x7f, [], 0x9}, {0x77, 0xca, 0x40, [], 0x1f}, {0x0, 0x3, 0x1f, [], 0x9}, {0x76, 0x1, 0x5, [], 0x40}, {0x6, 0x9, 0x4, [], 0x6}, {0x94, 0x38, 0x1, [], 0x2}]}}) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r3) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r8 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r8, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r9, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r11, 0x2007fff) lseek(r11, 0x0, 0x4) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r13 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r14) write$P9_RSTATu(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb558f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r10, @ANYRES32=r12, @ANYRES32=r14], 0x5d) r15 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r15, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r16 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r16, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r16, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r18 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r18, 0x2007fff) lseek(r18, 0x0, 0x4) getsockopt$sock_cred(r18, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r20 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r21) write$P9_RSTATu(r15, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r17, @ANYRES32=r19, @ANYRES32=r21], 0x5d) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r23 = getegid() fsetxattr$system_posix_acl(r7, &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000001c0)={{}, {0x1, 0x8}, [{0x2, 0x1, r10}], {0x4, 0x1}, [{0x8, 0x2, r19}, {0x8, 0x3, r22}, {0x8, 0x1, r23}], {0x10, 0x1}, {0x20, 0x1}}, 0x44, 0x3) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f0000000000)={0x6, [0x7, 0x7, 0x4, 0x3, 0x3, 0x1]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000380)="36ffe2333bb800008ed00f01d166b8d13300000f23d00f21f866351000000c0f23f8f30faef4baf80c66b8ac65198d66efbafc0c66b80a00000066ef260f0051000f3a0f940000ec30f9", 0x4a}], 0x1, 0x15, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa00, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:45 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400)=""/245, 0xf5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0xc0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x800, 0x0, 0x100000003, 0x1, 0x0, 0x0, 0x400000000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0x10000, 0x0, 0x102, 0x8000003}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@loopback, 0x0, 0x0, 0x1, 0x3}, 0x20) connect$inet6(r5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000600)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r5, r6, &(0x7f0000000240)=0x202, 0x4000000000dc) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000440)=0xe8) setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@rand_addr=0xffff, @dev={0xac, 0x14, 0x14, 0x1e}, r7}, 0xc) ioctl$sock_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2}}, @can, @can={0x1d, r7}, 0x1ff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='syzkaller0\x00', 0x3, 0x1ff, 0x5}) r8 = dup3(r3, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="54000000310000082a26110000dbdfb9f5d25e1525000080002c000100180014000000b7c3169eef7dee77f19f9917822b10000100636f6e6e6d61726b000000000000100020f7c7be720faf625d876a0ff7620ce68039a6000000080003"], 0x54}}, 0x5f4bcbd400ec137e) 21:51:45 executing program 1: r0 = socket$inet(0xa, 0x1, 0x84) sendmmsg$inet(r0, &(0x7f0000002340)=[{{&(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="80", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80002, 0x40) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0xffffffe1, @ipv4={[], [], @rand_addr=0x7fff}, 0xff}, @in={0x2, 0x4e1f, @local}], 0xfffffea6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x204000, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f0000000080)={0x7, 0x9, 0x3, 0x9}, 0x10) [ 498.182459] audit: type=1804 audit(1577397105.730:204): pid=13781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir034465408/syzkaller.kiy1tD/29/bus" dev="sda1" ino=17196 res=1 21:51:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x15555895, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000480)='\t', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000240)="d940", 0x60) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x4, 0xb, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x3, 0x2, 0x0, 0x4, 0x87, 0x4, "6a806821"}, 0x1, 0x2, @offset=0x80, 0x5, 0x0, r0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000380)={0x3, 0x2, 0x162, 0x4, 0x3}) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:51:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc00, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 498.234051] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe00, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x15555895, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000480)='\t', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r3, &(0x7f0000000240)="d940", 0x60) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, 0x0, r3}, &(0x7f00000000c0)=""/83, 0xffffffffffffffc9, 0x0) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f00000001c0)={0x4, 0xb, 0x4, 0x800, 0x5, {0x0, 0x7530}, {0x3, 0x2, 0x0, 0x4, 0x87, 0x4, "6a806821"}, 0x1, 0x2, @offset=0x80, 0x5, 0x0, r0}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000380)={0x3, 0x2, 0x162, 0x4, 0x3}) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:46 executing program 4: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) write$UHID_INPUT(r1, &(0x7f0000000980), 0x10a9) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000200)={0x2, 0x0, [{}, {}]}) creat(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r6 = socket$inet(0x2, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ftruncate(r2, 0x208200) sendfile(r1, r1, &(0x7f00000000c0), 0x8080fffffffe) [ 498.862782] audit: type=1804 audit(1577397106.410:205): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir034465408/syzkaller.kiy1tD/29/bus" dev="sda1" ino=17196 res=1 21:51:46 executing program 2: r0 = perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x220b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x6a3c2, 0x0, 0xc14d1dc1436ad704) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f00000000c0)=0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) 21:51:46 executing program 3: perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) connect$nfc_llcp(r1, &(0x7f0000000c80)={0x27, 0x1, 0x0, 0x7, 0xbc, 0x0, "84c5e75047094eb055b98723bf1bc3ea6a8cf1f4dfb7eb2b57ad91feb9b9ed9feb02f4b947b44f7d5ec56187016122811b263e0ca32f1b15d5e6e24bfcdf67", 0x2a}, 0x60) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x7, 0x4) getsockname$tipc(r3, &(0x7f0000000340)=@name, &(0x7f0000000380)=0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02020609a1a500000000004c9e0000000200130002000000000000000000000105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700a51409ac4cb3cbcf00000000000000000000000017"], 0x80}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) write$P9_RATTACH(r5, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x100, 0x0, 0x7}}, 0x14) sendmmsg(r2, &(0x7f0000008a80)=[{{&(0x7f0000000440)=@un=@file={0x2, './file0\x00'}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="cfbc995b3fa0ead3ac351620b13667c3493660f98279ee5cbb811d2edb672b9dc80956fd1d11b003a5bfc4d0ecaabf5dfc957d5fcf392020f47b95f8b65aaedd1a2eeedbe90601349e34d3c95d3f575e7c0dd1107d6cba4b1d6ac2c58e55ffab27bfd78be2fcaa0c702700f7", 0x6c}, {&(0x7f0000000540)="4dd51cf323bff679634722b32fb8209a17c81ffe4b556be80c69ff453433feddd1cd", 0x22}], 0x2, &(0x7f00000005c0)=[{0x18, 0x88, 0x3a03, "3fd1ab5979"}, {0xf0, 0x101, 0xad, "9333be1e77ce01864aaeb6566fc4d66efd94b3a1a595cf0e6c3b910ddafe9e7428098169d961017a95fc8948006d3a11765322bd5e1e9e5009fd5d9c77d65e95853d79a403eb26b580f753ce5ec58d06abcfeebc2f3aa8a9a778525dbca77d676470f2db3b1563c2a0259fee3fbbd43c50b871f53f36183a6c6dac4b37b34d51cae3891495916ef542f5dbccdc1b3a4b2f089f877c20a46ee68926fdb5abc593673abb5f17ac7814964b326ae179e37043ea5933cc7cf7aa77099c0eabdca910802f227284c4900f5f47e81930cc6dcb7d509d9e8089a9a0c91ad6a3986767"}], 0x108}}, {{&(0x7f0000000700)=@l2={0x1f, 0x7, {0x1f, 0x1f, 0x1f, 0x2, 0x19, 0xff}, 0x1, 0x3f}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="699054d35779ba962b4741c67816961540cd99baef088ca9fdd9", 0x1a}, {&(0x7f00000007c0)="c19f038a7d9b723a5366805d369260c6aea49af8ecab80be6b38d23bb8aacda75207213ad200383dba946fd3a508fc5230386fc0e701a31aa4f6e3b8923b3ba944ed", 0x42}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="c100428ecdff64226c9d3d23dae9d7f8fec1ca989f11549ad8f84bcef0905cb8244ebbe2a9abe22c3e3a66eab085a264db1145b711ae731b42f148b305cff3d0b29d37b66b75262d4a7ef8f06c50eaec4d37757ec31e5b26864bcc251641beeede186553a3aaac44c959a03fd67295eb8100e8f95b45a425edb3be8468e82174ae9c971baa8bc08d725694b5c462372206184f5fef89f1025adb47ce81e873b06dc4eef93d0d69954f3faeb1c7a1f2b6f43a33f4f6d50871b9e653219ec0f85819bfdad0d0f533650515fad20d0f", 0xce}, {&(0x7f0000000a40)="37414d8e23f5f69f199e464de9b1e5c347a4c2f3e31dd0776f3e62f82082bd57041044f6d47f1927d466cf4806462c", 0x2f}, {&(0x7f0000000a80)="ca42e370633cc3b46176dd429a89b008cf38cbd82c01af5edc276567726a39153018fc48e6fb9fa6ef69e97c0838e3b9f3b5e4638cfae58c6d0ceb57a2", 0x3d}, {&(0x7f0000000ac0)="d926e4537c1795228123c5b7f474cc422d9924086269f3c2e63e1b4e3e7cd45f33b0a09835d30432602432ee354b2c3cd2bb2ce5fb84ff8a2e8e6cefe1a33266c87fba595bc5f8111525dbdf162efca39c4ffc992822a023beffc271b3c3488bb54921d006b644861ae02490d9c86f9db61b6e4032c798d42b6be746d764a1666ff994469b8bcf68b21c16b9e92aa1022bd5fe50dd81a54311d7c53455be1de3e0e55db15546c3237d1defac9a2aab04810915ad99ed1ad7996c95e3f082807d95afc80ddcc3a8a90bf0fd87", 0xcc}, {&(0x7f0000000bc0)="3c0cf1c11b21a4486ffef669f0ddbaab2bea834909ad79c55b31cd86177d1be3b43a42f3d34992711b50d97d0c2c530980b85e463e93", 0x36}], 0x8, &(0x7f0000008d00)=[{0x18, 0x105, 0x8, 'HZ'}, {0x108, 0x10a, 0x6, "b65b0f2dfe4775ffa6179dd015134c00466cff45043a712d1ed322f081ea1384060fe67e9d592335eae93bb330d1caf3e8e97776f2d59b4d0dac16e518ab91b465b20f117529e3a61b908f0feaafbfea38c74fd4a5485651826a9c5c9f136ff22dc24161c7b20a8c68d7ab9e01d2c8d84d9bc1b59db9344e4a53d09b3d8a6786c1bcadb6968cc234155a08740ee83b6d0e7cd369d65f0c318d92a565919f1a5e19a5428e73aafcd89ccb9e3a5e4cd72ab575736bb739c6c217c947cce855a15e7a060c02242721379f1a7c0eadbb1f15fbf8b90e7940a9c7170ca81b7f6cdbc5bfa5a71d60c34bb9d1d313715b3a6330644d778cde"}], 0x120}}, {{&(0x7f0000000dc0)=@generic={0x4, "31a577056873ac9661cf446c9d37be1d29fd8593da052a48245e833e0237877e86167785fb8eeb3510d40e3d0c6d8a23f63df9c4cbe22a5309c258f5260ad36ee2c0c2105cca6eec316f8ed0db9d0d1f5ef6924c331ad892d76901cfab5d282b944a6c78ef6cda1c5b84e38fcf4ad55e9b2f007e6e46c23709179665188d"}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000e40)="1a7b0ef87f2d5f6078ac7a54b9632a5d0ba94fbfaf", 0x15}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="b3d3f689c938474c1f53c6430a16ce9960bbb9f49467", 0x16}], 0x3, &(0x7f0000001f00)=ANY=[@ANYBLOB="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"], 0x1400}}, {{&(0x7f0000003300)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000004480)=[{&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="99db634b511e863f3c091d469e456cb18a95479a50d52361b487220b0cfdb6e01f", 0x21}, {&(0x7f00000043c0)="2f0eafbc544d4e04acd9628d433be8d501badcb058d6e8688f10392c1d54e6239c187ba1870f582acd0debb5d39616206a8730aece127e875eafca45afcad39257457827e0f6d1029e06244a6a2fa9f18a08964e0a8fa08be1c3a2760fd73c8a2bd1f5ed4a607d95602babff84766240f1ba5a88518158d3c050acf1ae9583da230956cabde1469c2bd35e35ed2d942909d3eee9c522e1c3b6432fb16ad97eadce19c8363a2e05d6d6c512f5134c2f4d6fb00c87", 0xb4}], 0x3}}, {{&(0x7f00000044c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x80, &(0x7f00000047c0)=[{&(0x7f0000004540)="dbae6d88fb8afc1eb0cb1e0628e504feb8e5961c27c3f866b80acf2c04ec4a4937544e91f0c5a9fd641bdaf2b32e00d6014473ba3d8ac5d6f45a94a52c7201cdf78fa5f272ec040560ab5185b263f39052", 0x51}, {&(0x7f00000045c0)="5f497f792e84e8bf511e6093f0f4e592602b108c644efc870bfa7ad2be28057ca5ba6020c785a2ef137a512bc9969000531c2b35c703ec2b565a8efb106e6548b48d61df978730f68513330006e5a6636e7b", 0x52}, {&(0x7f0000004640)="bbf21a7fa00d9e02a47da902", 0xc}, {&(0x7f0000004680)="289dbb7b69b7e90745b28fea28a82f61aaf1010d8de5ff6ad60480416abb792bdfce018fbb8b020acec983942db9", 0x2e}, {0xfffffffffffffffd}, {&(0x7f00000046c0)="967544d3c7fc00e870a221d202a6b1c8934a4ac12d703bfb5226af5bbe303a03115f652caaf4eddd67ea27c44d9f9f087302be9b76c29644dc07072a5fafeefcc0b93ee6b02dcc1d76ba9bc192d051cdb01654ef3803c38cfeb285ca8526bf07ae146735526847cd53056b8f091d6abd9fe88aabfd0ce020a384c775eda7e083635e84eb983af0ce5ab4197131263fb147d92981b90ec8464b1aea2711ab5ccd3d3fe89eb3df50b99c0c50d20c55fbf8a05b64094a505dbc69f48ef0ef22d27005f73fefe458dd", 0xc7}], 0x6, &(0x7f0000004840)}}, {{&(0x7f0000004980)=@nfc_llcp={0x27, 0x0, 0x1, 0x6, 0x9, 0x1f, "a01aeef3ce6e94b0148a10424f774ac604fd064ec42836bbc0d98accd3697b596f84f1d0e53c658e067f3d4afcf56f43977dbf6d0beafb0edcbc7641d8063e", 0x20}, 0x80, &(0x7f0000005a40)=[{&(0x7f0000004a00)="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", 0x1000}, {&(0x7f0000005a00)="baf41a60897f8f085e843ce04f79ad69ce3ceb92c7bea35068652295f1deff55f9b8", 0x22}], 0x2, &(0x7f0000005a80)=[{0x40, 0x109, 0x9, "276a7c4cd25a490031a8352c190660e23d85665060d75ace14e641f926fb8f676e60e2d1df9ae4668b"}], 0x40}}, {{&(0x7f0000005ac0)=@l2={0x1f, 0x5, {0x7f, 0x4, 0x3, 0x39, 0xfb}, 0x1, 0x6}, 0x80, &(0x7f0000006c80)=[{&(0x7f0000005b40)="98be41baf820cae4517188", 0xb}, {&(0x7f0000005b80)="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", 0x1000}, {&(0x7f0000006b80)="11f983c4a18b1be2ee68a85ec2797a814bcea68c154af201dc01b690594e3820f061a6e6d6bbe05ce0ac2649f0b1d061f8729ea1dbb49e298f2206bf5cf08dd45a15c51b4da91bd1bdaf23f24b68cc7d0a35843d940c492b1fe6adc3fb04bb1a5a5ee2240ebe28583dd5222d54b7484480770d273a0d6f1640208f418006837cb0892333329be17b1dc2b0da6f80ae516984c8", 0x93}, {&(0x7f0000006c40)}], 0x4, &(0x7f0000006cc0)=[{0x10, 0x101, 0x2}, {0xf0, 0x88, 0x1, "8211c4c4ade07c22473693cd7c3f41d7787ecda9271a9a73b94e55c6afd7afd1ba2e9e8c16e9119af47371194a9157e8063d9025730686f8ee7824e933db765c01a02adea2e7ab04977bd20ad6af6726590e740a5b0aed252dd83561570a842da8ff9f4e8743f57f9859b32666e65d00a4e88b41b728c32ceeca3346e772c2352c2d797f879d513243fddd92a267997e9646b7c785908c1ab0a65163bb2fd69c04f96c63bb222795e27df8f97867fa06b527219fa7b4cbfd88f671c33edcc0996fbf4887639dfbe61685720b769fb6c3c0592e4e59eff97eb89459022fc929"}], 0x100}}, {{0x0, 0x0, &(0x7f0000008240)=[{&(0x7f0000006dc0)="7e5b9c6ce31a03200b514ef74a292edd5aa1ceb54bce8e25679ab7da067c6dd8f8d5f50071ea7080266ec01d294c10d1dbc84acc7996d67e50de", 0x3a}, {&(0x7f0000006e00)="6b43c3f09f77b19efd3567d53e05d4d8dfd6f8ccf0c6b9433ab888303e9eb3f139d84ee12d90f48cae026aa118e48b70896c873fc4ff287d0b1fbf11d26a77394d417bac7a9e2e741061030dad076aa530a2b0e9f5e5df97b9b88df982f5a250a9eb6531007ba6ef8e538bcd", 0x6c}, {&(0x7f0000006e80)="8eaf35f87e35e9601df918585ae2c460fc0f6c83451640a1c5d39a83f38a3d62970a66e77fc4b2b1c56b60a2d72a74813673ef4634c916ef89d37279ce360fd190afaa2e4a74b6c672661e32bf8f67932152a1", 0x53}, {&(0x7f0000006f00)="ad1de2237c08ee26192be550a8f356cc04b83da0c9261256b91a74545eb31aefad18e16ab53be9639f73f461da4ffc07931e59afc093ad7b250862aac41df916d5bae3bab666c0d1e49e4d1df466f6233a582dbbbfe54144beb32641649ea321879be86b60d2167ef13e3a881fd893f49c2bb09c8b89cd819af54f35374d03620b36bb4b875f00e84be944e3745b162034ec833bbf38b3df67350931478cc284e95950b0034ae4e1893333761cf2eb2aeef4cad8c22f012aeafb7d6d521da383cd653327cfc7c0803bd2", 0xca}, {&(0x7f0000007000)="77716b4318d6272ba40821323c02e691aaddff5c0c65ebd247ffd7cf5d0c772b170a60b7e122cfbae43c04633d4b103748807db8b3a4050986cb3d26ae4be8d73179157a546e45dfacde8b2a1397490bcb1aebaf81b037193121190ce13b14fc137e1877a489a4a892fc82", 0x6b}, {&(0x7f0000007080)="7cc4784be31d199064255f49703b7f37b103b31777cf6914e5e97f8f5ee1da327a5873c1938f1d7230dbcb37903b08dd551ebf4072d7d3697791c86dce58f8baa76117ae89f40d15201db1f88e9ec442600613154e2f85cc92cad83d1cb9b85488a664fa8dd2d2e9b9a29476b9b33f15e02a147c893d2d930938338883957a6c0bc5fe1f7b1e7ba2cd436447e6b65b85eaf592e1a2ab4b7052e7e19a2af7751f158318f10f99b828382b38520f8cd86da5967b9fc2def3c51d78ccca", 0xbc}, {&(0x7f0000007140)="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", 0x1000}, {&(0x7f0000008140)="43478801e69fe2da744bc4390a86ef7f731d39eb3bec420e477b9de8d727146306a09a5e998381268bea2c67ae7e57241804c8e4d112d4b48ec643f954c7c35523241269b4e317360e7ec00abb727e03835030e38cc544984e809738d4b58e52a17d431948cf191e198fae2c3c923bceff79945967c8e56826d2e37badb108ded614f5548eaf090a35b70009618924bf5de73628e6a09f4980babef6e52584fe9ec6e7f17ac383c96e9036feb790feadf2285a57cda0f6c6d763edbae52c38988f35af59a30357a2387c5b3e55a49c18e27bdff4bbcb1f056b6f1f153eee67", 0xdf}], 0x8, &(0x7f00000082c0)=[{0x90, 0x95, 0xe1, "308e2f81f6d1de3f99497e32223f8840209681f70b16668ed47b0a696f0c3e5338c0919f3a661d5932f6205faa99f8c90df34901720db0821062138eb725896e9a3ecfeee06222ad1ffc67679edd479ee1e1c9bb28f8f1c29fef3f036bf4e64ad49802186f47dc065d68a39543e22c29d3838ff323a66c54d774efa2190739f4"}, {0xa0, 0x1, 0x5, "f0b1f03c7436b4cd882a4defea8b82a442630286b4630ded895983a54d3a9f8ac52d6dd015023c4b98d9955a7f64fdc1d3d20199043afdc300fbca8d8196794ff5fd485847fc32ca6c503004c00acbb3e9f29f677a42f7eb48be262fcedaea64d28cee35379edad0e0d6b8266b4331a1ce525d3038a26e98c882bbc9e32654b8e2afe81dddb6d1372fabadcfbc92c1a9"}, {0xc8, 0xff, 0xb3, "1b4cf135132cafb627a990d6781a5f30d2e97abf971cb4e60f6ea57f712be6748fe7e5dd6f984eec1140723067c5fc0d87e7a4d075ecf628682661a98069cbaa4545f27f33868b6cda852cae0d4edca95162f5dddbc1cf2e1d186ce1cb0a900b7e94693b7a8f3d78a1bd769637c83fe2454970d5a9f57ad50e860a695b4f6d4643b14ed8c767766c3a977a43fb071a8d60bfb9a30e155d515dda47d4991971cd2f34f2506251151ae2d4541cdc90a9f7c9"}, {0x100, 0x104, 0x1, "3e34acb27212aa89fee8f4f6294c022100bf309158ffa9c2b9c2171cd83e24519b94af0c91c8304095394eabfb25380658b8ba81732402aa0a0940ea7dad970f939867b5e8cb5a39a1663c7af86ed31fa2584406bfe90a188f0ca371f3c89542e83a746fc150ead276ee7c5c855014f07669e3bd58857a34718ef36c41cfa2b25e97db4c21312202972b7e6888bde2a18c7f32391ac0fce8a393cac01246bd4e47b4fa028358163c865ac7f82b0bb6e23d18418e8ef67dc931b4c7e63bfc4684172a628f6445d73d47d3c273ef68d32584485f09e2a18edb325b5cb60e307c5b6b4ef693be285d3851f7897b305ed6c7"}, {0x68, 0x29, 0x1, "4f0f517f312f5726740f7ba4c3fa40ab06d874dd6ac43d2e1e373516550e8c849c570317d55ba4a50c6b31e2c4d63089d81a5823d7fde6f5131309529b02422e3e88a9be2533d1e53a51fbc31a00f363503c1c4819e84097"}], 0x360}}, {{0x0, 0x0, &(0x7f0000008700)=[{&(0x7f0000008640)="d908e07f72e4b69146d2261ff124bc9606c443424cc3a96bfb0fa5b8a1631f3c2fa6271ecb1d1997ab404d09121168291d8f6caa3e79ff4d5f2e546e0eca9dd9e56f2095986fe3dfa73d9a7f2b", 0x4d}, {&(0x7f00000086c0)="97169466a2d34af7e30516eb2c7f520511bb96f033f16c6a36f4427de11d00000000", 0x22}], 0x2}}, {{&(0x7f0000008740)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast2}}, 0x80, &(0x7f00000088c0)=[{&(0x7f00000087c0)="3814a059899c031e078015a2e7112ae158c83f728b42227230f4fa0c86e7b6fa6f396cbd7f514db97415ba8de3dd39b9328471cf860ddebc84f8bf34d24712dd763206cc25d4f1da3481e6b2612dbdf06fb325480659b5ed185c1112dcc59bb5ddc8af4d23431289919622611db739581cec49cb842a25b436cdfe0acc7505b65176647f1e9be675581ee11b80701544ffaa1b3780d1a3b4767d5222430323725066c1c12e14bc73335d79ea57d68992e6c7e33d3969033e3f22ea19036c8f8637eb435a68356864353a", 0xca}], 0x1, &(0x7f0000008e40)=ANY=[@ANYBLOB="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"], 0x148}}], 0xa, 0x0) 21:51:46 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) write$P9_RLERROR(r2, &(0x7f0000000180)={0x9, 0x7, 0x2}, 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00fa000000009ccbde8e1f7a9fc228a2b772ca00", @ANYRES32=0x0, @ANYBLOB="0800070002000000"], 0x24}}, 0x0) write$vhost_msg(r4, &(0x7f0000000100)={0x1, {&(0x7f0000000040)=""/2, 0x2, &(0x7f0000000080)=""/43, 0x3, 0x1}}, 0x48) [ 498.985251] audit: type=1800 audit(1577397106.470:206): pid=13825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17196 res=0 21:51:46 executing program 1: socket$inet(0x2, 0x4000000000000001, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001251, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x105000, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="150000006534e08720000008003950f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc2a5a3fb58eaff4f6b59c41705b96a6711d4679079d00"/136], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74e2dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca562b123e19268c89c9dd81c796e27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d000000000000008e4939d000000000"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x3a5, 0x5, 0x0, {0x0, 0xfffffffffffffffd}}, 0x30) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_dccp_int(r7, 0x21, 0x5, &(0x7f0000000480)=0x9, 0x4) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000400)={'filter\x00'}, &(0x7f0000000200)=0x44) r8 = getpid() ioctl$PPPIOCSDEBUG(r3, 0x40047440, &(0x7f00000001c0)=0x4) rt_tgsigqueueinfo(r8, r8, 0x14, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000380)={0x1, 0xffffff8f, 0x0, 0x1, 0x20, 0x1, 0x0, 0x10081, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x0, 0x2, 0x1, 0x5, 0x0, 0x2}, r8, 0xe, r1, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') r9 = socket$inet6(0xa, 0x803, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00H\x00'}) [ 499.168797] audit: type=1800 audit(1577397106.470:207): pid=13827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=17196 res=0 21:51:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:46 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x3, 0x1, 0x44}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xdba3dd835d632db6}, 0x48) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x15) dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendfile(r0, 0xffffffffffffffff, 0x0, 0x100) [ 499.257475] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.264227] bridge0: port 1(bridge_slave_0) entered disabled state 21:51:46 executing program 0: open(0x0, 0x9a080, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x14107e, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000400)={0x0, 0x6, 0xfffffe01, 0x0, 0x0, [], [], [], 0x400, 0x10000}) r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00@\x00\x00\x00\xf7\x00'}) gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000000)=']\x00'}, 0x30) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0x40085112, &(0x7f0000de3000)={{0x4000001ff, 0x3}}) fcntl$getownex(r2, 0x10, &(0x7f0000000140)) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x208100, 0x0) gettid() pipe(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)) dup(0xffffffffffffffff) getpgrp(0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x5452, &(0x7f0000000200)) timerfd_create(0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$MON_IOCX_GET(r6, 0x40189206, &(0x7f00000001c0)={&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000180)=""/5, 0x5}) waitid(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000b00)) memfd_create(&(0x7f00000000c0)='queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb2\x1e\x00', 0x0) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x40) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) 21:51:47 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0805b505567f8e90a3fc3eceb2ac6473a33f560e8b7d14ea8ddb371ae8d384d97fbeb22785a84d7373eea476d7e17f0b001cacd96f1b93c2188b") r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0xb1}, {0x80000006}]}, 0x10) [ 499.850001] audit: type=1804 audit(1577397107.400:208): pid=13879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir378847593/syzkaller.kZK5D0/2/file0/file0" dev="sda1" ino=17187 res=1 [ 499.965501] net_ratelimit: 2 callbacks suppressed [ 499.965509] protocol 88fb is buggy, dev hsr_slave_0 [ 499.965645] protocol 88fb is buggy, dev hsr_slave_0 [ 499.970509] protocol 88fb is buggy, dev hsr_slave_1 [ 499.975495] protocol 88fb is buggy, dev hsr_slave_1 21:51:47 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) r1 = epoll_create1(0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002700)={'vxcan1\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000002740)={@remote, @empty, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x81, 0xffff, 0x800, 0x1763db950d2666a, 0x420, 0x120002, r5}) r6 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r6, &(0x7f0000000280)={0x4000201f, 0x3f000002}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fcntl$dupfd(r8, 0x0, r7) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x6, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x800, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xf}, 0x618, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r10+30000000}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) setfsuid(r11) [ 500.205479] protocol 88fb is buggy, dev hsr_slave_0 [ 500.210652] protocol 88fb is buggy, dev hsr_slave_1 [ 500.445505] protocol 88fb is buggy, dev hsr_slave_0 [ 500.450666] protocol 88fb is buggy, dev hsr_slave_1 [ 500.548464] device team0 entered promiscuous mode [ 500.564817] device team_slave_0 entered promiscuous mode [ 500.584659] device team_slave_1 entered promiscuous mode 21:51:48 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000140)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) fchdir(0xffffffffffffffff) open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000000)={0x18, 0x1, 0x0, {0xfffffffffffffffd}}, 0x18) vmsplice(r1, &(0x7f0000000380), 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, 0x0, &(0x7f0000001580)) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8, @perf_bp={&(0x7f0000000240)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef7}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x8) r4 = mq_open(0x0, 0x6e93ebbbc80884f2, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'ifb0\x00', 0xffffbffffffffffd}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000180)) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f0000000900)={&(0x7f00000000c0), 0xc, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04008577"], 0x28, 0x8000}, 0x14008010) lstat(0x0, 0x0) r7 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r7, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001680), 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x400000, 0x0) syz_open_dev$mouse(&(0x7f00000003c0)='/dev/input/mouse#\x00', 0x0, 0xa08d02df60f2bd39) r8 = socket(0x10, 0x802, 0x0) write(r8, &(0x7f0000000080)="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", 0xfc) dup3(0xffffffffffffffff, r8, 0x80000) getpid() 21:51:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 500.602954] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.635588] device team0 left promiscuous mode [ 500.640407] device team_slave_0 left promiscuous mode [ 500.647397] device team_slave_1 left promiscuous mode 21:51:48 executing program 2: r0 = gettid() r1 = creat(&(0x7f0000000100)='./file0\x00', 0x10003) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.subtree_control\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB="2c77dc70b478f1", @ANYRESHEX=r8, @ANYBLOB=',\x00']) write$binfmt_script(r4, &(0x7f00000005c0)=ANY=[@ANYBLOB="e91bbdd7bd406527d037678cfe61462511b305f0665b4397f588f0ffab020435850feeade22a5e4b4ec6f567eeb77044b3859d2f22a0d51a750f382b6f278737da5e212fb2ea7143edf8096481cc5c860bb989fd261fc50e7c17658f34889d665a7a3a55c0566ebc9985f17bdeeb2f6fb25b450f044c17f715f6cf7c00bf797f4b1cb1d30cfe03596874468e85f6a972ab639708aa8b37b27ebc5d258b517c9b9fadecbd8b66ea4b7924a5522c24fbd58833a92cc39ebc917fefc002ecc8c69d7020b81d5c840803f90ef4233332d779b63c3b662d61745002e59048c7187022e4dca1282e4466f17d2764a9cdf13e0a4f07548373075d", @ANYRESHEX=r9, @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYRESOCT, @ANYRES64=r7], @ANYRES32=r0], 0xa1) r10 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) fchdir(r10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) pipe(&(0x7f0000000380)) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(r11, 0x5421, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {0x0}, {0x0}], 0x3}, 0x4004045) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r13, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) ioctl$int_in(r13, 0x0, 0x0) sendmsg$sock(r13, 0x0, 0x4004045) splice(r13, 0x0, r12, 0x0, 0x60000, 0x0) r14 = dup3(r11, r13, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r14, 0x10e, 0x8, &(0x7f0000000340)=0x6, 0x4) socket(0x10, 0x2, 0x0) prctl$PR_CAPBSET_DROP(0x18, 0x0) openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x20000, 0x0) accept4(0xffffffffffffffff, &(0x7f00000003c0)=@alg, 0x0, 0x80000) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f00000000c0)={0x2, 0x1f, 0x2, 0x9}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x4008001, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) dup2(0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r0) perf_event_open(&(0x7f0000000040)={0x1, 0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r1) pipe2$9p(&(0x7f0000000280), 0x86000) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) [ 500.820909] 9pnet: Insufficient options for proto=fd [ 500.833305] audit: type=1804 audit(1577397108.380:209): pid=13904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir371048370/syzkaller.Kn34RV/18/file0" dev="sda1" ino=17185 res=1 [ 501.040804] device team0 entered promiscuous mode [ 501.045844] device team_slave_0 entered promiscuous mode [ 501.052225] device team_slave_1 entered promiscuous mode [ 501.059475] 8021q: adding VLAN 0 to HW filter on device team0 21:51:48 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) statx(r1, &(0x7f0000000000)='./file0\x00', 0x4800, 0x7ff, &(0x7f0000000040)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x45) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x54b, &(0x7f0000000180)) [ 501.082428] 9pnet: Insufficient options for proto=fd [ 501.103440] audit: type=1804 audit(1577397108.640:210): pid=13910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir371048370/syzkaller.Kn34RV/18/file0" dev="sda1" ino=17185 res=1 21:51:48 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x19) listen(r0, 0xfffffffffffffffd) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="24b0f0a6360a", @dev={[], 0x17}, [{[], {0x8100, 0x1, 0x0, 0x3}}], {@llc={0x4, {@snap={0xaa, 0x1, "99a3", "fc4e41", 0x18, "ae0d0f9aefd57d064e5fb1a6289b806d84f603"}}}}}, &(0x7f0000000080)={0x1, 0x4, [0x27e, 0xcd3, 0x2d6, 0x26f]}) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6080000000140600fe800000000000c2fe8000000000000000000000000000aa00004e200000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5004000090780000"], 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x262003, 0x0) 21:51:48 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close(r0) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) fanotify_init(0x0, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = eventfd2(0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x250ce47f) dup3(r5, r4, 0x0) close(r3) r6 = socket$inet6(0xa, 0x3, 0x108000400000003a) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a54f) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000180)='9p\x00', 0x0, 0x0) 21:51:48 executing program 0: ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x80000000) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ubi_ctrl\x00', 0x40, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000140)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3235004000000f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4d}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100)=0x100) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r1, 0x81204101, &(0x7f0000000440)) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000080)={0xfffffffffffffffe, 0x8, 0xf57}) [ 501.454709] IPv6 header not found [ 501.459231] IPv6 header not found [ 501.500006] IPv6 header not found [ 501.528492] IPv6 header not found [ 501.547273] IPv6 header not found [ 501.580340] IPv6 header not found [ 501.608750] IPv6 header not found [ 501.612967] IPv6 header not found [ 501.645996] IPv6 header not found [ 501.670331] IPv6 header not found [ 501.685614] IPv6 header not found [ 501.707329] IPv6 header not found [ 501.728133] protocol 88fb is buggy, dev hsr_slave_0 [ 501.734055] protocol 88fb is buggy, dev hsr_slave_1 [ 501.754732] IPv6 header not found [ 501.758832] IPv6 header not found [ 501.779856] IPv6 header not found [ 501.792726] IPv6 header not found [ 501.799241] IPv6 header not found [ 501.829839] IPv6 header not found 21:51:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1a1) r8 = dup(r4) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, &(0x7f0000000340)=0x8001, &(0x7f0000000380)=0x2) ioctl$BLKRESETZONE(r10, 0x40101283, &(0x7f00000001c0)={0x0, 0x1}) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x82000200}, 0xc, &(0x7f0000000100)={0xfffffffffffffffd}}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x3, 0x3f, 0x7ff, 0x8, 0x8001}, 0x349) get_thread_area(&(0x7f00000007c0)={0x0, 0xffffffffffffefff, 0x2000, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101}, 0xb8069394eccc5582, 0x0, 0xfffffffe, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1}, 0x7}], 0x1, 0x0, 0x0) readv(r2, &(0x7f00000002c0), 0x3a9) 21:51:49 executing program 0: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca32, 0xffffffffffffffff, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x400, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x4, 0x561000) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x20000, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, &(0x7f00000000c0)='vboxnet0securityself^lo@@\'\x00', 0x1b) ioctl$void(r3, 0x5450) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@local, 0xbf, 0x1, 0xff, 0x1, 0x0, 0xb008}, 0x20) [ 501.877414] device ifb0 entered promiscuous mode [ 501.889519] IPv6 header not found [ 501.909014] IPv6 header not found 21:51:49 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40501, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74e67b341cd7a3b2c642a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc5404737860400e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41ffff96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000140)={0x18, 0xfffffffffffffffe, 0x0, {0x8000000000000000}}, 0xfffffffffffffef3) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080)=0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f00000000c0)="04000000010319", 0x7}], 0x1) [ 501.963262] IPv6 header not found 21:51:49 executing program 4: r0 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x80000001, 0x80) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$sock_inet_SIOCGIFPFLAGS(r2, 0x8935, &(0x7f0000000100)={'bcsf0\x00', 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'lo\x00@\x00', 0x1801}) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000440)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = msgget(0x2, 0x0) msgctl$MSG_STAT(r6, 0xb, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x8000002}, 0x1c) socket$inet6(0xa, 0x2, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f0000000080), 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x3, 0x0) splice(r7, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x4000}, 0x8) r9 = getpgrp(0x0) setpriority(0x0, r9, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)) syz_open_procfs(0x0, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r4, 0x800442d4, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r5, 0x0, 0xfff3, 0x20000001, &(0x7f0000000040)={0xa, 0x2}, 0x1c) splice(r5, 0x0, r4, 0x0, 0x1000000000000003, 0xa) sendto$packet(r5, &(0x7f0000000340), 0xfffffffffffffd4d, 0x57, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00'}) socket$inet6_sctp(0xa, 0x0, 0x84) 21:51:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x5865, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 501.993014] audit: type=1400 audit(1577397109.540:211): avc: denied { map } for pid=13947 comm="syz-executor.0" path="socket:[58987]" dev="sockfs" ino=58987 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_route_socket permissive=1 [ 502.014307] IPv6 header not found [ 502.063908] IPv6 header not found [ 502.095358] IPv6 header not found [ 502.120299] IPv6 header not found [ 502.128835] IPv6 header not found 21:51:49 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x3660, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10008}, 0x0, 0x0, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x8c6b3d9a348e782c, &(0x7f0000000340)=""/41, &(0x7f0000000380)=0x29) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={[], [], @multicast1}, 0x4f}, 0x1c) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000128bd7000fcdbdf25010000000000000007410000004c001800000009696200"/98], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0xc005) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f00000003c0)={0xb, 0x102, 0x1, {0xf4, 0x4, 0x8, 0x9}}) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) [ 502.163195] IPv6 header not found [ 502.196037] IPv6 header not found [ 502.205371] IPv6 header not found [ 502.210503] IPv6 header not found [ 502.214659] IPv6 header not found [ 502.223857] IPv6 header not found [ 502.235979] IPv6 header not found [ 502.240124] IPv6 header not found 21:51:49 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) open(0x0, 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x8, 0x3, 0x20, 0x0, 0x2}, 0xc) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) r0 = socket$inet(0x2, 0x200000002, 0x0) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x3580, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x1}}, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000040)=0x9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$apparmor_task_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = dup2(r1, r2) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000200)={'gre0\x00', {0x2, 0x0, @remote}}) link(0x0, 0x0) unshare(0x2c020400) syz_genetlink_get_family_id$nbd(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'yam0\x00', 0xc00}) socket(0x0, 0x0, 0x0) lstat(0x0, 0x0) [ 502.247086] IPv6 header not found [ 502.256120] IPv6 header not found [ 502.282236] IPv6 header not found [ 502.300771] IPv6 header not found [ 502.311787] IPv6 header not found [ 502.312843] IPv6 header not found [ 502.321994] IPv6 header not found [ 502.338583] IPv6 header not found [ 502.355436] IPv6 header not found [ 502.360806] IPv6 header not found [ 502.386942] IPv6 header not found [ 502.401471] IPv6 header not found [ 502.405436] IPv6 header not found [ 502.412005] IPv6 header not found [ 502.435956] IPv6 header not found [ 502.448698] IPv6 header not found [ 502.452775] IPv6 header not found 21:51:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:50 executing program 0: semop(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0xfff}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f90fc2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab180621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dc21c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x40100, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x39c) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffd6e) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x15) r8 = dup(0xffffffffffffffff) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_RELEASEINTERFACE(r10, 0x80045510, &(0x7f0000000180)=0x9) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000080)={0x1000004, 0xa, 0x4, 0x0, 0x2, {0x77359400}, {0x3, 0x8, 0x0, 0x6, 0x1, 0x40, "2c5e2fdf"}, 0x6, 0x2, @fd=r8, 0x53, 0x0, r5}) ioctl$SCSI_IOCTL_SYNC(r11, 0x4) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 502.468970] IPv6 header not found [ 502.477458] IPv6 header not found [ 502.507482] IPv6 header not found [ 502.519813] IPv6 header not found [ 502.536228] IPv6 header not found [ 502.541752] IPv6 header not found [ 502.571594] IPv6 header not found [ 502.578906] IPv6 header not found [ 502.598238] IPv6 header not found [ 502.613089] IPv6 header not found [ 502.629590] IPv6 header not found [ 502.636538] IPv6 header not found [ 502.661618] IPv6 header not found [ 502.667956] IPv6 header not found [ 502.676343] IPv6 header not found [ 502.679985] IPv6 header not found [ 502.687422] IPv6 header not found [ 502.691715] IPv6 header not found [ 502.707238] IPv6 header not found [ 502.711464] IPv6 header not found [ 502.719550] IPv6 header not found [ 502.727604] IPv6 header not found [ 502.735200] IPv6 header not found [ 502.749422] IPv6 header not found [ 502.765819] IPv6 header not found [ 502.766234] IPv6 header not found [ 502.773212] IPv6 header not found [ 502.788935] IPv6 header not found [ 502.795510] IPv6 header not found [ 502.817870] IPv6 header not found [ 502.819029] IPv6 header not found [ 502.840062] IPv6 header not found [ 502.848491] IPv6 header not found [ 502.855516] IPv6 header not found [ 502.864262] IPv6 header not found [ 502.872389] IPv6 header not found [ 502.895357] IPv6 header not found [ 502.900729] IPv6 header not found [ 502.903712] IPv6 header not found [ 502.924221] IPv6 header not found [ 502.944241] IPv6 header not found [ 502.949734] IPv6 header not found [ 502.952890] IPv6 header not found [ 502.954967] IPv6 header not found [ 502.970397] IPv6 header not found [ 502.991443] IPv6 header not found [ 502.995792] IPv6 header not found [ 502.995869] IPv6 header not found [ 503.016448] IPv6 header not found [ 503.033013] IPv6 header not found [ 503.034410] IPv6 header not found [ 503.041829] IPv6 header not found [ 503.042833] IPv6 header not found [ 503.079918] IPv6 header not found [ 503.091504] IPv6 header not found [ 503.108503] IPv6 header not found [ 503.112696] IPv6 header not found [ 503.115987] IPv6 header not found [ 503.121322] IPv6 header not found 21:51:50 executing program 3: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x20000, 0x0) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000200)='./file2\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) [ 503.148912] IPv6 header not found [ 503.152373] IPv6 header not found [ 503.164308] IPv6 header not found [ 503.169659] IPv6 header not found [ 503.182178] IPv6 header not found [ 503.190940] IPv6 header not found [ 503.207746] overlayfs: failed to resolve './file1': -2 [ 503.217564] IPv6 header not found [ 503.237719] IPv6 header not found [ 503.244042] overlayfs: failed to resolve './file1': -2 [ 503.254681] IPv6 header not found [ 503.258988] IPv6 header not found [ 503.276455] IPv6 header not found [ 503.290863] IPv6 header not found [ 503.306218] IPv6 header not found [ 503.308377] IPv6 header not found [ 503.313776] IPv6 header not found [ 503.318880] IPv6 header not found [ 503.324089] IPv6 header not found [ 503.330078] IPv6 header not found [ 503.330762] IPv6 header not found [ 503.356156] IPv6 header not found [ 503.360719] IPv6 header not found [ 503.371348] IPv6 header not found [ 503.389150] IPv6 header not found [ 503.397098] IPv6 header not found [ 503.411344] IPv6 header not found [ 503.417928] IPv6 header not found [ 503.453237] IPv6 header not found [ 503.475075] IPv6 header not found [ 503.486013] IPv6 header not found [ 503.503382] IPv6 header not found [ 503.516322] IPv6 header not found [ 503.520433] IPv6 header not found [ 503.524045] IPv6 header not found [ 503.552007] IPv6 header not found 21:51:51 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x880) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450000300000000000049078ac2314bbe000000103fd907800000000009302bd031414aaac1414000000000000000000"], &(0x7f0000000040)={0x0, 0xfffffffffffffffc, [0x0, 0x119]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000200)={0x2, 0x1ff, 0x5, 0x40, 0x5}) write$P9_RVERSION(r2, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000340)={0x4ba6, 0x0, "7dba63adc8c53717485bb35075254f0f5f2b2770e379488fa9bc091a3b2f26aa98faeddb56c1c65eadd4b48eef67995ee7d32738dfb8f4af7d6a49d9a370411a53d3762fbe4197721d476875fe7e090b0e2f75eca627d7159e04696b8c04b7cadfa624b01dbb767daa3005db3cb1b6e01e05d9803907023f0234122ece49f4836a05f8885ec0f8e28c4c92e34c6c9ee40657bd912eb7dd3f079db7c4eb766c4fff6003c8d11af14af0631223f076841db393a8f651f5f6e22a3adb18b1a062e77c1b3d80a445d97a2750506f93a8653f0b10600a3e8ae12e42296cdef24b41a5cf2215834a4d8bbc8abd816feef2e708ba3b63b35208ceb5e8d87ec0532625e9"}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 21:51:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6558, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:51 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x1) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r2, 0x111, 0x4, 0x0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 21:51:51 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123c69268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = dup(r0) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) r6 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r6, 0x80045006, &(0x7f0000000040)) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000032000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x299}], 0x1, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000049000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0xffffffffffffff11) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) [ 503.667694] Unknown ioctl -2147201018 [ 503.702771] Unknown ioctl -2147201018 21:51:51 executing program 3: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2a939, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuset.effective_cpus\x00', 0x26e1, 0x0) syz_open_dev$mice(0x0, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000003c0)={&(0x7f0000000000)=""/5, 0x20000, 0x800, 0xfffffffe}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, 0x0, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080), 0x4) r3 = socket(0x0, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000100), &(0x7f00000002c0)=0x14) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000001c0)=0x400, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) ioctl$BLKDISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000000)=0xa2ea) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000300), 0x12) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x800000, 0x0) accept$unix(r7, &(0x7f0000001400), 0x0) preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, 0x0) syz_open_dev$usbmon(0x0, 0x0, 0x0) lchown(&(0x7f0000000280)='./control\x00', 0x0, 0x0) lstat(&(0x7f0000000340)='./control\x00', &(0x7f0000000180)) 21:51:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8100, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:51:52 executing program 0: openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self//exe\x00', 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={0x0, 0x6efa832bba168344}) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mounts\x00') ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000100)) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000100)) perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x300}, 0x0, 0x0, 0x0, 0xbface48a6b363537}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) 21:51:52 executing program 2: bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x7}, 0x20) r0 = socket$kcm(0xa, 0x122000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x8) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000180)=0x7ff) r2 = syz_open_dev$vcsu(&(0x7f0000000000)='/dev/vcsu#\x00', 0xffffffffffffa676, 0x400) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x2, 0x1) r3 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@nl=@unspec={0xa, 0x0, 0x700000a, 0x80fe}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000280)="035db86376863a68fe800000000000004208c349d7c40346d59be131ad18d92c2bca9d7f6e6a6ac7d6", 0x29}], 0x1}, 0x0) [ 505.899615] IPVS: ftp: loaded support on port[0] = 21 [ 506.704200] chnl_net:caif_netlink_parms(): no params data found [ 506.735136] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.741799] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.749202] device bridge_slave_0 entered promiscuous mode [ 506.756616] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.763087] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.770445] device bridge_slave_1 entered promiscuous mode [ 507.145722] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 507.156537] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 507.544580] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 507.552536] team0: Port device team_slave_0 added [ 507.558852] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 507.566470] team0: Port device team_slave_1 added [ 507.938393] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 507.948445] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 507.998724] device hsr_slave_0 entered promiscuous mode [ 508.055783] device hsr_slave_1 entered promiscuous mode [ 508.455190] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 508.463535] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 508.849967] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 508.886198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.895350] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 508.905077] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 508.912267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.919788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.971801] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 508.978588] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.988369] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 508.995500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.003351] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 509.011614] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.018001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.030196] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 509.040417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 509.048784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 509.057168] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 509.064687] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.071100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 509.119234] device bridge_slave_1 left promiscuous mode [ 509.124757] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.176536] device bridge_slave_0 left promiscuous mode [ 509.182055] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.238982] device bridge_slave_1 left promiscuous mode [ 509.244444] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.296157] device bridge_slave_0 left promiscuous mode [ 509.301657] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.337792] device bridge_slave_1 left promiscuous mode [ 509.343295] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.376532] device bridge_slave_0 left promiscuous mode [ 509.382057] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.308343] device hsr_slave_1 left promiscuous mode [ 520.350767] device hsr_slave_0 left promiscuous mode [ 520.410353] team0 (unregistering): Port device team_slave_1 removed [ 520.421468] team0 (unregistering): Port device team_slave_0 removed [ 520.433184] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 520.469919] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 520.562046] bond0 (unregistering): Released all slaves [ 520.827928] device hsr_slave_1 left promiscuous mode [ 520.880656] device hsr_slave_0 left promiscuous mode [ 520.942401] team0 (unregistering): Port device team_slave_1 removed [ 520.952890] team0 (unregistering): Port device team_slave_0 removed [ 520.966682] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 520.989743] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 521.081452] bond0 (unregistering): Released all slaves [ 521.120355] team0 (unregistering): Port device veth3 removed [ 521.187574] device hsr_slave_1 left promiscuous mode [ 521.240890] device hsr_slave_0 left promiscuous mode [ 521.288510] team0 (unregistering): Port device team_slave_1 removed [ 521.301838] team0 (unregistering): Port device team_slave_0 removed [ 521.312393] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 521.369147] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 521.463237] bond0 (unregistering): Released all slaves [ 521.532909] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 521.541644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.558799] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 521.570997] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 521.578306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.586548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.594239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.602453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.618124] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 521.625001] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.633432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.643377] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 521.651330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.659073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.671080] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 521.679297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.687774] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 521.699028] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 521.705063] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.721540] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 521.729915] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 521.736831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 521.743563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 521.754728] 8021q: adding VLAN 0 to HW filter on device batadv0 21:52:09 executing program 1: r0 = socket$kcm(0xa, 0x6, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0x404000, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380)='/dev/hwrng\x00', 0xdd21386c1465730e, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)=0x0) write$cgroup_pid(r1, &(0x7f0000000440)=r2, 0xfffffffffffffe35) perf_event_open$cgroup(&(0x7f0000000700)={0x1, 0x70, 0xfe, 0x9, 0x5, 0x4c, 0x0, 0x3, 0x50100, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x200, 0x1, @perf_config_ext={0x486, 0x100000000000cf}, 0x904, 0x5, 0x8, 0x3, 0x100000000, 0x8, 0x8}, 0xffffffffffffffff, 0x11, r1, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0xa) r3 = syz_open_dev$media(&(0x7f0000000400)='/\xc9\x8d\xaa\x12t\x04\x00Da#\x00', 0x723, 0x81) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x7fff}, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r4, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x200600) r5 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, 0x0}, 0x24000021) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='pids.events\x00', 0x0, 0x0) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000200)={0xffffffffffffffff, r6}) r7 = openat$cgroup_ro(r6, &(0x7f00000007c0)='cpuacBt.tsaer\r\t\x8b\x8b\xba\x87\xc7\x7f\xb6|i\xd1G\x9c\xcdze0\x00D5l\xc2R\xf3\"\xebl\x8e\xc3\xd9\xda\xc7;\xf4\x13\vW5\'\xbdd\xce\xd8\x91a\xde|J\xc1\xec\x10\xfb\xf6\x97vRu|e4N\x93\xbd\xcb\a\x97=`\xf8\x030_\xefZ\xc3\xcc\xf1be\x01?s\xc7\xaf\xd2\x18\xc9\xee\xa2l\x15\xb2\xc6\x9c\xc82\xe3X~\x84G\xf7\xf5X\xdc\x8f\x99\x8e#\xf8`\xc6Q\x01I\xb90\xe3\t\x87\x18\x1b\x17\x8d6\xe4vG\xdd\x8d^\x00@U\xb7\xde\xba $t\xeb\x05gVr\x9b\xf7\xdb\xe9\x8d\x9fF(\xba\xcd\x00\x96J\xd1\xc7|\xaa\'P\x9a\xdd\xad\xb5\xc8\xfb\xe8\xb9\xb1\xda\xc7Ah\xcf#V+g\xdc\x86L\xd4F\x9f4x\x04&\x049lP\xcd\x95\xbb\x10\xd5Iw\xde\x8b\x18&\x83g\xc1\xa8\xba\x80\x80\xf3\xcal\xf8\xc8\x16d\x99\xc1\x1b3\f$\x175\xb5\x04#e\x19\x83\xb4\xee\xb1$\b\xba\x02\x11D\x85$P\r6Y\xea\x17\x11\xc4z\x00!\x05\xfa\xd4W\xa08<\x02v\xebn\xbf/\xbe\x8fq\x12\xa7\xb4\x1d\x18o>6`\xb5\x9f\x16\xf5\xd4\xebb\x9f>\\\rJ\x98\x99D\xf6\xdfOK\x00\xe7\xcb\xe2\x1d\x94\x88_\xff\x04\xd3G\xed\x1e\'BJ', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r9 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000200)={&(0x7f00000002c0)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, 0x0, 0x0, 0x0, 0xfffffe55}, 0x4050810) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup(r8, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x1c7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r8, 0x0, 0x1, 0x0, 0x0}, 0x20) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x322) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg(r10, &(0x7f0000000140)={&(0x7f0000000000)=@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, 0x0}, 0x0) write$cgroup_pid(r7, &(0x7f0000000100), 0x12) socketpair(0x1, 0x2000000003, 0x0, &(0x7f00000005c0)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x6e, 0xc7, &(0x7f0000000480)="58d49c9770d9e79cf9eb65df5ec67ada118a3c89c7aa2434bbf9287135f624d751bef6bb3ff18c905b92abbc1513fef493da661d32b22d7d612adee82c12709dcc1c7483841c42491db5a774b5b7492535cd23e8a1f575cc0ae83b3e35faf322ae90ee386ebce6f37f51f2cd4cfd", &(0x7f0000000600)="99989ad4ea8c09007b2ef250aecb27f3d078f927a3eab7daebf57c8a7ce1558ce5c60cf521bdfba2955029b9aba67c45fbcefec4aaf34b9ce5a5d11f97174b4e15f6b8816f345546be8c1297034464f6f976389c71a089bf3f79c5d4d4d39eca6fff157ab0c7450703af60a4fd72b1936bfb95e7c1eef100ebb5efd1739ed9185f3459e5c4ce0b4178e2c4b994f267d954bb59a5d991ad7e87054b8b63d3bbb7f14518b6d55cb4f3a67bfefc0992faefa69966c92935bacb88b78a6df102f23dae2cb0789aa7df"}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') socketpair(0x9, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000018c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000002980)=""/6, 0x6}, 0x12040) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r12, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'bond0\x00', 0x2}, 0x18) fcntl$getownex(r12, 0x10, &(0x7f00000000c0)) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0xfffffffffffffe64) 21:52:09 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x11, 0x45}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x3b) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000140)={"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"}) 21:52:09 executing program 2: creat(0x0, 0x0) r0 = open(&(0x7f00000009c0)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000740)={0x10201, 0x2, 0x36ac5dd3e1d77754, 0x1000, &(0x7f0000007000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000240)={{0x2, 0x4e22, @multicast1}, {0x6, @local}, 0x20, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000100), 0x4) ioctl$KVM_PPC_GET_PVINFO(r6, 0x4080aea1, &(0x7f0000000a00)=""/4096) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="b9de1fdc1a9c0000000000000000"], 0x3}}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010080", @ANYRES16=r8, @ANYBLOB="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"], 0x124}, 0x1, 0x0, 0x0, 0x4c0}, 0x3320aeec60727a2c) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x8) r9 = creat(&(0x7f00000002c0)='./bus\x00', 0x20) fcntl$setstatus(r9, 0x4, 0x6100) r10 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x0, 0x1012, r10, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsu\x00', 0x7ad76f1af34fcbca, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = socket$inet(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r11, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'gre0\x00'}, 0x18) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0) r12 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r12, 0x0) write$P9_RWALK(r12, &(0x7f00000003c0)=ANY=[@ANYRES64], 0x8) 21:52:09 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x8001}, &(0x7f0000000080)=0x8) r1 = socket$kcm(0x10, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(0xffffffffffffffff) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x28}, 0x8) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f0000000340)) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r5 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x400000, 0x28) recvfrom$llc(r5, &(0x7f0000000180)=""/99, 0x63, 0x40000002, &(0x7f0000000240)={0x1a, 0x307, 0x0, 0x3f, 0xff, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e0000001c00810ee00f80ecdb4cb9e307f029a00d0000002f003efb0a0002000009000000000f00060005000600", 0x2e}], 0x1}, 0x0) 21:52:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:09 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) socket$unix(0x1, 0x2, 0x0) r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x3bda6affdeedcecc}) syz_open_procfs(0x0, 0x0) shmctl$SHM_LOCK(0x0, 0xb) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000340)=0xb2) syz_open_procfs(0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000400)={0x0, 0x0, 0x10}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000002c0)={0x0, 0x4, {0x0, 0x3ff, 0x1, {0x1}, {0x100, 0xffff}, @ramp={0x0, 0x7f, {0x0, 0x595, 0xf4e}}}, {0x0, 0x0, 0x0, {0x0, 0x2}, {0xb2}, @const={0x0, {0x0, 0x2f6, 0xffff}}}}) gettid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ptrace$cont(0xfffffffffffffff6, 0x0, 0x9, 0x338) r5 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fdatasync(0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000600)=[&(0x7f0000000200)='/vmnet1\x00'], &(0x7f0000000680), 0x1000) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f02000000000000000001000000000000000c4100000014001462726f6164636173742d6c696e6b00001967e3b499f89d95f686615f2e276921a09bc0c05a8f22bfdca0c39d76d87c988df019aeb50d53042a41554623e396870fcaef28f639d0778f7437d765a4daf1f21031d25bcb5c10cc02000000000000008b6f5a508500eaf18d78715bf607c81005290b0873859de371ec6cfdf011f49b0abcc78cade8ff461f6a5f3d26fdc95e9961e44d6a53e8d424ec77adf0831f24d3ed336c78095acd71e6819305a9f505376673fe6704f757d2b60c0e7c"], 0x30}}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x86) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0x0, 0x7ff}, 0x14) 21:52:09 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x54989a1332bfbd71, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0xffffffefffffffff, r1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000000c0)={0x9e0000, 0x2, 0x0, r0, 0x0, &(0x7f0000000080)={0x990af4, 0x80}}) ioctl$VIDIOC_G_STD(r4, 0x80085617, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_INFO(r5, 0x0, 0x60, &(0x7f0000000300)={'filter\x00'}, &(0x7f0000000040)=0x44) bind$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) [ 522.334351] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 [ 522.395296] IPVS: sync thread started: state = BACKUP, mcast_ifn = gre0, syncid = 0, id = 0 [ 522.396799] bridge: RTM_NEWNEIGH with unconfigured vlan 6 on bridge0 21:52:10 executing program 2: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4c4000, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000080)={0xfff, {{0xa, 0x4e24, 0x200, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x1, 0x7, [{{0xa, 0x4e22, 0x4, @ipv4={[], [], @broadcast}}}, {{0xa, 0x4e23, 0x1000, @initdev={0xfe, 0x88, [], 0x1, 0x0}}}, {{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x1}}, {{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x100}}, {{0xa, 0x4e22, 0x1, @empty, 0xfff}}, {{0xa, 0x4e22, 0x7, @ipv4={[], [], @remote}, 0x4}}, {{0xa, 0x4e20, 0x1ff, @mcast2, 0x6}}]}, 0x410) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x4d) [ 522.495147] IPVS: ftp: loaded support on port[0] = 21 21:52:10 executing program 4: r0 = memfd_create(&(0x7f00000004c0)='iC;`\xb6p+\x10', 0x0) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000040)='\'', 0x1}], 0x1, 0x81805) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) gettid() bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @multicast1}, 0x3a) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000440)=0x1, 0xffe6) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendmmsg$inet(r1, &(0x7f0000005f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)="1f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000840)='Q', 0x1}], 0x1}}], 0x3, 0x6041054) sendfile(r1, r0, 0x0, 0x2000005) 21:52:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:10 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0xfffffffffffffd7e, 0x0, 0x0, 0x0, 0x2e2}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='net/igmp\x00') r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="040000009b000000d80000003da964b2498cf60f305b198b1cce7ade579e1003fe91dfa723f0742c7a96ec46a0da401e0000009d6dc74da33a70f5a7e6a3c66e0366919c900fb7f741e65c7c30bd4d0092d5b52df0769d64640fe6af25d4c885e6cda22684cea220a3eb3f573940d7dbc8816d7ec00edb9848b7ecc0b9bcbfe0e18fd157c6c08423831f0df374ce02b32f8bc59ccef98874b57b314ddd41e3e88ce2655ed920cadc70bdddeaf9c0bc7eb15af7fa37f1844e42ddd8b9f59bcabb91ef8ca4de59bc4b28582f7a5563ec6f636ae37eaf05610a75a3434374fc0b4bed160000"]}) preadv(r0, &(0x7f00000017c0), 0x315, 0x0) 21:52:10 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000006c0)) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000740)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead7fbd12895c8e31f4ea38433aa17424ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff05000000000000005b96a6711d4679079d00"/151], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$sock(r5, &(0x7f0000000400)={&(0x7f0000000180)=@x25={0x9, @null='\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xfb\x7f\x05\x00'}, 0x4c, &(0x7f00000003c0)=[{&(0x7f0000000240)="58249fee04c089047288fbb5dfff87276382d1a756fb335e3768faa9a5c75ad6dbfcd3ec61c06508ea638dc7d4dcbb20b2daf4d68ef190f54b85dc520ac52da35c32025d8acc843678cbe72caad3ebfdc693e8d6bd98febf14b05770ec0ad7b8814d3a1863dbb8a8034629a58566d544c5faff785510d981ea42", 0x7a}, {&(0x7f00000002c0)="c25d8bee479a8c05b23675b83c589aa5e2dad3792f179fbcf288653f3ece65c66bc071e7a3d6f3072f4194af64edeabdd29fa4cee58b8820612927aa45a0dbb6b235db9d472dee5f081f06b26b2dd12e289cbb2c85d99e9d1edb80f7c6317240e1825ab059b7d201bebcf329d395c457c7980cbf3ae2627d257aee26292eddffc1b17f9362e8e4b74d1df845d0dfd26259ddff136e7a90a2d515e275071bb12bb71bdaded8b187da77f582517cb607a981460c9062d16f6c44ceff3859", 0xbd}, {&(0x7f0000000000)="5560cf", 0x3}, {&(0x7f0000000380)="715f8f57313b97d6b6b55ce6205780b8940ee992760145bdd84c9d854878c35cafec46", 0x23}], 0x4}, 0x20) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000800)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473706cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000c92d9732a0ab11e1a17a262760eae388196b151b61d95ff13f6bb28553255c3fcfdfe79c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000005c0)=0xe8) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='overlay\x00', 0x2, &(0x7f0000000600)={[{@index_on='index=on'}], [{@euid_lt={'euid<', r8}}, {@subj_role={'subj_role', 0x3d, 'stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00'}}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@smackfstransmute={'smackfstransmute'}}]}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r9 = creat(&(0x7f0000000700)='./file0\x00', 0x12a) write$binfmt_script(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='['], 0x1) close(r9) fallocate(r1, 0x0, 0x40000, 0x4) fallocate(r0, 0x0, 0x0, 0x110001) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd00000e, r1, 0x0, 0x8}) 21:52:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 522.850206] net_ratelimit: 6 callbacks suppressed [ 522.850224] protocol 88fb is buggy, dev hsr_slave_0 [ 522.860586] protocol 88fb is buggy, dev hsr_slave_1 21:52:10 executing program 0: perf_event_open(&(0x7f000001d000)={0xa, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40000, 0x0}}], 0x4000000000003be, 0x8000a0, 0x0) r1 = getpgrp(0xffffffffffffffff) syz_open_procfs(r1, &(0x7f0000000000)='net/ip_mr_vif\x00') connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000000c0)=0x4, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 522.945163] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value 21:52:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x4000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 523.085525] protocol 88fb is buggy, dev hsr_slave_0 [ 523.090687] protocol 88fb is buggy, dev hsr_slave_1 [ 523.164979] overlayfs: unrecognized mount option "euid<00000000000000000000" or missing value 21:52:10 executing program 2: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfec8) socket$inet(0x2, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) r3 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x151800) mmap$usbfs(&(0x7f0000ff4000/0xb000)=nil, 0xb000, 0x2000000, 0x10, r3, 0x9ff) sendmsg$unix(r3, &(0x7f0000000140)={&(0x7f0000000080)=@abs={0x4c40869edc878875, 0x0, 0x4e21}, 0x6e, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x30020081}, 0x80) 21:52:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x6000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 523.325535] protocol 88fb is buggy, dev hsr_slave_0 [ 523.330670] protocol 88fb is buggy, dev hsr_slave_1 [ 523.438401] IPVS: ftp: loaded support on port[0] = 21 [ 523.485783] protocol 88fb is buggy, dev hsr_slave_0 [ 523.490896] protocol 88fb is buggy, dev hsr_slave_1 21:52:11 executing program 2: r0 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000240)='X', 0x1, 0xfffffffffffffffe) write$fb(0xffffffffffffffff, &(0x7f0000000380)="bbc6e14f8329c0ebe114229a5f5df890d9e558493dee8df8b812d457df99a7fd318a8b870bcbd8bf7bd7455b34e2c57dfffbcd2b7f15f9311262d31d794976b78cbc40faf9d14ba96f266429392728f7fa1c7e354344b76a4d10bcad80f931d2c29fab0544388cee6697642c66fafd85763bcd580cfe0f9e2d1a2ebca1298ed429fd82f0cf300552d4d2b995236f7b8b1470ba932e62402373d5d386a56d410bb811112428617d22158941cc91835e49f2ea45a24102141cd8f7255d7694b8fdaa7ff256b45135fd0ef94ccdc0361081", 0xd0) r1 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r1, &(0x7f0000000800)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f0800fa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d76640e7eabe9afbe1aa5bfe19d379476198ff43ec15ea571c22e42b6d9291c1f89d56ff0a90067f5bb1ee7e1d2c1f61cccfd35f39d8959e3f543d065902f69f31383f"], 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[], 0x0) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_ENUMINPUT(r6, 0xc050561a, &(0x7f0000000780)={0x1, "df040bbcf1b5559f0e12c2f363498d0f3b1d354f524a540f84dfd75e58c8cab5", 0x3, 0xffff7fff, 0x5, 0x1001, 0x4, 0xe}) r7 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'\x86yz'}, 0x0, 0x0, 0xffffffffffffffff) r8 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000001440)={'syz', 0x0}, 0x0, 0x0, r7) r9 = add_key(&(0x7f0000000940)='big_key\x00', &(0x7f00000000c0)={'\xff\xff\xff'}, &(0x7f0000000a00)="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", 0x1001, r8) keyctl$read(0xb, r9, &(0x7f0000005340)=""/4096, 0xd900) add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000580)={'syz', 0x2}, 0x0, 0x0, r9) ftruncate(r4, 0x2007fff) lseek(r4, 0x0, 0x4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r11 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r12) write$P9_RSTATu(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a00293a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r3, @ANYRES32=r10, @ANYRES32=r12], 0x5d) lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='overlay\x00', 0x100020, &(0x7f0000000480)=ANY=[@ANYBLOB="6e66735f6578706f72743d6f6e2c776f726b6469723d2e2f66696c65302c6d657461636f70793d6f66662c6e66735f6578706f72743d6f6e2c6e66735f6578706f72743d6f6e2c6673757569643d6638393339373b342d34315f372db9345c362d325132662d36366166633734302c657569643d", @ANYRESDEC=0xee01, @ANYBLOB="0000efffffff01", @ANYRESDEC=r12, @ANYBLOB=',uid>', @ANYRESDEC=r13, @ANYBLOB=',\x00']) r14 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r14, r14}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={'xcbc(anubis-generic)\x00'}}) [ 523.771393] audit: type=1804 audit(1577397131.320:212): pid=14150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir371048370/syzkaller.Kn34RV/26/bus" dev="sda1" ino=16625 res=1 [ 523.990093] audit: type=1800 audit(1577397131.540:213): pid=14156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=16625 res=0 21:52:11 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f00000001c0)='security.SMACK64IPIN\x00', 0x0, 0x0, 0x0) r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x1e0, 0x0, [], [{}, {0x801, 0x0, 0x80000001}]}) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) recvfrom$inet6(r0, &(0x7f00000000c0)=""/185, 0xb9, 0x22, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @remote, 0x100}, 0x1c) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) 21:52:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x8000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:11 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x81) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000500)) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000080)={"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"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r6) r7 = syz_open_dev$usbfs(&(0x7f0000000540)='/dev/bus/usb/00#/00#\x00', 0xffffffffffff0001, 0x101000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x14, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) r10 = syz_open_dev$vcsu(&(0x7f0000000480)='/dev/vcsu#\x00', 0x10000, 0x1) r11 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/context\x00', 0x2, 0x0) r12 = dup3(r10, r11, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r5, 0x4040aea0, &(0x7f0000000000)) dup2(r12, r5) 21:52:11 executing program 0: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="1500000065ffffb7a6b81d0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08d473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb44aff79079d00000000000000000000002235961794254e9e8bb0e9751a718274329ee4736f2f77904f0673cd61c8bf28102ec112c0d4cc469fb38c817e9b99a432bdee81e0306d2ac5a5c416993d379438b05207ab129bd4ed5ed7c0e4cb0069b9d20e80781912bc47c22cd775a4c847b79d47493a102f910864e35d758d193b311941b09e87d6d8b6b3f038492af0c1a882dcd44cf2a75b2c32bee93f0e21e01f9f0616f6dc7fe4dc6d718019678d91d3b529d179c5d0672c084688bcd7d97fe657082763e8a04b6f7734596f35ef5abd77e9e52ee139a196d225a7baec67a47a4542d4bccf0aab4b5b16d8514c657f22da678c9b2715cbec23b10dbeedd7274c135f8b38b2376804a33ab6078dbb45442878f69cb21870c2a435fd96c0745d"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) openat$cgroup_ro(r1, &(0x7f0000000400)='cpuacct.usage_sys\x00', 0xf0, 0x0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x8, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000000)='threaded\xfc', 0x248800) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x2761, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000022008151e00f80ecdb4cb904044865160b00170002000000000004140e00110002000000dc2976d153b4", 0x235}], 0x1}, 0x0) 21:52:11 executing program 2: writev(0xffffffffffffffff, &(0x7f0000002840)=[{&(0x7f0000000000)="390000001300094700bb65e1c3e4ffff06000000050000004500000025000000190021", 0x23}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet(0x10, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ff60, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) close(0xffffffffffffffff) [ 524.433459] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 524.461589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 21:52:12 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000100)=0x6) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={0xffffffffffffffff, 0xc0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) r2 = semget$private(0x0, 0x3, 0x14) prctl$PR_SET_FPEMU(0xa, 0x7) semctl$GETZCNT(r2, 0xe90ad3998c890159, 0xf, &(0x7f0000000000)=""/217) sendmmsg(r1, &(0x7f0000000240), 0x5c3, 0x0) [ 524.518558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 [ 524.602894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 21:52:12 executing program 4: syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000440)=[{&(0x7f00000000c0)="eb3c906d6b66732e66617400020401ed01000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0) write$binfmt_aout(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="bf15b9ea49137e84d78f78b2e84ce00400"], 0x2) perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000200)={0x0, 0x18a, 0xc008, &(0x7f0000000100)=0xbebc}) unlink(&(0x7f0000001e00)='./bus\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$netlink(r3, 0x10e, 0x1724dc3d3205ce50, &(0x7f0000000380)=""/114, &(0x7f0000000400)=0x72) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000340)) sendfile(r1, r1, &(0x7f00000001c0), 0x8080fffffffe) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x3001}) creat(&(0x7f0000000280)='./file0\x00', 0x0) 21:52:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xa000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:12 executing program 0: syz_mount_image$reiserfs(&(0x7f0000000400)='reiserfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0xffffffffffffffb0, 0x0, 0x0, &(0x7f0000000700)={[{@usrjquota_file='usrjquota=syz', 0x22}]}) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x0, 0x70bd29, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000004) [ 524.765944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 [ 524.833388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 21:52:12 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/full\x00', 0x400800, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000300)=""/107) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r3, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000020000000300000038020000c0000000c0000000c00000000000000000000000a0010000a0010000a0010000a0010000a0010000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000048000000009800c00000000000000000000000000000000000000000002800616464727400000000000000000000000000000001000000000c00000028005443504d53530000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800e000000000000000000000000000000000000000a1f7f18c255614b1a13ebe4996f50000280074746c0000000000000000000000000000000000000000000000000000000000000000000000480049444c4554494d45520000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000004feffffff00000000"], 0x298) [ 524.942575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 [ 524.975957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 [ 525.005905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 [ 525.015349] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500) 21:52:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xc000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 525.055576] FAT-fs (loop4): Filesystem has been set read-only [ 525.075370] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000500) 21:52:12 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r1 = open$dir(&(0x7f0000000380)='./file0\x00', 0x8000000000006000, 0x0) write$9p(r0, &(0x7f0000001400)="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", 0x600) ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x24000, 0x0) symlinkat(&(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00') sendfile(r0, r1, 0x0, 0x10000) [ 525.128252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 21:52:12 executing program 4: socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000040)) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/#\x00\x00\x00\x00\xca9d\xe9\x00', 0x7ff, 0x1a001) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x14, &(0x7f00000000c0)) prlimit64(r0, 0x7, &(0x7f0000000280)={0xb, 0x8d}, 0x0) pipe(&(0x7f0000000380)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) [ 525.278231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14169 comm=syz-executor.2 [ 525.308377] audit: type=1804 audit(1577397132.850:214): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/79/file0" dev="sda1" ino=16881 res=1 21:52:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xe000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 525.425560] audit: type=1800 audit(1577397132.860:215): pid=14217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16881 res=0 21:52:13 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r3, 0x407, 0x0) write(r3, &(0x7f0000000340), 0x41395527) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x386, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) socket(0xa, 0x3, 0x10) io_setup(0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$alg(r4, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, &(0x7f0000000100), &(0x7f0000000200)=0xc) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(r5, r6, 0x0, 0x50000000000443) sendmsg$TIPC_CMD_SHOW_STATS(r5, &(0x7f0000000140)={0x0, 0xfffffffffffffe42, &(0x7f00000000c0)={0x0}}, 0x0) 21:52:13 executing program 4: pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec62abc103d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08d473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb538ff8eaff4f6b59c417a984daf81bbd138897444705b96a6711d4679079d0000000000000000000000bc3d6e0ab758afb682677648533d57fb832e"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x5, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000500), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r1, 0x2) shmat(0x0, &(0x7f000000a000/0x4000)=nil, 0x0) r2 = syz_open_procfs(0x0, 0x0) read(r2, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1, {0x0, 0x2, 0x0, 0x0, 0x4}}, 0xe) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x16, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000002c0)={0x3, 0x4, {0x0, 0x3ff, 0x1, {0x1, 0x2000}, {0x100, 0xffff}, @ramp={0x298, 0x7f, {0x0, 0x595, 0xf4e, 0x3f}}}, {0x56, 0x0, 0x3, {0x0, 0x2}, {0xb2}, @const={0x9, {0x0, 0x2f6, 0xffff, 0x7c}}}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) write$FUSE_BMAP(r3, 0x0, 0x0) ptrace$cont(0xffffffffffffffff, 0x0, 0x0, 0x338) r6 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xa) setreuid(0x0, r7) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = fanotify_init(0x0, 0x0) fstat(r9, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r10) setgid(r10) getresgid(&(0x7f0000000200), &(0x7f0000000440), &(0x7f0000000480)=0x0) r12 = fanotify_init(0x0, 0x0) fstat(r12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, r13) setgid(r13) getgroups(0x5, &(0x7f00000004c0)=[0xee00, 0x0, 0xee00, 0xffffffffffffffff, r13]) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000017ff1ae3", @ANYRES32=r7, @ANYBLOB="040007000000000008000000", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r10, @ANYBLOB="08000400", @ANYRES32=r11, @ANYBLOB="08000000174b13fa6d0ed5faf547909e115b18", @ANYRES32=r14, @ANYBLOB="10000200000000002000040000000000"], 0x4c, 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') r15 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0xdd407ffdb1a132ff, 0x0) ioctl$VIDIOC_G_AUDOUT(r15, 0x80345631, &(0x7f0000000180)) setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000140)={0xfffffffd, 0x7ff, 0x0, 0x0, 0x5}, 0x14) [ 525.856226] audit: type=1800 audit(1577397133.390:216): pid=14236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16881 res=0 21:52:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:13 executing program 4: socket$packet(0x11, 0x0, 0x300) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00\xb2\x87\v\x895P\xb6\xb2\xdd\xe1d\xbcp) }\x0e\x9f\x8d\xa9\xc2\x12\xf1\x0e\xc4\xef\x14\f\aA\xf61}\xbb\xd7\x05e\xb9\x81N \xb0\x84t42V|\x0fP\xd1Y>8\xfd9\n\x03U\xbc@K\xdf*\xfc:\ab|\x9d\xfb\xd5iR\n\x19\xd3n', 0x52) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000001) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000140)={0x0, 0xd0, "6c015b7bdea83ee77df379eb707ebedc1c217e8919767cb43a6d34890db2a02de56d104df2052f74ec96db17bf0add291b931c2a7de1ba4a1715ef0a97087c9400eab34c634b263d05a02531f5b5d64a3ca0eaf5e0143799bfd5231c9cd4e3094c5086a532b6c6868057f2820a7f5057a4d9d3cfd900e1054303c6573cc82d396299d1a724cb0d85cedbdbbe20a450cabe311d26eeeafdfe83a0a8856415a7d92abc6c05e2a7fbd36c1a3526efd0944f163cdefff5b97a8a9b05551cfbdcb36acc8e621a707dbb108ee01158c8e4789a"}, &(0x7f0000000040)=0xd8) write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x2bcf) recvmsg(r0, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7115}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) fcntl$setsig(r2, 0xa, 0x2e) 21:52:13 executing program 0: lsetxattr$security_smack_transmute(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x200, 0x1) pipe(&(0x7f00000000c0)) syz_open_dev$usbfs(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x52d8, 0x10000) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x7, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000001580)='/dev/sg#\x00', 0x0, 0x30180) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r0+30000000}, 0x0) 21:52:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80080, 0x0) socket$alg(0x26, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) 21:52:13 executing program 0: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mq_timedreceive(r4, &(0x7f0000000100)=""/73, 0x49, 0xcae, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x55}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 21:52:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x10000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 526.197903] *** Guest State *** [ 526.246281] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 526.302165] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 21:52:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0x14, 0x4, 0x4, 0x400, 0x0, 0x1}, 0x2c) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f0000000400), 0x8) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x1c3, 0x0}, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x20, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x80800, 0x0) accept$alg(r3, 0x0, 0x0) dup3(0xffffffffffffffff, r2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)={0x8001, 0x5, 0x4, 0x40, 0x1, {r6, r7/1000+10000}, {0x2, 0x3dfe45c498b041fc, 0x4, 0x1b, 0x5, 0x7, "c250b17d"}, 0x1, 0x3, @userptr=0x2, 0x0, 0x0, r0}) bind$rxrpc(r8, &(0x7f0000000140)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0x0, 0x0, 0x0, 0x8}, 0x3c) bpf$MAP_CREATE(0x2, &(0x7f0000003000)={0x3, 0x0, 0x77fffb, 0x0, 0x10020000000, 0x0}, 0x2c) close(r1) [ 526.362400] CR3 = 0x0000000000000000 [ 526.366943] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 526.385913] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 526.392116] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 526.426156] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 21:52:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x3f000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 526.455020] audit: type=1400 audit(1577397134.000:217): avc: denied { map_read map_write } for pid=14275 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 526.455289] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.530026] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 21:52:14 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0xfffffffffffffd2b, 0x20000800, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000001c0)='ip6_vti0\x00', 0x1000001d0) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffccf, 0x0, 0x0, 0xffffffffffffff37) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f0000000000)=@generic={0xe, "9702c17d811208569fa4e7b989887ea9fedf90dc91f6f3147c5f796d5ce8d61d09d4373a1724a204bc3afcf700dd658eb9690b35a5a15ea5c9063c56c3250c164c2e746255e6aeda04f7f8c8cb6028f9f19829ea9494967f2e76d28b07b7a67a4c301180317b00baa5a5c88a33fa6e568788f5c4428c89f21bb746729830"}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000080)="e99bf4deae50b8db31dc76585b1eb46d877fcf6316c73f51956046907907b25295d70eefb4d61a27bf3c849043233e1b78db7e9db0eaa30dc7e60310ce36617d68a4576bc762be00882a15b6fcaa7de5a658c2da0f069dc55eeddbcc7666273ab61bd969ca6a9c8026a3550d2e5de3", 0x6f}, {&(0x7f0000000100)="9ceea949a05ea8958389b751a344d96e95f35ad942df277e18176ee3e4e3c6b2c4186d680117c03800e42fa8a184e039c4339cb9671ee6c7baf6aadf87440d5fe79aa3f7a951455988e8eaebfe3934708c6ecc6c9e6f300a7d4dbdf3e469ecbbdea778893604293005b7", 0x6a}, {&(0x7f0000000280)="be88a00f5a7deae86d03bba13fbde8143b300303d5a8fa2b480846793ee42e45d3601057f4539d7e69bfe05d0cff69362e6b2497d1d02f4b493e3b4df329c094598d32204da504a5c8934691aa3dbbfaae83f5f9ff911c87be04d00723741fe808cdd484762433eb2ea8368cacc68249aea367d1fdf5a40f9f7747ef1f14", 0x7e}, {&(0x7f0000000300)="4ae35efbff11f98ed5303f5fd65ea05221786b8ae63eb45ad4122c5c5b80dcd910debad8c9d5382e010c0ef1faeb0fb09d070dd9efaa940bbbabf2ef2760471471e0be01b8b1377f0274d0557649d9120988e6ad222d4b89059fe5103d4f8c0339122b51a3b8a1b8e8aab2b55c50655292ed680e43b3b484575ae1a9e5c0b461ebffc335471c71ef8eb1aeafb509065b507e9324d6dc6455", 0x98}, {&(0x7f00000003c0)="bf48921f4e5254a50792e3f62249e5ac07f74d397a79026ffdbe59d9d42de4ec74592edd998451d271d5c72813159f6347e5c2ea7fee21c9a07b1bd731d04aec0bf76dcc7ae0fff5b3a536e411f1ff3e5eaafc15ad4a595d7692db7a5ec6d866832117f1324998457f4ead80407bee9f4b3ec909b0171a4674c33f628eef1bc1b96789b0352a2f6720610066749759a2707f", 0x92}, {&(0x7f0000000480)="b58e7b6bc36ce3ff14041cdd275b687855f473d53badab1c36d162ef99a546ed6c34bbce075577966ddd4147bc9e838f2de2f2b017bead722d5aac136e2037c66dd501d49a44174a4d6b336a07ff953fc027e1c2", 0x54}, {&(0x7f0000000500)="db037072508dcaa37b14af18319e483432278f95dd57568ee79514b230dd3efa4a1d83e23c9fd0d72dae39ef49ff3b343b7cd2ce97f2f6876dea05713b695dc80adfaa32aa683d97ca5463f94bfb0ccc51431a568ebd6381721ffd7b468b6389dbec728aaaf40ba8fc7ee3d49eadd07fed586a3e228cefd076bda24eb0131045393e24e565ed58455c57e16916af99f7bf7cc9", 0x93}, {&(0x7f0000000180)="d22396e33867ec796807f6", 0xb}, {&(0x7f00000005c0)="ff746137332b232ff93ce8bf6b449e7c168f68a269283905a09eaf9b8b35a1b1e35f710a0be026f268794a4c236325f0778cc23d90d1cb30badf01e44cc6ad3d17a55cf0a508996cd8efcc19828459b707944afa48a428aecaa9d37219565c5d2e5516b03247ce01d06d7c924e87f55f9ab0d4df155cd3b1d0e2d5c836a6f8e50b27316997707bc1d55d29c8ffe902941f8c2cd3103fda8b9202a0f41de52f872ae758491a5b5314b4ef1de22065c053176a1d9f82ca189841686dfc5b03f1ca0b98c4bfd1f1", 0xc6}], 0x9, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0x30}, 0x14110) [ 526.583132] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.605823] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 21:52:14 executing program 2: openat$bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg\x00', 0x400000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfffffffffffffffc, 0x101000) clock_gettime(0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000000001, 0x0, 0x0, 0x8ffffffffffffff}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x8000}, &(0x7f0000000200), 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4100002}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x64, r1, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfe9e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffff001}]}, 0x64}, 0x1, 0x0, 0x0, 0x20044005}, 0x80) [ 526.662962] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 526.760418] GDTR: limit=0x000007ff, base=0x0000000000001000 21:52:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x40000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 526.808308] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 526.843699] IDTR: limit=0x0000ffff, base=0x0000000000000000 21:52:14 executing program 2: syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000005700)=[{{&(0x7f0000003900)=@pptp, 0x80, &(0x7f0000003b80), 0x2f2, &(0x7f0000003bc0)}}], 0x3a6, 0x0) pipe(&(0x7f0000000100)) syz_open_procfs(0x0, 0x0) socket(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000700), 0x100000000000000c) [ 526.886375] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 21:52:14 executing program 4: creat(&(0x7f0000000080)='./bus\x00', 0x4627e66eb158059b) r0 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x810, r0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'nlmon0\x00', {'erspan0\x00'}}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfebe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r1, &(0x7f0000000300)="0503000189063e0000000100c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdb8, 0x80, 0x0, 0xfffffffffffffe57) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) [ 526.975590] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 527.006924] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 527.087988] Interruptibility = 00000000 ActivityState = 00000000 21:52:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x60000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 527.171160] *** Host State *** 21:52:14 executing program 4: r0 = socket$inet6(0xa, 0x802, 0x73) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x70}, @dev}, @icmp=@parameter_prob={0x12, 0x4, 0x0, 0x0, 0x0, 0x2, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @remote}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000001640)=[{{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) [ 527.218875] RIP = 0xffffffff811cf9c3 RSP = 0xffff888090fc78c0 [ 527.331469] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 527.377622] FSBase=00007fa1cd729700 GSBase=ffff8880ae800000 TRBase=fffffe0000003000 [ 527.414247] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 527.439214] CR0=0000000080050033 CR3=000000008eaeb000 CR4=00000000001426f0 [ 527.460451] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87601400 [ 527.502869] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 527.510334] *** Control State *** [ 527.518497] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ea [ 527.536998] EntryControls=0000d1ff ExitControls=002fefff [ 527.595723] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 527.602701] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 527.628752] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 527.635383] reason=80000021 qualification=0000000000000000 [ 527.655290] IDTVectoring: info=00000000 errcode=00000000 [ 527.679260] TSC Offset = 0xfffffee417c555be [ 527.683633] EPT pointer = 0x000000007d05e01e [ 527.693827] Virtual processor ID = 0x0001 21:52:15 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x8, 0x286200) read(r0, 0x0, 0x23b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x802, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x200000000000011, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r3, &(0x7f0000000040)={0x11, 0x800000000000004, r4, 0x1, 0x0, 0x6, @dev}, 0x14) futex(&(0x7f00000024c0), 0x8b, 0x2, &(0x7f0000002500), &(0x7f0000002540), 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wrr\x00', 0x21, 0xffffffffffffff8f, 0x54}, 0x2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x40}) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @local}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x20, 0x0, 0x0, 0x0, 0x3e91, &(0x7f0000000000)='ifb0\x00', 0x3, 0x80000000, 0x1f}) r6 = openat$cgroup_ro(r1, &(0x7f0000000200)='cpuacct.stat\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x2}}, {0x2, 0x0, @remote}, {0x2, 0x10, @broadcast}, 0x48, 0x0, 0x2, 0x46a, 0x4, 0x0, 0x400000000000}) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000001240)={0x84, @local, 0x4e20, 0x4, 'l\x02p\xaa[\xbb$\xf5\x9c\x00\x00\x04\x00', 0x17, 0x1f, 0x5b}, 0x8b) lsetxattr$security_smack_transmute(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)='security.SMACK64TRANSMUTE\x00', &(0x7f0000002440)='TRUE', 0x4, 0x2) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000012c0)) sendmmsg(r3, &(0x7f0000000d00), 0x1bdd307, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000040), 0x4) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002580)='/dev/vcsu\x00', 0x100, 0x0) getsockname$packet(r7, &(0x7f00000025c0), &(0x7f0000002600)=0x14) write$cgroup_int(r1, &(0x7f00000000c0)=0x4, 0x12) write$UHID_CREATE(r1, &(0x7f0000001100), 0x120) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x34}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00\x06\"\xce[\x94:\xc1F\xd4\xb7^\v\x1e;\xed\xc1\xe9\xd00xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$midi(r2, &(0x7f0000000180)="2a63e2f0ea49cd100d1cf227d170c4b3aa355f499fe5b554084c4a0039af0af3dabcf7f4925072ee31ca9678f1949fcc6408248e8e7e76fa14b8e23284e54fe3be04a43e8933a181e95158c29fea49043de07c342fdc467a9f7fd50c90a219f5f0413edd551df6b53fd483a6a4839b05a35c9903355c3d356118d4507cfd6f1d5f94edd98ab346bd1fb4e40a91077d66ab284bc57f28405a76e54f5ffa4c9e63f5e702b6ed863ca36b34e91d", 0xac) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, 0x0, 0x339) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'nlmon0\x00', {'veth1_to_bridge\x00'}, 0x3e0c}) clone(0x1000003102041ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r5, r5) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r7, 0xc080661a, &(0x7f0000000000)={{0x2, 0x0, @reserved="831017f67bf160ebcf0aba113ce4cb29f071e3b6d74510ed9bae23af67b3b3dd"}}) socket$inet6_tcp(0xa, 0x1, 0x0) 21:52:15 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000200)='bond_slave_0\x00', 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xaaaacf8, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x48, 0xfffd}], 0x3, 0x0) 21:52:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x65580000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:15 executing program 0: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="0f34", 0x2}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000000c0)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2a}) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 527.826612] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 21:52:15 executing program 4: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x200000000011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0xea42, 0x0, 0xffffffd8) getpid() getpgrp(0xffffffffffffffff) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000000)='./file0\x00', 0x8) [ 527.883358] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 21:52:15 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x81000000, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:16 executing program 2: mknod$loop(&(0x7f0000000040)='./file1\x00', 0x6001, 0x0) r0 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$BLKBSZSET(r0, 0x1261, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'vcan0\x00', {'erspan0\x00'}, 0xc5b2}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0xa, 0x4) 21:52:16 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xc2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_POLL(r2, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x40000, 0x0) write$P9_RSYMLINK(r3, &(0x7f0000000040)={0x14, 0x11, 0x2, {0x1, 0x2, 0x3}}, 0x14) 21:52:16 executing program 4: clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x1e8) r1 = memfd_create(&(0x7f0000000100)='wlan1\x00', 0x0) mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r1, 0x0) rt_sigaction(0x7, &(0x7f0000b4a000)={0xfffffffffffffffd, {0x4000001}, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='coredump_filter\x00*\x0e\xc3=.\x13\xcbx\x95*\xeeX\x9fcy\xa49\xf6\x8f\x82^\x19\xa9\xcd+\b\x9f\xc6,\xa0\xf0\xff\x9dO\x06\xc9\x15\xda\xa4\x7fh\xd4\xe8C\xdeKUrR\xf4\x9c\x87\xee\xd2\xfb\xdfs\xd0G\x91\x02\x15Z\xa8\x1ad\xadY\x13\x14mg\xc9\x00\x16\xa4\xc48\x06u\x1e:\xd4Y?\xd8P\xe8reP\xffv\xd6\x12\x85N1\n\f\xb0\x1e\xe7\xffD\x1aS\xbf0\x80\xff\xff7V\xcc5\x96W\x14J\xe2\x93\xe3\xc6A7\xd8\xec\xb2m\xf5\x16-\x1b\xbd\x11\x1aYg\xe0\xa7\xd19\a') prctl$PR_SET_DUMPABLE(0x4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_snmp6\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r11) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r11}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r13, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r13) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r14, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r15 = dup(r14) write$FUSE_BMAP(r15, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r15, &(0x7f00000000c0)={0x14c}, 0x137) getresuid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r17 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r17, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r18 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r18, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r18, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r20 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r20, 0x2007fff) lseek(r20, 0x0, 0x4) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r22 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r23) write$P9_RSTATu(r17, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r19, @ANYRES32=r21, @ANYRES32=r23], 0x5d) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r25, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r25) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r24}, 0x2c, {'wfdno', 0x3d, r25}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r27, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r27) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r26}, 0x2c, {'wfdno', 0x3d, r27}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r29, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r29) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r28}, 0x2c, {'wfdno', 0x3d, r29}}) r30 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x0, 0x103840) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r32, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r32) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'\x00', 0x3d, r31}, 0x2c, {'wfdno', 0x3d, r32}}) r33 = getpgrp(0x0) r34 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r34, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r35 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r35, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r35, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r37 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r37, 0x2007fff) lseek(r37, 0x0, 0x4) getsockopt$sock_cred(r37, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r39 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r39, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r40) write$P9_RSTATu(r34, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r36, @ANYRES32=r38, @ANYRES32=r40], 0x5d) r41 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r43, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r43) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r42}, 0x2c, {'wfdno', 0x3d, r43}}) r44 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r44, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r45 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r45, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r45, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r47 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r47, 0x2007fff) lseek(r47, 0x0, 0x4) getsockopt$sock_cred(r47, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r49 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r49, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r50) write$P9_RSTATu(r44, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r46, @ANYRES32=r48, @ANYRES32=r50], 0x5d) r51 = getegid() sendmsg$unix(r7, &(0x7f0000000500)={&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000000)="e15d08b3cffaa4c222e3", 0xa}], 0x1, &(0x7f00000003c0)=[@rights={{0x30, 0x1, 0x1, [r9, r11, r13, 0xffffffffffffffff, r3, r15, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r16, r21}}}, @rights={{0x34, 0x1, 0x1, [r1, r25, r1, r0, r26, r28, r1, r30, r1]}}, @rights={{0x14, 0x1, 0x1, [r31]}}, @cred={{0x1c, 0x1, 0x2, {r33, 0x0, r38}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r41]}}, @rights={{0x18, 0x1, 0x1, [r42, r4]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r46, r51}}}], 0x128, 0x4050}, 0x8040) [ 529.256908] audit: type=1400 audit(1577397136.810:218): avc: denied { map } for pid=14377 comm="syz-executor.4" path=2F6D656D66643A776C616E31202864656C6574656429 dev="tmpfs" ino=61063 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 21:52:17 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x54}, [@ldst={0x5}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x1341, 0x101000) 21:52:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x88a8ffff, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:17 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[]}}, 0x2000) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast2}, 0x14) close(r2) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0xc) getsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x80, &(0x7f0000000340)=""/225, &(0x7f0000000440)=0xe1) socket$inet(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) r5 = socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r6, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0xa8, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x180}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_TYPE={0x8, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0xfffffffffffffe4a, 0x7, 0x2000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2c}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x8004}, 0x10) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) iopl(0xef) [ 529.719061] selinux_nlmsg_perm: 5 callbacks suppressed [ 529.719079] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 529.783347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 529.829444] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 529.868561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 529.900169] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 529.935231] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 529.975175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 21:52:17 executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x20080, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000080)={0x4, 0x0, 0x7, 0x100, 0x80000000}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x20d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) [ 530.015875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 530.054524] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 [ 530.151494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=14393 comm=syz-executor.2 21:52:18 executing program 2: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x12, 0x4, 0x4, 0x20d, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x3c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x0, 0x4, 0x1, 0x0, 0xd069, 0x2800, 0x5, 0x0}, &(0x7f0000000280)=0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) connect$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x5, 0x31, 0x1, 0x80, 0x47}, 0x40}, 0xa) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f00000002c0)={r0, 0x80}, &(0x7f0000000200)=0x8) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x0, 0x0) eventfd2(0xffff, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f00000001c0), 0xfffffef3) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) keyctl$link(0x8, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f00000003c0), 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r5+30000000}, 0x0) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfbffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$unix(0x1, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000005c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000340)}}, 0x18) 21:52:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfcffffff, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:18 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="d7ca"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000038c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/189, 0xbd}, {&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000080)=""/32, 0x20}], 0x3, &(0x7f0000000140)=""/33, 0x21}, 0x2}, {{&(0x7f0000000400)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000480)=""/151, 0x97}, {&(0x7f0000000280)=""/14, 0xe}, {&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000600)=""/83, 0x53}, {&(0x7f0000000680)=""/166, 0xa6}], 0x6}, 0x4}, {{&(0x7f00000007c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000002280)=""/4096, 0x1000}, {&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f0000000940)=""/143, 0x8f}], 0x3, &(0x7f0000000a40)=""/102, 0x66}, 0x6}, {{&(0x7f0000000ac0)=@un=@abs, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b40)=""/176, 0xb0}, {&(0x7f0000000c00)=""/201, 0xc9}, {&(0x7f0000000d00)=""/48, 0x30}, {&(0x7f0000000d40)=""/215, 0xd7}, {&(0x7f0000000e40)=""/114, 0x72}, {&(0x7f0000000ec0)=""/210, 0xd2}], 0x6, &(0x7f0000000fc0)=""/57, 0x39}, 0xf8}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f00000020c0)=""/32, 0x20}], 0x1, &(0x7f0000002180)=""/64, 0x40}, 0x5}, {{&(0x7f00000021c0)=@in, 0x80, &(0x7f0000003640)=[{&(0x7f0000003280)=""/231, 0xe7}, {&(0x7f0000003380)=""/170, 0xaa}, {&(0x7f0000003440)=""/151, 0x97}, {&(0x7f0000003500)=""/43, 0x2b}, {&(0x7f0000003540)=""/10, 0xa}, {&(0x7f0000003580)=""/90, 0x5a}, {&(0x7f0000003600)=""/3, 0x3}], 0x7}, 0x56}, {{&(0x7f00000036c0)=@nfc, 0x80, &(0x7f0000003880)=[{&(0x7f0000003740)=""/153, 0x99}, {&(0x7f0000003800)=""/125, 0x7d}], 0x2}, 0x8001}], 0x7, 0x21e2, &(0x7f0000003a80)={0x0, 0x989680}) getsockopt$inet6_dccp_int(r3, 0x21, 0x10, &(0x7f0000003ac0), &(0x7f0000003b00)=0x4) r4 = syz_open_dev$vcsa(&(0x7f0000003b40)='/dev/vcsa#\x00', 0xa16, 0x400) write$P9_RCLUNK(r4, &(0x7f0000003b80)={0x7, 0x79, 0x2}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = dup3(r8, r7, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) sendmsg(r6, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000440)="c4", 0x24549}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000084000000050000001000000000000000"], 0x18}, 0xfc) poll(&(0x7f0000000180)=[{r6}, {r5}, {r5}], 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, &(0x7f0000002240)={0x77359400}) openat$audio(0xffffffffffffff9c, 0x0, 0x8c580, 0x0) 21:52:18 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) ioctl$DRM_IOCTL_GEM_CLOSE(r3, 0x40086409, &(0x7f0000000480)) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000440)={0x30}, 0x30) setsockopt$bt_hci_HCI_DATA_DIR(r3, 0x0, 0x1, &(0x7f0000000400)=0x622e, 0x4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x3c}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg(r6, &(0x7f00000003c0)={&(0x7f0000000000)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000240)="1489c80547eecf8726440de600445e39345ba5cd60778f19c7e4ed423113aba2ba1ac7b796fc7f6e9ed5fffaed1bdb2453ed16e5b849eeed6f39ba65e61e8cd6d339e012e9e09f3659d796959c1dcc2aab44273e320ba7ee9c708b1b6ebac733541d9062cc82e00f721d3c5958fe24217fc094126b95d6b1879d2622563950a7bcbf76ac073b3ffa772dcbe82d5958da0902bd4c12c188", 0x97}, {&(0x7f0000000080)="ea97ef826654df8384cac8bfaa6d211ceaf521d46c765d931f5efb", 0x1b}], 0x2, &(0x7f0000000300)=[{0xb0, 0x100, 0x5, "c65fbeacdaf0f78305324dbf09c0c5bd80be497d3c9ed09578b409b8779eb07d4a94a1ea1eaf74a6be5340d3e4f0d70fdccb5c0a2dd77d17221bf26bb090ae9332abef0d75503c3155db00f2fa34244d81dd8667ebedd2ff04ebc3c129d7380452bc4c719e197e2389175a99bebb30a23e5475c5d66ddbc8703fa3baaa614e9f10cbbcacbe8b8125c5b4f7b86d33d984fb12109f6014e0d673bfae2e8c24"}], 0xb0}, 0x20000000) [ 531.087136] *** Guest State *** [ 531.099542] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 531.141450] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 531.181969] CR3 = 0x0000000000000000 21:52:18 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2000000, 0x0) close(r0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = dup(r2) r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000040)={r5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000140)={r5, 0x921e, 0x9, [0xfe0b, 0x852, 0x3ff, 0x1, 0x27, 0xb3, 0x20, 0xab, 0x4e]}, &(0x7f0000000180)=0x1a) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f0000000040)) ioctl$TUNSETNOCSUM(r0, 0xc0045540, 0x717000) 21:52:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffa888, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 531.225821] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 531.255830] RFLAGS=0x00000002 DR7 = 0x0000000000000400 21:52:18 executing program 3: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000180)=@llc={0x1a, 0x310, 0xf9, 0xc, 0x7, 0x1f, @random="d6b78d91331d"}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000040)="2100ffffff00", 0x6}], 0x1}, 0x406c840) [ 531.278691] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 531.318978] CS: sel=0x0000, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 531.350269] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 21:52:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="ba4200ed660f388079040f810000b8f20f8ed8b88e008ee0baf80c66b86672e38b66efbafc0cb000ee66b99e0b000066b8ca34f99e66ba5f6e085f0f3065263e0f350f1f4000f30f09"}], 0x0, 0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x231) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffef) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000040)) [ 531.398823] SS: sel=0x0000, attr=0x00081, limit=0x0000ffff, base=0x0000000000000000 21:52:19 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x4}, 0x61fd) r0 = socket(0x0, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x5fd162b1e489ec02, 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000340)={0x1, 0x3, 0x1000, 0x89, &(0x7f0000000140)="ed3a416c6df22b9c63b042d730b2b08d7221325fba0ff0bc7b46ae296ac40ac891278375722238af0a491238064406a7bedef385bce08762363e3fe3c22c9ed4c199f533055fb6f008cce745f90d94585b16a5e7e1d22a186811d842086d64e02653e690805dac037224ef6771418932c4948903d8261cab96278a98eef572f2dd87ddcd54681202a2", 0xd, 0x0, &(0x7f0000000200)="c4fbedfa476452434bb1c51470"}) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3fa366002c97d7bc93e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) sendto$inet(r3, &(0x7f0000000080)="7bcb893b7526287484c5dd2551cbf115df0b886fa1", 0x15, 0x488d0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) [ 531.451089] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 531.491404] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 531.508927] IPVS: ftp: loaded support on port[0] = 21 [ 531.518517] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 21:52:19 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x297ef) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) add_key$user(0x0, &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r1 = syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0xc72f, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x200000000001d}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYRESHEX, @ANYRESOCT], 0x29) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0) write$cgroup_int(r2, &(0x7f0000000080), 0x297ef) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xff, 0xb8280) [ 531.554840] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 531.594032] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 531.632930] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 531.678133] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 531.725947] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 531.744012] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 531.791008] Interruptibility = 00000000 ActivityState = 00000000 [ 531.824664] *** Host State *** 21:52:19 executing program 2: kexec_load(0x7fff, 0x4, &(0x7f0000001900)=[{&(0x7f00000007c0)="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", 0xfb8, 0xa679}, {&(0x7f00000017c0)="da38d90e407f3dc34bcfa4de772decf5cc95a70d4029bc909f3d858c2460cf5b7aa0ed14263f48d6f8", 0x29, 0x7, 0x5}, {&(0x7f0000001800)="50371d15c01458a850c8532e807216e9ff2c0c52fdcee0f02da34b5834a99e5267a8b484c2d9b21ffeacacec5b0419c55a8e7998dbaf97ae4726c46c8045d53a8f66a70b1bb988d788", 0x49, 0x0, 0x9}, {&(0x7f00000018c0), 0x0, 0x3, 0x7}], 0x2a0000) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00'}) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x80, 0x2, 0x0, 0x81, 0x0, 0x401, 0x145400, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x46ac, 0x2, @perf_config_ext, 0x21212, 0x2, 0x5, 0x0, 0x7, 0x401, 0x6fe8}, 0x0, 0x3, 0xffffffffffffffff, 0x15) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) clock_gettime(0x0, &(0x7f0000000040)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000240)) openat$apparmor_thread_exec(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000080)=0x8, 0x4) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x480, 0x0, 0x0, 0x0, 0x1, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'hsr0\x00L\x00H\x00\x00\x00\x00\x00\x00\xff\x00', 0x1}) [ 531.842899] RIP = 0xffffffff811cf9c3 RSP = 0xffff88808dfef8c0 [ 531.899297] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 531.911453] FSBase=00007f08d807e700 GSBase=ffff8880ae900000 TRBase=fffffe0000034000 [ 531.940199] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 531.961541] CR0=0000000080050033 CR3=000000007e2dd000 CR4=00000000001426e0 [ 532.009744] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87601400 [ 532.055552] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 532.061877] *** Control State *** [ 532.074408] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ea [ 532.092194] EntryControls=0000d1ff ExitControls=002fefff [ 532.104865] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 532.120124] VMEntry: intr_info=80000202 errcode=00000000 ilen=00000000 [ 532.135677] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 532.150457] reason=80000021 qualification=0000000000000000 [ 532.164980] IDTVectoring: info=00000000 errcode=00000000 [ 532.177645] TSC Offset = 0xfffffee17d2867d1 [ 532.186896] EPT pointer = 0x000000002981b01e [ 532.197129] Virtual processor ID = 0x0001 [ 532.290237] IPVS: ftp: loaded support on port[0] = 21 21:52:19 executing program 0: r0 = socket$inet6(0xa, 0x3, 0xc8) r1 = dup(r0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x8, 0x4, 0x1, 0xffffffffffffffff}) fsetxattr$security_capability(r4, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v2={0x2000000, [{0x7, 0x1000}, {0x0, 0x8}]}, 0x14, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = socket$inet(0x10, 0x2, 0x0) sendmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="24000000180007841dfffd946f610500020081001f038b0602000800080004000a00ff7e280000001100ffffba16a0aa1c09000000000000120000000000d1eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) [ 532.602318] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 532.633288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready 21:52:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xffffff7f, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 533.125667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:52:21 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)='cpuacct.usage\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r11 = dup(r10) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r11, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r12, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r13 = dup(r12) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r15, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r15}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r17, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r17) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trdlo=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r16, @ANYBLOB=',wfdno=', @ANYRESHEX=r17, @ANYBLOB=',\x00']) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000880)=ANY=[@ANYBLOB="7f8451cfd1c81a1487137a92a8d3d698f173761dba6869980bcef0b622dec6be90703ead87463fa3ee871016921deb209e3e57b7bd07ab37db167a35781ca74e5411525f6d4f145753c8be30dfd1fbaf1124c17760b6ab9766b0c101bcda9df58bf39d82e3715df49f38568105b29d1c7f3a4de40410dd7164c0f8bcfb1fb48ea52775d6b4fc70ef2afd44145e4adfb4645b43eb8ce9bbdc5aec9fec8238ee3412f8be99c514945139cbad53b82aa053f3ea953b1b901b39b6ad8a4bef6632f4396d2df52dfa9b25234a3bccc5556b5205bd933861d8e7f2e2ca4a7e0cf290fa330ed3b1", @ANYPTR=&(0x7f0000000700)=ANY=[@ANYRES16=r1, @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRES16=r2, @ANYRESHEX=0x0], @ANYRESOCT=0x0, @ANYRES32=r1, @ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r2, @ANYRES16=r7, @ANYRESOCT=r8, @ANYRES16=0x0, @ANYRESOCT=r11], @ANYRES32=r13, @ANYBLOB="3d9bc47b4cd8b30624fcc659605399c61e12a1063752189c58a17336ac4fcba36c65c5b4cfd5e864fb93d8853039de0eeb124f49898861ba5efd21a1f9aa0845b103463fd7e2a099d26f0263ba185eb59bc7c5d1b41f4c50ca1d", @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYPTR, @ANYRESHEX=r15, @ANYRES64, @ANYPTR64, @ANYRESHEX], @ANYRES64=r17, @ANYBLOB="d66f31595d689304d5e70114dc9c7d9a63f05c51fd89862540dc31ed754e75c936a78acb1c97b52a096f9215e37c52649fdf635085fbc7a00be1a5941206f56d95999b2522b70598294702c35cf0652df76f77f95571b199a0e58cefb7dbf673377f65599e8aab7ff398c95621933e1e18063abe0052f646b36d6018995e47027d7814aef38f22c5eb59f17bf59eeba1778ec17749c53577c106cc2f2ef8dc2592c217e2a243536806c95e4c44c694e07e8f9db8a1f9b22bcb7ba34ff90148"]]) r18 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r18, 0x800000c004500a, &(0x7f0000000300)) r19 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom}, [@bcast, @default, @bcast, @default, @rose, @default, @bcast, @netrom]}, &(0x7f0000000040)=0x48, 0x80000) getsockopt$sock_timeval(r19, 0x1, 0xd1fb4407cfb97c8e, &(0x7f00000001c0), &(0x7f0000000340)=0x10) syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(0x0, 0x0, 0x1000) mq_open(&(0x7f0000000080)='+\x00', 0x40, 0x39, &(0x7f0000000100)={0x0, 0x3, 0x5, 0x2}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000000), 0x4) socket(0x0, 0x5f72294b61901e69, 0x10000000000002) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r20+30000000}, 0x0) [ 534.171221] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 21:52:21 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xfffffffc, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:21 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0x5}, 0xf) shmget(0x2, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000015c0)='/dev/admmidi#\x00', 0x8, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000003c0)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x105000, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r2 = socket(0x0, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000480), 0x4) socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'nlmon0\x00', 0x200}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00', 0x400}) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'nlmon0\x00', 0x200}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000180)={'team_slave_1\x00', 0x400}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'nlmon0\x00', 0x200}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) [ 534.918946] audit: type=1400 audit(1577397142.470:219): avc: denied { attach_queue } for pid=14486 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tun_socket permissive=1 [ 535.004750] device bridge_slave_1 left promiscuous mode [ 535.028686] bridge0: port 2(bridge_slave_1) entered disabled state 21:52:22 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0xf, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0100001000f3790000000000000000000000000000000000000000000000007f0000010000000000000000000000e5ffffffffffffff000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000330000007f00000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000"], 0x13c}}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x1994ae917da6ccd2, 0x0) [ 535.114411] device bridge_slave_0 left promiscuous mode [ 535.120558] bridge0: port 1(bridge_slave_0) entered disabled state 21:52:22 executing program 2: unshare(0x0) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) tkill(0x0, 0x9) r1 = getpid() r2 = fcntl$getown(r0, 0x9) rt_tgsigqueueinfo(r2, r1, 0x0, &(0x7f0000000000)) keyctl$chown(0x4, 0x0, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev}}, 0x0, 0x0) setsockopt$sock_cred(r3, 0x1, 0x11, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f00000000c0)={0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r4, 0x2285, &(0x7f0000000540)={0x53, 0x0, 0x1f, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f00000003c0)="847f3273c5a3eec8cdbdad71e0598b0e6f2df8d2263f094b7d2ba9d189dbd3", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}) ptrace$getregset(0x7, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) keyctl$chown(0x4, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = dup3(r5, r6, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r7, &(0x7f0000fa3fff)='\t', 0x1, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000a8a000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x6, &(0x7f000059aff8), 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x2}, 0x14) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x2}}, 0x0, 0x1}, 0x90) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4}, 0x1c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a600"/137], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) listen(0xffffffffffffffff, 0x18) socket(0x40000000002, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) 21:52:23 executing program 2: setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, &(0x7f0000006ffc), 0x26d) getpgrp(0x0) ppoll(0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = semget(0x1, 0x0, 0x205) r2 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r2, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x2007fff) lseek(r5, 0x0, 0x4) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r10}}) write$P9_RSTATu(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r4, @ANYRES32=r6, @ANYRESOCT], 0xb6) r11 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r11, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r12 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r14 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r14, 0x2007fff) lseek(r14, 0x0, 0x4) getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r16 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r17) write$P9_RSTATu(r11, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r13, @ANYRES32=r15, @ANYRES32=r17], 0x5d) r18 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r18, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0) r19 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r19, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r19, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r21 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r21, 0x2007fff) lseek(r21, 0x0, 0x4) getsockopt$sock_cred(r21, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r23 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r23, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r24) write$P9_RSTATu(r18, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r20, @ANYRES32=r22, @ANYRES32=r24], 0x5d) r25 = open(&(0x7f00000003c0)='./bus\x00', 0x40, 0x0) open_by_handle_at(r25, &(0x7f0000000600)=ANY=[@ANYBLOB="0a0000f8001d090000000000ae2c0e85bf9eac82c481380dd20e0cae236d624acb1ca04fd573491a8771a3ee563d98f3775eda6b09bbc8cbf2da83c7bd5a5c9da50a0203138979c32dee1dc2258b3d13d469eaaab242645b7f2f0dfa44ed0337a81e62a6d37ff63a0bda4702d2216cb9ff343452e461b2f50632d766"], 0x0) r26 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r26, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @loopback}}}, 0x98) fstat(r26, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r28, 0x2007fff) lseek(r28, 0x0, 0x4) getsockopt$sock_cred(r28, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xfffffffffffffdb9) r30 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r30, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r31) write$P9_RSTATu(r25, &(0x7f00000006c0)=ANY=[@ANYBLOB="5d0000007d020300004800ff0309e812a4f329aeffc70700000000000000000008000900b7dbe667000000000a002b3a09002f6465762fc767230001003b09002327256e6f646576000000fc0d4ac7e36eced1f7dade9e086a0834947de1dde495e40160aa6d006cd83c07b52385e27fb5d8f3c6a519d7637b7a97d5c97d673fe081a983bab7aa9997ea34008c26dd0242000000000000", @ANYRES32=r27, @ANYRES32=r29, @ANYRES32=r31], 0x5d) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r8, r15, r20, r29, 0x20}, 0xfffffffffffffffb, 0x7514, 0x0, 0x0, 0x0, 0x0, 0x918}) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000580)) openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) io_getevents(0x0, 0x2, 0x1, &(0x7f0000000040)=[{}], 0x0) pipe(&(0x7f0000000240)) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[], 0xfef0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x50) r32 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r32, 0x6, 0x80000000000002, &(0x7f0000000000)=0x7c, 0x4) bind$inet(r32, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) fcntl$setown(r0, 0x8, 0x0) setsockopt$inet_tcp_int(r32, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) sendto$inet(r32, &(0x7f0000a88f88), 0xfffffffffffffd32, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local}, 0x10) shutdown(r32, 0x1) [ 535.888792] audit: type=1804 audit(1577397143.440:220): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir371048370/syzkaller.Kn34RV/42/bus" dev="sda1" ino=17121 res=1 [ 536.125496] protocol 88fb is buggy, dev hsr_slave_0 [ 536.130655] protocol 88fb is buggy, dev hsr_slave_1 [ 536.606018] audit: type=1800 audit(1577397144.160:221): pid=14520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17121 res=0 [ 536.685515] protocol 88fb is buggy, dev hsr_slave_0 [ 541.940033] bond1 (unregistering): Released all slaves [ 542.100085] device hsr_slave_1 left promiscuous mode [ 542.168950] device hsr_slave_0 left promiscuous mode [ 542.220878] team0 (unregistering): Port device team_slave_1 removed [ 542.232364] team0 (unregistering): Port device team_slave_0 removed [ 542.245192] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 542.312158] bond0 (unregistering): Released all slaves 21:52:31 executing program 1: syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x8}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) dup3(0xffffffffffffffff, r2, 0xc0000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) openat$cgroup_int(r5, &(0x7f0000000180)='memory.swap.max\x00', 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) syz_init_net_socket$x25(0x9, 0x5, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = dup(r8) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r10, &(0x7f00000000c0)={0x14c}, 0x137) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r12 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x100004, 0x0) r13 = dup(r12) write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r10, 0xc00c642e, &(0x7f0000000140)={r0, 0x7194370e06271450, r13}) r14 = syz_open_procfs(0x0, 0x0) fstat(r14, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0xf00, 0x2000000000002) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f000028e000/0x3000)=nil, &(0x7f0000f43000/0x3000)=nil], &(0x7f0000000040)=[0xfff, 0x9d, 0xd26, 0x7, 0x459], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) 21:52:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000514ff0), 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, {0x1}, 0x2}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xf85}, 0xc) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0xa0, 0xfffb, 0x0, 0x0, 0x2, 0x0, 'syz0\x00'}) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x0, &(0x7f0000000580), 0x0) r3 = fcntl$dupfd(r1, 0x0, r0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f00000000c0)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b22645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x3, r8}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21:52:31 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000200)='/dev/full\x00', 0x0, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x4) unshare(0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f0000000340)='./file0\x00', 0x0, 0x2001251, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/raw6\x00') perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x20000, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xef1, 0x9, 0x1, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x1c, &(0x7f00000007c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x200}, 0x10}, 0x32) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) r4 = getpid() tkill(r4, 0x9) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfffffffffffffd86, 0x0, 0x0, 0x3debbf01777b0a51) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="17b687b1"], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x0, 0x2, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x20) 21:52:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x10, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:31 executing program 0: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(0x0, &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x50, 0x0) r0 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) r1 = socket$unix(0x1, 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') sendfile(r3, r4, 0x0, 0x100000001) 21:52:31 executing program 3: pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000680)={0xffffffffffffffff}) pipe(0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r4, &(0x7f00000000c0), r2, &(0x7f0000000100)=0x7, 0x800, 0x2) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000280)}, 0x48000) socket$packet(0x11, 0x0, 0x300) r5 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {&(0x7f0000000400)}}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SG_EMULATED_HOST(r7, 0x2203, &(0x7f0000000180)) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r5, 0x0, 0x30005, 0x0) [ 544.320711] selinux_nlmsg_perm: 70 callbacks suppressed [ 544.320726] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=14536 comm=syz-executor.0 [ 544.401837] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns 21:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x17, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:32 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000200)={@broadcast, @random='5a\a\x00', [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x86ddffff, @remote={0xfe, 0x80, [0x3, 0x543, 0x700, 0x5, 0x50000000000000d, 0x8848000000f0ffff, 0x0, 0x8, 0x0, 0xff, 0xff], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[], @icmpv6=@dest_unreach={0xffffff86, 0x6, 0x0, 0x0, [0x7, 0xffffca88], {0x0, 0x6, "c5961e", 0x0, 0x2f, 0x0, @mcast1={0x3, 0x4, [0xa6, 0x80ffffff, 0x28, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast2={0x11, 0x5}}}}}}}}, 0x0) 21:52:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="006d256d00027920"], 0xda00) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) 21:52:32 executing program 0: getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) r0 = msgget(0x2, 0x54) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x10200, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000400)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x5a95}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000140)={@multicast2, @dev, 0x0}, &(0x7f0000000200)=0xc) sendto$packet(r1, &(0x7f0000000340)="d6c80472fd1fb1781c24e43cdb5d887343fc46a9845de916ad6536e2d15823a639590d03eacd3c180a9e26768d76ae5c2a446872c2e7b76fb42a2ab85abaa790dbd4794641e0646630f504edd5e04dfba1764dab20c99eb5ea22e1ded85425fac2eb41bb9ace79d00d2e37df625a14d7b884e59e6658f619f539073d2617559aefc892f8f9427312dd61d8717fde65779512b890df84c19ca1354477b04ac494c56df83da1f4907596e179da174bdd40999f34e2f39ca422ef", 0xb9, 0x80, &(0x7f00000002c0)={0x11, 0xf5, r2, 0x1, 0x4, 0x6, @local}, 0x14) msgctl$MSG_STAT(r0, 0xb, &(0x7f0000000cc0)=""/4096) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)=0x1, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_SWBIT(0xffffffffffffffff, 0x4004556d, 0x2000000000) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @local}}) syz_open_procfs(0x0, &(0x7f0000000300)='mountinfo\x00') mkdir(&(0x7f00000009c0)='./file1\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setxattr$system_posix_acl(&(0x7f0000000580)='./file1\x00', &(0x7f00000005c0)='system.posix_acl_default\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="020000000100000000000000040001000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], 0x7, 0x0) mount$overlay(0x40000f, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) poll(&(0x7f0000000480)=[{r3, 0x8430}], 0x1, 0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) ptrace$cont(0x7, r4, 0x101, 0x4b98a5ad) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0) 21:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0xc0, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:32 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x200, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3000003, 0x5c831, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000600)={'syz\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8de, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffafd63bfb]}, 0x45c) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000b47000/0x18000)=nil, 0x0, 0xffffff88, 0x0, 0x0, 0x3cf) r3 = socket(0x2, 0x0, 0xff) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000280)) r4 = syz_open_pts(0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x80003, 0xff) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) io_setup(0x29, &(0x7f0000000100)=0x0) io_submit(r6, 0x2, &(0x7f0000356ff0)=[&(0x7f00000000c0)={0xffffff87, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000040), 0x354}]) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)) ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)) socket$inet_udplite(0x2, 0x2, 0x88) r7 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r7, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000140), 0x4) r8 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f00000001c0)="dc8924ac1e0bd2831d54aa46122941d67a93ca16c693c9d1f0113d6ffe49c6536fe07451fdd37f472ecaa8b9f9e10c938733c9b669ace8afd9dda16d5f8bcfb57b6bc1abe5770705e31137b3bb8e619ee9803b88fadc61da8619b9b8fb1ac19196a41cce6a3ff334", 0x68, r7) keyctl$get_keyring_id(0x0, r8, 0x1) [ 545.020944] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 545.114568] overlayfs: filesystem on './file0' not supported as upperdir 21:52:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ea399739600ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f000012afe4)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='\b;tcp-rHn\xbaF\xa8\xfe\xa2\xfa.\x8e\x00(\xfa\xac\xc2\xb2v\x1b\xc9\xf3;\xea\xd1', 0x39c) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) sendto$inet6(r0, 0x0, 0x0, 0x20000003, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 21:52:32 executing program 2: perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x0, 0x0, 0x0, 0x7, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="0300050000000100001400000000000000000f0000000000000000000500000000004200000000000000000000000000000000000000000000000000000055aa", 0x40, 0x1c0}]) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x12003, 0x0) 21:52:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0xec0, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:32 executing program 3: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000000)={0x3, "776078eca1e3feee42a2531b4ed6217f88da6f4f437ce2186d68c37b160fb693", 0x0, 0x9, 0x5, 0xff, 0x20000, 0x4}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8000000000000, 0x40, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x258) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) dup(r3) 21:52:32 executing program 4: syz_mount_image$hfsplus(&(0x7f0000001480)='hfsplus\x00', &(0x7f00000014c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)={[{@force='force'}]}) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/create\x00', 0x2, 0x0) 21:52:32 executing program 0: sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) socket$inet6(0xa, 0x0, 0xff) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x6}, 0x8) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200002000, 0x2, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x009\xda\xd3\xc4D\xdeJ5\xf0\xfd\"=\xb6\xaa\x1e/\xddc\xc9\xf3_8\x9eFi\xe0\xafe\"\xc2%\xbb\xb6E\xae\x9e\x0fF\xc8|\xd4M\xb4\x91\x9c\x1a4\xab\x1d\x00\xbbAW\xf7\x9b#\x91.\x9b\x96Vn\xbf#a\x8d\xfd\xd31\xfc\xac\xfe\xcc\xdb\x93\x89t\xf4\x8dB\fI\xe5\xb3\x7f\x94\xbd\xb6Q\xb9\xc1\x02e\x904\xf4\x19/') [ 545.310396] x_tables: ip_tables: NOTRACK target: only valid in raw table, not raw” [ 545.357796] x_tables: ip_tables: NOTRACK target: only valid in raw table, not raw” [ 545.380281] ldm_validate_privheads(): Disk read failed. 21:52:33 executing program 3: creat(&(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ftruncate(r0, 0x208200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r3, 0x0) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x67, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 21:52:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x33fe0, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) [ 545.403693] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 545.420346] loop2: p2 < > [ 545.438218] loop2: partition table partially beyond EOD, truncated 21:52:33 executing program 1: r0 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000000)="f59e339e3501c355", 0x8, 0xfffffffffffffffe) io_setup(0x30, &(0x7f0000000180)) ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380) r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) [ 545.462953] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 545.480182] hfsplus: unable to find HFS+ superblock [ 545.500563] loop2: p2 size 2 extends beyond EOD, truncated [ 545.549427] audit: type=1804 audit(1577397153.100:222): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/89/bus" dev="sda1" ino=16658 res=1 [ 545.602419] hfsplus: unable to find HFS+ superblock 21:52:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r4 = socket$l2tp(0x18, 0x1, 0x1) syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x1f, 0x200400) connect$l2tp(r4, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) sendmmsg(r4, &(0x7f0000005fc0), 0x800000000000059, 0x0) 21:52:33 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x80000, 0x20) ioctl$SG_SET_TIMEOUT(r2, 0x2201, &(0x7f0000000080)=0x8) r3 = dup(r1) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xc2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$FUSE_POLL(r5, &(0x7f00000000c0)={0xfffffffffffffe51}, 0x1f1) [ 545.694847] audit: type=1804 audit(1577397153.100:223): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/89/bus" dev="sda1" ino=16658 res=1 21:52:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x20000158, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:33 executing program 0: getpid() perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, 0xffffffffffffffff, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001600)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000003c0)={0x0, 0x20000, 0x800, 0xfffffffe}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080), 0x4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/vga_arbiter\x00', 0x420000, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x86020, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x1, r3, 0x1}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x4400, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$DRM_IOCTL_AGP_ALLOC(r6, 0xc0206434, &(0x7f0000000180)={0x81, 0x0, 0x0, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f00000001c0)={0x6, r7, 0x8000, 0x9}) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0) io_setup(0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001400)=""/234, &(0x7f0000000140)=0xea) syz_open_dev$usbmon(0x0, 0x0, 0x0) 21:52:33 executing program 1: perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc(0x0) r0 = memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0) write(r0, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/596], 0xe) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000080)={r4, 0xffffffff}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x15f, &(0x7f0000000000)=[{}]}, 0x10) [ 545.814594] audit: type=1804 audit(1577397153.290:224): pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/89/bus" dev="sda1" ino=16658 res=1 21:52:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$vivid(&(0x7f0000000040)='/dev/video#\x00', 0x1, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6d, 0x6d, 0x2, [@const, @datasec={0x0, 0x1, 0x0, 0xf, 0x1, [{}], "eb"}, @array, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}, @volatile]}}, 0x0, 0x8a}, 0x20) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000080)={'gre0\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_NMI(r2, 0xae9a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21:52:33 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'\x00', 0x4009}) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) close(r0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x2, 0x200000) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000100)) [ 545.991939] audit: type=1804 audit(1577397153.290:225): pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir265138590/syzkaller.d4khGs/89/bus" dev="sda1" ino=16658 res=1 21:52:33 executing program 3: unshare(0x8000000) r0 = socket(0xa, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000cab000)=0x2e6) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x4) open(&(0x7f0000000200)='./file0\x00', 0x40c2, 0x20) r1 = socket$rds(0x15, 0x5, 0x0) pwritev(r1, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2, 0x4) syz_genetlink_get_family_id$ipvs(0x0) syz_mount_image$minix(&(0x7f0000000040)='minix\x00', &(0x7f0000000380)='./file0\x00', 0x6c000000, 0x1, &(0x7f0000000240)=[{&(0x7f0000000100)="600084e002000a00900cda40ff1ad5c98f13", 0x12, 0x400}], 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r2 = getpid() ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r2, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000280)='nodev:\x00'}, 0x30) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 21:52:33 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x8000000000000}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xa10000, 0xffff, 0x6, r2, 0x0, &(0x7f0000000040)={0x9e0905, 0x2, [], @value=0x3f800}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f0000000040)={r7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0xfffe, 0x102, 0x6, 0x5, r7}, &(0x7f0000000140)=0x10) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r8, 0x7}, 0x8) r9 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8801}, [@IFLA_MASTER={0x8, 0xa, 0x6}, @IFLA_LINKINFO={0x28, 0x12, @ip6gre={{0xc, 0x1, 'ip6gre\x00'}, {0x18, 0x2, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x50}}, 0x0) 21:52:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0x7ffff000, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:33 executing program 0: pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_elf32(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="95040000f1bf000800c680"], 0x14) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000180)={0xe8, 0x2, 0x4, 0x20000, 0x5, {}, {0x2, 0x8, 0xf0, 0xcb, 0x20, 0x5, "adbf19d3"}, 0x0, 0xbbed5ba6e12248da, @userptr=0x80000001, 0x200, 0x0, r2}) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='caif0\x00', 0x1, 0x3a4, 0x44}) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000140)=0x7ff, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x100, 0x4) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) [ 546.380114] audit: type=1800 audit(1577397153.930:226): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16548 res=0 21:52:34 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4004000c}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x100, 0x70bd2c, 0x25dfdbff, {}, ["", ""]}, 0x1c}}, 0x2e75890d9ee032f8) openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, 0x0) setsockopt$packet_int(r1, 0x107, 0x10000000000f, &(0x7f0000006ffc)=0x400000000008, 0x26d) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x200000000000df8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f00000001c0)}, 0x10) r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x80600, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r7, 0xc008ae67, &(0x7f00000000c0)={0xdc9, 0x100}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000640)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000300)="0503000006023e0001a00000c52cf7c25975e697b02f08006b2b2ff0dac8897c6b11876d886b143a301817ccd51cc5471d130a6632a88161b6fd8f24286a57c3fe257c3314a3974bb654697f", 0xfdfa, 0x0, 0x0, 0x0) [ 546.489989] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 546.586144] minix_free_inode: bit 1 already cleared 21:52:34 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000040)={0x7, [0x0, 0x8000, 0x0, 0x0, 0xffe0, 0x0, 0x40]}, 0x12) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x300) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r4, 0x623, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff7}]}, 0x1c}}, 0x20040800) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x200004) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) sendfile(r0, r5, 0x0, 0x80001d00c0d0) [ 546.813023] MINIX-fs: mounting unchecked file system, running fsck is recommended 21:52:34 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xf, 0x4, 0x4, 0x1007, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x3c) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x288000, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(r0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffc47, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5a00000010003b2801002000000000000080231b6691010000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c6572300000000000001800120008000100707070000c0002002a000100", @ANYRES32=r2], 0x4c}}, 0x0) ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000240)=0x6) [ 546.857548] audit: type=1400 audit(1577397154.400:227): avc: denied { getopt } for pid=14667 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 21:52:34 executing program 4: seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000100)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000ff7f0000006c000000000000009500000000000000a52357cede8b453eb9de058fe33a81c39de0aeae2a2acc67e3d5a510b2c6f5"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xcf, &(0x7f0000000480)=""/207}, 0x48) r0 = shmget$private(0x0, 0x1000, 0x2, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_RMID(r0, 0x0) getegid() 21:52:34 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x8000000000001e, 0x4, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff018000ff08003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) close(0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000236fc8)=[{0x8004000, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet(0x2, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ttyS3\x00', 0x0, 0x0) ioctl$TCXONC(r5, 0x540a, 0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="153030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d0000000000000000000000000000000000000000000000000200"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$PIO_FONT(r7, 0x4b61, &(0x7f0000000100)="fa36b907e8da36c1f6a8c1294687cfbcf2768a3f00f8785147036d1d2107459b0f8f821d6b9a0537d3a3c0dad627af675e4350141c84ae8efc0fb3c222ac04f3575e474c6eaade96a42561ae33ac3c1c52") ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000000c0)={0x3, 0x10cb, 0x5}) ioctl$PIO_UNISCRNMAP(r5, 0x4b6a, &(0x7f0000000000)="aa7505decfaf97c60aca0b300b0777005d7cdbc76b5f9650c8ed3af725dbe22380b6f72c365990cd6293025246c4ede47c5461b4a3cba920d94d1fe5ff72036fc0ea72530346aeebabf397904ae17f8a54b66509fe9216655aa6d8692d6bfc5108f9ee6720a4d3c1058f3ea1") recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) [ 547.085957] minix_free_inode: bit 1 already cleared 21:52:34 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x81, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/kcm\x00\b\x00') recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={r3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r3, 0x7}, &(0x7f0000000100)=0x8) mmap$fb(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004, 0x30, 0xffffffffffffffff, 0xd4000) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000180)={0x2, 0x6}) keyctl$update(0x2, r4, &(0x7f0000000180), 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000200)=0x4) keyctl$setperm(0x5, 0x0, 0x2000000) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x870xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$TIOCGICOUNT(r5, 0x545d, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) getpeername$netlink(r2, &(0x7f00000001c0), &(0x7f0000000240)=0xc) 21:52:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0xfdef}]) sendmmsg$sock(r1, &(0x7f0000000940)=[{{&(0x7f0000000700)=@caif=@dbg, 0x80, &(0x7f0000000880)=[{&(0x7f0000000840)="23c6e9acf900908e0f260e3fca45777c086380ba2fd15d67c7dc058269bc642c838932f952c8943ae1", 0x29}], 0x1, &(0x7f00000008c0)=[@txtime={{0x18}}, @txtime={{0x18}}], 0x30}}], 0x1, 0x0) creat(0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) recvfrom$unix(r5, &(0x7f0000000540)=""/224, 0xe0, 0x1, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e24}, 0x6e) mount$bpf(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000003c0)='bpf\x00', 0x0, &(0x7f0000000440)={[{@mode={'mode'}}, {@mode={'mode'}}], [{@fowner_gt={'fowner>'}}]}) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$USBDEVFS_RESETEP(r4, 0x80045503, &(0x7f0000000080)={0xd, 0x1}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x2, @rand_addr="04d80adce20f9259329568b6080100ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}}}, 0x48) [ 547.457576] audit: type=1800 audit(1577397155.010:228): pid=14730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.0" name="bus" dev="sda1" ino=16500 res=0 21:52:35 executing program 0: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0x800, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666164000204010a0200027400f805", 0x17}], 0x0, &(0x7f0000000040)={[{@fat=@errors_remount='errors=remount-ro'}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r1) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}]}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0xfffffffffffffd22) dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123f89268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00000000000000000000007198c5038d8f3d3cc86a786c893835281f81cb44a9966426a8d74b97b958"], 0x15) dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) r10 = dup(r8) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r11, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r12 = dup(r11) write$FUSE_BMAP(r12, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r12, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$DRM_IOCTL_DROP_MASTER(r12, 0x641f) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) [ 547.575868] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 547.592442] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 547.670470] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 547.694805] FAT-fs (loop0): Directory bread(block 2571) failed [ 547.719875] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 547.736901] FAT-fs (loop0): Directory bread(block 2572) failed [ 547.761277] FAT-fs (loop0): Directory bread(block 2573) failed 21:52:35 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0805b5055e0bcfe8474071") sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000190007041dfffd946f6105000a6000e8fe0200000001080008001e000a00ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 21:52:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000848aaf2f6eb2993a15a8ec45991c100e1817086f00eb35e70a1ad0d362b47b8c8ff683a2d82e0cf4df0b8c4cb48360dc0b8cb043599c9c4f504e0fa4e7a34d1f70f46ea1e1024632d140980dc29eeff367ec3e89f4a4c20de9609e37f2f84b0d398c27cbd8043c113a7b335e322c5ac0bd6cdc3bf3bfc863823d12b4a809c33b8639d7e3267c909fb647903296de60d3339ef0191106e0691a792ad9dfe644c6cc55acf4702e2149cf37744b7146dd4f70148779a55ac648323648c6fd0f39d07e3d5d936f0b95a5"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xfffffee6, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_deladdr={0xfffffdef, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) 21:52:35 executing program 2: r0 = gettid() perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x58}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f00000001c0)='./file0\x00', 0x200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000140)="8da4363ac0ed02000a0000000001004d010000000000000000007a0000000000fff6f2a2299748aeb81e1b00b10efd9a000001000000000001fffffff60000005f42485266535f4d", 0x23b, 0x10000}], 0x3, 0x0) r1 = getpid() rt_tgsigqueueinfo(r1, r1, 0x14, &(0x7f00000000c0)) tgkill(r0, r1, 0x34) [ 547.814946] FAT-fs (loop0): Directory bread(block 2574) failed 21:52:35 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x5, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7472616e733db4", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00']) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYRESOCT=r4], 0x2}, 0x1, 0x0, 0x0, 0x20080010}, 0x8084) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000b000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f00000000c0)="b805000000b9510000000f01c10f46a78900000066ba2100b067ee66ba4100edb9800000c00f3266ba400066ed0f30c4c271de9d0000000066b808008ed0660f38806f000f011c2666b8bf008ee0", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) ioctl$SG_EMULATED_HOST(r8, 0x2203, &(0x7f0000000140)) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) open(&(0x7f0000000340)='./file0\x00', 0x6240, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4cb]}) getsockopt$inet6_dccp_int(r8, 0x21, 0x6, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) [ 547.876491] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 547.967784] FAT-fs (loop0): Directory bread(block 2575) failed [ 547.990035] BTRFS: device fsid fff6f2a2-2997-48ae-b81e-1b00b10efd9a devid 0 transid 0 /dev/loop2 [ 547.999687] audit: type=1800 audit(1577397155.540:229): pid=14784 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16913 res=0 [ 548.029512] FAT-fs (loop0): Directory bread(block 2576) failed [ 548.054578] FAT-fs (loop0): Directory bread(block 2577) failed [ 548.084167] FAT-fs (loop0): Directory bread(block 2578) failed [ 548.136018] FAT-fs (loop0): Directory bread(block 2579) failed [ 548.222946] FAT-fs (loop0): Directory bread(block 2580) failed 21:52:36 executing program 3: prctl$PR_GET_THP_DISABLE(0x2a) syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x20) r1 = getpgrp(0xffffffffffffffff) ptrace$pokeuser(0x6, r1, 0x3, 0x1f) r2 = perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x1, 0x6, 0xa7, 0x4, 0x0, 0x8001, 0x200, 0xc, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0xffffffff, 0x7}, 0x300, 0xf, 0x4, 0x8, 0x8, 0x600, 0x7f}, r1, 0xffffffffffffffff, r0, 0x9) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x200, 0x0) r4 = dup3(r0, r3, 0x80000) ioctl$TIOCGWINSZ(r4, 0x5413, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0xf}) accept$netrom(r0, &(0x7f0000000200)={{0x3, @null}, [@rose, @null, @rose, @null, @default, @default, @null, @bcast]}, &(0x7f0000000280)=0x48) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp1\x00', 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f0000000300)=0x2) r6 = dup2(r3, 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r6, &(0x7f0000000740)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f00000003c0)={0x314, r7, 0x814, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xf8, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x81, @mcast2, 0x7f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x101}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xfff, @mcast2, 0xff}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb32}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x49bf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffeffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4b43}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xc24c}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x74, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ffc00}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fffffff}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x20, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_NET={0x10, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x59}]}, @TIPC_NLA_LINK={0xbc, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x53d2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x42}, 0x800) unshare(0x61a46ef35e27cf38) ioctl$TIOCL_GETSHIFTSTATE(r4, 0x541c, &(0x7f0000000780)={0x6, 0x99}) r8 = add_key(&(0x7f00000007c0)='pkcs7_test\x00', &(0x7f0000000800)={'syz', 0x1}, &(0x7f0000000840)="2100f87e4f62c0cd19a3cb69eb4f83143bc22e939c97a04fcc8d945884fe5a86e679f65838fcb08f1b0c05b91d743ee1d2c925c17c4e8fcdd777f74f5b1a5485f14cd5418d48fc382fad5c1f34684d11b81e52cf2a9c9f253f2d671c9359005c183f5df0e007b79e05cf5d1838bb794bba0070c759a163f9d54894d1d9b99de959db1b53ff9e135b9d5f9c62c6", 0x8d, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r8, &(0x7f0000000900)='rxrpc_s\x00', &(0x7f0000000940)='broadcast-link\x00') r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x30, r9, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x2df3, 0x3, 0xc7eb, 0x1}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0xb51d149d1fdf1664}, 0x0) r10 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000ac0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000b00)=0x4, &(0x7f0000000b40)=0x2) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x800) gettid() r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000b80)='/proc/self/net/pfkey\x00', 0x0, 0x0) r12 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/cachefiles\x00', 0x20800, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r12) 21:52:36 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040), 0x1, 0x0, 0x2aa, 0x20000001}, 0x20004004) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x200091}) socketpair(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r4, 0xc0106426, &(0x7f0000000280)={0x6, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}]}) openat$tun(0xffffffffffffff9c, 0x0, 0x101000, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x40) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x80c, r5) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000000)={'teql0\x00', 0x400}) semop(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @rand_addr=0x8000000}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='vxcan1\x00'}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0xd55, 0x1) ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000000)={{}, 0x0, 0x0, 0xffffffffffffffff}) 21:52:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='cmdline\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f0000000180)=0x1, 0x1f) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/172, 0x5}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x481, 0x0) ioctl$FS_IOC_FIEMAP(r4, 0xc020660b, &(0x7f00000003c0)={0x0, 0xc7, 0x0, 0xff, 0x5, [{0x0, 0x3f, 0x7, [], 0x105}, {0x1, 0x4, 0xffffffffffff82b0, [], 0x2000}, {0x2, 0x3, 0x100, [], 0xf2ec1f7a88a11520}, {0x0, 0x8, 0x10001, [], 0xa00}, {0x10001, 0x4, 0x400, [], 0x4}]}) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000500)=""/129) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x20, &(0x7f0000000280)={[{@mode={'mode', 0x3d, 0x20}}], [{@appraise='appraise'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@dont_measure='dont_measure'}, {@smackfstransmute={'smackfstransmute', 0x3d, '['}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x32, 0x30, 0x61, 0x35, 0x61, 0x1ba3a6f71aa9dfc6, 0x38], 0x2d, [0x32, 0x7c, 0x66, 0x3c03f99e453ab5d5], 0x2d, [0x0, 0x63, 0x33, 0x4bb07355fd335674], 0x2d, [0x18, 0x36, 0x36], 0x2d, [0x36, 0x30, 0x39, 0xf3c182ec11aa0ab8, 0x37, 0x37, 0x62, 0x61]}}}, {@fsmagic={'fsmagic', 0x3d, 0x401}}]}) r5 = getpid() rt_tgsigqueueinfo(r5, r5, 0x14, &(0x7f00000000c0)) ptrace$setopts(0x4206, r5, 0x7, 0x40) [ 693.725627] INFO: task syz-executor.5:14778 blocked for more than 140 seconds. [ 693.733191] Not tainted 4.19.91-syzkaller #0 [ 693.746239] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 693.754387] syz-executor.5 D28664 14778 7795 0x00000004 [ 693.772584] Call Trace: [ 693.775262] __schedule+0x866/0x1dc0 [ 693.785548] ? __mutex_lock+0x721/0x1300 [ 693.789657] ? firmware_map_remove+0x1a7/0x1a7 [ 693.794378] ? kasan_check_read+0x11/0x20 [ 693.805657] schedule+0x92/0x1c0 [ 693.809089] schedule_preempt_disabled+0x13/0x20 [ 693.814040] __mutex_lock+0x726/0x1300 [ 693.824289] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 693.830136] ? mutex_trylock+0x1e0/0x1e0 [ 693.834245] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 693.845648] ? lock_downgrade+0x880/0x880 [ 693.849929] mutex_lock_nested+0x16/0x20 [ 693.854017] ? mutex_lock_nested+0x16/0x20 [ 693.864965] rtnetlink_rcv_msg+0x40a/0xb00 [ 693.869615] ? rtnetlink_put_metrics+0x560/0x560 [ 693.874588] ? netdev_pick_tx+0x300/0x300 [ 693.885654] ? netlink_deliver_tap+0x22d/0xc20 [ 693.890276] ? find_held_lock+0x35/0x130 [ 693.894477] netlink_rcv_skb+0x17d/0x460 [ 693.905263] ? rtnetlink_put_metrics+0x560/0x560 [ 693.910552] ? netlink_ack+0xb30/0xb30 [ 693.914469] ? kasan_check_read+0x11/0x20 [ 693.925658] ? netlink_deliver_tap+0x254/0xc20 [ 693.930289] rtnetlink_rcv+0x1d/0x30 [ 693.934155] netlink_unicast+0x53a/0x730 [ 693.944823] ? netlink_attachskb+0x770/0x770 [ 693.949632] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.955209] netlink_sendmsg+0x8ae/0xd70 [ 693.967493] ? netlink_unicast+0x730/0x730 [ 693.971771] ? selinux_socket_sendmsg+0x36/0x40 [ 693.982776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.989899] ? security_socket_sendmsg+0x8d/0xc0 [ 693.994687] ? netlink_unicast+0x730/0x730 [ 694.004956] sock_sendmsg+0xd7/0x130 [ 694.010424] ___sys_sendmsg+0x803/0x920 [ 694.014627] ? copy_msghdr_from_user+0x430/0x430 [ 694.026290] ? lock_downgrade+0x880/0x880 [ 694.030494] ? kasan_check_read+0x11/0x20 [ 694.034674] ? __fget+0x367/0x540 [ 694.044206] ? iterate_fd+0x360/0x360 [ 694.049701] ? lock_downgrade+0x880/0x880 [ 694.053892] ? __fget_light+0x1a9/0x230 [ 694.064226] ? __fdget+0x1b/0x20 [ 694.069230] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 694.074918] __sys_sendmsg+0x105/0x1d0 [ 694.085130] ? __ia32_sys_shutdown+0x80/0x80 [ 694.091081] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 694.103110] ? do_syscall_64+0x26/0x620 [ 694.108720] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.114120] ? do_syscall_64+0x26/0x620 [ 694.124621] __x64_sys_sendmsg+0x78/0xb0 [ 694.132797] do_syscall_64+0xfd/0x620 [ 694.142949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.149867] RIP: 0033:0x45a919 [ 694.153110] Code: Bad RIP value. [ 694.162732] RSP: 002b:00007f4d8dd02c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.171989] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 694.185270] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 694.194203] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 694.207708] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dd036d4 [ 694.215026] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 00000000ffffffff [ 694.227671] INFO: task syz-executor.5:14782 blocked for more than 140 seconds. [ 694.235233] Not tainted 4.19.91-syzkaller #0 [ 694.246043] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 694.254045] syz-executor.5 D28664 14782 7795 0x00000004 [ 694.267644] Call Trace: [ 694.270310] __schedule+0x866/0x1dc0 [ 694.274073] ? __mutex_lock+0x721/0x1300 [ 694.283157] ? firmware_map_remove+0x1a7/0x1a7 [ 694.293365] ? kasan_check_read+0x11/0x20 [ 694.302625] schedule+0x92/0x1c0 [ 694.308775] schedule_preempt_disabled+0x13/0x20 [ 694.313566] __mutex_lock+0x726/0x1300 [ 694.322500] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 694.329730] ? mutex_trylock+0x1e0/0x1e0 [ 694.333832] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 694.343314] ? lock_downgrade+0x880/0x880 [ 694.350276] mutex_lock_nested+0x16/0x20 [ 694.355073] ? mutex_lock_nested+0x16/0x20 [ 694.364403] rtnetlink_rcv_msg+0x40a/0xb00 [ 694.374828] ? rtnetlink_put_metrics+0x560/0x560 [ 694.385630] ? netdev_pick_tx+0x300/0x300 [ 694.389890] ? netlink_deliver_tap+0x22d/0xc20 [ 694.394506] ? find_held_lock+0x35/0x130 [ 694.404741] netlink_rcv_skb+0x17d/0x460 [ 694.410429] ? rtnetlink_put_metrics+0x560/0x560 [ 694.415223] ? netlink_ack+0xb30/0xb30 [ 694.425197] ? kasan_check_read+0x11/0x20 [ 694.430900] ? netlink_deliver_tap+0x254/0xc20 [ 694.441485] rtnetlink_rcv+0x1d/0x30 [ 694.445236] netlink_unicast+0x53a/0x730 [ 694.450902] ? netlink_attachskb+0x770/0x770 [ 694.455358] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.467038] netlink_sendmsg+0x8ae/0xd70 [ 694.471150] ? netlink_unicast+0x730/0x730 [ 694.480574] ? selinux_socket_sendmsg+0x36/0x40 [ 694.488049] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.493890] ? security_socket_sendmsg+0x8d/0xc0 [ 694.503622] ? netlink_unicast+0x730/0x730 [ 694.511752] sock_sendmsg+0xd7/0x130 [ 694.520740] ___sys_sendmsg+0x803/0x920 [ 694.524766] ? copy_msghdr_from_user+0x430/0x430 [ 694.533339] ? lock_downgrade+0x880/0x880 [ 694.542498] ? kasan_check_read+0x11/0x20 [ 694.549536] ? __fget+0x367/0x540 [ 694.553028] ? iterate_fd+0x360/0x360 [ 694.561894] ? lock_downgrade+0x880/0x880 [ 694.569128] ? __fget_light+0x1a9/0x230 [ 694.573176] ? __fdget+0x1b/0x20 [ 694.581475] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 694.589676] __sys_sendmsg+0x105/0x1d0 [ 694.593603] ? __ia32_sys_shutdown+0x80/0x80 [ 694.603041] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 694.612787] ? do_syscall_64+0x26/0x620 [ 694.621949] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.630125] ? do_syscall_64+0x26/0x620 [ 694.634199] __x64_sys_sendmsg+0x78/0xb0 [ 694.644520] do_syscall_64+0xfd/0x620 [ 694.651035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.661154] RIP: 0033:0x45a919 [ 694.664389] Code: Bad RIP value. [ 694.670562] RSP: 002b:00007f4d8dce1c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.683431] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 694.694504] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 694.706978] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 694.714402] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dce26d4 [ 694.726941] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 00000000ffffffff [ 694.734351] INFO: task syz-executor.5:14788 blocked for more than 140 seconds. [ 694.747299] Not tainted 4.19.91-syzkaller #0 [ 694.752278] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 694.765748] syz-executor.5 D28664 14788 7795 0x00000004 [ 694.771443] Call Trace: [ 694.774071] __schedule+0x866/0x1dc0 [ 694.785200] ? __mutex_lock+0x721/0x1300 [ 694.791046] ? firmware_map_remove+0x1a7/0x1a7 [ 694.802373] ? kasan_check_read+0x11/0x20 [ 694.808160] schedule+0x92/0x1c0 [ 694.811687] schedule_preempt_disabled+0x13/0x20 [ 694.822694] __mutex_lock+0x726/0x1300 [ 694.828119] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 694.832590] ? mutex_trylock+0x1e0/0x1e0 [ 694.842971] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 694.851497] ? lock_downgrade+0x880/0x880 [ 694.861847] mutex_lock_nested+0x16/0x20 [ 694.867461] ? mutex_lock_nested+0x16/0x20 [ 694.871892] rtnetlink_rcv_msg+0x40a/0xb00 [ 694.882316] ? rtnetlink_put_metrics+0x560/0x560 [ 694.888809] ? netdev_pick_tx+0x300/0x300 [ 694.893011] ? netlink_deliver_tap+0x22d/0xc20 [ 694.903974] ? find_held_lock+0x35/0x130 [ 694.910869] netlink_rcv_skb+0x17d/0x460 [ 694.915197] ? rtnetlink_put_metrics+0x560/0x560 [ 694.926617] ? netlink_ack+0xb30/0xb30 [ 694.930577] ? kasan_check_read+0x11/0x20 [ 694.934760] ? netlink_deliver_tap+0x254/0xc20 [ 694.946010] rtnetlink_rcv+0x1d/0x30 [ 694.949794] netlink_unicast+0x53a/0x730 [ 694.954204] ? netlink_attachskb+0x770/0x770 [ 694.965025] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.972407] netlink_sendmsg+0x8ae/0xd70 [ 694.983108] ? netlink_unicast+0x730/0x730 [ 694.988943] ? selinux_socket_sendmsg+0x36/0x40 [ 694.993659] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.005889] ? security_socket_sendmsg+0x8d/0xc0 [ 695.010711] ? netlink_unicast+0x730/0x730 [ 695.014984] sock_sendmsg+0xd7/0x130 [ 695.024941] ___sys_sendmsg+0x803/0x920 [ 695.030697] ? copy_msghdr_from_user+0x430/0x430 [ 695.042596] ? lock_downgrade+0x880/0x880 [ 695.048273] ? kasan_check_read+0x11/0x20 [ 695.052719] ? __fget+0x367/0x540 [ 695.062273] ? iterate_fd+0x360/0x360 [ 695.067716] ? lock_downgrade+0x880/0x880 [ 695.071902] ? __fget_light+0x1a9/0x230 [ 695.082236] ? __fdget+0x1b/0x20 [ 695.087154] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 695.092878] __sys_sendmsg+0x105/0x1d0 [ 695.102903] ? __ia32_sys_shutdown+0x80/0x80 [ 695.109001] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 695.113792] ? do_syscall_64+0x26/0x620 [ 695.123875] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.130789] ? do_syscall_64+0x26/0x620 [ 695.134812] __x64_sys_sendmsg+0x78/0xb0 [ 695.145221] do_syscall_64+0xfd/0x620 [ 695.150600] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.161921] RIP: 0033:0x45a919 [ 695.165151] Code: Bad RIP value. [ 695.171114] RSP: 002b:00007f4d8dcc0c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.184812] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 695.193746] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 695.207153] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 695.214461] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dcc16d4 [ 695.227139] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 00000000ffffffff [ 695.234473] INFO: task syz-executor.5:14807 blocked for more than 140 seconds. [ 695.247925] Not tainted 4.19.91-syzkaller #0 [ 695.253143] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.264887] syz-executor.5 D28664 14807 7795 0x00000004 [ 695.274291] Call Trace: [ 695.280678] __schedule+0x866/0x1dc0 [ 695.284427] ? __mutex_lock+0x721/0x1300 [ 695.292323] ? firmware_map_remove+0x1a7/0x1a7 [ 695.301635] ? kasan_check_read+0x11/0x20 [ 695.309883] schedule+0x92/0x1c0 [ 695.313464] schedule_preempt_disabled+0x13/0x20 [ 695.322128] __mutex_lock+0x726/0x1300 [ 695.332491] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 695.340909] ? mutex_trylock+0x1e0/0x1e0 [ 695.345024] ? rtnetlink_rcv_msg+0x3d0/0xb00 [ 695.353529] ? lock_downgrade+0x880/0x880 [ 695.361781] mutex_lock_nested+0x16/0x20 [ 695.369962] ? mutex_lock_nested+0x16/0x20 [ 695.374262] rtnetlink_rcv_msg+0x40a/0xb00 [ 695.382641] ? rtnetlink_put_metrics+0x560/0x560 [ 695.391401] ? netdev_pick_tx+0x300/0x300 [ 695.399363] ? netlink_deliver_tap+0x22d/0xc20 [ 695.403991] ? find_held_lock+0x35/0x130 [ 695.411971] netlink_rcv_skb+0x17d/0x460 [ 695.419803] ? rtnetlink_put_metrics+0x560/0x560 [ 695.424602] ? netlink_ack+0xb30/0xb30 [ 695.433359] ? kasan_check_read+0x11/0x20 [ 695.441485] ? netlink_deliver_tap+0x254/0xc20 [ 695.450013] rtnetlink_rcv+0x1d/0x30 [ 695.453763] netlink_unicast+0x53a/0x730 [ 695.461603] ? netlink_attachskb+0x770/0x770 [ 695.469951] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.479392] netlink_sendmsg+0x8ae/0xd70 [ 695.483499] ? netlink_unicast+0x730/0x730 [ 695.492451] ? selinux_socket_sendmsg+0x36/0x40 [ 695.500915] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.510346] ? security_socket_sendmsg+0x8d/0xc0 [ 695.515137] ? netlink_unicast+0x730/0x730 [ 695.523343] sock_sendmsg+0xd7/0x130 [ 695.530828] ___sys_sendmsg+0x803/0x920 [ 695.534842] ? copy_msghdr_from_user+0x430/0x430 [ 695.543405] ? lock_downgrade+0x880/0x880 [ 695.551505] ? kasan_check_read+0x11/0x20 [ 695.560767] ? __fget+0x367/0x540 [ 695.564284] ? iterate_fd+0x360/0x360 [ 695.573406] ? lock_downgrade+0x880/0x880 [ 695.581541] ? __fget_light+0x1a9/0x230 [ 695.589593] ? __fdget+0x1b/0x20 [ 695.593006] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 695.602550] __sys_sendmsg+0x105/0x1d0 [ 695.610402] ? __ia32_sys_shutdown+0x80/0x80 [ 695.615042] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 695.623607] ? do_syscall_64+0x26/0x620 [ 695.631463] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.640745] ? do_syscall_64+0x26/0x620 [ 695.645066] __x64_sys_sendmsg+0x78/0xb0 [ 695.656920] do_syscall_64+0xfd/0x620 [ 695.660793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.672231] RIP: 0033:0x45a919 [ 695.676992] Code: Bad RIP value. [ 695.680384] RSP: 002b:00007f4d8dc9fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.695625] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 695.702933] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 695.717454] RBP: 000000000075c118 R08: 0000000000000000 R09: 0000000000000000 [ 695.724764] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4d8dca06d4 [ 695.738110] R13: 00000000004c9a29 R14: 00000000004e1930 R15: 00000000ffffffff [ 695.749961] INFO: task syz-executor.4:14779 blocked for more than 140 seconds. [ 695.761166] Not tainted 4.19.91-syzkaller #0 [ 695.770000] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 695.781712] syz-executor.4 D24952 14779 13753 0x00000004 [ 695.791336] Call Trace: [ 695.794059] __schedule+0x866/0x1dc0 [ 695.801581] ? finish_task_switch+0x146/0x7c0 [ 695.810164] ? firmware_map_remove+0x1a7/0x1a7 [ 695.814802] ? mark_held_locks+0x100/0x100 [ 695.824356] ? mark_held_locks+0xb1/0x100 [ 695.832506] schedule+0x92/0x1c0 [ 695.839765] schedule_timeout+0x8c8/0xfc0 [ 695.844101] ? wait_for_completion+0x294/0x440 [ 695.852706] ? find_held_lock+0x35/0x130 [ 695.860563] ? usleep_range+0x170/0x170 [ 695.864586] ? mark_held_locks+0xb1/0x100 [ 695.872695] ? _raw_spin_unlock_irq+0x28/0x90 [ 695.881069] ? wait_for_completion+0x294/0x440 [ 695.889517] ? _raw_spin_unlock_irq+0x28/0x90 [ 695.894062] ? lockdep_hardirqs_on+0x415/0x5d0 [ 695.902405] ? trace_hardirqs_on+0x67/0x220 [ 695.910614] wait_for_completion+0x29c/0x440 [ 695.915186] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 695.924902] ? preempt_schedule_common+0x4f/0xe0 [ 695.933493] ? wake_up_q+0x100/0x100 [ 695.940929] ? ___preempt_schedule+0x16/0x18 [ 695.945383] __flush_work+0x49f/0x870 [ 695.949542] ? insert_work+0x3a0/0x3a0 [ 695.953453] ? lock_downgrade+0x880/0x880 [ 695.965816] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 695.971216] ? lockdep_hardirqs_on+0x415/0x5d0 [ 695.982983] ? trace_hardirqs_on+0x67/0x220 [ 695.987657] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 695.993227] ? find_next_bit+0x107/0x130 [ 696.004610] flush_work+0x18/0x20 [ 696.008426] rollback_registered_many+0x516/0xda0 [ 696.013408] ? wake_up_klogd+0x99/0xd0 [ 696.024937] ? vprintk_emit+0x2a8/0x6d0 [ 696.029475] ? generic_xdp_install+0x3d0/0x3d0 [ 696.034097] ? vprintk_default+0x28/0x30 [ 696.045725] ? vprintk_func+0x86/0x189 [ 696.049677] ? printk+0xba/0xed [ 696.052988] ? rollback_registered+0x1d0/0x1d0 [ 696.066726] unregister_netdevice_many.part.0+0x1b/0x1f0 [ 696.072239] ? rollback_registered+0x1d0/0x1d0 [ 696.081881] unregister_netdevice_many+0x3b/0x50 [ 696.089434] rtnl_delete_link+0xda/0x130 [ 696.093536] ? rtnl_link_register+0xe0/0xe0 [ 696.103886] ? nla_parse+0x1fc/0x2f0 [ 696.110249] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 696.115309] rtnl_dellink+0x3a7/0x920 [ 696.124189] ? avc_has_extended_perms+0x10f0/0x10f0 [ 696.132189] ? rtnl_link_get_net_capable.constprop.0+0x230/0x230 [ 696.143401] ? rtnetlink_rcv_msg+0x40a/0xb00 [ 696.150564] ? __lock_is_held+0xb6/0x140 [ 696.154680] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 696.165600] ? rtnl_link_get_net_capable.constprop.0+0x230/0x230 [ 696.171925] rtnetlink_rcv_msg+0x463/0xb00 [ 696.184198] ? rtnetlink_put_metrics+0x560/0x560 [ 696.189376] ? netlink_sendmsg+0xd70/0xd70 [ 696.193751] ? netlink_deliver_tap+0x22d/0xc20 [ 696.205617] ? find_held_lock+0x35/0x130 [ 696.209723] netlink_rcv_skb+0x17d/0x460 [ 696.213815] ? rtnetlink_put_metrics+0x560/0x560 [ 696.224820] ? netlink_ack+0xb30/0xb30 [ 696.230123] ? kasan_check_read+0x11/0x20 [ 696.234312] ? netlink_deliver_tap+0x254/0xc20 [ 696.245635] rtnetlink_rcv+0x1d/0x30 [ 696.249428] netlink_unicast+0x53a/0x730 [ 696.253529] ? netlink_attachskb+0x770/0x770 [ 696.264665] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.270983] netlink_sendmsg+0x8ae/0xd70 [ 696.275094] ? netlink_unicast+0x730/0x730 [ 696.287247] ? selinux_socket_sendmsg+0x36/0x40 [ 696.291968] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.304385] ? security_socket_sendmsg+0x8d/0xc0 [ 696.311824] ? netlink_unicast+0x730/0x730 [ 696.321077] sock_sendmsg+0xd7/0x130 [ 696.324834] ___sys_sendmsg+0x803/0x920 [ 696.331742] ? copy_msghdr_from_user+0x430/0x430 [ 696.341379] ? lock_downgrade+0x880/0x880 [ 696.348256] ? kasan_check_read+0x11/0x20 [ 696.352449] ? __fget+0x367/0x540 [ 696.361788] ? iterate_fd+0x360/0x360 [ 696.370499] ? lock_downgrade+0x880/0x880 [ 696.374752] ? __fget_light+0x1a9/0x230 [ 696.383697] ? __fdget+0x1b/0x20 [ 696.389715] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 696.395759] __sys_sendmsg+0x105/0x1d0 [ 696.399776] ? __ia32_sys_shutdown+0x80/0x80 [ 696.404241] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 696.415643] ? do_syscall_64+0x26/0x620 [ 696.419662] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.425046] ? do_syscall_64+0x26/0x620 [ 696.436076] __x64_sys_sendmsg+0x78/0xb0 [ 696.440192] do_syscall_64+0xfd/0x620 [ 696.444019] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.455386] RIP: 0033:0x45a919 [ 696.459087] Code: Bad RIP value. [ 696.462479] RSP: 002b:00007fb6b8ed6c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.478151] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 696.491743] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 696.502268] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 696.514756] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb6b8ed76d4 [ 696.524914] R13: 00000000004c92db R14: 00000000004e1060 R15: 00000000ffffffff [ 696.537526] INFO: task syz-executor.2:14786 blocked for more than 140 seconds. [ 696.545099] Not tainted 4.19.91-syzkaller #0 [ 696.555944] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 696.564363] syz-executor.2 D25296 14786 13107 0x00000004 [ 696.576772] Call Trace: [ 696.579749] __schedule+0x866/0x1dc0 [ 696.583497] ? firmware_map_remove+0x1a7/0x1a7 [ 696.594759] ? mark_held_locks+0x100/0x100 [ 696.600585] schedule+0x92/0x1c0 [ 696.603988] schedule_timeout+0x8c8/0xfc0 [ 696.615687] ? wait_for_completion+0x294/0x440 [ 696.620473] ? find_held_lock+0x35/0x130 [ 696.624573] ? usleep_range+0x170/0x170 [ 696.635997] ? mark_held_locks+0xb1/0x100 [ 696.640414] ? _raw_spin_unlock_irq+0x28/0x90 [ 696.644943] ? wait_for_completion+0x294/0x440 [ 696.655847] ? _raw_spin_unlock_irq+0x28/0x90 [ 696.660395] ? lockdep_hardirqs_on+0x415/0x5d0 [ 696.665022] ? trace_hardirqs_on+0x67/0x220 [ 696.675602] wait_for_completion+0x29c/0x440 [ 696.680070] ? wait_for_completion_interruptible+0x4b0/0x4b0 [ 696.695673] ? preempt_schedule_common+0x4f/0xe0 [ 696.700481] ? wake_up_q+0x100/0x100 [ 696.704509] __flush_work+0x49f/0x870 [ 696.714903] ? insert_work+0x3a0/0x3a0 [ 696.719324] ? lock_downgrade+0x880/0x880 [ 696.723508] ? flush_workqueue_prep_pwqs+0x590/0x590 [ 696.735657] ? lockdep_hardirqs_on+0x415/0x5d0 [ 696.740300] ? trace_hardirqs_on+0x67/0x220 [ 696.744658] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 696.756983] ? find_next_bit+0x107/0x130 [ 696.761247] flush_work+0x18/0x20 [ 696.764724] lru_add_drain_all+0x3a6/0x500 [ 696.776196] invalidate_bdev+0xa0/0xe0 [ 696.780130] open_ctree+0x2185/0x6760 [ 696.783957] ? mark_held_locks+0xb1/0x100 [ 696.795333] ? __lock_is_held+0xb6/0x140 [ 696.799798] ? rcu_read_lock_sched_held+0x110/0x130 [ 696.804865] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.817935] ? close_ctree+0x8c0/0x8c0 [ 696.821874] ? btrfs_sync_fs+0x4b0/0x4b0 [ 696.829812] ? dlm_send_remote_unlock_request.constprop.0.cold+0x19/0x19 [ 696.841255] btrfs_mount_root+0x13b5/0x18f0 [ 696.849448] ? btrfs_decode_error+0x70/0x70 [ 696.854021] ? rcu_read_lock_sched_held+0x110/0x130 [ 696.863077] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.872607] ? pcpu_alloc+0x144/0x12b0 [ 696.880417] ? pcpu_balance_workfn+0x1270/0x1270 [ 696.889371] ? __lockdep_init_map+0x10c/0x5b0 [ 696.894106] ? __lockdep_init_map+0x10c/0x5b0 [ 696.902686] mount_fs+0xa8/0x31f [ 696.911083] vfs_kern_mount.part.0+0x6f/0x410 [ 696.919543] vfs_kern_mount+0x40/0x60 [ 696.923386] btrfs_mount+0x2b4/0x15e2 [ 696.933287] ? kasan_check_write+0x14/0x20 [ 696.941359] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 696.950153] ? mark_held_locks+0xb1/0x100 [ 696.954474] ? check_preemption_disabled+0x48/0x290 [ 696.963275] ? btrfs_remount+0x1300/0x1300 [ 696.971395] ? rcu_read_lock_sched_held+0x110/0x130 [ 696.980109] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.989588] ? pcpu_alloc+0x144/0x12b0 [ 696.993523] ? pcpu_balance_workfn+0x1270/0x1270 [ 697.002080] ? __lockdep_init_map+0x10c/0x5b0 [ 697.010348] ? __lockdep_init_map+0x10c/0x5b0 [ 697.014878] mount_fs+0xa8/0x31f [ 697.022014] ? mount_fs+0xa8/0x31f [ 697.029341] vfs_kern_mount.part.0+0x6f/0x410 [ 697.033873] do_mount+0x53e/0x2bc0 [ 697.042271] ? copy_mount_string+0x40/0x40 [ 697.050295] ? _copy_from_user+0xdd/0x150 [ 697.054490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.063750] ? copy_mount_options+0x280/0x3a0 [ 697.072038] ksys_mount+0xdb/0x150 [ 697.079409] __x64_sys_mount+0xbe/0x150 [ 697.083414] do_syscall_64+0xfd/0x620 [ 697.091379] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.100328] RIP: 0033:0x45d36a [ 697.103569] Code: Bad RIP value. [ 697.110729] RSP: 002b:00007f72ee0aea68 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5 [ 697.122163] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 000000000045d36a [ 697.133254] RDX: 00007f72ee0aeae0 RSI: 00000000200001c0 RDI: 00007f72ee0aeb00 [ 697.144632] RBP: 000000000075bf20 R08: 00007f72ee0aeb40 R09: 00007f72ee0aeae0 [ 697.155805] R10: 0000000000000003 R11: 0000000000000202 R12: 00007f72ee0af6d4 [ 697.163105] R13: 00000000004cacc7 R14: 00000000004e42e8 R15: 00000000ffffffff [ 697.177561] INFO: task syz-executor.3:14819 blocked for more than 140 seconds. [ 697.184952] Not tainted 4.19.91-syzkaller #0 [ 697.195912] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.204147] syz-executor.3 D29416 14819 11532 0x00000004 [ 697.216133] Call Trace: [ 697.218776] __schedule+0x866/0x1dc0 [ 697.222514] ? __mutex_lock+0x721/0x1300 [ 697.232808] ? firmware_map_remove+0x1a7/0x1a7 [ 697.239068] ? kasan_check_read+0x11/0x20 [ 697.243396] schedule+0x92/0x1c0 [ 697.253183] schedule_preempt_disabled+0x13/0x20 [ 697.259496] __mutex_lock+0x726/0x1300 [ 697.263417] ? rtnl_lock+0x17/0x20 [ 697.273244] ? mutex_trylock+0x1e0/0x1e0 [ 697.278859] ? find_held_lock+0x35/0x130 [ 697.283019] ? dev_load+0xb0/0x210 [ 697.292796] ? lock_downgrade+0x880/0x880 [ 697.298582] mutex_lock_nested+0x16/0x20 [ 697.302805] ? dev_load+0xe5/0x210 [ 697.313423] ? mutex_lock_nested+0x16/0x20 [ 697.319169] rtnl_lock+0x17/0x20 [ 697.322570] dev_ioctl+0x272/0xc68 [ 697.332179] sock_ioctl+0x483/0x610 [ 697.337323] ? dlci_ioctl_set+0x40/0x40 [ 697.341323] ? __fget+0x2c1/0x540 [ 697.344948] ? __might_sleep+0x95/0x190 [ 697.355622] ? dlci_ioctl_set+0x40/0x40 [ 697.359656] do_vfs_ioctl+0xd5f/0x1380 [ 697.363567] ? selinux_file_ioctl+0x46f/0x5e0 [ 697.375274] ? selinux_file_ioctl+0x125/0x5e0 [ 697.380140] ? ioctl_preallocate+0x210/0x210 [ 697.384575] ? selinux_file_mprotect+0x620/0x620 [ 697.396684] ? iterate_fd+0x360/0x360 [ 697.400531] ? nsecs_to_jiffies+0x30/0x30 [ 697.404711] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.418824] ? security_file_ioctl+0x8d/0xc0 [ 697.423299] ksys_ioctl+0xab/0xd0 [ 697.430890] __x64_sys_ioctl+0x73/0xb0 [ 697.435269] do_syscall_64+0xfd/0x620 [ 697.443856] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.452846] RIP: 0033:0x45a919 [ 697.459781] Code: Bad RIP value. [ 697.463170] RSP: 002b:00007fa1cd728c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.474731] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 697.485999] RDX: 0000000020000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 697.493307] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 697.507517] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1cd7296d4 [ 697.514832] R13: 00000000004cfd68 R14: 00000000004da058 R15: 00000000ffffffff [ 697.527445] INFO: task syz-executor.3:14820 blocked for more than 140 seconds. [ 697.535102] Not tainted 4.19.91-syzkaller #0 [ 697.545039] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.555803] syz-executor.3 D29416 14820 11532 0x00000004 [ 697.561557] Call Trace: [ 697.564182] __schedule+0x866/0x1dc0 [ 697.576697] ? __mutex_lock+0x721/0x1300 [ 697.580819] ? firmware_map_remove+0x1a7/0x1a7 [ 697.591675] ? kasan_check_read+0x11/0x20 [ 697.596290] schedule+0x92/0x1c0 [ 697.599695] schedule_preempt_disabled+0x13/0x20 [ 697.604567] __mutex_lock+0x726/0x1300 [ 697.615645] ? rtnl_lock+0x17/0x20 [ 697.619394] ? mutex_trylock+0x1e0/0x1e0 [ 697.623666] ? lock_downgrade+0x880/0x880 [ 697.635278] mutex_lock_nested+0x16/0x20 [ 697.640031] ? mutex_lock_nested+0x16/0x20 [ 697.644484] rtnl_lock+0x17/0x20 [ 697.655636] sock_do_ioctl+0x24e/0x2f0 [ 697.660531] ? compat_ifr_data_ioctl+0x160/0x160 [ 697.671980] ? mark_held_locks+0x100/0x100 [ 697.676658] sock_ioctl+0x325/0x610 [ 697.680404] ? dlci_ioctl_set+0x40/0x40 [ 697.684582] ? __fget+0x340/0x540 [ 697.695558] ? __might_sleep+0x95/0x190 [ 697.700119] ? dlci_ioctl_set+0x40/0x40 [ 697.704124] do_vfs_ioctl+0xd5f/0x1380 [ 697.716234] ? selinux_file_ioctl+0x46f/0x5e0 [ 697.720903] ? selinux_file_ioctl+0x125/0x5e0 [ 697.735177] ? ioctl_preallocate+0x210/0x210 [ 697.740224] ? selinux_file_mprotect+0x620/0x620 [ 697.745165] ? iterate_fd+0x360/0x360 [ 697.755656] ? nsecs_to_jiffies+0x30/0x30 [ 697.760814] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 697.773132] ? security_file_ioctl+0x8d/0xc0 [ 697.778437] ksys_ioctl+0xab/0xd0 [ 697.782011] __x64_sys_ioctl+0x73/0xb0 [ 697.793366] do_syscall_64+0xfd/0x620 [ 697.803387] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 697.820697] RIP: 0033:0x45a919 [ 697.824351] Code: Bad RIP value. [ 697.829559] RSP: 002b:00007fa1cd707c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.844084] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 697.855294] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000009 [ 697.871339] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 697.881243] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1cd7086d4 [ 697.894782] R13: 00000000004c4770 R14: 00000000004d9f80 R15: 00000000ffffffff [ 697.905144] INFO: task syz-executor.3:14821 blocked for more than 140 seconds. [ 697.919256] Not tainted 4.19.91-syzkaller #0 [ 697.924586] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 697.935588] syz-executor.3 D26728 14821 11532 0x00000004 [ 697.942118] Call Trace: [ 697.944748] __schedule+0x866/0x1dc0 [ 697.955743] ? __mutex_lock+0x721/0x1300 [ 697.960225] ? firmware_map_remove+0x1a7/0x1a7 [ 697.972103] ? kasan_check_read+0x11/0x20 [ 697.978721] schedule+0x92/0x1c0 [ 697.982577] schedule_preempt_disabled+0x13/0x20 [ 697.995154] __mutex_lock+0x726/0x1300 [ 697.999405] ? rtnl_lock+0x17/0x20 [ 698.003073] ? mutex_trylock+0x1e0/0x1e0 [ 698.015040] ? find_held_lock+0x35/0x130 [ 698.019905] ? dev_load+0xb0/0x210 [ 698.023585] ? lock_downgrade+0x880/0x880 [ 698.035446] mutex_lock_nested+0x16/0x20 [ 698.041198] ? dev_load+0xe5/0x210 [ 698.045142] ? mutex_lock_nested+0x16/0x20 [ 698.056801] rtnl_lock+0x17/0x20 [ 698.060418] dev_ioctl+0x272/0xc68 [ 698.064090] sock_ioctl+0x483/0x610 [ 698.072923] ? dlci_ioctl_set+0x40/0x40 [ 698.079982] ? __fget+0x2c1/0x540 [ 698.092592] ? __might_sleep+0x95/0x190 [ 698.099397] ? dlci_ioctl_set+0x40/0x40 [ 698.103532] do_vfs_ioctl+0xd5f/0x1380 [ 698.115224] ? selinux_file_ioctl+0x46f/0x5e0 [ 698.123658] ? selinux_file_ioctl+0x125/0x5e0 [ 698.133384] ? ioctl_preallocate+0x210/0x210 [ 698.140905] ? selinux_file_mprotect+0x620/0x620 [ 698.150641] ? iterate_fd+0x360/0x360 [ 698.154897] ? nsecs_to_jiffies+0x30/0x30 [ 698.161831] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.172577] ? security_file_ioctl+0x8d/0xc0 [ 698.179688] ksys_ioctl+0xab/0xd0 [ 698.183257] __x64_sys_ioctl+0x73/0xb0 [ 698.192222] do_syscall_64+0xfd/0x620 [ 698.198680] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 698.204259] RIP: 0033:0x45a919 [ 698.213629] Code: Bad RIP value. [ 698.220041] RSP: 002b:00007fa1cd6e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.234748] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 698.245843] RDX: 0000000020000080 RSI: 00000000000089f2 RDI: 0000000000000004 [ 698.253354] RBP: 000000000075c070 R08: 0000000000000000 R09: 0000000000000000 [ 698.269118] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1cd6e76d4 [ 698.280367] R13: 00000000004cfd68 R14: 00000000004da058 R15: 00000000ffffffff [ 698.294042] INFO: task syz-executor.3:14827 blocked for more than 140 seconds. [ 698.305788] Not tainted 4.19.91-syzkaller #0 [ 698.311620] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 698.327784] syz-executor.3 D29464 14827 11532 0x00000004 [ 698.335268] Call Trace: [ 698.342883] __schedule+0x866/0x1dc0 [ 698.349482] ? __mutex_lock+0x721/0x1300 [ 698.353688] ? firmware_map_remove+0x1a7/0x1a7 [ 698.363526] ? kasan_check_read+0x11/0x20 [ 698.370755] schedule+0x92/0x1c0 [ 698.374577] schedule_preempt_disabled+0x13/0x20 [ 698.386129] __mutex_lock+0x726/0x1300 [ 698.390404] ? rtnl_lock+0x17/0x20 [ 698.394511] ? mutex_trylock+0x1e0/0x1e0 [ 698.405680] ? lock_downgrade+0x880/0x880 [ 698.409985] mutex_lock_nested+0x16/0x20 [ 698.414069] ? mutex_lock_nested+0x16/0x20 [ 698.425360] rtnl_lock+0x17/0x20 [ 698.429375] sock_do_ioctl+0x24e/0x2f0 [ 698.433838] ? compat_ifr_data_ioctl+0x160/0x160 [ 698.445630] ? mark_held_locks+0x100/0x100 [ 698.449984] sock_ioctl+0x325/0x610 [ 698.453657] ? dlci_ioctl_set+0x40/0x40 [ 698.466633] ? __fget+0x340/0x540 [ 698.470579] ? __might_sleep+0x95/0x190 [ 698.474993] ? dlci_ioctl_set+0x40/0x40 [ 698.484501] do_vfs_ioctl+0xd5f/0x1380 [ 698.491034] ? selinux_file_ioctl+0x46f/0x5e0 [ 698.501103] ? selinux_file_ioctl+0x125/0x5e0 [ 698.508210] ? ioctl_preallocate+0x210/0x210 [ 698.513003] ? selinux_file_mprotect+0x620/0x620 [ 698.523666] ? iterate_fd+0x360/0x360 [ 698.530192] ? nsecs_to_jiffies+0x30/0x30 [ 698.534509] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 698.544920] ? security_file_ioctl+0x8d/0xc0 [ 698.552190] ksys_ioctl+0xab/0xd0 [ 698.560534] __x64_sys_ioctl+0x73/0xb0 [ 698.564542] do_syscall_64+0xfd/0x620 [ 698.570986] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 698.581106] RIP: 0033:0x45a919 [ 698.584418] Code: Bad RIP value. [ 698.590587] RSP: 002b:00007fa1cd6a4c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.603522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 698.613553] RDX: 0000000000400200 RSI: 0000000000008912 RDI: 0000000000000009 [ 698.625794] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000 [ 698.633324] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa1cd6a56d4 [ 698.646781] R13: 00000000004c4770 R14: 00000000004d9f80 R15: 00000000ffffffff [ 698.654300] [ 698.654300] Showing all locks held in the system: [ 698.667059] 3 locks held by kworker/1:0/19: [ 698.671416] #0: 0000000005278e85 ((wq_completion)"events"){+.+.}, at: process_one_work+0x87e/0x1750 [ 698.687338] #1: 000000000cd9e669 (deferred_process_work){+.+.}, at: process_one_work+0x8b4/0x1750 [ 698.704950] #2: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 698.715107] 1 lock held by khungtaskd/1068: [ 698.724875] #0: 0000000067854148 (rcu_read_lock){....}, at: debug_show_all_locks+0x5f/0x27e [ 698.736427] 1 lock held by rsyslogd/7620: [ 698.741499] #0: 0000000021999ab5 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0xee/0x110 [ 698.756121] 2 locks held by getty/7743: [ 698.760132] #0: 00000000b5c08829 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.775677] #1: 000000004f245d72 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.792583] 2 locks held by getty/7744: [ 698.798245] #0: 000000006f355ad7 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.814627] #1: 00000000c69e37ff (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.824074] 2 locks held by getty/7745: [ 698.835611] #0: 0000000077b4302b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.844081] #1: 0000000072b020d2 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.862034] 2 locks held by getty/7746: [ 698.867837] #0: 00000000fbcbbf23 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.882539] #1: 00000000360d097b (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.893379] 2 locks held by getty/7747: [ 698.903528] #0: 00000000307e2366 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.913310] #1: 00000000b91fea66 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.928322] 2 locks held by getty/7748: [ 698.932325] #0: 00000000bea0ab3b (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.945343] #1: 00000000f6707c82 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.954548] 2 locks held by getty/7749: [ 698.965879] #0: 000000005de33863 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x33/0x40 [ 698.974289] #1: 00000000da821bf5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x232/0x1b70 [ 698.990542] 3 locks held by kworker/1:5/12311: [ 698.995247] #0: 0000000088e2c491 ((wq_completion)"%s"("ipv6_addrconf")){+.+.}, at: process_one_work+0x87e/0x1750 [ 699.012882] #1: 00000000a2a85f5d ((addr_chk_work).work){+.+.}, at: process_one_work+0x8b4/0x1750 [ 699.022266] #2: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.036746] 1 lock held by syz-executor.5/14778: [ 699.041531] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 699.055898] 1 lock held by syz-executor.5/14782: [ 699.060819] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 699.076106] 1 lock held by syz-executor.5/14788: [ 699.081013] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 699.096642] 1 lock held by syz-executor.5/14807: [ 699.101429] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 699.115983] 2 locks held by syz-executor.4/14779: [ 699.121037] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnetlink_rcv_msg+0x40a/0xb00 [ 699.135427] #1: 000000004605c19c (cpu_hotplug_lock.rw_sem){++++}, at: rollback_registered_many+0x3df/0xda0 [ 699.152857] 1 lock held by syz-executor.1/14784: [ 699.157951] 2 locks held by syz-executor.2/14786: [ 699.162807] #0: 00000000350c9e3a (&type->s_umount_key#87/1){+.+.}, at: sget_userns+0x208/0xd30 [ 699.181258] #1: 00000000491d9c23 (lock#6){+.+.}, at: lru_add_drain_all+0x60/0x500 [ 699.189375] 1 lock held by syz-executor.3/14819: [ 699.194321] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.208943] 1 lock held by syz-executor.3/14820: [ 699.213848] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.225920] 1 lock held by syz-executor.3/14821: [ 699.230702] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.245632] 1 lock held by syz-executor.3/14827: [ 699.250506] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.264307] 1 lock held by syz-executor.0/14824: [ 699.269415] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.284093] 1 lock held by syz-executor.0/14825: [ 699.289186] #0: 00000000c5de0183 (rtnl_mutex){+.+.}, at: rtnl_lock+0x17/0x20 [ 699.303651] [ 699.307610] ============================================= [ 699.307610] [ 699.314652] NMI backtrace for cpu 1 [ 699.318562] CPU: 1 PID: 1068 Comm: khungtaskd Not tainted 4.19.91-syzkaller #0 [ 699.325937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.335308] Call Trace: [ 699.337926] dump_stack+0x197/0x210 [ 699.341586] nmi_cpu_backtrace.cold+0x63/0xa4 [ 699.346240] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 699.351194] nmi_trigger_cpumask_backtrace+0x1b0/0x1f8 [ 699.356501] arch_trigger_cpumask_backtrace+0x14/0x20 [ 699.361798] watchdog+0x9df/0xee0 [ 699.365284] kthread+0x354/0x420 [ 699.368766] ? reset_hung_task_detector+0x30/0x30 [ 699.373693] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 699.379255] ret_from_fork+0x24/0x30 [ 699.383300] Sending NMI from CPU 1 to CPUs 0: [ 699.388412] NMI backtrace for cpu 0 [ 699.388419] CPU: 0 PID: 14784 Comm: syz-executor.1 Not tainted 4.19.91-syzkaller #0 [ 699.388427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.388431] RIP: 0010:vmx_vcpu_run+0x1529/0x269a [ 699.388446] Code: fe 00 02 00 80 0f 85 4b f2 ff ff e8 01 44 4e 00 48 c7 c7 80 eb a3 87 e8 e5 87 45 02 48 8b 04 24 65 48 89 05 79 d0 e4 7e cd 02 <48> c7 c7 80 eb a3 87 e8 cb 87 45 02 4c 89 ea 48 b8 00 00 00 00 00 [ 699.388450] RSP: 0018:ffff8880a87af8e0 EFLAGS: 00000096 [ 699.388459] RAX: ffff888077c60100 RBX: 0000000080000202 RCX: ffffc9000800d000 [ 699.388465] RDX: 0000000000040000 RSI: ffffffff836285c8 RDI: 0000000000000005 [ 699.388471] RBP: ffff8880a87afb20 R08: ffff88804941c700 R09: 0000000000000000 [ 699.388477] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888077c6580c [ 699.388483] R13: ffff888077c65810 R14: 0000000080000200 R15: ffff888077c60100 [ 699.388490] FS: 00007fb4c0de2700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 699.388495] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 699.388501] CR2: 0000000000000000 CR3: 000000009dca7000 CR4: 00000000001426f0 [ 699.388507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 699.388512] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 699.388515] Call Trace: [ 699.388519] ? vmx_handle_exit+0x16b0/0x16b0 [ 699.388524] ? rcu_read_lock_sched_held+0x110/0x130 [ 699.388528] ? rcu_note_context_switch+0xc4a/0x1720 [ 699.388533] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.388537] ? check_preemption_disabled+0x48/0x290 [ 699.388541] ? vcpu_enter_guest+0xc46/0x5ed0 [ 699.388546] ? emulator_read_emulated+0x50/0x50 [ 699.388550] ? kvm_check_async_pf_completion+0x2d8/0x440 [ 699.388587] ? kvm_cpu_has_pending_timer+0x18/0x80 [ 699.388592] kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 699.388596] ? kvm_arch_vcpu_ioctl_run+0x457/0x16b0 [ 699.388600] kvm_vcpu_ioctl+0x4dc/0xf90 [ 699.388604] ? kvm_vcpu_block+0xcc0/0xcc0 [ 699.388608] ? mark_held_locks+0x100/0x100 [ 699.388612] ? __might_fault+0x12b/0x1e0 [ 699.388615] ? __fget+0x340/0x540 [ 699.388619] ? find_held_lock+0x35/0x130 [ 699.388622] ? __fget+0x340/0x540 [ 699.388626] ? kvm_vcpu_block+0xcc0/0xcc0 [ 699.388630] do_vfs_ioctl+0xd5f/0x1380 [ 699.388635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.388639] ? selinux_file_ioctl+0x125/0x5e0 [ 699.388643] ? ioctl_preallocate+0x210/0x210 [ 699.388647] ? selinux_file_mprotect+0x620/0x620 [ 699.388651] ? iterate_fd+0x360/0x360 [ 699.388655] ? nsecs_to_jiffies+0x30/0x30 [ 699.388660] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 699.388664] ? security_file_ioctl+0x8d/0xc0 [ 699.388667] ksys_ioctl+0xab/0xd0 [ 699.388671] __x64_sys_ioctl+0x73/0xb0 [ 699.388674] do_syscall_64+0xfd/0x620 [ 699.388679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 699.388682] RIP: 0033:0x45a919 [ 699.388696] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 699.388701] RSP: 002b:00007fb4c0de1c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.388711] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a919 [ 699.388717] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 699.388723] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 699.388729] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4c0de26d4 [ 699.388734] R13: 00000000004c410f R14: 00000000004d9818 R15: 00000000ffffffff [ 699.396961] Kernel panic - not syncing: hung_task: blocked tasks [ 699.731089] CPU: 1 PID: 1068 Comm: khungtaskd Not tainted 4.19.91-syzkaller #0 [ 699.738464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.747995] Call Trace: [ 699.750621] dump_stack+0x197/0x210 [ 699.754281] panic+0x26a/0x50e [ 699.757658] ? __warn_printk+0xf3/0xf3 [ 699.761566] ? lapic_can_unplug_cpu.cold+0x47/0x47 [ 699.766526] ? ___preempt_schedule+0x16/0x18 [ 699.770966] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 699.776438] ? nmi_trigger_cpumask_backtrace+0x1c1/0x1f8 [ 699.781913] ? nmi_trigger_cpumask_backtrace+0x1cb/0x1f8 [ 699.787385] ? nmi_trigger_cpumask_backtrace+0x165/0x1f8 [ 699.792863] watchdog+0x9f0/0xee0 [ 699.796420] kthread+0x354/0x420 [ 699.799892] ? reset_hung_task_detector+0x30/0x30 [ 699.804752] ? kthread_cancel_delayed_work_sync+0x20/0x20 [ 699.810317] ret_from_fork+0x24/0x30 [ 699.815915] Kernel Offset: disabled [ 699.819559] Rebooting in 86400 seconds..