0x81, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r7, r6)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x8)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xfe)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:36 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f00000001c0), 0x4)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffe000/0x1000)=nil, 0x0, 0x2, 0x31, &(0x7f0000ffc000/0x4000)=nil, 0xffffffff})
getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/sockstat6\x00')
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000180)=0x3)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
ioctl$DRM_IOCTL_GET_MAGIC(r6, 0x80046402, &(0x7f0000000100)=0x800)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8)
r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r8 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r10=>0x0})
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="27169ed6ebb70f8f508e16160ba20000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES16=r11, @ANYRES64=r10/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
sendmsg$can_raw(r7, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1d, r9}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=@canfd={{0x3, 0x0, 0x1, 0x1}, 0x31, 0x2, 0x0, 0x0, "019a90cb74a2c91626308435527cc5d67c9e4beaea914a9b6ce09b596dc7a4f153d989d5eef25b2cde916f96d56cf1189ace492e2a35dd41fbeabcfd4a91d39f"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x20010044)

04:54:36 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.impure\x00')

04:54:36 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = getpgrp(r0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x28d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x2a)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8000000000000008, 0x8130f49fffe0fd3f)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040))
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r9, r7)
openat$nvram(0xffffffffffffff9c, 0x0, 0x50001, 0x0)

04:54:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xffffffffffffffd9)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/udp\x00')
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
fcntl$dupfd(r2, 0x406, r7)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_GET_MAGIC(r8, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x4)
close(0xffffffffffffffff)
r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  861.850644] net_ratelimit: 15 callbacks suppressed
[  861.850662] protocol 88fb is buggy, dev hsr_slave_0
[  861.861045] protocol 88fb is buggy, dev hsr_slave_1
04:54:36 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000080), 0x4)

04:54:36 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x23c380, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  862.160103] protocol 88fb is buggy, dev hsr_slave_0
[  862.165213] protocol 88fb is buggy, dev hsr_slave_1
[  862.170350] protocol 88fb is buggy, dev hsr_slave_0
[  862.175420] protocol 88fb is buggy, dev hsr_slave_1
04:54:36 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000040))
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x2, 0x0, 0x0)

04:54:37 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140)='nl80211\x00')
sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_REG_RULES={0x24, 0x22, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x28000801}, 0x1)
sendto$phonet(r0, &(0x7f0000000040)="074868d387b73f28e5737faef01657ced132bd83120f0ef5d0d6310325ad12aa320259a29299b544ae1c8cd3e72bc1d4a4e69544197ccff12cd12ff29dad9aff1d3d28c275115b95e7aeb86694075b0fd3f8d2a26fadb5edd99d9998f28692cf8cbe181fb89df45eeada2c85ddec2824889fadba901bbd08919f72dddc943a50f0bee380153b6a5547ff6505ba4d38e30606878d9248728567d6b25c296d3ed554498836cd5661aa8eed3f5da137c3e5668ab2f144f6", 0xb6, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:37 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x2a0541)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x20880, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x60, 0xf6, &(0x7f0000000240)="058966798c9b6a39c5f1490ff22a3442f91f2d42f1ed19a443f140a2050f22712effbadd556ba2a6d0781fde42f7ef4ed401ade55a6c48928c4713ca8265c8b6f8d66735c7f7aad48abb949b3ececd39003b873a16c301ac636f4c28fe7034e2", &(0x7f0000000340)=""/246, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000080)="9b82", &(0x7f0000000540)}, 0x40)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast2}}, 0x5, 0x3, 0x100, 0x0, 0xd, 0x4, 0x5}, &(0x7f00000000c0)=0x9c)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x6420180}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fedbdf250800000014000600627269641e655f736c6176655f310000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004801)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r3, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x10, 0x3, @dev={0xfe, 0x80, [], 0x1b}}, @NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:removable_device_t:s0\x00'}]}, 0xff4f}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)=0x9)
openat$cachefiles(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cachefiles\x00', 0x80, 0x0)

04:54:37 executing program 0:
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0xfffffffffffffed9}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0xfffffffffffffdf5, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0], 0x17)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x1000000000000, 0x300)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:37 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x200000, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
socket$phonet_pipe(0x23, 0x5, 0x2)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0)

04:54:37 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)
shmat(r5, &(0x7f0000001000/0x1000)=nil, 0x6000)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000000c0))
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:37 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
dup2(r1, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:37 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r5, r4)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  862.960136] protocol 88fb is buggy, dev hsr_slave_0
[  862.965288] protocol 88fb is buggy, dev hsr_slave_1
04:54:37 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = getpgrp(r0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x28d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x2a)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8000000000000008, 0x8130f49fffe0fd3f)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040))
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r9, r7)
openat$nvram(0xffffffffffffff9c, 0x0, 0x50001, 0x0)

04:54:37 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x400080)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/34, 0x22}, {&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/153, 0x99}, {&(0x7f0000001180)=""/251, 0xfb}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000001300)=""/18, 0x12}, {&(0x7f0000001340)=""/188, 0xbc}, {&(0x7f0000001400)=""/178, 0xb2}], 0x9)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:54:37 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:37 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  863.520113] protocol 88fb is buggy, dev hsr_slave_0
[  863.525287] protocol 88fb is buggy, dev hsr_slave_1
04:54:38 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x20000)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640), &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000080)={<r3=>r2, 0xffff, 0x9, [0x7f, 0x3f, 0x82, 0x1, 0x9, 0xa3a7, 0x8, 0x1, 0x6]}, &(0x7f00000000c0)=0x1a)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r3, 0xffffffff}, &(0x7f0000000140)=0x8)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x9, 0x0, 0x3, 0x400000000000, 0x10000000000}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x21, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)=0x4040dc)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:38 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2, 0x1000}, 0xffffffffffffff0d)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:38 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200000}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
accept4$netrom(r4, &(0x7f0000000300)={{}, [@null, @default, @default, @default, @bcast, @null, @remote, @default]}, &(0x7f0000000140)=0x48, 0x800)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000000000028)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r7, r6)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:38 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x4, 0x100)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0x90000, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='{\x00')

04:54:38 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x100000200000, 0x800)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PPPIOCSCOMPRESS(r1, 0x4010744d)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2040, 0x0)
ioctl$TIOCGSID(r3, 0x5429, &(0x7f00000000c0))
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
clock_gettime(0x0, &(0x7f0000000000)={<r4=>0x0, <r5=>0x0})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={r4, r5/1000+30000}, 0x10)

04:54:38 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = getpgrp(0x0)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
tgkill(r1, r2, 0x11)

04:54:39 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x2000, 0x0)
connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x0, @dev={[], 0x2f}, 'netpci0\x00'}}, 0x1e)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

04:54:39 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = getpgrp(r0)
prlimit64(r1, 0xe, &(0x7f0000000140)={0x9, 0x28d}, 0x0)
r2 = getpid()
sched_setattr(r2, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$setpipe(r5, 0x407, 0x2a)
write(r5, &(0x7f0000000340), 0x41395527)
vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0xffffffffffffffff, &(0x7f0000000080)={0x38, 0x0, 0x0, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f00000001c0)='/dev/dri/card#\x00', 0x8000000000000008, 0x8130f49fffe0fd3f)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r8, &(0x7f00000002c0)=[{&(0x7f00000000c0)='7', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
ioctl$FIBMAP(r8, 0x1, &(0x7f0000000040))
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r9, r7)
openat$nvram(0xffffffffffffff9c, 0x0, 0x50001, 0x0)

04:54:39 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000200)={0xffffffff, 0xfffffffffffffffb})
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100)='l2tp\x00')
sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x600800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r2, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20}, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
lseek(r3, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write(r5, &(0x7f0000000240)="23d1c2f9dcf1735ed4e2ef5adc242b0968560f922aa7d7fce152abb159efd1830521502a77edc9caa98a90acd26b10396b9e1d8c915ee0f268e78bda45a8130054b7d3c9940be09b93af10381e3d3c60e9c19078a5af6944a71bf0d7963129de27fac34dc14fe6575c9726b472e67746524e82d2ce47e2dd4d376ba283a35e33e1841db6bb1acf99be3ebab72e57c4329a83cff1384a966daf4aa812ba7141c1b51e863906640a0ba5cece0fe70ee80fe4b15d3867b8086dfa0828c28ec3229f08c0dc251466284eea7cb2a3a0f1f11c", 0xd0)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:39 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000140)={0x9d0000, 0x9, 0x8, r6, 0x0, &(0x7f0000000100)={0x9b0954, 0x2d056cc8, [], @string=&(0x7f00000000c0)}})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:39 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000440)={0xbc, 0x20, &(0x7f0000000040)})

04:54:39 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x402)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:54:39 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7ff, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x32)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x100)
creat(&(0x7f0000000140)='./bus\x00', 0x200)

04:54:39 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000080)={0x0, 0x70, 0x0, 0x7f, 0x1, 0x2, 0x0, 0x1ff, 0x2980, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000040), 0x7fbbfcd26ef0d2}, 0xa000, 0x0, 0x7, 0x5, 0x41c5, 0x81, 0x4})
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0xf000, 0x102000})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(r4, 0x1000, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:40 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={<r3=>0x0, 0x9}, &(0x7f0000000080)=0xc)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x8}, 0x8)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:40 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x40000)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:40 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./file1\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x80000103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r5 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:40 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCBRADDBR(r5, 0x89a0, &(0x7f00000000c0)='bond_slave_0\x00')
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:41 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2, 0x1000}, 0xffffffffffffff0d)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:41 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000140)=0x880bc)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r6, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000040)={&(0x7f0000000100)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0xf0ffff}, [@typed={0x254, 0x100000001}]}, 0x268}}, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r8, r7)
openat$nvram(0xffffffffffffff9c, 0x0, 0x381000, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

04:54:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000000c0)={<r4=>0x0, 0x100000, r3})
mkdir(&(0x7f0000000100)='./file0\x00', 0x1)
ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000040)={0x0, <r5=>r4})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000080)={r5, 0x80000})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:41 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000000c0)=0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:41 executing program 3:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000040)={0x96, 0x7, 0x4, 0x20, 0xffffff00, {0x77359400}, {0x3, 0x1, 0x6, 0xd1, 0x20, 0x0, "c0401bd6"}, 0x10000, 0x3, @fd=r0, 0x2, 0x0, <r1=>0xffffffffffffffff})
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x48)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x14000)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)

04:54:41 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x1, 0x20000)
ioctl$DRM_IOCTL_GET_STATS(r0, 0x80f86406, &(0x7f0000000500)=""/177)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf64(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x4af)

[  867.120145] net_ratelimit: 16 callbacks suppressed
[  867.120150] protocol 88fb is buggy, dev hsr_slave_0
[  867.130197] protocol 88fb is buggy, dev hsr_slave_1
04:54:41 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'rose0\x00', {0x2, 0x4e23, @loopback}})
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:41 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f00000000c0), 0x0, 0xe)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x30)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffc00000000, 0x628140)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:42 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x402810, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/context\x00', 0x2, 0x0)
ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f00000000c0)="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")
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0)
ioctl$TCGETX(r0, 0x5432, &(0x7f0000000040))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:54:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x224a02, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
fcntl$setpipe(r5, 0x407, 0x2e)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000), 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r8, r7)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r9 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  867.680441] protocol 88fb is buggy, dev hsr_slave_0
[  867.685539] protocol 88fb is buggy, dev hsr_slave_1
04:54:42 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)
shmat(r5, &(0x7f0000001000/0x1000)=nil, 0x6000)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000000c0))
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:42 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x9, 0x400400)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_ONE_REG(r4, 0x4010aeab, &(0x7f0000000080)={0x5cb, 0x7})
mmap$snddsp_control(&(0x7f0000ffc000/0x2000)=nil, 0x1000, 0x3000002, 0x40010, r1, 0x83000000)

04:54:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x5, 0x0, 0x6, 0x4, 0x1, 0x4}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000001580)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f0000001500)=[{&(0x7f0000001600)=""/254, 0xfe}, {&(0x7f00000015c0)=""/56, 0x38}, {&(0x7f00000001c0)=""/28, 0x1c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000000240)=""/25, 0x19}], 0x6}, 0x7f}], 0x1, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:42 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x58, 0xc, 0x6, 0x4, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x8)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  868.080121] protocol 88fb is buggy, dev hsr_slave_0
[  868.085354] protocol 88fb is buggy, dev hsr_slave_1
[  868.145635] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
04:54:42 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(r0, &(0x7f00000001c0)='autogroup\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  868.248313] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[  868.255812] CPU: 0 PID: 13352 Comm: syz-executor.3 Not tainted 4.14.163-syzkaller #0
[  868.263721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  868.273085] Call Trace:
[  868.275690]  dump_stack+0x142/0x197
[  868.279334]  warn_alloc.cold+0x96/0x1af
[  868.283323]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  868.288188]  ? wait_for_completion+0x420/0x420
[  868.292789]  __alloc_pages_slowpath+0x23c6/0x2930
[  868.297656]  ? warn_alloc+0xf0/0xf0
[  868.301304]  ? __might_sleep+0x93/0xb0
[  868.305206]  __alloc_pages_nodemask+0x62c/0x7a0
[  868.309888]  ? rcu_read_lock_sched_held+0x110/0x130
[  868.314917]  ? __alloc_pages_slowpath+0x2930/0x2930
[  868.319957]  alloc_pages_current+0xec/0x1e0
[  868.324293]  kvm_mmu_create+0xdf/0x1e0
[  868.328192]  kvm_arch_vcpu_init+0x29c/0x8e0
[  868.332528]  kvm_vcpu_init+0x272/0x360
[  868.336431]  vmx_create_vcpu+0xfc/0x2aa0
[  868.340536]  ? mutex_trylock+0x1c0/0x1c0
[  868.344619]  ? handle_rdmsr+0x6e0/0x6e0
[  868.348604]  ? wait_for_completion+0x420/0x420
[  868.353200]  kvm_arch_vcpu_create+0x8c/0xc0
[  868.357563]  kvm_vm_ioctl+0x501/0x1600
[  868.361468]  ? __lock_acquire+0x5f7/0x4620
[  868.365711]  ? get_unused_fd_flags+0xd0/0xd0
[  868.370138]  ? kvm_vcpu_release+0xa0/0xa0
[  868.374295]  ? trace_hardirqs_on+0x10/0x10
[  868.378545]  ? trace_hardirqs_on+0x10/0x10
[  868.382787]  ? __might_fault+0x110/0x1d0
[  868.386857]  ? save_trace+0x290/0x290
[  868.390662]  ? __might_fault+0x110/0x1d0
[  868.394730]  ? __fget+0x210/0x370
[  868.398197]  ? find_held_lock+0x35/0x130
[  868.400125] protocol 88fb is buggy, dev hsr_slave_0
[  868.402262]  ? __fget+0x210/0x370
[  868.402279]  ? kvm_vcpu_release+0xa0/0xa0
[  868.402292]  do_vfs_ioctl+0x7ae/0x1060
[  868.402306]  ? selinux_file_mprotect+0x5d0/0x5d0
[  868.402319]  ? lock_downgrade+0x740/0x740
[  868.407371] protocol 88fb is buggy, dev hsr_slave_1
[  868.410757]  ? ioctl_preallocate+0x1c0/0x1c0
[  868.410769]  ? __fget+0x237/0x370
[  868.410785]  ? security_file_ioctl+0x89/0xb0
[  868.410798]  SyS_ioctl+0x8f/0xc0
[  868.415000] protocol 88fb is buggy, dev hsr_slave_0
[  868.418801]  ? do_vfs_ioctl+0x1060/0x1060
[  868.423629] protocol 88fb is buggy, dev hsr_slave_1
[  868.427707]  do_syscall_64+0x1e8/0x640
[  868.466351]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  868.471213]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  868.476410] RIP: 0033:0x45af49
[  868.479599] RSP: 002b:00007f8e000f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  868.487313] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  868.494616] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000004
[  868.501898] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  868.509298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e000f36d4
[  868.516577] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  868.535003] Mem-Info:
[  868.537596] active_anon:847250 inactive_anon:1741 isolated_anon:0
[  868.537596]  active_file:4451 inactive_file:5433 isolated_file:15
[  868.537596]  unevictable:0 dirty:43 writeback:5 unstable:0
[  868.537596]  slab_reclaimable:15642 slab_unreclaimable:127258
[  868.537596]  mapped:60049 shmem:1786 pagetables:27869 bounce:0
[  868.537596]  free:488919 free_pcp:327 free_cma:0
[  868.578253] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):60kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  868.609796] Node 1 active_anon:1506908kB inactive_anon:64kB active_file:17804kB inactive_file:21728kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25088kB dirty:168kB writeback:20kB shmem:64kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  868.689758] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  868.721712] lowmem_reserve[]: 0 2569 2569 2569 2569
04:54:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  868.726988] Node 0 DMA32 free:29984kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:528kB local_pcp:188kB free_cma:0kB
04:54:43 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
r5 = getpid()
sched_setscheduler(r5, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETXF(r6, 0x5434, &(0x7f00000000c0)={0x5, 0x1000, [0x1, 0x1, 0xffff, 0xeb, 0x7], 0x1ff})
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  868.823735] lowmem_reserve[]: 0 0 0 0 0
[  868.827928] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:54:43 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000000000/0x3000)=nil)
shmat(r5, &(0x7f0000001000/0x1000)=nil, 0x6000)
shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f00000000c0))
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  868.935737] lowmem_reserve[]: 0 0 0 0 0
[  868.949061] Node 1 Normal free:1915668kB min:53508kB low:66884kB high:80260kB active_anon:1506908kB inactive_anon:64kB active_file:17804kB inactive_file:21728kB unevictable:0kB writepending:392kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20352kB pagetables:46848kB bounce:0kB free_pcp:1240kB local_pcp:636kB free_cma:0kB
04:54:43 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x3d, 0x1, 0x4, 0x400, 0x5, 0x0, 0x7, 0x0, 0xfffffffd}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  869.112857] lowmem_reserve[]: 0 0 0 0 0
[  869.122346] Node 0 DMA: 1*4kB (U) 8*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB
[  869.139286] Node 0 DMA32: 26*4kB (MH) 67*8kB (UME) 799*16kB (UM) 514*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29936kB
[  869.153314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  869.164611] Node 1 Normal: 260*4kB (UME) 166*8kB (UME) 140*16kB (UME) 43*32kB (UME) 31*64kB (UME) 18*128kB (M) 13*256kB (M) 8*512kB (M) 6*1024kB (ME) 2*2048kB (ME) 461*4096kB (M) = 1916192kB
[  869.195602] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  869.213959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  869.232865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  869.262144] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  869.297095] 11695 total pagecache pages
[  869.314140] 0 pages in swap cache
[  869.328233] Swap cache stats: add 0, delete 0, find 0/0
[  869.341623] Free swap  = 0kB
[  869.348123] Total swap = 0kB
[  869.354662] 1965979 pages RAM
[  869.361286] 0 pages HighMem/MovableOnly
04:54:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x2a)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000500)}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r5, r4)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x23, 0x1a6273f2b2e289f7, 0xb)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  869.386866] 335871 pages reserved
[  869.400259] 0 pages cma reserved
04:54:44 executing program 3:
r0 = socket(0x1a, 0x800, 0x40)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r1)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='bpf\x00', 0x20, &(0x7f00000000c0)={[{@mode={'mode', 0x3d, 0x1}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x40000000000000}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x9}}, {@mode={'mode', 0x3d, 0xe}}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@euid_gt={'euid>', r1}}]})
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, 0x0)

04:54:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20000)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x4, [0x0, <r2=>0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x14)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e22, 0xffff, @loopback, 0x2}}}, 0x84)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x2a)
write(r2, &(0x7f0000000340), 0x41395527)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000500), 0xfffffffffffffc5b}, {&(0x7f0000000300)="bb623a03eb4c36d7a271fe3b58794f4b93fce8cf7f02b261ef9df3da42e29a10ec78ad03bdbce90ba58dc2e2ac69a9c07b5a2ca395de683efd8a7547d2d4987b238a4c4e8eef668253094f90d60cae7e8160c9040851cf7587f98f4eeefa70b2e07809aa3d91c512afea04504a401192a0863b5753e49362354990786674f18e4b52486f890cadf1"}, {&(0x7f00000013c0)="4760a437d2b21ba584a29a235bd25b8c73c6a4b90fe17005d27001160479effb2e9af52b775d5561c4bb9d0f0c67a2335ed42987933fe4287d8d0cd6b6cc6733358a74ce663d3cc6fd879142bf1c28895302335abbeb622d7fb5fa04c0338ee7d5a0cccdcc501feacd835bf45e1e02b9e6870dd1594aa3571ece8d7cf3f9ae4a163638c5f0eb05eec576f6b8792fa34f05dbcccfcf08a29dfc747d80d3e4a4a5527d8fc4dc17ce4996f5df5646bb6a850f561e8a565341b289a92de7211d98f2cdd01ac68616be653f53b99c8083364446458fd4747c54de4bb187b5c216e8a83ef6de8ca927b8604e4604b517bdb3f65c07d8bfb7a71208581a20942e956feeab3c44d5abb79610329d69f48f1166bd762d33b4691c22aebe7965d5866d6db7d37ac8ae4c04bf4848699641817d67d1d22047f50158faefce8ea8bd36c442889be8be5913e70bf055a29839d328e8fe24b0a1a3c8d08273bb7019af62316f4846c4dc60d3cbbde9913396b53bdd68f36a50a2cd9b15b8dbde3c5990fe1d8421d8ac9fee601a06e22876cc97afd18c8ee711d1bb4aefecdd02f07291af3e1ce578e454784c79533273bb1c996b17e121f68f20efc9f6145afcd050e696d095a2bc6d3588f549559677151d4771e76f9e04dff2a282e951c1508c8a903ff181729cc094da677165235d4e64e8a55f0ac2eb2190ef7922d5bc1e0b30105ba48095a3c5b1983a12d3b69d37835f91b80ab6c180d4c0f93504e49f2103eb489961f79383dcb236c9e627b71049db5d7ffcbca6ceeb7a8ec50e6986d92ea9f06b81b81b1231d99687945143b2220af28055bbef10da4ca5662f7b79624f8ad2d5fa2f5ec8e87456e376071656937481bebee30eea7eeb4143d19059934a9a2f2bd9978e607b192af1767d977b4c65f8a151e2f60134332d4542836f354c82631705c2185ce037f987b6e964943331add7c770e7ac3e0f64afa6d2e76dc0dcccf9feb7c1c35ded40e9e1e2dd57c4af05998a7c29c93e8fd299a07365049210401f3286d53da5e28d87d71737474404c0e240874d698f63e3090e6198dbce37cd4a055c3f7ae66d07486b6bb2fd6176ccc62a8fecc15008ec7cc45d5fcb1ea47c29abd786db465bd7b79b433758be836f7edda83c2357512f8aa832d83ec60cf245283bb2845a94a247265caf8b8f4667a362ddbff4d1e981a990ed6c634650a0616f00f734e585043b766119e257df9b3892715d927d5191789235807b2b19e1ef75925dd699cbf0018c19f9f0d4cb1896fcabb7d5567d7225e0440b4038822a3a2aeccbb45b481a39359825086f1fab4c152973ba00a8087cfa71597d4396631d200d34c40c12db219838067e23fcba35ed68086390f802f9c5bf1f37e8c3cc89bb6229c9b89eaad97cc9ea329c42e2ccae1998a6f9efd17a64da07a9d8f342dcc8b96ba1e2dcdd363c821db4743a4eae6bfcec6069af631ba2683b03e4f7476168e6fc224a465241133b727d128f8becc8afb7787ec9442978ebcfc2e9fd75f1f07a68d0febfc294ae05813d276c6cfc08135d4374d4b677044467e09beaebe73905a3718d0cfc545f2d24efc2d808aa183080ccf4debb082016821cce9f78fd2f26f53a45b41b779f4945ca578999deab1b6048512890fe6a12f2289ac436994e18bee8afec05067623f72d4a2a027ff519fda60100ae4ab5affa759241f4a57c74f25b2e568c7e8310c7edf1c55421002ff8b3af4e55acb1f2cb5019522793cc7bc9847dbbea79765d3a6b9ce0651e6cb1645dfce6e4ed5cecff36b40059e78fc67678def3768764c86e3bdb86cb0a4db065aab1468b830923f0dd9041334d662cbf494daa9945fe80c000b3e991d1dd92b03bb11ddff3b57940058e52afbd729ded5c5b0c501b40b03214c6a9e0b6783de3f834e1c8d1f646e14f74f4b67158478d43b07b1c22e3b741c95767b0157725c7f3797988c0b1bef842933f01b4829e0cc727cc96574c576e40a03e1d55a56b494c8b743ec3aa78880cd649cec21a5ea0baddf36fb65a1a9e816e016898760e0c8fd2309695f3e2873e7dea8c7180ed4de22b063c25acce9251542e798717d9076fadbfce1fb4048cf307d3b4cab35e06917e9f50e1c5abe2a01b31e9233f83511f01efe0cabe819d73eec61b8f0a3866bfa51720198582f46e56604c6f1102817621e66f71f9be46b1d13ea4ec17827472bc8d6824bc0fa113d94a7620b66f90504250a35f041eb7a9c480724c34065b68d95bf65bbc9fabdc47701f5dd70a44e64c2c87b4f5485a0b080886a86fe3dfc5d51117045313fa5689c3a3216e45a8f7f31497bf8b1fbb26c19ec918fc73471139cbba9cfc243c0ad11f2cca643a178a906bf50f421c1a573e162f0ecf0e3b470b4d09ecc82bb5b0784246d7d677a1148f946a74fac2fa396c5ae9a19e1a80999cce85f5c217d149168695a4a201ba42c1e70f5c3b2feb60f0cc2ba8ad0c134c24c8376e69f9cee47da0b160e513a757b90e9dbaf4b8d37c6552ca383cfd6c000c06f657eeb6afe89ef14611a808de68c05461d5c880f787af4b06c8e3045eb0ccae65f382c1ab3876265fa41c103523c011391a16875fbb6600de439c7ff30e0c2cca19bc3f8a548a2a9edefe9864574fbe485248bcd560dca158ae244e8322d9c3b4eb7d64833691d412d358d48d910c6095202843f08a97bd110a4e2e8ef6a18d59953f4b206f0f5270a7abacaef92e19be6f153d2aca5d81dd9e6851977297e18735bf7530e0011ecca84cb3067029d41eff33aa7b2aa42fb49e1e64ba528facb64e2c3c8b51a01c6f60c6660ef912248e36b4bb5a6589183b1843aec9e10e573e5bb4aa708c9f0e22d013f7599fc1628be1e7f106a52e4b63cbbf86ce844a29c4f8d5923a427ecdeb4147488d3e31a29cea3a75f52cd22a63c6fef6ea0a6efd790da45ad24cb529d21da2eb730b709bcd19f70fb5b20b2bf0130322a2b3c311f3ffc5f9277bec50241dc6ed9ef5fdedf7889b5ab3781aa5b9a91764580a6e6fd7ced43c2a2bc029106ab1a5c4a5094934aea9c415547435c02a56cd464a1e74855130ca57c9d40edec779df7fd14644ec5db4f7f4e5ef819ea4ae0715885525757b0ec019713a7cdeb5a9ac38e39f1e967d7d1a8038e987c73b8b2b79db8141d971122d0005ee485123e4c75bae66276b416de7624cf06a356bd40e7848c5cdc08b5bf0c62b84b5e39f525b395a4d03668178ce02aea2cf1cf1df4f3f65ecca4f540d9da27ee874223943609a5d18b59ebebad0cca69c676f8a5bc7e2290cb6975e010bbe0cb368cf05c7b838acf27d59b53c8fbbc318e1d17f2ab63798d4a70a3713c5f33253bc8bd626aa795bc261cbe7b899768cceb689601b33eeabfbf445e53f4a42516a61b661b1f5cd185ed0459f4fccc4da76c6f1f46e0f5591536f3cb66f55fc8c7bd4dadc3b8cf0075b578e9bd99085bdcab2517a466ced8bfe115ea99d3e4b7e0f8d609c3d125f64469e77bd38e420f613932b03032dcf12a6530a14e10050120dfc5b1f1019bd853c176202b502b798c2ff529f5172bdfd3bbfbdab8d8e56719e6011e0188307a661843cd6c885ba23ad61544bf1e9ced13bd53926f7a8ae03cd6f7769a5e5c068390bc982fe88c746ae9c13419efeb32a09cf04cbfa45216dc30cc835f069c1f44e9bed4c1a5c704824ee8012b4919a460431d90e5fad1c5ad13ab2e5778355f8fa5f89f1281a6b217eb7884a5cf42fc4858659a17af2dcf55ab9f7d0a9a9711f4d97de7f5a3477147bce27b5589cff3b16d8dee9f92118790349e494dfe21bc62c218933c6250807b86be7ddffdd40b4184f575395010c710eeed01867e562eb79f59af90350b76524c8377801951ccdd41e6c4cfa6210e12023fddca8c7d2d95bdb02b4d8f755c548ce26b1ed5663dbf9c16992cc0ccc8ca6a0c7cb7fd0440442271d71a2827346f33d04bfe82d0c5cccd7004b96e2f7f59f8b16fdf82acd6defd152b64178e1988a94aa02941ec142a9137ddbb0ff8db68effc0f709faac1951751171b25d9211d7f8789c4368b187c10f26493ce088f5fd078ed26deeebe84a6ab251dc615bbf29ee2c9135b6e842c34ab3968ecb995396a1f0cbabf752487a244514714699795cc94453988bd27ed6e5f6e08a19402a7d4ad3ef6e9048f1b96f8e1b79b5e4315ad5c90e4a167aef6d36589cf9b9585bc343420e8879390215e4360fed0b8eda28974feb4b55915ddfbedbd94346a121c6db2ae86dcfae7b9e19bdbb18be3c87a712176cecfe58254898927209d484d09922ab613dde5ebf33885d422252c9963ef81a0e386d5c4315a0d1bbafed0082d454da41d1479253fa43953830b7d80b89ca8e192ac73c73c1fae534b7918aee94e6b4ba1c51a3fd590b1532de67974fb6e09f116ac6f7e7d90e209eff09ce3172e8d9901f4b0f130cfee5eecff7033556525380bc3bbf26bd8391aafa8b65282ea157d176f51e224d8ccdb21e561147f0a9e38fca5f215c187eef405a93b35c8525ff34bd5a7f2119c331113cfb616519fd5d888009d74c22937dedc8960fb56b0cbb40929f0f754ff72881b664dbd7124c8e9e03b83dbe896e86b102c900e8942068f894bd75def5bd3e360ebb5b1defee9082846d0bc4537c03b7dc303840d08ca6f64e08c48546d1cc589711db3c3c8100aa3f7d92770e8adbf2432ec4d7850f1082f49a58d639b09ad50b6653254a0bccdcd7ee156771678f8f9b4098f82e87a737e1fda1984ec3aebe2c0c57d2bdbb98a1117f2d9dbfc29ee23fabf33ef07dac1ee1aecb3a0ff780c2217350c16e76a7c1be2ba7dbea0d4a7cd1c7eda3c06d4f4baa89a9aff80f3ad222dc23f0bcd9a4ecf03837c836cb687db1ac0da046b0a0ec89767873d129f0a29deca58a55fec1439d6ee24130400d6df1c4f05f6da7d0cb766cf122b7d5e55a4f235539a4989df0f67ae1d2c0028db64c4fb8717803183a955500b7e3ce82f7f79b435db2d8730183673b4bc3ec9ec84f4fe5d868c3deff13cd5ec534e1977d6cc0619215999bf00dc8f732bc9f6ec611f06d9f807e8f89237880a75c459ac9fed109ed6fd4fa5cd885f838941489de1bad881a0074f439ab8569b3812f22a84ed8c73f0a45f394363a22e930e135b892b1ddf0f5681cd57f703f60251c04c135094132360b8ce48c3ef2e0dbe1b22faf21f5241548b87809517fa11f7f467a33a9d2766e4f867a13e6fd6aa9de44f164adcbb7d67094c03e943591d44cfe46e549fcc381e5c10ab3815e5282f1c8f0ac6c1d17722e8fe18eac82ee40152fdc65f5f947b2c0288d073593aea5497fdfe6b54c83dafb6a14e6159d2f5f8db5ac0d5d96a81a5c93e299b7b11936d20fdc8baaf8c882b10d305b0388550ff4fedac4b1b4fed5c64b5f08ea198158b2cf5f137c76cd9fd0d92d8f1c3e4729e420242aedc780eb0f1d934160370916e2f69c93feba9d0dd7cd8f194d63eef6d24a989976cb780891f778a6b64abd3085e6ffd9861997ccb13c429cfac069bafd39ccca6dee1a72f6125c5311e74dea010f48f0f9e0c741478d807fe4142b9075b6be9502473f2fe12590671eb8f008af0fe1bacba200fd15876877b47e4c2d589c71febb7f88726e11a5406b31f553732e3df1d988ec412d03a3b97ebb6e4902b4e963fc2d8c8e19f04d0d35886dfb8a9100a35299bab4020cd216b0e58cbedf1ba2bc09a5085c7ee85b4c1eded3fbc70b67581afedc58bb491c58122b83422675adc930354dc744f5aa9f3d", 0x5b}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f0000000240)='./bus\x00', 0x48ddb8adef6c46c4)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x4080)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x480eb26a8b005105, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x800, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_GET_SG_TABLESIZE(r4, 0x227f, &(0x7f0000000200))
close(r1)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x585402)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:44 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xffff, 0x80400)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:44 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x2a)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f00000001c0)={0x38, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r5, r4)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r6 = creat(&(0x7f0000000140)='./bus\x00', 0x90533b58aec0c659)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
lseek(r8, 0xe3, 0x1)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:44 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x4000, 0x0)
r3 = fanotify_init(0x1, 0x8000)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
clock_gettime(0x0, &(0x7f0000000100)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000080)=[{r1, 0x2008}, {r2, 0x4080}, {r3, 0x1}, {r4, 0x100}, {r0}, {r0, 0x8}, {r5, 0x4480}, {r6, 0x1000}, {r7, 0x81}], 0x9, &(0x7f0000000140)={r8, r9+30000000}, &(0x7f0000000180)={0xffffffffffffffff}, 0x8)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:45 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x3)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:45 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
io_setup(0x51, &(0x7f00000001c0))
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@migrate={0x7c, 0x21, 0x4, 0x70bd2b, 0x25dfdbfd, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x4e21, 0x6, 0x2, 0x20, 0x20, 0x3b, r3, 0xee01}, 0x0, 0x1}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd26, 0x70bd2c, 0x70bd2c, 0x70bd29, 0x8, [0x8, 0x1f, 0x4, 0x7]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4004c840}, 0x44)

04:54:45 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x387bc578)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000300)={0x9, 0xc, 0x4, 0x1000, 0x8, {r4, r5/1000+30000}, {0x4, 0x1, 0x80, 0x8, 0x0, 0x5, "5203dbbc"}, 0x1, 0x3, @planes=&(0x7f00000001c0)={0x401, 0x9, @userptr=0x401, 0x5c7}, 0x7fff, 0x0, <r7=>r6})
recvmmsg(r7, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r8 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
write$binfmt_elf64(r8, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r8, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r10, r9)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x4b)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:45 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r13 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r14 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r14, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r15 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r15, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r16 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r16, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC=r16, @ANYRES32=r8, @ANYRES32=r9, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r10, @ANYRESDEC=r11], @ANYRES32=r12, @ANYRESOCT, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYPTR]], @ANYRES32=r13, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r14, @ANYPTR64, @ANYRES16=r11], @ANYBLOB="243eabd37b8d17066a01a28a23b8ae0af735258777a39bf528c59c75cca3b206e2e2fde0cfd2cd1398b21fa0d9eb6db08a2fa558c2cfe568c56233a656f34e4c7f23bb552d66a9bf31f79f798d67dffa6a35c8a93eee9a1b6ad166721802eea33512538b92b32553e1df6bdd93280f4c02c5e036263e66f603d628d9c096ce0abf519e4222bcdfef6162a93da00fa21f4d96086a73473bccb1371ab8c41d8205a3172fce0ce83777ce77552b4c94ea6d5afe883c7b0a6117d303d0576fe7c9e884e71842963b5add06ae4822d67863ba15f665bbcd398d3fce5dbed86657ac75f094", @ANYRES32, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="78bb8baf38f22e5745155a553c71461534bb2a5638e066e1af59cb77e219b380128fda05dae0275d1aaaa0fe2a59203179bf4a69d789a29fa242edadcde7380b626c4eff8f6da6a80bb495c48d6d82a8aaabd1da34e413d30fba1331002794e5ace907d66f103610e9394ee994af5dd0dd8e5450b58089fcffd8f1b7a26535a7c9a9bb341c1e08c59f1fb3a4f80c21b004eb33e26ec226608d4f793bd1d0f03f9c7747bb16ca", @ANYRESOCT=r15], @ANYRESDEC, @ANYRES64, @ANYRES64]], 0xfffffffffffffdbd)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000240)='./bus\x00', 0x13)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f0000000680)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="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", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:46 executing program 3:
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x400, 0x105000)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={&(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680), &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x2, 0x5, 0x0, 0x265})
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x20000000)
ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000100))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x82)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0)
ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000400)={0x7f, 0x8, 0x671f, 0x2, 0x9, 0xffff})
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000200)=<r6=>0x0)
process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000000240)}], 0x1, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/66, 0x42}], 0x1, 0x0)
setsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, &(0x7f0000000080), 0x4)
r7 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{}, {<r9=>0x0}]})
ioctl$DRM_IOCTL_DMA(r8, 0xc0406429, &(0x7f0000000640)={r9, 0x4, &(0x7f0000000540)=[0x1, 0x7fff, 0x400, 0xb7c], &(0x7f0000000580)=[0x3ff, 0xfffffffb, 0x1000, 0x1], 0x4, 0x9, 0xffff, &(0x7f00000005c0)=[0x8, 0x7, 0x1d, 0x20, 0x3f, 0x1, 0x4cbc, 0x8, 0x200], &(0x7f0000000600)=[0x1, 0x23e, 0x3c0, 0x8, 0x8, 0x5, 0xfff]})
ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f00000001c0)=0x1)
ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0)

04:54:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000040)={{0x6, 0x6}, 'port1\x00', 0x6, 0x810a0, 0xbc, 0x80000001, 0x81, 0x7, 0x8, 0x0, 0x3, 0x20})

04:54:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0x6, <r3=>0x0, 0x2, 0x24e7})
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000140)=&(0x7f0000000100))
ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f00000000c0)={0x0, r3})
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000180)={0x2, 0x3})

04:54:46 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r7, r6)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:46 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendfile(r1, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
lseek(r7, 0x6ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r8 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r9 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r9, r8)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r10 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8)
r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0)
r13 = accept4$alg(r10, 0x0, 0x0, 0x100000)
r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r9], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbac0638998b876e7ce2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f390f008b04123721ba1ac522b840c781d18034498f577b0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = dup(r1)
ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r2, 0x80184153, &(0x7f00000001c0)={0x0, &(0x7f0000000180)=[&(0x7f0000000040)="203d60ba16003262038021e301f4231071612214dd1b213e1890710e76b3d7427a0a8b129e85d920101e2fa00b634697788aa39c9c3532c74fc9611308eaf027504a249513c988e304f8c2091a6fd4094218416e2045d75d67dbb98c5268f1167be1a4650b7b52d7c956c069a16bcffa31a021", &(0x7f00000000c0)="407c6a933a6c37a520a2c82dd9853c17866c0f23c52edf4574f0aeb122e720358c957ec19139cb67bbcf566428045c11188854df17b08061fe861d141dca1327a46f66f1d8554a7cb72896d2102d23e858386870a7cab0adc970d2ba18300ad263419c3290f393b122", &(0x7f0000000140)="ae6de55b7620c438ca9ad0d7a7ca22de80569cb09fc0a9c6d6ea0619"]})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:46 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x0, 0xfffffffffffffffc}, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:46 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x61a800)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:47 executing program 4:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x5, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r13 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r14 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r14, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r15 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r15, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r16 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r16, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_misc(r6, &(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC=r16, @ANYRES32=r8, @ANYRES32=r9, @ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r10, @ANYRESDEC=r11], @ANYRES32=r12, @ANYRESOCT, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRESDEC, @ANYPTR]], @ANYRES32=r13, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRES32=r14, @ANYPTR64, @ANYRES16=r11], @ANYBLOB="243eabd37b8d17066a01a28a23b8ae0af735258777a39bf528c59c75cca3b206e2e2fde0cfd2cd1398b21fa0d9eb6db08a2fa558c2cfe568c56233a656f34e4c7f23bb552d66a9bf31f79f798d67dffa6a35c8a93eee9a1b6ad166721802eea33512538b92b32553e1df6bdd93280f4c02c5e036263e66f603d628d9c096ce0abf519e4222bcdfef6162a93da00fa21f4d96086a73473bccb1371ab8c41d8205a3172fce0ce83777ce77552b4c94ea6d5afe883c7b0a6117d303d0576fe7c9e884e71842963b5add06ae4822d67863ba15f665bbcd398d3fce5dbed86657ac75f094", @ANYRES32, @ANYRES32=0x0, @ANYPTR64=&(0x7f0000000540)=ANY=[@ANYBLOB="78bb8baf38f22e5745155a553c71461534bb2a5638e066e1af59cb77e219b380128fda05dae0275d1aaaa0fe2a59203179bf4a69d789a29fa242edadcde7380b626c4eff8f6da6a80bb495c48d6d82a8aaabd1da34e413d30fba1331002794e5ace907d66f103610e9394ee994af5dd0dd8e5450b58089fcffd8f1b7a26535a7c9a9bb341c1e08c59f1fb3a4f80c21b004eb33e26ec226608d4f793bd1d0f03f9c7747bb16ca", @ANYRESOCT=r15], @ANYRESDEC, @ANYRES64, @ANYRES64]], 0xfffffffffffffdbd)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
socket$inet6(0xa, 0x2, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$setpipe(r2, 0x407, 0x2a)
write(r2, &(0x7f0000000340), 0x41395527)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x5, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r5, r4)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r6 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x42c0, 0x2)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:47 executing program 3:
mkdir(0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000002180)=0xfc, 0x3c3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = socket$packet(0x11, 0x2, 0x300)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x0, 0x3}, 0x1c)
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @local}, 0x14)
sendto$inet6(r0, &(0x7f0000000080)="030400306c00600000000000fff57b016d2763bd56373780398d537500e50602591f031ee616d5c0184374a7ffe4ec55e0654786a70100935ba514d40808efa000801600002fd08d49a47eff71bc4131fe4c1f99bf00a900000008d1843e770afd6e9ef5837dbd0000000053", 0x3287, 0x4000002, 0x0, 0x2ff)
symlink(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//../file0\x00', 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x573ab62f, 0x40900)
ioctl$DRM_IOCTL_GET_MAGIC(r4, 0x80046402, 0x0)

04:54:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000300)="ca5b1d0b629b2cd32bcd1a5ee243be7afce30f619851ad541aae26d2a055012ab3c4fd5f32967a0005c64d4d0b8cd2960d110b985eb8332e7c7f806f39911244da26b7eabda5097c1c3bd48fd86babe659e3e0761b1eeb6d357499eaf9e2713590d2667a2840fb80ca43a8b6fc2561b3a7", 0x71}], 0x1, 0x3)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000240)='./file0\x00', 0x160)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:47 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x20009, 0x8e}, 0x0)
r0 = getpid()
r1 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_QUERYCTRL(r1, 0xc0445624, &(0x7f0000000040)={0x9, 0x100, "c342f0ad01fae0c83a616bbb3030f96167a3a0ebd7b1f14b477cb9a31f2b5df5"})
sched_setattr(r0, &(0x7f0000000140)={0x2af, 0x2, 0x0, 0x0, 0x5}, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r2, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setpipe(r4, 0x407, 0x2a)
write(r4, &(0x7f0000000340), 0x41395527)
vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000001c0)=0x28)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r6 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2, 0x84000)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r7, r6)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)

04:54:47 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x2480)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x5, 0x9})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.redirect\x00', &(0x7f0000000100)='./file0\x00', 0x8, 0x1)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r3)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x2000000, &(0x7f0000000300)={[{@index_off='index=off'}, {@xino_on='xino=on'}, {@metacopy_on='metacopy=on'}], [{@euid_gt={'euid>', r3}}, {@smackfsroot={'smackfsroot', 0x3d, '4\x10\x16\xaf\x16;z!MK\xd2k\xb5\xe6_\xa6\xfb\x15C\xfa\xd2\x1f\xb6\x00\x00\x00\x00\x00\x00\x00@\x8enh\x83\x89\xa1y\xab\xb8\xaa\xcc|0\xae\x00\xa2AcG8\xdf\xa1\xd5\r\x89\xa9{I\xc8P\xe1\x9e\xaf\x89^\x83\xb2).6\xdf\x9d\a\xbd\xd3\xd5gQ\xb6\x1a|\x1f\xe4\xaf-[\xae\xee<\xa5+x\xb2e\x8e?\r\xd8\x9e,]kW\x85G\xba\xfa\xc5\xe5\xeb\xe7\x94\x12F\x185*F\xaa\x89\xfa4\xde\xb5\xa6L\xf3\xb9,\x96\x17\xb86\x03a\x17o\xdb\x16\xef\xf3/\xc7\x14'}}, {@appraise_type='appraise_type=imasig'}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x61, 0x34, 0x65, 0x38, 0x32, 0x31, 0x37], 0x2d, [0x31, 0x39, 0x33, 0x63], 0x2d, [0x37, 0x34, 0x37, 0x36], 0x2d, [0x65, 0xd8, 0x37, 0x39], 0x2d, [0x38, 0x37, 0x65, 0x33, 0x5, 0x0, 0x33, 0x31]}}}]})

[  873.360141] net_ratelimit: 12 callbacks suppressed
[  873.360147] protocol 88fb is buggy, dev hsr_slave_0
[  873.370283] protocol 88fb is buggy, dev hsr_slave_1
04:54:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x20000000001, 0x400000)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40)

04:54:48 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VHOST_SET_VRING_ENDIAN(r5, 0x4008af13, &(0x7f00000000c0)={0x2, 0x6f83cff})
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:48 executing program 0:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x9, 0x0, 0xfffffffffffffffc}, 0x1)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x2, 0x81)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:48 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x10040)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)

04:54:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf64(r5, &(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvme-fabrics\x00', 0x40000, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, r6, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r7 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r8, r7)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r9 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r10 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r10, 0x40086602, &(0x7f0000000040)=0x8)
r11 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r11, 0x80046402, 0x0)
r12 = accept4$alg(r9, 0x0, 0x0, 0x100000)
r13 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r12, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r8], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r13, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r9], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  873.920095] protocol 88fb is buggy, dev hsr_slave_0
[  873.925251] protocol 88fb is buggy, dev hsr_slave_1
04:54:48 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x5, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:48 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0xf000000, 0x1, 0x5, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98090f, 0x7fffffff, [], @p_u16=&(0x7f0000000040)=0x6}})
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={<r4=>r3, 0x7fffffff, 0x6}, &(0x7f0000000140)=0xc)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x4b, 0x201, 0x3e, 0x78, 0x0, 0x56, 0x0, r4}, &(0x7f00000001c0)=0x20)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

[  874.320098] protocol 88fb is buggy, dev hsr_slave_0
[  874.325253] protocol 88fb is buggy, dev hsr_slave_1
04:54:49 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_opts(r4, 0x0, 0x9, &(0x7f00000000c0)=""/144, &(0x7f0000000200)=0x90)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:49 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x5, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x5, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:49 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x5, 0x2)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x4, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f3c7f0000000000000014ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0f9d70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:49 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0xe)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
bind$inet(r9, 0x0, 0x339)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r10 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8)
r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0)
r13 = accept4$alg(r10, 0x0, 0x0, 0x100000)
r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97ee423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  875.440148] protocol 88fb is buggy, dev hsr_slave_0
[  875.445254] protocol 88fb is buggy, dev hsr_slave_1
04:54:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0xe)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
bind$inet(r9, 0x0, 0x339)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r10 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8)
r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0)
r13 = accept4$alg(r10, 0x0, 0x0, 0x100000)
r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97ee423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r7 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r8 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x8)
r9 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r9, 0x80046402, 0x0)
r10 = accept4$alg(r7, 0x0, 0x0, 0x100000)
r11 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97fe423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r11, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r7], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:50 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000003c0))
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb77bd86713f8600}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xcc, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc20c}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8002)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r7 = add_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="72957e6d98b390ca42b19d4f4006cdbf2753dfb24cc2d57a1fb1a62d0c0d8149a27f", 0x22, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000400)='encrypted\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r7})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:54:50 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r4, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x1)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(r6, r5)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0xe)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
bind$inet(r9, 0x0, 0x339)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
r10 = socket(0x10, 0x0, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8)
r12 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r12, 0x80046402, 0x0)
r13 = accept4$alg(r10, 0x0, 0x0, 0x100000)
r14 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x4005ef3)
write$binfmt_elf64(r13, &(0x7f00000004c0)=ANY=[@ANYPTR64=&(0x7f0000000300)=ANY=[@ANYRESOCT=r6], @ANYBLOB="637c3a58dc4af1bea80793742df48ecc16556fc8c55dd775d393accbe2478f12a19e83fa533e9f40550f2c6ed83cab091ade7714ffea9e1af5aba0f742f39032b6b04123721ba1ac522b840c781d180399a6bcefb0c54908615cbc0fac70e1d227a4f2ca1a692c68cf4f6cebac97ee423ae7303095e4754e0efff19b9b639aa8", @ANYRES64=r14, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRESHEX=r10], 0x42)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:54:50 executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
chdir(&(0x7f0000000100)='./file0\x00')
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x2a)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x1, 0x0, 0x3}, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = userfaultfd(0x1800)
sendfile(r5, r4, 0xfffffffffffffffe, 0x8)
r6 = creat(&(0x7f00000001c0)='./file0\x00', 0x30)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000040)=0x8)
write$binfmt_elf64(r6, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0xfd14)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/udp\x00')
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f0000000240)={0xf000000, 0x400, 0x3, <r10=>r7, 0x0, &(0x7f0000000140)={0x990965, 0x0, [], @value=0x8}})
dup2(r10, r8)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket(0x0, 0x1a6273f2b2e289f7, 0x0)
creat(0x0, 0x0)
close(0xffffffffffffffff)
r11 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
lseek(0xffffffffffffffff, 0x7ffffc, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000040)=0x8)
open(0x0, 0x0, 0x80)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

[  876.007073] protocol 88fb is buggy, dev hsr_slave_0
[  876.012508] protocol 88fb is buggy, dev hsr_slave_1
04:54:50 executing program 0 (fault-call:4 fault-nth:0):
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:50 executing program 4 (fault-call:0 fault-nth:0):
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  876.358481] FAULT_INJECTION: forcing a failure.
[  876.358481] name failslab, interval 1, probability 0, space 0, times 0
[  876.411188] CPU: 1 PID: 13696 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0
[  876.419128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.428492] Call Trace:
[  876.431099]  dump_stack+0x142/0x197
[  876.434748]  should_fail.cold+0x10f/0x159
[  876.438917]  should_failslab+0xdb/0x130
[  876.442913]  kmem_cache_alloc_node_trace+0x280/0x770
[  876.448030]  ? _parse_integer+0xe8/0x140
[  876.452110]  __get_vm_area_node+0xf0/0x340
[  876.456364]  __vmalloc_node_range+0x9f/0x6a0
[  876.460849]  ? bpf_prog_alloc+0x40/0x1e0
[  876.464948]  ? selinux_capable+0x36/0x40
[  876.469016]  __vmalloc+0x44/0x50
[  876.472385]  ? bpf_prog_alloc+0x40/0x1e0
[  876.476456]  bpf_prog_alloc+0x40/0x1e0
[  876.480347]  bpf_prog_load+0x292/0xf20
[  876.484238]  ? find_held_lock+0x35/0x130
[  876.488305]  ? __bpf_prog_charge+0xc0/0xc0
[  876.492552]  ? lock_downgrade+0x740/0x740
[  876.496713]  ? kasan_check_write+0x14/0x20
[  876.501046]  ? _copy_from_user+0x99/0x110
[  876.505200]  SyS_bpf+0x43b/0x2db8
[  876.508671]  ? __mutex_unlock_slowpath+0x71/0x800
[  876.513524]  ? bpf_prog_get+0x20/0x20
[  876.517335]  ? wait_for_completion+0x420/0x420
[  876.521921]  ? __sb_end_write+0xc1/0x100
[  876.525987]  ? fput+0xd4/0x150
[  876.529182]  ? SyS_write+0x15e/0x230
[  876.532906]  ? bpf_prog_get+0x20/0x20
[  876.536716]  do_syscall_64+0x1e8/0x640
[  876.540612]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  876.545473]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  876.550666] RIP: 0033:0x45af49
04:54:51 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="3ee2ca46d937b4367e54d27f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r2, 0x28, &(0x7f0000000180)}, 0x10)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x280001, 0x0)
ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000300))
mmap$snddsp(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000009, 0x10, r1, 0x3000)
r2 = creat(0x0, 0x0)
ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f00000001c0))
r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000280)={&(0x7f0000000240), 0x0, 0x8, 0x4, 0x9, 0xffff0000, 0x1ff, 0xec7c, {0x8009, 0x4, 0x52, 0x1f, 0x19f, 0x101, 0x1, 0xdcf, 0x5, 0x40, 0x400, 0x7, 0x851a, 0x800004, "01dcc41766c8f7dcf7711153290006000000000000d4e241b9d8b8b8e4186cb0"}})
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205647, &(0x7f0000000440)={0x500000, 0x10001, 0xc839, r7, 0x0, &(0x7f0000000240)={0x910f3a, 0x800, [], @value=0x3}})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r5})
ioctl$DRM_IOCTL_NEW_CTX(r4, 0x40086425, &(0x7f0000000100)={0x0, 0x42972f0d5d4b6c44})
ioctl$DRM_IOCTL_LOCK(r0, 0x4008642a, &(0x7f0000000400)={r5, 0x2})
pipe(&(0x7f0000000340)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
accept4$x25(r8, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x100800)
r9 = creat(0x0, 0x10)
setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$TIPC_MCAST_BROADCAST(r9, 0x10f, 0x85)
recvfrom$x25(r1, &(0x7f0000000080)=""/246, 0xf6, 0x2002, &(0x7f0000000180)={0x9, @null='               \x00'}, 0x12)
ioctl$SNDRV_PCM_IOCTL_PREPARE(r8, 0x4140, 0x0)

[  876.554504] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  876.562224] RAX: ffffffffffffffda RBX: 00007fe609685c90 RCX: 000000000045af49
[  876.569589] RDX: 0000000000000045 RSI: 00000000200001c0 RDI: 0000000000000005
[  876.577397] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  876.585289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4
[  876.593533] R13: 00000000004c1697 R14: 00000000004d6540 R15: 0000000000000003
[  876.624212] syz-executor.4: vmalloc: allocation failure: 4096 bytes, mode:0x14280c0(GFP_USER|__GFP_ZERO), nodemask=(null)
[  876.645241] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[  876.650999] CPU: 1 PID: 13696 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0
[  876.658895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  876.668251] Call Trace:
[  876.670849]  dump_stack+0x142/0x197
[  876.674488]  warn_alloc.cold+0x96/0x1af
[  876.678482]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  876.683334]  ? _parse_integer+0xe8/0x140
[  876.687409]  ? __get_vm_area_node+0x27f/0x340
[  876.691913]  __vmalloc_node_range+0x3c3/0x6a0
[  876.696421]  ? selinux_capable+0x36/0x40
[  876.700499]  __vmalloc+0x44/0x50
[  876.703898]  ? bpf_prog_alloc+0x40/0x1e0
[  876.707964]  bpf_prog_alloc+0x40/0x1e0
[  876.711855]  bpf_prog_load+0x292/0xf20
[  876.715752]  ? find_held_lock+0x35/0x130
[  876.719825]  ? __bpf_prog_charge+0xc0/0xc0
[  876.724075]  ? lock_downgrade+0x740/0x740
[  876.728240]  ? kasan_check_write+0x14/0x20
[  876.732486]  ? _copy_from_user+0x99/0x110
[  876.736653]  SyS_bpf+0x43b/0x2db8
[  876.740120]  ? __mutex_unlock_slowpath+0x71/0x800
[  876.744972]  ? bpf_prog_get+0x20/0x20
[  876.748786]  ? wait_for_completion+0x420/0x420
[  876.753400]  ? __sb_end_write+0xc1/0x100
[  876.757482]  ? fput+0xd4/0x150
[  876.760682]  ? SyS_write+0x15e/0x230
[  876.764408]  ? bpf_prog_get+0x20/0x20
[  876.768221]  do_syscall_64+0x1e8/0x640
[  876.772122]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  876.776978]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  876.782237] RIP: 0033:0x45af49
[  876.785428] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  876.793148] RAX: ffffffffffffffda RBX: 00007fe609685c90 RCX: 000000000045af49
[  876.800423] RDX: 0000000000000045 RSI: 00000000200001c0 RDI: 0000000000000005
[  876.807699] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  876.814984] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4
04:54:51 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/68, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='F'], 0x1)
r2 = creat(0x0, 0x18)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000000c0)={0x5, 0x7f, 0x1, 0x77, 0x0, 0x1, 0x2b, 0x0, 0x6, 0x0, 0x40, 0x8, 0x2, 0xff}, 0xd)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  876.822273] R13: 00000000004c1697 R14: 00000000004d6540 R15: 0000000000000003
[  876.841640] Mem-Info:
[  876.844106] active_anon:852582 inactive_anon:1746 isolated_anon:0
[  876.844106]  active_file:4479 inactive_file:5457 isolated_file:0
[  876.844106]  unevictable:0 dirty:218 writeback:12 unstable:0
[  876.844106]  slab_reclaimable:15583 slab_unreclaimable:127032
[  876.844106]  mapped:60048 shmem:1791 pagetables:27911 bounce:0
04:54:51 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  876.844106]  free:483812 free_pcp:333 free_cma:0
[  876.878436] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  876.933589] Node 1 active_anon:1528236kB inactive_anon:84kB active_file:17856kB inactive_file:21824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25084kB dirty:868kB writeback:48kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:54:51 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="cd38ef44995bb4656f07b6"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  876.971452] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  877.057293] lowmem_reserve[]: 0 2569 2569 2569 2569
04:54:51 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)

04:54:51 executing program 0:
r0 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x101000, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000180)='gtp\x00')
ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/73)
write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r0, 0x0)
ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000040))

[  877.091482] Node 0 DMA32 free:29380kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:408kB local_pcp:264kB free_cma:0kB
[  877.191130] lowmem_reserve[]: 0 0 0 0 0
[  877.196763] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  877.286757] lowmem_reserve[]: 0 0 0 0 0
[  877.294554] Node 1 Normal free:1894356kB min:53508kB low:66884kB high:80260kB active_anon:1528308kB inactive_anon:76kB active_file:17856kB inactive_file:21788kB unevictable:0kB writepending:916kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20288kB pagetables:47012kB bounce:0kB free_pcp:872kB local_pcp:336kB free_cma:0kB
04:54:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = semget$private(0x0, 0x3, 0x1ac)
newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x0)
r3 = getgid()
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r5)
semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000100)={{0x0, r2, r3, r5, 0xee01, 0x0, 0xea3a}, 0x7fffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4})
r6 = creat(0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/attr/exec\x00', 0x2, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cachefiles\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4)
ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f0000000180)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

[  877.373173] lowmem_reserve[]: 0 0 0 0 0
[  877.377389] Node 0 DMA: 1*4kB (U) 8*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB
[  877.409999] Node 0 DMA32: 27*4kB (UMH) 56*8kB (UMEH) 776*16kB (UM) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 29516kB
04:54:52 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0)

[  877.446222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  877.473805] Node 1 Normal: 129*4kB (UME) 120*8kB (UME) 70*16kB (UME) 62*32kB (UME) 105*64kB (UME) 26*128kB (UM) 14*256kB (UM) 8*512kB (M) 3*1024kB (ME) 3*2048kB (ME) 455*4096kB (M) = 1895204kB
[  877.534867] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  877.549103] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
04:54:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000100)=0x6bf0, 0x4)
ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f00000000c0)={0x29, &(0x7f0000000080)=""/41})
sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x1, 0x9, 0x5736a63468c9cc24, 0x70bd25, 0x25dfdbff, {0xa, 0x0, 0x8}, [@NFCTH_POLICY={0xc, 0x4, {0x8, 0x5, 0xffffff81}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x8b}]}, 0x48}, 0x1, 0x0, 0x0, 0x8}, 0x4080020)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000240)={0x1, 0x2, 0x4, 0x4000000, 0x8cd1, {0x77359400}, {0x4, 0x0, 0x39, 0x8, 0x1, 0x20, "897273f9"}, 0x0, 0x2, @offset=0x20, 0xe0f, 0x0, <r2=>r1})
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f00000002c0)={0x7, 0x9, 0xd6, 0x20}, 0x10)

[  877.589557] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  877.628239] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  877.646897] 11718 total pagecache pages
[  877.652801] 0 pages in swap cache
[  877.658390] Swap cache stats: add 0, delete 0, find 0/0
[  877.667292] Free swap  = 0kB
[  877.704602] Total swap = 0kB
[  877.716349] 1965979 pages RAM
[  877.731539] 0 pages HighMem/MovableOnly
[  877.737340] 335871 pages reserved
[  877.743137] 0 pages cma reserved
04:54:52 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYPTR64], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x23c, 0x10, 0x0}, 0x45)

04:54:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
pipe2$9p(&(0x7f00000024c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x8000)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002500)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000002600)=0xe8)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000017c0), 0x2cb, 0x400000000000)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setuid(r6)
stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchownat(r4, &(0x7f0000000200)='./bus\x00', r6, r7, 0x400)
stat(&(0x7f0000002640)='./file0\x00', &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
r9 = socket$inet(0x2, 0x3, 0x2)
ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000002880)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x3, @rand_addr=0x4}, {0x2, 0x4e23, @loopback}, 0xd0696f683a059765, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002840)='team_slave_1\x00', 0x1000, 0x1f})
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
fcntl$getownex(r9, 0x10, &(0x7f00000027c0)={0x0, <r10=>0x0})
ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000002800)=r10)
write$P9_RSTATu(r2, &(0x7f0000002700)={0x8e, 0x7d, 0x2, {{0x0, 0x6a, 0x40, 0xfffffff8, {0x28, 0x0, 0x7}, 0x1000000, 0x8001, 0x4, 0x2, 0xf, '/dev/dri/card#\x00', 0xf, '/dev/dri/card#\x00', 0xf, '/dev/dri/card#\x00', 0xa, ':mime_type'}, 0xf, '/dev/dri/card#\x00', r3, r7, r8}}, 0x8e)
r11 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SIOCAX25NOUID(r11, 0x89e3, &(0x7f0000002900))
preadv(r1, &(0x7f0000002440)=[{&(0x7f0000000040)=""/247, 0xf7}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/29, 0x1d}, {&(0x7f00000021c0)=""/241, 0xf1}, {&(0x7f00000022c0)=""/148, 0x94}, {&(0x7f0000002380)=""/179, 0xb3}], 0x8, 0x2)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

04:54:52 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000040))

04:54:52 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x256)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/204)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:52 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x9, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:54:52 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x58, r3, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0})
openat$selinux_create(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/create\x00', 0x2, 0x0)
sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r8, @ANYRES64=r9/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3b486c908c6f6dc9}, 0xc, &(0x7f0000000440)={&(0x7f00000001c0)={0x274, r3, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8}, {0x198, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x2}, {0x8, 0x4, 0x8000}}}, {0x38, 0x1, @notify_peers_count={{0x120, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xe1f}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xc173}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r5}, {0xb8, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x274}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

04:54:52 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r3, @ANYRES64=r4/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r5 = socket(0x10, 0x2, 0x0)
setsockopt$inet_dccp_int(r5, 0x21, 0x6, &(0x7f00000002c0)=0x1000, 0x4)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc1020800}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)=@expire={0x108, 0x18, 0x800, 0x70bd2c, 0x25dfdbfb, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@rand_addr=0xffffffff, 0x4e20, 0x47, 0x4e24, 0x0, 0x2, 0x20, 0x20, 0x1d4ca5b5408df66e, r2, r6}, {@in=@empty, 0x4d5, 0x6c}, @in6=@loopback, {0x9, 0x3f, 0x3f, 0x9, 0x100, 0x8, 0x100000000, 0x5}, {0x40000000000, 0x401, 0x401, 0x1ff}, {0xfcf, 0x82}, 0x70bd28, 0x34ff, 0xa, 0x1, 0x80, 0xc}, 0x81}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0x2}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10000000}, 0x8000)

04:54:53 executing program 4:
openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x80040, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x1, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x400}, [@call={0x85, 0x0, 0x0, 0x4f}, @jmp={0x5, 0x0, 0x4, 0x5, 0x496301163207be44, 0x4, 0x642fd64c69102401}, @jmp={0x5, 0x0, 0xe20c12637b38ff05, 0x4, 0x8, 0xffffffffffffffff, 0x4}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x80}, @ldst={0x4, 0x0, 0x6, 0x799990a9149f374b, 0x5, 0xfffffffffffffff0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1c1}, 0x45)

04:54:53 executing program 3:
r0 = creat(0x0, 0x100)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$RTC_VL_CLR(r0, 0x7014)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
flistxattr(r0, &(0x7f0000000100)=""/231, 0xe7)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
syz_open_procfs(r2, &(0x7f00000000c0)='fd\x00')
openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/load\x00', 0x2, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r5, 0x1}, 0x14}}, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockname$packet(r6, &(0x7f00000004c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000500)=0x14)
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r5, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x21c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
prctl$PR_GET_FP_MODE(0x2e)
r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r10)
r11 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r12)
statx(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x100, 0x2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r13=>0x0})
getresuid(&(0x7f0000000340), &(0x7f0000000600), &(0x7f0000000640)=<r14=>0x0)
getresuid(&(0x7f0000000680)=<r15=>0x0, &(0x7f00000006c0), &(0x7f0000000700))
fstat(r4, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r16=>0x0})
r17 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r18=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r18)
stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, <r19=>0x0})
r20 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r20, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_IP_XFRM_POLICY(r20, 0x0, 0x11, &(0x7f0000000880)={{{@in=@broadcast, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r21=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000980)=0xe8)
lstat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, <r22=>0x0})
r23 = getegid()
setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000b80)={{}, {}, [{0x2, 0x1, r10}, {0x2, 0x1, r12}, {0x2, 0x7, r13}, {0x2, 0x4, r14}, {0x2, 0x2, r15}, {0x2, 0x8, r16}, {0x2, 0x1, r18}, {0x2, 0x2, r19}, {0x2, 0x1, r21}], {0x4, 0x4}, [{0x8, 0x2, r22}, {0x8, 0x26957c105ba5f5d4, r23}], {0x10, 0x2}, {0x20, 0x1}}, 0x7c, 0x5)
ioctl$IOC_PR_CLEAR(r8, 0x401070cd, &(0x7f0000000080)={0x4})
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0)

04:54:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000008000063010000f50000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040))

[  878.480108] net_ratelimit: 6 callbacks suppressed
[  878.480113] protocol 88fb is buggy, dev hsr_slave_0
[  878.490128] protocol 88fb is buggy, dev hsr_slave_1
04:54:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff0000/0xf000)=nil, 0xf000}, &(0x7f0000000180)=0x10)
pread64(r0, &(0x7f0000000040)=""/198, 0xc6, 0x1)

04:54:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x200000000000006f, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, [@generic={0x40, 0x1, 0x6}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xd5, 0x0, 0x0, 0x0, [], 0x0, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0xfffffffffffffedd)

04:54:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$USBDEVFS_GET_SPEED(r0, 0x551f)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x5)

04:54:53 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xc0, 0x0)
dup2(r0, r1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063010000e1ff9af88e3928479a000000000023a4e7e6427b10c90ee794d67becf47be81cece10d0d412bdc4e5840"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:54:53 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0e85667, &(0x7f0000000200)={0x140000000, 0x3, "563dec3aca9d4606e20cc9112f625ee1a180b00422e049f271ee9e1aafdb2f6b", 0x0, 0x3df81151, 0xf32f, 0x81, 0x2, 0x596, 0x2d2, 0x1f, [0x5, 0x3, 0x67ac]})
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400a3cb9c91cb0a25d08000000000000000", @ANYRES16=r7, @ANYBLOB="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"], 0x14}, 0x1, 0x34000}, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12004002}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x54, r7, 0x0, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x30, 0x4, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x70f}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x863c27ca65808922}, 0x40)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
socket$rds(0x15, 0x5, 0x0)

04:54:53 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x10, r1, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x80000001, 0x410000)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff}, 0x13f}}, 0x20)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r9=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r9})
ioctl$DRM_IOCTL_NEW_CTX(r8, 0x40086425, &(0x7f0000000100)={r9, 0x42972f0d5d4b6c47})
ioctl$DRM_IOCTL_SET_SAREA_CTX(r7, 0x4010641c, &(0x7f00000003c0)={r9, &(0x7f0000000480)=""/155})
setsockopt$inet6_int(r7, 0x29, 0xcf, &(0x7f0000000380)=0x9, 0x4)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r6, r5}}, 0x18)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000100)={0x12, 0xffffff75, 0xfa00, {0x0, r6, r3}}, 0xfffffe73)
write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r4, 0x5}}, 0x10)
ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000080))
socket$key(0xf, 0x3, 0x2)
ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000400))
ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f0000000540)={0x3, "67437e91ad4121ed711bbcae69b109826921a2fef07aba88d35d2c7f7e577997", 0x6, 0x7b4c97540c4afb1a, 0x2, 0x2, 0x2a, 0x4, 0x0, 0x7fffffff})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:53 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x501580, 0x0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000400)=0x1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000440))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=<r3=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)=ANY=[@ANYRES32=r3, @ANYBLOB='K\x00\x00\x00'], &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)={<r4=>r3, 0xe2, "45b589a7818882715e6e2f78c18b887c69d3cba6cc53c8533e74b866410e578595575de37450ebaf32378028b2267e49bf1a45cd7e368ee0db40216dee6974d0f7fa221a528a6e8f76c4f32f3802442a5799d53016e706629fbcd866866381ff7519e1d4d93befab58fda6fb863b068e67fcaeb98229757719915e9012308d16f3151c3d29500e8e210bc3a3ece51be760b02f87095aa234e3f4e8e8377f846c16a7c00a74644ce09128f7569ee63ddd801ef99f8d4f33597b10c55833fb1c414b14883733a84f352729a8c4c44904947eb5c3386303c45ccc935a2c383061e6f4ff"}, &(0x7f0000000140)=0xea)
prctl$PR_SET_TSC(0x1a, 0x2)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000340)={r4, 0x3, 0x9f, "be102257c84d4c7d48942f18f217858d9119fc8897e65c6000fe7bfc7135787d112444a3cfd3e1498f04489ec35f97b91b629c307da08bfc7285fca3deee1445296cb014428c28b3213abbaa0f2376fe7e12b18ec8be9615a417d9dbf9317054337d3d5d47b0ee533c6da29271ec0739f5cbc0b584de085830ecef47fbac57ee50181f4d75103174970a049fe9e7712b1bf074059c71e1b2d567ae0c999b7f"}, 0xa7)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000080)={0x5, 0x5, 0x0, 'queue1\x00', 0x58})

04:54:53 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x2, {0x81, 0x5, 0x2, 0x7d}})
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000))
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f00000000c0)=0x1)
dup2(r3, r0)

04:54:53 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0xffffffffffffff70)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
pread64(r0, &(0x7f0000000180)=""/166, 0xa6, 0x3ff)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000000c0)=0xa7fafc84a8905b0)

04:54:54 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x3)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7fa093945519872bc0395fd119b20004be4d3a9919a8d8d67e293a869a4fe176089eaabc0800e3746141dbc0b8b6353db0c2be5d6502bc4cb3dd83436c74311108edd6f8d0d86c19505823f4a9031088bcf8e335913ad95ee8a2c2d851307418ff71d7bf6f670da507453f08ece2885a853ae4a43e09ecefa5551800d84c88c683e733422058627d3f19080a91cdf4e08fb84f489081caaf401eeda3eb62e10416c4c720dd27fedf4bc1302cb5c9b4bc04f090d6078bd03916b92b0505eed3fa"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/member\x00', 0x2, 0x0)

[  879.600290] protocol 88fb is buggy, dev hsr_slave_0
[  879.605841] protocol 88fb is buggy, dev hsr_slave_1
04:54:56 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
getpeername$tipc(r0, &(0x7f0000000040)=@name, &(0x7f0000000080)=0x10)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f00000000c0)=0x7, 0x4)
r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x3ff)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:54:56 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
ioctl$BLKDISCARD(r1, 0x1277, &(0x7f00000000c0))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:54:56 executing program 0:
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r0 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_udp_int(r1, 0x11, 0xb, &(0x7f0000000400), &(0x7f0000000440)=0x4)
write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x4411, r0, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f00000001c0)=0xffffffffffffffff)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000180))
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
sendto$unix(r4, &(0x7f0000000280)="fd6355b459546c8e0cd66a64c60b41b45a5a4fcd250ac200fdb0e5295fc5cfcbb4511ef455b519d479cb2d011354d779f4fec5ec48a22a2e886030bb85dbd5edd3b59619ba5f713d22833a6e3a57be46cc3aa327d96d12ca91918d8894f9b191c92ac73fa069328111504dcb152175fd8b6e8460d3ecc65ca50c73ea7be86fc4015656c768366e2f74c1c846ee28dfc173279d8756a2fcd85a466e665394a82c6e6b36e11122258ea35863c7c836bfffa8ea80c04869edadd9254848ea03283f", 0xc0, 0x40, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/member\x00', 0x2, 0x0)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0xa1c00, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000003c0)='lo\x00', 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f00000000c0)=0x5, 0x4)

04:54:56 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TUNSETOWNER(r2, 0x400454cc, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
bind$isdn_base(0xffffffffffffffff, &(0x7f0000000180)={0x22, 0x0, 0xfd, 0x5, 0x66}, 0x6)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000001c0)=0x10001)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r3, 0x40084149, &(0x7f0000000080)=0x2)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x0, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  881.680103] protocol 88fb is buggy, dev hsr_slave_0
[  881.685227] protocol 88fb is buggy, dev hsr_slave_1
04:54:56 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000fc6c000000000000000000000063010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r1)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r2, &(0x7f00000017c0), 0x2cb, 0x400000000000)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, <r4=>0x0}, &(0x7f0000000280)=0x5)
setuid(r4)
stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchownat(r2, &(0x7f0000000200)='./bus\x00', r4, r5, 0x400)
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000040)={0xa0, 0x19, 0x1, {0xe15, {0x0, 0x4, 0x3}, 0x230d91c96114becd, r1, r5, 0x9, 0x10000, 0x53b8fbd, 0x800, 0x3, 0x81, 0x2, 0xfff, 0xc9, 0x2, 0x81, 0x8, 0xe7e, 0x0, 0xf8c8}}, 0xa0)

04:54:56 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x3, 0x4)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f00000000c0)={0x0, 0x3, 0x27eafe372315076d})
r2 = socket$inet(0x2, 0x3, 0x2)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCGPTPEER(r3, 0x5441, 0x1000)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYRESHEX], 0xfffffffffffffde8)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/status\x00', 0x0, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = fcntl$getown(0xffffffffffffffff, 0x9)
sched_rr_get_interval(r5, &(0x7f0000000200))
r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x200000, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, &(0x7f00000004c0))
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$inet6_dccp_buf(r7, 0x21, 0x1, &(0x7f0000000240)="77f9c85e31f8f46bbd7f010a40d5533e4e859e06e582dee9cb221d5b3b85f1ba1152b9211360038ef97cc470fc76620bb3bf23d1902f45b1914079a015f1053eb7bde1e9ab697fc60a5c1af7333f13e909bc7274987dcd498794f3ce65883348aed375550bccd05c5c40011b6fd9b0be3def627f8416bf9758a7deb45c", 0x7d)
mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x4011, r4, 0x0)
r8 = creat(0x0, 0x0)
r9 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000002c0)={<r10=>0xffffffffffffffff}, 0x2, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000380)={0x15, 0x110, 0xfa00, {r10, 0x0, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e22, @remote}}}, 0x118)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$FUSE_POLL(r8, &(0x7f0000000080)={0x18, 0x2f, 0x7, {0x81}}, 0x18)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:56 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  882.085488] audit: type=1400 audit(1578632096.689:100): avc:  denied  { map } for  pid=13852 comm="syz-executor.0" path="socket:[128279]" dev="sockfs" ino=128279 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=rawip_socket permissive=1
04:54:56 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x5)
nanosleep(&(0x7f00000000c0)={0x0, 0x1c9c380}, &(0x7f0000000180))
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="007cf338793981cbaa7d749d135483f66059"], 0xfffffffffffffe08)
openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x7be2e2d41a9461df, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:56 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'netpci0\x00', 0xa63a})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x4, "cf359500874fa639"})
r2 = creat(0x0, 0x100)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58)

[  882.240116] protocol 88fb is buggy, dev hsr_slave_0
[  882.245803] protocol 88fb is buggy, dev hsr_slave_1
04:54:56 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800001f070000000000000000000000326e0100a700"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:54:56 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x60, r2, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xc64d, 0x2}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x15d, 0x1}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xfffffffd}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:57 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$P9_RATTACH(r4, &(0x7f0000000140)={0x14, 0x69, 0x2, {0x20, 0x3, 0x2}}, 0x14)
bind$netrom(r3, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
fcntl$dupfd(r5, 0x406, r6)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:54:57 executing program 0:
r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f00000000c0)=0x371)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xbe\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Y\x83\x90h\x00\x00', 0xc)
write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
socket$inet6(0xa, 0xfb819b99cea0298a, 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))

04:54:57 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800011622000000000000000000000062010000000000fbf24e0800000000101e7c4c648bfd90e0d90073b6e6ec8a1c832453aac71d7d24c1c93bee738c5c2fd2ff8aba2aacf2a7deb859b66c3a92508e35fb6f80d1600e4374ec07411e1b216ef47a3d7532d8cbb4792781a6175968ac71aa5be47cf890707a852a47b6ed2ef3de3b6af824c8d3e03b9e6ea0b47e88e1f6c934ea4b60780eb7bf6683e827739c47e632b612a11b328bab7a7e0d6fd01cdd590cb0d5740f7f96ad0011b314d5a884ed75"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r2}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r2, 0x81, 0x77, "67885cf2aca83c9336804e07eb32b9d510945a9ff966d4942600f770c1c679faa6fd437c7ce7b43839f6353d06b2082635d2f2f9f62a112c2707a1ab27ebc6a65dca7cebfa1944a5363a355b8a67d9ff5253034b2b97c4161684fc72ee973870966e2977b8cf0b8f3d91f36c5d78a2705afbd2f3cd5f8e"}, 0x7f)

[  882.640109] protocol 88fb is buggy, dev hsr_slave_0
[  882.645241] protocol 88fb is buggy, dev hsr_slave_1
04:54:57 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000080))
prctl$PR_GET_THP_DISABLE(0x2a)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r4, &(0x7f0000000240)=ANY=[@ANYRESDEC=r3], 0xfffffffffffffe49)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCNOTTY(r5, 0x5422)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0))

04:54:57 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
flock(r2, 0x5)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f74977ebb93fb133c21f9f9ae4e3570d130763b4c4779d69bc480"], 0x1)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendto(r3, &(0x7f0000000200)="f554d3a7dc0526e4215ba7fccb79c17345746f6b9fb7b4e567418fd10b03f047a6eae522947356dd7d99f8e6df124a0713f9a614ceb4f769b2d7c356544b528e529642c067fe40f2f8d6005b83dc5bedeb118c72231539dfc25f7b6790cbce308d6d876ff6c4ada0f3fe8580e8cf05b15d5563506e052777d099cadf1863d88a657ee85e1a14d9fff0b0aa3b8d28fb932ade356ac0f23afd42b06f67fc08c30c434d21ddaa0c64642d0bd77b2b02cd241bb6a9", 0xb3, 0x20000000, &(0x7f00000002c0)=@llc={0x1a, 0x20, 0x6, 0x0, 0x5, 0x0, @random="35d1ed9931e4"}, 0x80)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x28002, 0x0)
ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f0000000180)=""/74)

04:54:57 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
openat$cgroup(r2, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:57 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYRESDEC=r2], 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:57 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000300)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\x804:\xe3\xd7\xbb\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00\x00\x00\x00\x18\x00\x00\x10\xce\xa5*\x00\x00\x00\x00\x00\xdb\x0eX\xe3\xe0c\x88f!1K\xee\xe9\x1e2=7\xb9\xc3\x1d\x04\x82\x98rkm:\xf7\xd0\xfc#<V0\xf1\x12\xe1HC\xe2\xd5\x97\xc4^\xc9\xaf\x8e\xe1\x7f=\x9b\xeb\xa9z\x90\x15\x8a\xcbZ\xd6\xb1\xf0\xc2\x85[\xc7>\x11\x00\x06\xe9\x18\xe2\xc7\xf0>\x00\x00\x00\x00\x00\x00W\x88w\xae\x15\xb4\xf8\x87\\\x8c\xc9\xd6\x9e\xbe\x0e\xda\x827\xba\xfb\xe5\a\xb3O\x91\xfe\xc8\xe1\xd5W\x8b>U\v\xd3\xf2o$nl\xd7\x9a\x872\xbad\xf1\xc0\xca2NLu\xb5\xa8~>h\x9f%\xf2W\x8f\x9a\xdb\x00\xe8]C\x004\x92?%\\K\x89r7S\xf6\xb4\x8f2S\x1a\xc0\xe0M\x11@', 0x4)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000080)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]})

04:54:57 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000200)='\xc2=\x9cx\x14\xd8\xd0\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x91\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00\xa9<\x00'/80, 0x7)
write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7fa49788b59a718640f7d4c9405f7f0cf35e699e8ecda9f9e8fb1a712423febe996b3ca2a7e4fe638f3cfb489bb8c9"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
tee(r1, 0xffffffffffffffff, 0x800, 0x9)
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x84001, 0x0)
ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000100)={0x0, @reserved})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:58 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="00195542483fc5f80b2909f4dc63221092de7a830afbba442bf151a9e4317363237e"], 0x1)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r4 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x46080)
write$P9_RLOPEN(r4, &(0x7f00000001c0)={0x18, 0xd, 0x1, {{0x2, 0x0, 0x4}, 0x2}}, 0x2681f26319b8b706)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x40, 0x0)
ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000280)=0x80000000)
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000080)={0x20})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:58 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7cea, 0x100)
bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  883.605367] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
04:54:58 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0xfa4, 0x200}, 0x2}, 0x10)
fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080))
r1 = creat(0x0, 0xa5)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x7)
write$binfmt_script(r2, &(0x7f0000000980)={'#! ', './file0', [{0x20, 'vmnet0!'}, {0x20, '}\\'}, {}, {0x20, 'GPL\x00'}, {0x20, 'GPL\x00'}, {0x20, '/dev/dlm_plock\x00'}, {0x20, '\''}, {0x20, 'nodevppp1['}], 0xa, "10199acebe6680df9f"}, 0x47)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0xba32f061cccb11d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x3, r1, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x0, 0x0)

[  883.668546] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  883.696743] CPU: 0 PID: 13915 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  883.704866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  883.715654] Call Trace:
[  883.718262]  dump_stack+0x142/0x197
[  883.721924]  warn_alloc.cold+0x96/0x1af
[  883.725920]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  883.730872]  ? wait_for_completion+0x420/0x420
[  883.735751]  __alloc_pages_slowpath+0x23c6/0x2930
[  883.741673]  ? warn_alloc+0xf0/0xf0
[  883.745331]  ? __might_sleep+0x93/0xb0
[  883.749876]  __alloc_pages_nodemask+0x62c/0x7a0
[  883.755638]  ? rcu_read_lock_sched_held+0x110/0x130
[  883.760872]  ? __alloc_pages_slowpath+0x2930/0x2930
[  883.766573]  alloc_pages_current+0xec/0x1e0
[  883.770914]  kvm_mmu_create+0xdf/0x1e0
[  883.774832]  kvm_arch_vcpu_init+0x29c/0x8e0
[  883.779167]  kvm_vcpu_init+0x272/0x360
[  883.783288]  vmx_create_vcpu+0xfc/0x2aa0
[  883.788143]  ? mutex_trylock+0x1c0/0x1c0
[  883.792700]  ? handle_rdmsr+0x6e0/0x6e0
[  883.797140]  ? wait_for_completion+0x420/0x420
[  883.802033]  kvm_arch_vcpu_create+0x8c/0xc0
[  883.806549]  kvm_vm_ioctl+0x501/0x1600
[  883.810449]  ? __lock_acquire+0x5f7/0x4620
[  883.814690]  ? get_unused_fd_flags+0xd0/0xd0
[  883.819213]  ? kvm_vcpu_release+0xa0/0xa0
[  883.823368]  ? trace_hardirqs_on+0x10/0x10
[  883.827614]  ? trace_hardirqs_on+0x10/0x10
[  883.832141]  ? __might_fault+0x110/0x1d0
[  883.836306]  ? save_trace+0x290/0x290
[  883.840117]  ? __might_fault+0x110/0x1d0
[  883.844187]  ? __fget+0x210/0x370
[  883.847650]  ? find_held_lock+0x35/0x130
[  883.853045]  ? __fget+0x210/0x370
[  883.856539]  ? kvm_vcpu_release+0xa0/0xa0
[  883.860699]  do_vfs_ioctl+0x7ae/0x1060
[  883.864612]  ? selinux_file_mprotect+0x5d0/0x5d0
[  883.869380]  ? lock_downgrade+0x740/0x740
[  883.873543]  ? ioctl_preallocate+0x1c0/0x1c0
[  883.878134]  ? __fget+0x237/0x370
[  883.881778]  ? security_file_ioctl+0x89/0xb0
[  883.886296]  SyS_ioctl+0x8f/0xc0
[  883.889670]  ? do_vfs_ioctl+0x1060/0x1060
[  883.893827]  do_syscall_64+0x1e8/0x640
[  883.897791]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  883.902931]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  883.908827] RIP: 0033:0x45af49
[  883.912465] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  883.920290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  883.927573] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  883.934854] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  883.942133] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  883.949414] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  883.960149] net_ratelimit: 4 callbacks suppressed
[  883.960154] protocol 88fb is buggy, dev hsr_slave_0
[  883.970119] protocol 88fb is buggy, dev hsr_slave_1
04:54:58 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18060000000d0000000000000000000063010000150000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  884.091109] Mem-Info:
[  884.093742] active_anon:853611 inactive_anon:1747 isolated_anon:0
[  884.093742]  active_file:4479 inactive_file:5464 isolated_file:0
[  884.093742]  unevictable:0 dirty:39 writeback:0 unstable:0
[  884.093742]  slab_reclaimable:15555 slab_unreclaimable:127023
[  884.093742]  mapped:60049 shmem:1792 pagetables:27880 bounce:0
[  884.093742]  free:482840 free_pcp:403 free_cma:0
[  884.134864] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  884.167409] Node 1 active_anon:1532652kB inactive_anon:88kB active_file:17856kB inactive_file:21852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25088kB dirty:152kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  884.207891] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:54:58 executing program 4:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCGETA(r0, 0x5405, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x0, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0x0, [], 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x1c202, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000240)={"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"})
ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000040))

[  884.243663] lowmem_reserve[]: 0 2569 2569 2569 2569
[  884.249403] Node 0 DMA32 free:30628kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:420kB local_pcp:292kB free_cma:0kB
[  884.307376] lowmem_reserve[]: 0 0 0 0 0
[  884.311814] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  884.338605] protocol 88fb is buggy, dev hsr_slave_0
[  884.338649] protocol 88fb is buggy, dev hsr_slave_1
[  884.351715] lowmem_reserve[]: 0 0 0 0 0
[  884.355825] Node 1 Normal free:1890260kB min:53508kB low:66884kB high:80260kB active_anon:1532852kB inactive_anon:88kB active_file:17856kB inactive_file:21852kB unevictable:0kB writepending:152kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20256kB pagetables:47040kB bounce:0kB free_pcp:836kB local_pcp:652kB free_cma:0kB
[  884.385920] lowmem_reserve[]: 0 0 0 0 0
[  884.390211] Node 0 DMA: 0*4kB 8*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10480kB
[  884.406843] Node 0 DMA32: 27*4kB (UMH) 151*8kB (UMEH) 798*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 30628kB
[  884.432222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
04:54:59 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000180)={&(0x7f0000000040), &(0x7f0000000080)=""/225, 0xe1})
get_mempolicy(&(0x7f0000000240), &(0x7f0000000280), 0x6, &(0x7f0000ff9000/0x4000)=nil, 0x1)

04:54:59 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x200001cd, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  884.460009] Node 1 Normal: 129*4kB (UME) 107*8kB (UME) 104*16kB (UME) 12*32kB (UME) 51*64kB (UME) 22*128kB (M) 13*256kB (UM) 10*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 454*4096kB (M) = 1889820kB
[  884.513262] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  884.551407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  884.569883] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  884.588718] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  884.613227] 11735 total pagecache pages
04:54:59 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000240)={0x0, "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"})
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000630100000000000095000000000000003702ed604ab009af7c09237760f3563a042c6bf97c8bd8eca66068cc73467758a3fff5d3a606ec2c2b5723e138e8584118e56fc9e7ed6a541667c65f5581e08527374e8351ac5d2a429d214971d06d8867ea3bbe8d0ca64b95111ad960ba631bcaefa66b83b3c26dbee0f38a26de680e4c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x3c3, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  884.626694] 0 pages in swap cache
[  884.645091] Swap cache stats: add 0, delete 0, find 0/0
[  884.669730] Free swap  = 0kB
[  884.696276] Total swap = 0kB
04:54:59 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x3, 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x200, 0x3, 0x9, 0xff, 0x80, 0x200}, 0xc)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f00000000c0))

[  884.720113] protocol 88fb is buggy, dev hsr_slave_0
[  884.721108] 1965979 pages RAM
[  884.725236] protocol 88fb is buggy, dev hsr_slave_1
[  884.743612] 0 pages HighMem/MovableOnly
[  884.769031] 335871 pages reserved
[  884.789414] 0 pages cma reserved
04:54:59 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x10280, 0x0)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

04:54:59 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)={'mangle\x00', 0x2, [{}, {}]}, 0x48)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:59 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x1, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="6e000000b66f069281547000"], 0x1)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000000000/0x1000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000000180)="94908b8bb7ad392ed7d3dd0e3fc728233e96c914ba3319bb3169c123961332332475cf10675ba9a3440f4184a7aedcaf71df8e79733d7b2b0ea339f17a177b6b023e3104dc81684904ce931a3cb480f4dec3a9a658570241feab0bebe6dacc4b150b6d7e03fac5bb85d259c948105f19692b25e502aa6101ad6d757c7a3017bac1e69d1ad71e98418eb03223b0e9c798e6d38e06b8b87e9d25e5", 0x9a, r1}, 0x68)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000300)={0xfffffffd, 0x0, "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"})
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080))
unlink(&(0x7f00000002c0)='./file0\x00')
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000018, 0x20010, r1, 0x1d5b0000)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  885.130125] protocol 88fb is buggy, dev hsr_slave_0
[  885.135270] protocol 88fb is buggy, dev hsr_slave_1
[  885.140414] protocol 88fb is buggy, dev hsr_slave_0
[  885.145471] protocol 88fb is buggy, dev hsr_slave_1
04:54:59 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:54:59 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7ed959d844d5e779d4426e677f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='~'], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = accept4$rose(0xffffffffffffffff, &(0x7f0000000180)=@full={0xb, @remote, @netrom, 0x0, [@default, @null, @null, @netrom, @rose, @null]}, &(0x7f00000001c0)=0x40, 0x800)
ioctl$TCSETX(0xffffffffffffffff, 0x5433, &(0x7f0000000300)={0x7ff, 0xed0c, [0xfffa, 0x400, 0x1a, 0x54a4, 0x9], 0x4})
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000002c0)={0xfffffff, 0x6, 0x9, r2, 0x0, &(0x7f0000000280)={0x9909d8, 0x400, [], @p_u8=&(0x7f0000000240)=0x20}})
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0xd1481, 0x0)
ioctl$KVM_GET_ONE_REG(r3, 0x4010aeab, &(0x7f00000000c0)={0x80000000004e, 0x7})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:00 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
dup(r5)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x260403, 0x0)
ioctl$KDGKBDIACR(r6, 0x4b4a, &(0x7f0000000200)=""/225)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x101, 0x8800)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = accept(r2, &(0x7f0000000280)=@l2, &(0x7f00000000c0)=0x80)
write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[], 0xfffffeda)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x1, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000180))

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYBLOB="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"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x11, r3, 0x1, 0x81, 0x6, @dev={[], 0x1f}}, 0x14)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
stat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r9)
mount$9p_fd(0x0, &(0x7f0000000180)='.\x00', &(0x7f00000001c0)='9p\x00', 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '/dev/mISDNtimer\x00'}}, {@debug={'debug', 0x3d, 0x9}}, {@access_client='access=client'}, {@fscache='fscache'}, {@cache_mmap='cache=mmap'}, {@privport='privport'}, {@access_uid={'access', 0x3d, r7}}, {@cache_loose='cache=loose'}], [{@appraise_type='appraise_type=imasig'}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r9}}]}})
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7fe7d4d7607c6dd8e5476ab47c2db015605a8cfee9bf73ff07ef7a67928e475dab79eb0b86f1a8bf0baea40d6658c385a00b"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x2400c0)
ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f00000000c0)={0x80000001, 0x64e3b93f})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000180)=0x7, 0xb288)
ioctl$NBD_DO_IT(r3, 0xab03)

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x2a)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:00 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:01 executing program 5:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={<r1=>0x0, @in6={{0xa, 0x4e23, 0x10001, @rand_addr="546c93dbac0554d83d5fabcbebed0dc0", 0x7}}, 0x4, 0x7, 0x2, 0xd7ed, 0x4}, &(0x7f0000000100)=0x98)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={r1, 0xe5, "96e0636eab289943737dfd82d6f2abf0bed888f0d17b9761d43b747691ad4e08a4094314e8ca7e2389f0e8ba2b168abfcb8fe5c6a719fb44f63a1bedf7ef6269707137054338c2c856a718b5d8f6ddd4ff2d4107aa7bd3ae1f0f1e9ab2f7eb335cf03e02a76a78940efbfe1beae815505ffab8ea9d616a1c988e3b0cbce2ffd9a4a80060ed4d53c6eb6c31fcd3224a06c5652320c03d1b1ae7c7ffeadc7954e63139db9189c896bf2103c0134f4e981a1eb01eabdff779f6812318f271d7cd605267bb9b4ec36a5a54a1a4e19e63cfd211bc680465fda25e007a21994f35475dd78a8393e0"}, &(0x7f0000000140)=0xed)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{r4}, 0x4, 0x1, 0x100000000})
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r3, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r2, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:01 executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="fb276e9bdfdf6139901d1233bc875a765b3b623515d60b0ce69e11", @ANYRES64=r2/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
connect$pppoe(r5, &(0x7f0000000700)={0x18, 0x0, {0x1, @empty, 'veth0_to_bond\x00'}}, 0x1e)
r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r8 = socket$kcm(0x2, 0x2, 0x0)
flistxattr(r6, &(0x7f0000000580)=""/117, 0x75)
setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r7, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=0x1, 0x0, <r9=>0x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0xfffffffffffffc32, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r9}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r6, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r9}, 0x78)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000040), &(0x7f00000003c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0xd, [], r1, 0xe, r3, 0x8, &(0x7f00000000c0)={0x800008, 0x4}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x6, 0x4, 0xff}, 0x10, r9}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r10}, 0x78)

04:55:01 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x1, 0x0, 0xfffffffffffffff0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x9e, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x101000, 0x0)
r0 = creat(0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb002204}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd27, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xea996d328eb86807}, 0x40000)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x2)

04:55:01 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
ioctl$MON_IOCQ_URB_LEN(0xffffffffffffffff, 0x9201)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000001780)={@mcast1, <r1=>0x0}, &(0x7f00000017c0)=0x14)
connect$packet(r0, &(0x7f0000001800)={0x11, 0x0, r1, 0x1, 0x2}, 0x14)

04:55:01 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={<r4=>r3, 0x4c0}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000180)={r4, 0x6}, 0x8)
r5 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r5, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:01 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@mcast1}}, {{@in=@local}, 0x0, @in=@empty}}, &(0x7f0000000180)=0xe8)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x1, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000280)={0x18, 0x71, 0x1, {{0x160, 0x1, 0x6}, 0x4}}, 0x18)

04:55:01 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000feff6200000000e8ffffff5d6ece7b000000"], &(0x7f0000000000)='GPL\x00', 0x40000, 0xfffffffffffffdd8, 0x0, 0x0, 0x2, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1ba}, 0x78)
ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000040))

04:55:01 executing program 4:
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000080)={0x980000, 0x1000, 0x20, <r0=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980909, 0x8, [], @value64=0x4}})
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:01 executing program 4:
socket$phonet_pipe(0x23, 0x5, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@jmp={0x5, 0x0, 0xd, 0x1, 0x9, 0xfffffffffffffffc, 0xffffffffffffffff}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xf4, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:01 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
socketpair(0x3, 0x5, 0x81, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x1, 0x3f, 0x0, 0x50, 0x1, 0x0, 0x1d, "08a9306e534b6342685e62067037934e9feafffe", "fd4d347f43cbe971720d3ff5231dc4634bc9bc7c"})
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r1, 0xc034564b, &(0x7f0000000100)={0x8000, 0x47425247, 0xfff, 0x5, 0x3, @stepwise={{0x4}, {0x401, 0x60}, {0x0, 0x7}}})

04:55:02 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0)
ioctl$IMCLEAR_L2(0xffffffffffffffff, 0x80044946, &(0x7f0000000080)=0x243c)

04:55:02 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x4, 0x0)
preadv(r3, &(0x7f00000017c0), 0x2cb, 0x400000000000)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, <r5=>0x0}, &(0x7f0000000280)=0x5)
setuid(r5)
stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0})
fchownat(r3, &(0x7f0000000200)='./bus\x00', r5, r6, 0x400)
setfsgid(r6)
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$vsock_stream(0x28, 0x1, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x800)
ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000440)={'bridge0\x00', @ifru_names='netdevsim0\x00'})
r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x20000, 0x0)
ioctl$EVIOCGKEY(r10, 0x80404518, &(0x7f0000000100)=""/84)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x30, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$SO_TIMESTAMPING(r10, 0x1, 0x843dbfd5446e97a6, &(0x7f0000000200), &(0x7f0000000240)=0x4)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r8, 0x0, 0x30005, 0x0)

04:55:02 executing program 4:
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
write$fb(r0, &(0x7f0000000080), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x8, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffee8, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f00000000c0)=0xbdbc)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x800, 0x0)

04:55:02 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7faaece0480e8b73665be1851a871d483503d1a1d8f6d9be71f96917030108186aba6b5c0a7a00058dcaabaa006a12ccd287f19ecada552ab94bb09776df8584e422ed4cb1008ff4b24e83fef17b180fae7a13b76608cd294bd740b0e0a47adba2d7b6458020bdb9815fc14b262145b942e588d489231ebabbe17d74d50ca57973736ef6576b65e22b758ca8f8"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, <r3=>0x0})
fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x8000, r3})

04:55:02 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, {0x3f, 0x8, 0x8, 0x42, 0x3f, 0x80}, 0x6}, 0xa)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:02 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7fe34b5cfada29d40cce6a81ec8b5cd65b3c639631a4c8768ac1f3b960900fe374da"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
write(0xffffffffffffffff, &(0x7f0000000240)="7b880433ca227e79cfe512b8a56ea490fcde94fea29e5cce1d6a27cd5e74c354701e2642ab66cf50bf98cbb21c3d08cd47507ce2472c05ef4932eea5e26ba91259eff0d09a4e58394ab9dbce9beb8783161523d92911c83bd2113be0279bf523a5a8e3a897042bac6d22540bb50b8acc33c35259686a63d34b6f1934c605d689e8af9af3af6b679f8ce5f0ed2144877eee55c956d1d67f3cde", 0x99)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={<r3=>0x0, 0x4, 0x20, 0x401}, &(0x7f0000000180)=0x18)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000001c0)={0x8001, 0x201, 0x0, 0x68, r3}, &(0x7f0000000200)=0x10)

04:55:02 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x9f0000, 0x3, 0x1ff, <r1=>r0, 0x0, &(0x7f0000000080)={0x99096f, 0x5, [], @p_u16=&(0x7f0000000040)=0x8}})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000240)={0x0, 0x0, "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"})

04:55:02 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x2)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:02 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="cf954131f36bf0f7c19151d93e893b8ff58368b9e3fabd28807c1b5de620c8031ca18e9b36bf9c6da158a59c67206634eb9b710f6b864b0fad5442343f4266281ae373b623b7885175ee8e233073e93c2618b974b9a7107b38d8ddd321aee3e2cd9b0209e2b94b4c9c83a3f482ac7a0b284c7d6e0694f7b23d06876610b8502300c4ea8a4254c641132732d4b16ec522690f1f659d695b397a39248cbffd"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x800)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
recvmsg$can_bcm(r3, &(0x7f0000001700)={&(0x7f0000000180)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000380)=""/143, 0x8f}, {&(0x7f0000000440)=""/202, 0xca}, {&(0x7f0000000240)=""/10, 0xa}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f0000001540)=""/27, 0x1b}], 0x7, &(0x7f0000001600)=""/199, 0xc7}, 0x600140c3)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000002a80)={@loopback, @rand_addr=0x6}, 0x8)
sendmsg$nl_route_sched(r2, &(0x7f0000002a40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002a00)={&(0x7f0000001740)=@delchain={0x12b0, 0x65, 0x202, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xa, 0x1c}, {0x0, 0xfff2}, {0x17, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x80}, @TCA_CHAIN={0x8, 0xb, 0x81}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0x1264, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffed, 0x7}}, @TCA_MATCHALL_ACT={0xdc, 0x2, @m_gact={0xd8, 0x1f, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x34, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xd00, 0x0, 0xc, 0x5, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x68f, 0x1, 0x7, 0x0, 0xc000}}]}, {0x94, 0x6, "985ec4c0bd40fb47dddf7948314c68ad5429dc6ce3e7101209f865bbe02c36ab0608a4d8c849f45ebafdf9650a8922fcab6bf24596fd40fcf020b7f15a9831219ee7641cd8ff5af8fbd6b65b605d4e066a508f3450d60a1ca2044b2cabb5d87c690d79f501cfea928e1564b9f0c96cf8e19c6ad59c79cf0e9f11695a83829a80017e9b8f753c4918681fac370b855a91"}}}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff3, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x859e875ec05a0d73, 0x2}}, @TCA_MATCHALL_ACT={0xf0, 0x2, @m_mpls={0xec, 0xc, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1ab83}, @TCA_MPLS_TTL={0x5, 0x7, 0xce}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0x5e301}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x97, 0x6, "3e67171d211f194b21109a8d5d760683fdae9c34b47a8f0478a30de561c1fd445e5caeffce8ee962e0f99cbdb0b3e986d0cd44b0508fd1a974aebd37cfce3722947fea5b4f31fd25f76a4ee34c2392c81d1a107fae7127a781a5d320135ea5a32bf8dad5b54d86f95a70c688fa2ce625bb2f87510d07cfe33994bdf53c09da681fff5fdede02661552e87154655e3f73194cd4"}}}}, @TCA_MATCHALL_ACT={0x107c, 0x2, @m_tunnel_key={0x1078, 0x9, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x60, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7e90, 0x1f, 0xffffffffffffffff, 0x9, 0x100}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2a}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, {0x1004, 0x6, "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"}}}}]}}, @TCA_CHAIN={0x8, 0xb, 0xdb93c38}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x800}, 0x80c4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000002ac0))

04:55:02 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:55:02 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="85d5183b084bc7a19dd09e9efeb846c8770000008000000000c44deb0ca6a10ac9675dcbc0f56ed92b0bc62dc59d457824489b398df251521c4fed90"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:02 executing program 4:
ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000140))
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
dup3(r1, r2, 0x80000)
accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="000000001f0000000000000000040020000000000020ecffffffffffffff0000000000039b108b2813476eb3130873fb6227aa4c7dfafe66077851185138e5e00b1b7b573fbf220693f398b25d1d76b3f270a9fe817e17cffd3e901172ae5d4a15219e5fbcfb5d46b7371f3532357485dc9f08259283667e429d6f28ef8c58fa568c7752a9370b1e1969f6082869226b4a81aa86e1eea12d0000e39fc391a8a3f06fc512f6703aa7cee1"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:02 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
dup2(r0, r2)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PPPIOCGDEBUG(r3, 0x80047441, &(0x7f0000000080))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:03 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffc}, 0x113)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000100))
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:03 executing program 4:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
dup(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:03 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7fe5ed14ac485a7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:03 executing program 4:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x8, 0x0, <r0=>0x0, 0x0, &(0x7f0000000140)={0x1, 0x1}, 0x0, 0x0, &(0x7f0000000180)={0x3, 0x8, 0x81, 0x600000}, &(0x7f0000000240)=0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x2, 0x0)
ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@null, @null, @default, @bcast, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})

04:55:03 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getpeername(r0, &(0x7f0000000080)=@generic, &(0x7f0000000180)=0x80)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r2, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="58703107b13007f261bc60f42f76155bdd04c027ceafceff1b1305f6046383e824d661ba6de94d29d2b7d2c0595efced8c5b6b012f133046f53512b0cf119e99871b8edfaa38848c2c0c0879467a76c796dff7b28c63922b181138ecb0b40dd013d312ecb6ade656cd26bd909f3d88e2966be2855825ba14ad9d104bf81815b84441252d39c2129df8bfc8a40b55b4923267f44811f16a7b85a594e02f52fead9a81fbb030d3353e17abd5b8fc4b19b1ce5622690e7297aa95a5a872090920a217c0d4d3bc", @ANYPTR64=&(0x7f00000007c0)=ANY=[@ANYBLOB="aad203769652feb1e353e8ac560a5aeb86c59d4b48f23fc7cc56cf74de5ad70651db452f753a549fd3d4f25b233b99f4886f4b042dd67641d3e85ee168c016a384f4b5cb764c11ba47e0ebdad9d6b0b397ab1cf8022eaed810b75eb79a686269b2f579be8aa9135673ccade5eb23cedfff7e0c8f03da2d798ff44367eaee75325d077b3383079c024602c2", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="37fd95c38e8cd110e1f7914100562621a14055f57dc4964fd0c5a1449858948a7ecf1cf420f2fccf48c41e4bafaae450e43df16e249a6d49ee37b7c4b1e78aa15cd863700b11bcf96526f396f3ce85b816044a4dd10889ffa3624a95acf91347f41db071731912ed36e1233937fa8f3cf0cf8f2c72e6ed4b427d438297722fd3f90adaac8b06d5de168fe628bfd561d095b045e4a5caf46b46314c2bcacadf44a99dab90c1a6cc1705193bbb297e69f3208b8359228fe4", @ANYPTR64, @ANYRES64=r1, @ANYPTR64, @ANYRES64=r2, @ANYPTR64, @ANYRESOCT, @ANYRES64=r4], @ANYRES64=r2, @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRESDEC=r5, @ANYRES32, @ANYRES32=r1, @ANYRESHEX, @ANYRESHEX=r6, @ANYRESHEX=r7, @ANYRES64, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRES64=0x0], @ANYRESOCT=r2]], 0xd1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))

04:55:03 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_inet6_tcp_SIOCOUTQ(r5, 0x5411, &(0x7f00000000c0))

04:55:03 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000021000000000000000000000063010000fcffffff95000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x40)
r1 = creat(0x0, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000240)={0x3})
setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='trusted.overlay.nlink\x00', &(0x7f0000000180)={'L+', 0x81}, 0x16, 0x0)
ioctl$VFIO_GET_API_VERSION(r2, 0x3b64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='GPL\x00', r1}, 0x10)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x10)

04:55:03 executing program 0:
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="92ec0b8472b983ca5e3c665bb0e6c7ef4afbb9672957ca05f50831b73969235796c92cb4138e02eb1e4f783825e8ff5104f35b953d6cc4fa51908a1de7e5474493a1034c8633a319050970f3e69facc39778af33de3acfe127c18280df339c6fafa471f326edda6a0b72b9069e9f28048a10e6294ab3da3d9f6a7730ba907c753d81e7b8c8b3ca0762cdb730f988ed4b756e"], 0x1)
fsetxattr$security_evm(0xffffffffffffffff, &(0x7f00000000c0)='security.evm\x00', &(0x7f0000000180)=@v2={0x5, 0x3, 0x8, 0x1, 0x28, "f471130524753821e6bd34616a714b880fd63f276fa1ec2ef318dfcbb344fccb9d6f4b1ad373f303"}, 0x32, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:03 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x1)

04:55:03 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000380)=0x4)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x8000000)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r5)
r6 = getegid()
mount$fuseblk(&(0x7f0000000080)='/dev/loop0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='fuseblk\x00', 0x10000, &(0x7f0000000240)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x2}}], [{@smackfshat={'smackfshat', 0x3d, '\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@permit_directio='permit_directio'}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@obj_role={'obj_role', 0x3d, 'cpuset-cgroupuserwlan0'}}]}})
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))

04:55:03 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000080)={0x990000, 0x6, 0x4, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980001, 0xd2, [], @value64=0x5}})
ioctl$TIOCL_SETVESABLANK(r1, 0x541c, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0xa, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:55:03 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={<r4=>0x0, <r5=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r5)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000240)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000340)=0xe8)
syz_mount_image$jfs(&(0x7f00000000c0)='jfs\x00', &(0x7f0000000100)='./file0\x00', 0x6, 0x0, &(0x7f0000000140), 0x20000, &(0x7f0000000380)=ANY=[@ANYBLOB='resize,umask=0x0000000000000004,mask=^MAY_APPEND,uid>', @ANYRESDEC=r5, @ANYBLOB=',rootcontext=user_u,fowner<', @ANYRESDEC=r2, @ANYBLOB=',smackfsdef=lo,obj_role=systemwlan0cpusetppp0vboxnet1.eth1,smackfsfloor=/dev/dri/card#\x00,uid=', @ANYRESDEC=r5, @ANYBLOB="9de269643c", @ANYRESDEC=r7, @ANYBLOB=',\x00'])
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x4b, 0x6, 0x0, {0x2, 0x1, 0x22, 0x0, 'systemwlan0cpusetppp0vboxnet1.eth1'}}, 0x4b)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
r9 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4)
linkat(r9, &(0x7f0000000540)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x400)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r9, 0xc00c642d, &(0x7f0000000140)={<r10=>0x0, 0x40000, r3})
r11 = syz_open_procfs(r4, &(0x7f00000004c0)='net/udp\x00')
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000500)={r10, 0x0, r11})

[  889.280134] net_ratelimit: 12 callbacks suppressed
[  889.280139] protocol 88fb is buggy, dev hsr_slave_0
[  889.290277] protocol 88fb is buggy, dev hsr_slave_1
[  889.295433] protocol 88fb is buggy, dev hsr_slave_0
04:55:03 executing program 4:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r1)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@ipv4={[], [], @dev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000000180)=0xe8)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0}, 0x4000)
r4 = geteuid()
getresuid(&(0x7f0000000300), &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000380))
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r7)
r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r8, &(0x7f00000017c0), 0x2cb, 0x400000000000)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, <r10=>0x0}, &(0x7f0000000280)=0x5)
setuid(r10)
stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0})
fchownat(r8, &(0x7f0000000200)='./bus\x00', r10, r11, 0x400)
newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}, 0x4000)
getresgid(&(0x7f0000000480)=<r13=>0x0, &(0x7f00000004c0), &(0x7f0000000500))
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0})
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="02000000010004000000000002000400", @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000100", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="02000100", @ANYRES32=r7, @ANYBLOB="040004000006000000000000", @ANYRES32=r11, @ANYBLOB="08000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="10000200000000002000060000000000"], 0x74, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:04 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = dup3(r2, r0, 0x80000)
recvfrom$x25(r3, &(0x7f00000000c0)=""/147, 0x93, 0x2, &(0x7f0000000200)={0x9, @null='               \x00'}, 0x12)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$inet6_dccp_int(r6, 0x21, 0x0, &(0x7f0000000240)=0x10000, 0x4)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x973c}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:04 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000080)={{0x0, 0x3, 0x1, 0x1, 0xbc33}})
write$binfmt_elf32(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="4b80e4c08b74d3d3048810df7ebf272bd27f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:04 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/access\x00', 0x2, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:04 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, &(0x7f0000000040)={0x8, 0x8})
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
fadvise64(r1, 0x1, 0xff, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_G_AUDOUT(r2, 0x80345631, &(0x7f0000000080))

04:55:04 executing program 0:
r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x0, 0x280)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={<r2=>r1})
r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r4 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SIOCX25CALLACCPTAPPRV(r5, 0x89e8)
write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB='\b'], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r4, 0x0)
mlock2(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x1)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SIOCGIFMTU(r6, 0x8921, &(0x7f00000001c0))
ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000180)={'ipvlan1\x00', {0x2, 0x4e20, @loopback}})
ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000040))
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, &(0x7f0000000240)={0x0, 0x7fff, 0x3, 0x1})
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_TRY_FMT(r8, 0xc0d05640, &(0x7f0000000280)={0x6, @pix={0x3, 0x2, 0x41414770, 0x5, 0xfffffeff, 0x7, 0x2, 0x2, 0x1, 0x2, 0x0, 0x5}})

04:55:04 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)

04:55:04 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000080)={&(0x7f0000000040)=[0x80000001, 0x1ff, 0x5, 0x5, 0x1f], 0x5, 0xfffffffc, 0x7, 0x4, 0x3, 0x3, 0x259, {0x8001, 0x3ff, 0x100, 0x9, 0x2, 0x8, 0x8, 0x3f, 0x2, 0x9, 0x5, 0x4, 0x7, 0x6, "2d08eda3b54fce35cb44781f390e86a5300a9b82496ce554aaa538773c59ccbf"}})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={<r2=>0x0, 0x80000})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000140)={r2})

04:55:04 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7fd4a9b13e2f8b6149faff7a2f6e4883ceb04e8f4c257f41eff90c4024e10d5c7cc040e4d71b96a0d87351c1ffd10f5cbe031cdfd84ca0d4b4ba5cd5e43bb0622a35dd285be197aab54ac4eb432ac1596c76e186f0ae23a93fa92498fcefd6d3c8c88033fd927e12ba0be93ff98eb33a7fda40f974ca11ed27b42632328531e8a6ef2f65760299a5cead10c560a0c104daa4efb8abbf4d4f279e99b6c9cef43defcce6a6547b50f01bc3a8d98be9950ce6"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)=0x1)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000)

04:55:04 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x13, r1, 0x1000)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:04 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0140620aa1cf5c9b927f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
setxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:textrel_shlib_t:s0\x00', 0x25, 0x3)

[  889.986410] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  890.017996] syz-executor.2 cpuset=syz2 mems_allowed=0-1
[  890.032974] CPU: 1 PID: 14205 Comm: syz-executor.2 Not tainted 4.14.163-syzkaller #0
[  890.040961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  890.050324] Call Trace:
[  890.053048]  dump_stack+0x142/0x197
[  890.056699]  warn_alloc.cold+0x96/0x1af
[  890.060690]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  890.065546]  ? wait_for_completion+0x420/0x420
[  890.070253]  __alloc_pages_slowpath+0x23c6/0x2930
[  890.075123]  ? warn_alloc+0xf0/0xf0
[  890.078772]  ? __might_sleep+0x93/0xb0
[  890.082668]  __alloc_pages_nodemask+0x62c/0x7a0
[  890.087348]  ? rcu_read_lock_sched_held+0x110/0x130
[  890.092377]  ? __alloc_pages_slowpath+0x2930/0x2930
[  890.097411]  alloc_pages_current+0xec/0x1e0
[  890.101747]  kvm_mmu_create+0xdf/0x1e0
[  890.105648]  kvm_arch_vcpu_init+0x29c/0x8e0
[  890.109985]  kvm_vcpu_init+0x272/0x360
[  890.113884]  vmx_create_vcpu+0xfc/0x2aa0
[  890.117955]  ? mutex_trylock+0x1c0/0x1c0
[  890.122032]  ? handle_rdmsr+0x6e0/0x6e0
[  890.126020]  ? wait_for_completion+0x420/0x420
[  890.130615]  kvm_arch_vcpu_create+0x8c/0xc0
[  890.134948]  kvm_vm_ioctl+0x501/0x1600
[  890.138841]  ? __lock_acquire+0x5f7/0x4620
[  890.143082]  ? get_unused_fd_flags+0xd0/0xd0
[  890.147503]  ? kvm_vcpu_release+0xa0/0xa0
[  890.151690]  ? trace_hardirqs_on+0x10/0x10
[  890.155948]  ? trace_hardirqs_on+0x10/0x10
[  890.160200]  ? __might_fault+0x110/0x1d0
[  890.164277]  ? save_trace+0x290/0x290
[  890.168090]  ? __might_fault+0x110/0x1d0
[  890.172168]  ? __fget+0x210/0x370
[  890.175640]  ? find_held_lock+0x35/0x130
[  890.179719]  ? __fget+0x210/0x370
[  890.183191]  ? kvm_vcpu_release+0xa0/0xa0
[  890.187349]  do_vfs_ioctl+0x7ae/0x1060
[  890.191251]  ? selinux_file_mprotect+0x5d0/0x5d0
[  890.196022]  ? lock_downgrade+0x740/0x740
[  890.200188]  ? ioctl_preallocate+0x1c0/0x1c0
[  890.204619]  ? __fget+0x237/0x370
[  890.208085]  ? security_file_ioctl+0x89/0xb0
[  890.212497]  SyS_ioctl+0x8f/0xc0
[  890.215866]  ? do_vfs_ioctl+0x1060/0x1060
[  890.220021]  do_syscall_64+0x1e8/0x640
[  890.223998]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  890.228852]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  890.234218] RIP: 0033:0x45af49
[  890.237411] RSP: 002b:00007f5c97d88c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  890.245132] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  890.252410] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  890.259773] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  890.267056] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c97d896d4
[  890.274336] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  890.282097] protocol 88fb is buggy, dev hsr_slave_0
[  890.287198] protocol 88fb is buggy, dev hsr_slave_1
[  890.304684] Mem-Info:
[  890.316500] active_anon:854428 inactive_anon:1747 isolated_anon:0
[  890.316500]  active_file:4479 inactive_file:5479 isolated_file:0
[  890.316500]  unevictable:0 dirty:38 writeback:0 unstable:0
04:55:04 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sync_file_range(r3, 0x4, 0x3f, 0x2)
openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)

[  890.316500]  slab_reclaimable:15593 slab_unreclaimable:126530
[  890.316500]  mapped:60049 shmem:1792 pagetables:27870 bounce:0
[  890.316500]  free:482479 free_pcp:333 free_cma:0
[  890.385904] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
04:55:05 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000007301e5373a403d0fd483ff00000000000095000000000000003055937d0a2a23a5a24b1cbc802e80083944052494ce4434f389b025d7656cc3c73ab4ca8b13025feb29e74ccf8f7b5b1736725fafdd2787f5f3705ade9de4ff03617caa2151f50a5f2fdda5360883d9b254a87e0ad4e0f5f7ab02e6fef3d8ad5502bb829db9edf717766088e082d56aaa9c4b2a7ae78b89f2ff3b6f7cd6bc89aa7afde0a6c9273e78813f20f6b56d237dc8a600c339a619a825fe29d4b720cb34f87d4514ff201b162de4edcf3ef4f0f09fb419cf647a96e80ecbfaacac7e5d0758621745bed71567657d1aadae9302c7a1ca04cce23a5e7dc8ddf2aa240527fd08468de4c266074292b48feaf62a133cd6829bd0e0dd5b4f0d7668f16bb9bbdd0052b2566e393d96d1f96ac06a1569496d77511c589f3a88169dfb046d18c69350904288cfe103c28d1bdf8d97207f6d960b383ec052bea5fbd8fc0d0ae87971447ce223e5facf6486ce373e84d72fa3d343dac86acb578425b1585c9577f99dc33ba66d7a2619f01d69b0b6d5d882d99882a73860461f8273fcf005c983c926d80ca8598b807f19e6ea9f1266b5fa2f817ec3fe4478074176163cf285f9f54beea52e9c55938f795e9d5b157b776c5afc242032a0cdfd46da1612bbaae9df09e30493796cf3d46d04"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x24002, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r4, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=0x1, 0x0, <r6=>0x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r6}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r3, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r6}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000080)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xdb6}, @alu={0x7, 0x0, 0x9, 0xa, 0x5, 0x0, 0xfffffffffffffffc}], &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x21700, 0x1, [], 0x0, 0x19, r1, 0x8, &(0x7f0000000100)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0xf, 0xfff, 0x401}, 0x10, r6}, 0x78)

[  890.422528] Node 1 active_anon:1535620kB inactive_anon:88kB active_file:17856kB inactive_file:21912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25088kB dirty:148kB writeback:0kB shmem:88kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:55:05 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="389f420f6e5030d5467a6340bae54a0e027f4c6d0a03739582c0f4a3cf5fd600e95a7eacc8bd1b85b648722f5115da3a63e11d5cb409e90e0519de5dfc5cfa14b52ef21ad7312261671da99a738b12168cbf1baeefd8c00b4d823f646e87442340dc637bd082fccb68cad69feb2fd556fee8ca4f5feb618733a58e7ac59e9d54de2a"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  890.467482] Node 0 DMA free:10488kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  890.498580] lowmem_reserve[]: 0 2569 2569 2569 2569
[  890.508697] Node 0 DMA32 free:32172kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:412kB local_pcp:284kB free_cma:0kB
[  890.540370] lowmem_reserve[]: 0 0 0 0 0
[  890.546398] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:55:05 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ptrace$peeksig(0x4209, 0x0, &(0x7f00000000c0)={0x4, 0x0, 0x6}, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}])
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
recvfrom$llc(r4, &(0x7f00000002c0)=""/25, 0x19, 0x2, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20100}, 0xc, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="d57ad03dbecb6f45d3434c6f7982ff7fc545d11756c37e2e29055261139b690d683598ce99efb0b74cc84f934a918ac1dd961c993947081515805a90a230fbb1bd9ba0cc827a6e01cfb332", @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf250300000008000200020000003c000400050003000000000005000300b200000005000300050000000500030005000000050003000700000005000300010000000500030005000000"], 0x58}, 0x1, 0x0, 0x0, 0x4044800}, 0x404c000)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socket$packet(0x11, 0x2, 0x300)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:05 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ff8aade539a2a9b9527e014aae2c774709a88e917eff326fb08658eceab1221757c3d45ede5d5c27b52243175a4ab3f0ac20b5d6443a8295e8a71f77badeb2c37c1fac69fe1a29c18b7c11e21bebd3cc88f813d47ebb1a6a621e0443a3e2ee003f5710d20d1946a0e8153f8fc04a06b1c9a51c50d2cdc0bd179a62b9d6e1c4e46e7bc0a51e4e8e59a377850377c382a2e9d602e282c360c5a66a30807f306d3d4fe3d8c3f5522d68fd7ab19ee3d0c1acf32daab61d494ac5e1"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:05 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000000000000063010000000000009500e341419b2f27"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  890.687406] lowmem_reserve[]: 0 0 0 0 0
[  890.714054] Node 1 Normal free:1886328kB min:53508kB low:66884kB high:80260kB active_anon:1535520kB inactive_anon:88kB active_file:17856kB inactive_file:21912kB unevictable:0kB writepending:296kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20320kB pagetables:46852kB bounce:0kB free_pcp:1080kB local_pcp:444kB free_cma:0kB
[  890.807222] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  890.855556] lowmem_reserve[]: 0 0 0 0 0
[  890.860131] syz-executor.2 cpuset=syz2 mems_allowed=0-1
[  890.866555] Node 0 DMA: 0*4kB 9*8kB (UEH) 15*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10488kB
[  890.890362] CPU: 1 PID: 14211 Comm: syz-executor.2 Not tainted 4.14.163-syzkaller #0
[  890.898294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  890.907657] Call Trace:
[  890.910368]  dump_stack+0x142/0x197
[  890.914015]  warn_alloc.cold+0x96/0x1af
[  890.918114]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  890.922981]  ? wait_for_completion+0x420/0x420
[  890.927598]  __alloc_pages_slowpath+0x23c6/0x2930
[  890.932477]  ? warn_alloc+0xf0/0xf0
[  890.936126]  ? __might_sleep+0x93/0xb0
[  890.940028]  __alloc_pages_nodemask+0x62c/0x7a0
[  890.944813]  ? rcu_read_lock_sched_held+0x110/0x130
[  890.949839]  ? __alloc_pages_slowpath+0x2930/0x2930
[  890.954874]  alloc_pages_current+0xec/0x1e0
[  890.959210]  kvm_mmu_create+0xdf/0x1e0
[  890.960115] protocol 88fb is buggy, dev hsr_slave_0
[  890.963103]  kvm_arch_vcpu_init+0x29c/0x8e0
[  890.963118]  kvm_vcpu_init+0x272/0x360
[  890.963131]  vmx_create_vcpu+0xfc/0x2aa0
[  890.963144]  ? mutex_trylock+0x1c0/0x1c0
[  890.968187] protocol 88fb is buggy, dev hsr_slave_1
[  890.972484]  ? handle_rdmsr+0x6e0/0x6e0
[  890.972495]  ? wait_for_completion+0x420/0x420
[  890.972507]  kvm_arch_vcpu_create+0x8c/0xc0
[  890.972518]  kvm_vm_ioctl+0x501/0x1600
[  890.972540]  ? __lock_acquire+0x5f7/0x4620
[  890.972555]  ? get_unused_fd_flags+0xd0/0xd0
[  891.014894]  ? kvm_vcpu_release+0xa0/0xa0
[  891.019056]  ? trace_hardirqs_on+0x10/0x10
[  891.023363]  ? trace_hardirqs_on+0x10/0x10
[  891.027612]  ? __might_fault+0x110/0x1d0
[  891.031692]  ? save_trace+0x290/0x290
[  891.035503]  ? __might_fault+0x110/0x1d0
[  891.039586]  ? __fget+0x210/0x370
[  891.043061]  ? find_held_lock+0x35/0x130
[  891.047137]  ? __fget+0x210/0x370
[  891.050600]  ? kvm_vcpu_release+0xa0/0xa0
[  891.054766]  do_vfs_ioctl+0x7ae/0x1060
[  891.058665]  ? selinux_file_mprotect+0x5d0/0x5d0
[  891.063434]  ? lock_downgrade+0x740/0x740
[  891.067593]  ? ioctl_preallocate+0x1c0/0x1c0
[  891.072010]  ? __fget+0x237/0x370
[  891.075485]  ? security_file_ioctl+0x89/0xb0
[  891.079903]  SyS_ioctl+0x8f/0xc0
[  891.083270]  ? do_vfs_ioctl+0x1060/0x1060
[  891.087428]  do_syscall_64+0x1e8/0x640
[  891.091323]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  891.096180]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  891.101481] RIP: 0033:0x45af49
04:55:05 executing program 0:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x500040, 0x0)
setsockopt$ax25_int(r1, 0x101, 0x8, &(0x7f0000000300)=0xfff, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x14, r3, 0x1}, 0x14}}, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380)='nl80211\x00')
getsockname$packet(0xffffffffffffffff, &(0x7f0000000480)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000004c0)=0x14)
r7 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r9=>0x0, <r10=>0x0})
sendmsg$can_bcm(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r8}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r9, @ANYRES64=r10/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20012100}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040079}, 0x2af7918fba376f8f)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r3, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40500e8}, 0x4)
r11 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r12 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r12, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r12, 0x0)
ioctl$IMADDTIMER(r11, 0x80044940, &(0x7f0000000040))
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x1)
r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x100, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r13, 0xc018643a, &(0x7f00000000c0)={0x400003e, 0x1, 0x29})

[  891.104672] RSP: 002b:00007f5c97d67c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  891.112386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  891.119765] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  891.127132] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  891.134429] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c97d686d4
[  891.134436] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  891.160587] Node 0 DMA32: 27*4kB (UMH) 327*8kB (UMEH) 813*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32276kB
[  891.178064] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB 
[  891.189239] = 0kB
04:55:05 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x19)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000040)={0x30, 0x5, 0x0, {0x0, 0x6, 0x8, 0x2}}, 0x30)
ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000080)={0x5, 0x7, [{0x3, 0x0, 0x6478}, {0x5, 0x0, 0x1}, {0x1, 0x0, 0x9}, {0x589, 0x0, 0xa40b}, {0x7, 0x0, 0xfffffffffffffc01}]})

[  891.194973] Node 1 Normal: 36*4kB (UME) 16*8kB (UE) 58*16kB (UE) 31*32kB (UME) 27*64kB (UME) 22*128kB (M) 12*256kB (M) 9*512kB (M) 4*1024kB (UME) 4*2048kB (UME) 454*4096kB (M) = 1886288kB
[  891.215040] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  891.224009] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  891.238921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  891.247921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  891.267782] 11754 total pagecache pages
[  891.275797] 0 pages in swap cache
[  891.279447] Swap cache stats: add 0, delete 0, find 0/0
[  891.284978] Free swap  = 0kB
[  891.288111] Total swap = 0kB
[  891.302566] 1965979 pages RAM
[  891.305793] 0 pages HighMem/MovableOnly
04:55:05 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0xc88db03d8c2a4b9f, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0)='devlink\x00')
sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x15c, r1, 0x408, 0x70bd2b, 0x7f, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x401e0}, 0x40000)

[  891.330180] 335871 pages reserved
[  891.350353] 0 pages cma reserved
[  891.360918] protocol 88fb is buggy, dev hsr_slave_0
[  891.366040] protocol 88fb is buggy, dev hsr_slave_1
[  891.371192] protocol 88fb is buggy, dev hsr_slave_0
[  891.409897] Mem-Info:
[  891.415856] active_anon:854679 inactive_anon:1747 isolated_anon:0
[  891.415856]  active_file:4478 inactive_file:5483 isolated_file:0
[  891.415856]  unevictable:0 dirty:41 writeback:0 unstable:0
[  891.415856]  slab_reclaimable:15600 slab_unreclaimable:126519
[  891.415856]  mapped:60060 shmem:1793 pagetables:27873 bounce:0
[  891.415856]  free:482166 free_pcp:402 free_cma:0
[  891.491463] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:56kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:0kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  891.525133] Node 1 active_anon:1536924kB inactive_anon:88kB active_file:17856kB inactive_file:21924kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25132kB dirty:164kB writeback:0kB shmem:92kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  891.557326] Node 0 DMA free:10488kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  891.587221] lowmem_reserve[]: 0 2569 2569 2569 2569
[  891.592404] Node 0 DMA32 free:32380kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:56kB inactive_file:8kB unevictable:0kB writepending:0kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:400kB local_pcp:296kB free_cma:0kB
[  891.624879] lowmem_reserve[]: 0 0 0 0 0
[  891.628929] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  891.657630] lowmem_reserve[]: 0 0 0 0 0
[  891.661980] Node 1 Normal free:1886080kB min:53508kB low:66884kB high:80260kB active_anon:1536924kB inactive_anon:88kB active_file:17856kB inactive_file:21924kB unevictable:0kB writepending:112kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20192kB pagetables:46864kB bounce:0kB free_pcp:1348kB local_pcp:656kB free_cma:0kB
[  891.696518] lowmem_reserve[]: 0 0 0 0 0
[  891.700952] Node 0 DMA: 0*4kB 9*8kB (UEH) 16*16kB (UMEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10504kB
[  891.720633] Node 0 DMA32: 27*4kB (UMH) 347*8kB (UMEH) 815*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 32468kB
[  891.745516] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  891.789981] Node 1 Normal: 68*4kB (UME) 69*8kB (UE) 57*16kB (UE) 39*32kB (UME) 22*64kB (UME) 13*128kB (M) 12*256kB (M) 9*512kB (M) 4*1024kB (UME) 4*2048kB (UME) 454*4096kB (M) = 1885608kB
[  891.838560] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  891.863077] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  891.884268] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  891.896098] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  891.905715] 11754 total pagecache pages
[  891.909818] 0 pages in swap cache
[  891.916217] Swap cache stats: add 0, delete 0, find 0/0
[  891.922328] Free swap  = 0kB
[  891.925424] Total swap = 0kB
[  891.928549] 1965979 pages RAM
[  891.934534] 0 pages HighMem/MovableOnly
[  891.938637] 335871 pages reserved
[  891.942955] 0 pages cma reserved
04:55:06 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x178d41)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000040))

04:55:06 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = gettid()
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000240)=r3)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x1, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r8=>0x0, <r9=>0x0})
sendmsg$can_bcm(r6, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r7}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r8, @ANYRES64=r9/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r10 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r12=>0x0, <r13=>0x0})
sendmsg$can_bcm(r10, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r11}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r12, @ANYRES64=r13/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r14 = syz_open_procfs(0xffffffffffffffff, 0x0)
r15 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/ocfs2_control\x00', 0x20002, 0x0)
getsockname$packet(r15, &(0x7f00000000c0)={0x11, 0x0, <r16=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000900)=0x14)
clock_gettime(0x0, &(0x7f0000000280)={<r17=>0x0, <r18=>0x0})
sendmsg$can_bcm(r14, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r16}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r17, @ANYRES64=r18/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r19 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r19, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$PNPIPE_IFINDEX(r19, 0x113, 0x2, &(0x7f0000000300)=<r20=>0x0, &(0x7f0000000340)=0x4)
r21 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r22=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r23=>0x0, <r24=>0x0})
sendmsg$can_bcm(r21, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r22}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r23, @ANYRES64=r24/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r25 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r26=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r27=>0x0, <r28=>0x0})
sendmsg$can_bcm(r25, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r26}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r27, @ANYRES64=r28/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000380)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r29=>0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000000480)=0xe8)
sendmsg$nl_route_sched(r5, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80010002}, 0xc, &(0x7f0000000840)={&(0x7f00000004c0)=@newtfilter={0x380, 0x2c, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf, 0x10}, {0xffe0, 0x10}, {0x2, 0xa}}, [@filter_kind_options=@f_rsvp={{0x9, 0x1, 'rsvp\x00'}, {0x1b8, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @multicast2}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x7fe8, 0xfff1}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x100, 0x48, 0x7}, {0x6, 0x214565f0, 0x5}, 0x43, 0x20}}, @TCA_RSVP_ACT={0x184, 0x6, @m_connmark={0x180, 0x0, 0x0, 0x0, {{0xd, 0x1, 'connmark\x00'}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x979, 0x6, 0xffffffffdffffff6, 0x7, 0x1}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x400, 0x5, 0x8, 0x10000}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x6, 0xd, 0x1, 0xffff}, 0xb317}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xff, 0x5, 0xffffffffffffffff, 0x80000001, 0x5}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x400, 0x8, 0x0, 0x0, 0xffff}, 0x98c}}]}, {0xdc, 0x6, "b4ac46ef2032df181db368d18f9758aabbd1ab43cf6b2ea0f33698ef24684a23dd3fc99ddfe928ec0f1366c8c1bd63c56d71aad04f1c658174359bc458a29a3214673c62371003e246729be818573f12b18f4d817e99868e2ba7b5e73c2bd1ce7b79149f454d6b67a1531d16bf1d82a48fea1bbf681e416f381ddbe604b2bcc647d9fdd5649001cd0f4823983ba5a2a0b7eae3f5731a707e3cb3d9a5fc8843f5f2c4e78623ce5e981fab5a92b2e95d2d48cc5b241985b7b71c236f4decdd25efdb3df2d23c462a8f78a8ab27d1c62a0a2ed3037147c1577c"}}}}]}}, @filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x174, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x8, 0xffff, 0xc63, 0x4, {0xff, 0x3, 0xfff7, 0xafef, 0x6, 0x6}, {0x2, 0x5, 0x5, 0x6, 0x1f, 0xfffffffc}, 0xfff, 0x8, 0x1}}}, @TCA_BPF_ACT={0xfc, 0x1, @m_mirred={0xf8, 0xb, 0x0, 0x0, {{0xb, 0x1, 'mirred\x00'}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x1000, 0x60000007, 0xff, 0x4a}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x7, 0x1, 0x5, 0xfffff212}, 0x3, r16}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x1ff, 0x7, 0x7, 0x4}, 0x2, r20}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x1bc, 0x22513b1b3237f9f7, 0x0, 0x79}, 0x0, r22}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x7, 0xffffffffffffffff, 0x1f, 0x5}, 0x5, r26}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x80000000, 0x20000000, 0x9, 0x9}, 0x3, r29}}]}, {0x21, 0x6, "c81bc8f5f5abc64e258ade673dce5a428d04086828b611f1373467aa7d"}}}}, @TCA_BPF_OPS={{0x6, 0x4, 0x5}, {0x2c, 0x5, [{0x1, 0xd4, 0x8, 0x1}, {0xfff, 0x5, 0xff, 0x6486}, {0x100, 0x1f, 0xf7}, {0x9, 0x0, 0x7, 0x80}, {0xad1, 0x4, 0x3f}]}}]}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x10, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @dev={[], 0x22}}]}}]}, 0x380}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r30 = accept(r4, &(0x7f0000000080)=@isdn, &(0x7f0000000180)=0x80)
connect$inet(r30, &(0x7f00000001c0)={0x2, 0x4e21, @broadcast}, 0x10)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:06 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x1f)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
fstat(r0, &(0x7f00000000c0))
ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040))

04:55:06 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl(r2, 0x7, &(0x7f00000000c0)="dfd18cacb0a9e5c8b22948848944ce02946cc3ed37fdaad61074dff075dbed0b145ac5b783fc4b55f4aad79f87ed717d8e49868ad6c577ed8fd64fc92d45540a92b42dbc90c87c726ce52368d9a7f2302380c049f7faadf99526c14ff6941246423d03cb19211edd826c3309c885c7718666951755c46850cf9295d9068ba3957f657d46739b3b5215d9d85602cb1e7b50d9")
syz_extract_tcp_res(&(0x7f0000000240), 0x5, 0x1)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
write$P9_RXATTRCREATE(r5, &(0x7f00000002c0)={0x7, 0x21, 0x2}, 0x7)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x12)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r6, 0xae04)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PIO_SCRNMAP(r7, 0x4b41, &(0x7f0000000340)="3e14974342ae1b260470b9391a0e8e689502ea35ee6045ae28c75e47cd5c14f8ee0de4653ac8cb749516312de05ff8ec99275d635323e50324d077a81bf4c53dd24407bc6bbb57524ec84be5e8b9e858d903944741877c788423e0112461a4b0784ee3c75e1a52ff2ecd201c7e788abd948952ebadb16536b8d0a6c705a502f6f71a5fdfca6e089d7427f5f349e1014e5d790e04e7101061fe8ef34e11e1e847d9782b4971055ea88c08dce2fd66041a8f0768ec68743626860f5bb6868224ff02d429320e82")
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:06 executing program 2:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
process_vm_readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000000100)=""/95, 0x5f}, {&(0x7f0000000180)=""/54, 0x36}, {&(0x7f00000001c0)=""/35, 0x23}, {&(0x7f0000000200)=""/19, 0x13}], 0x5, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/34, 0x22}], 0x1, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

04:55:06 executing program 4:
munlockall()

04:55:06 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x480, 0x0)
linkat(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc00)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:06 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
pread64(r0, &(0x7f0000000080)=""/65, 0x41, 0x8)
ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040))
ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000100)=0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:06 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f8ff9945e7e6bdf49afe551d8534d9b1b6b1537c4d5b3e86d2fd326fe1d2d73d3e43a6780c9c718c4c47685015a876eeeffabc0ed1d0eff47e39283434f57cd7017c1433e4510a348c9e622be44ee9552c805d30a7b1b196a123f1174cb14e5aef17c57b9a8f13c67e35d2d0580e267da3389c9a0d8ba977da81e3070a47d583d14429b4dac3538b725f2d9049cb7ebf5116e312f23605794cea47543d5b7a2142ff2fabc0bcf67233d7655aa3fa996723abb5aa2c0"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x220000a0)

04:55:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:55:07 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x6)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
socket$inet(0x2, 0x4, 0xe9)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x7db19637de5dc571}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30fc00000303180c28a1568bcedbdf250c00000a08000340000000020c00020000000001000000070800034024d8d0eb"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20008090)
bind$x25(r5, &(0x7f0000000280)={0x9, @null='               \x00'}, 0x12)
ioctl$KVM_ASSIGN_SET_MSIX_NR(r4, 0x4008ae73, &(0x7f0000000080)={0x4, 0x7})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:07 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x2, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:55:07 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\x03\xd28-cD\xe6\v*v\x9c/\xbc\xf3\xed\xc5\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xc7\xd7\x10\xf7808y\xc1\xc7\xd3t\xff\xff\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00', 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:07 executing program 4:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x80000, 0x0)
r1 = creat(0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000380)={<r2=>0x0, <r3=>0x0})
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000005c0)={0x3, 0x3, 0x4, 0x0, 0x1, {0x77359400}, {0x1, 0xc, 0x9, 0x7f, 0x4, 0x8, "0dfa0101"}, 0x3, 0x3, @userptr=0x7fffffff, 0xee, 0x0, <r6=>0xffffffffffffffff})
ioctl$VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f00000003c0)={0x7, 0x5, 0x4, 0x0, 0x3, {r2, r3/1000+10000}, {0x1, 0x8, 0x40, 0x4, 0xe1, 0xc0, "0eb71379"}, 0x0, 0x1, @fd=r4, 0x2b, 0x0, <r7=>r5})
setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000440), 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
connect$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x1}}, 0x10)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000480)={0x1c0b1743849ad42, @raw_data="29e51ae0994b50781e13a6133546891d8bae8d6f11e449bb5235957e7b4bcdaa5580d92d4485e20ff6354af480fb1bdb88408d7f569af3d54db6130c422ca6cf5c62cf97d9898615b0524bbc0b92c14e731fce460e542ea9bad3fd9230a650a9bd7107bee4c819341d1c5f142fddfa0668e2468fbc29825e139c5e2a0309e39e00208be0739e88f7480f802e405c1d886ebd25b5012c2027af88ffc2e9bd842729f7abb061435949bef86e32ed754493c3dd4f811a314dae2c4133e8b36012f0f4b2b14dc56aedef"})
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x800, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
r9 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000080000000000000000063018000000000009500000000d60000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfffffffffffffde0, 0x0, 0x41000, 0x8, [], 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0xfffffeb1, 0x10, 0x0, 0x0, 0x0, r9}, 0x78)
r10 = open(&(0x7f0000000240)='./file0\x00', 0x20000, 0x80)
sendmsg$nl_route(r10, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getneigh={0x14, 0x1e, 0x200, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20052}, 0x10)

04:55:07 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCMIWAIT(r2, 0x545c, 0x0)
bind$x25(r1, &(0x7f0000000080)={0x9, @remote={[], 0x0}}, 0x12)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:07 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
r5 = creat(0x0, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='#@\x01}em0lolousertrustedppp0\x00', r6}, 0x10)
write$binfmt_elf64(r7, &(0x7f0000000340)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x4, 0x7, 0x2f, 0x200, 0x7, 0x3, 0x200, 0x31a, 0x40, 0xd4, 0x324c, 0xf801, 0x38, 0x2, 0x8, 0x60}, [{0x60000000, 0x1, 0x2, 0x5, 0xdc, 0x9, 0x6, 0x10001}, {0x7, 0xb1e, 0xffffffffffffff01, 0xfffffffffffffffa, 0x3, 0x4, 0x4, 0x56b}], "cb243f28dfdf98c287f9d6a00a0c8139e4ee3a4910f6d32f51c1594b99f14b83a496668202326fbf77562c371af95bff435d42d2ae6fee6bd50260facc1e930cb98bf919c0471e0c274610063e08f09d29708fce90563548ae739a25430c24bf42c446356a69eff1c6f083", [[], [], [], [], [], [], [], [], [], []]}, 0xb1b)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCMGET(r5, 0x5415, &(0x7f00000000c0))
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:07 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x800, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x3ff)
write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2b, 'io'}]}, 0x4)

04:55:07 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x20000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:07 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r1, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=0x0, @ANYBLOB="9538148c21874f58d87bfcf93f074a5a5d87c0ecdc192ca23ce763ac362d12c12bc4f4d2cf9fe8dca7fb34c198ce0cf0debd626196f8e9868c9bdf9198717b8b3437a24a6e96d80c0dea1389fe83f7bf33b76c8fddf6501628f7b964022009bb00c003258cbf5b9323e49c22f6a77ffdbefd37c7b0cc1c57b195b849f5e37950bff0847ad063bbae8f833ea6cd0430d373e7bf2e5b4cf8b3549dd1cddec0bb0edb1fd75076e06118f3cb6780e6463a69374f58d429b744e14972b8713fd3675bd1a1991126c4aeada6380bff7f89c9dcd347d743dafae168129e7ffa078a07b4bf115f4fb2ae787c4ba4", @ANYRES32, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYRESDEC=0x0, @ANYPTR64, @ANYRES32=r0, @ANYRES64=r3, @ANYRESOCT=r0, @ANYRESDEC=r4, @ANYBLOB="0aeb6fff28a66f160e6bebe2b94170736131683ae5a6e44b9edd9c782fcd0d1e0ef5c1876953e0a98e14a946ae7724e8edb36d82963dc55f4d6c233670f980f342eb3347a1a7368aa51ddd1989a5b6f1d1b903faaacd2de3433dd2d32e4e07ebb53e5af02ff51a7102162ca5a3a16a8d4d47ae60744adb2ea0d6d5a038e07678ac03e8ad4a0b9473246de3f51f947e3b7398ae1164a765d6ac2f7da0dcc8573e8de9ae7b594cf3172f80100d6332ccfe3212253440812053b482cee3a9dc53f923c2af538ce1e51dcbac6faf7c89efa96caf805444c96225208674bcc915b2340a808809c58d7cc5b136ea1c79c878", @ANYRES64=r5, @ANYRES16=r2, @ANYRESDEC=r6], @ANYRESHEX=r7, @ANYRESDEC, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32, @ANYPTR64], @ANYRESHEX=r1, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYBLOB="f2c0b9284725ff7734b732a05b80089f89dda7fed6bab7216a9ac474591d23f581635677d6c1e1675257cf0c8871c97eb297ea9547e6bb2e49bb76a4065a5eda0721da47b7a92bf0dcadbc77560f57d9e227d950191ae369b3d02a69765fbba0a5047662f12bae84f48871864b3326b21047a650fe413d0c894694f6dc9604d0c354e59291541feb72ed59d51507a42034874880f543956b2de50bff1a0424a2cd935b6af12767b3e959ba0419fcb4cb1632b175d8477f98dc6988c3a797b995d32acbd6cdfbf8b2ee603093f0ed8f214713a066f2c538e7073675ad9b554cdebc1bf47cb3fd35d9", @ANYRESHEX, @ANYRESHEX=r8, @ANYRES16=r1, @ANYRES32, @ANYRESOCT=r1, @ANYRESDEC=r9, @ANYRES64=r2, @ANYPTR, @ANYPTR64], @ANYRESOCT], @ANYRES16=r10, @ANYBLOB="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"], 0x6b)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:07 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TUNGETIFF(r1, 0x800454d2, &(0x7f0000000040))

04:55:07 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x1, 0x400)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r2, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x8, @media='udp\x00'}}}}, 0x68}}, 0x9a)
r3 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
getegid()
write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000080)={0x9, 0x7, 0x1}, 0x9)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001680)={{{@in6=@loopback, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001780)=0xe8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r3, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:07 executing program 4:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r1 = accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x800)
sendto(r1, &(0x7f0000000100)="39ffdc6f52a89d971f60ba80309f4e3ce89b52a5a4d73f4324e7920f42d19544fc707fbeca7e90c2f6de38c145a2b2ffc3ad4119db7168ead0cc15570fac15", 0x3f, 0x80, &(0x7f0000000140)=@l2={0x1f, 0x1, {0x2, 0x20, 0x0, 0x8, 0x2, 0x9}, 0x3122, 0x4}, 0x80)

04:55:07 executing program 2:
r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x6, 0x0)
ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x39, 0x31, 0x4, 0x5, 0x4, 0x0, 0x5, 0x11e, 0xfffffffffffffffe})
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000180))
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x200000000000, 0x1c0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

04:55:07 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6E\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbk\"\x93\xe0O\xc0\\\xfcs\xfd,\x12\xfa\xf9X\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYPTR64], 0x8)
r2 = dup(r1)
ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00')
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000240)={0x18, 0x6, 0x6, 0x5})
ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x6, 0x8000, 0x44035010, 0xffffff3c, 0x5, "d0c989d7c7d3ec796973f96a8ece1bfe227582"})
prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x2)

04:55:07 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc8c0)
getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f00000000c0)=0x54)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:07 executing program 4:
r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x3, 0x0)
write$P9_RSTAT(r0, &(0x7f0000000080)={0x63, 0x7d, 0x1, {0x0, 0x5c, 0x1ff, 0x7, {0x44, 0x0, 0x3}, 0x40000000, 0x9, 0x1, 0x7, 0x4, 'GPL\x00', 0x20, 'wlan1nodevvboxnet0:){cpusetbdev*', 0x4, 'GPL\x00', 0x1, '%'}}, 0x63)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:08 executing program 2:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$EVIOCGSND(r1, 0x8040451a, &(0x7f0000000240)=""/156)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000200))
sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x45008040}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="d00000000a0600012dbd7000fddbdf25030000080900020073797a30000000009800078013001a002f6465762f6472692f63617264230000180001801400024000000000000000000000ffffffffffff0900130073797a32000000000c0002804e03014000000004050007002f00000006001d400002000035021700726f73653000000000000000000000000900130073797a32000000001800168014000240000000000000000000000000000000000800064000000a91050001000700000000ff01000700000008000940000000010bd89f795911a2e1bdc861f0d69c647340903a8b78f33d1e22f3d5a2416f26613bbc700e0f9c0da1660dfb16b4"], 0xd0}, 0x1, 0x0, 0x0, 0xa005004}, 0x4)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0)

04:55:08 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(0xffffffffffffffff, r5, 0x0, 0x9)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:08 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10010, r3, 0xd4638000)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:08 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000048d0800010000661045923766de30009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x40000, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = epoll_create(0x5)
r3 = fcntl$dupfd(r1, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00')
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, r6, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8}}}]}}]}, 0x58}}, 0x0)
getsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4)

04:55:08 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x2, 0x440)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$EXT4_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x1)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x661, r2, &(0x7f0000000100)="ac7925d752d068587de3b8351844791b910000000000e600000000000100", 0x1e, 0x1}])
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:08 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000000c0), 0x4)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:08 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x164280)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:08 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x400000, 0x0)
ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x5, 0x4, &(0x7f0000000080)=[0x3, 0x1, 0x3, 0xcca2], &(0x7f00000000c0)=[0x400, 0x1f, 0x0, 0x0, 0x40, 0xffc1, 0x3ff], &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x9, 0xc20c, 0x0, 0xd71, 0x9d]})

[  894.113504] audit: type=1400 audit(1578632108.719:101): avc:  denied  { read } for  pid=14406 comm="syz-executor.5" path="socket:[129911]" dev="sockfs" ino=129911 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
04:55:08 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='m'], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:08 executing program 4:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x2, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000ffa000/0x4000)=nil)

04:55:08 executing program 2:
r0 = creat(0x0, 0x1f4)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={<r2=>0xffffffffffffffff}, 0x36f, 0x3}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r2}}, 0x18)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r4, &(0x7f0000000240)="db40951195b65329", 0x8)
r5 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000340)=0x8000)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
keyctl$revoke(0x3, r5)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r6, 0xc0105303, &(0x7f0000000040)={0x1, 0x20, 0xe4})

04:55:08 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x2000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:09 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@ldst={0x2, 0x3, 0x6, 0x73b18fbbddba6151, 0x4, 0xfffffffffffffff8, 0xfffffffffffffff0}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r2=>0x0, <r3=>0x0})
sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r2, @ANYRES64=r3/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd", @ANYPTR64=&(0x7f0000000100)=ANY=[@ANYRES16], @ANYRESOCT=r2], 0x8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', r1})

[  894.410094] net_ratelimit: 11 callbacks suppressed
[  894.410099] protocol 88fb is buggy, dev hsr_slave_0
[  894.420238] protocol 88fb is buggy, dev hsr_slave_1
[  894.720120] protocol 88fb is buggy, dev hsr_slave_0
[  894.725253] protocol 88fb is buggy, dev hsr_slave_1
04:55:09 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x30)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x800, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xaca}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x24050c00}, 0x4000)

04:55:09 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x1, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ashmem\x00', 0x40, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0x14, &(0x7f0000000000)=0x4, 0x4)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r11 = socket$inet(0x2, 0x80007, 0x2)
setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r13 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r14 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r14, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r15 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r15, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r3, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES16=r0, @ANYRES32=r4, @ANYPTR=&(0x7f0000000600)=ANY=[@ANYRESHEX=r14, @ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=r3, @ANYRESDEC=r15, @ANYBLOB="5a16", @ANYRESDEC, @ANYRES32=r10, @ANYRES64=r13, @ANYRESHEX=r4], @ANYPTR64=&(0x7f0000000380)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="2fdf0b367ba813fca358be3d6f548456e258f6bb3364880480ace3012d8d0c87bc08547c1341828c8b39bed95e337a4cdf49ca62f91743b86e77242178e9d4ec2e44", @ANYPTR, @ANYRES32=r5, @ANYRES16=r6, @ANYPTR64, @ANYRES32=0x0, @ANYRESDEC=r0], @ANYRES64=r4, @ANYPTR64=&(0x7f00000002c0)=ANY=[@ANYRESHEX=r7, @ANYRES64, @ANYRESOCT=r8, @ANYPTR, @ANYRES16=r9, @ANYPTR64, @ANYRESOCT=r10, @ANYPTR64, @ANYRESDEC=r1, @ANYRESHEX=r11]], @ANYRES32=r12, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES16=r13, @ANYRESDEC=r10, @ANYBLOB="904d498a7d3eb0ea1c6c5e37bc82cbc8381b1f9f26a2a5acce11e605fe4a2f501bbf867240bf894e34b144aa5cd81115c90ada"], @ANYBLOB="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"], 0x132)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
ioctl$VIDIOC_ENUMINPUT(r2, 0xc050561a, &(0x7f0000000580)={0x5, "fa20f3af446c8af1ae1556469d7caac0c5302d1bfc50bb63b9ce80bcf305995a", 0x3, 0xb6bb, 0x1, 0x3000000, 0x40000, 0x2})
arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000080))

04:55:09 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$P9_RMKNOD(r0, &(0x7f0000000040)={0x14, 0x13, 0x2, {0x4, 0x4, 0x2}}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:09 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xfffffffffffffffc, 0x400000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x7530}})

04:55:09 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x20000, 0x0)
readv(r1, &(0x7f00000024c0)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/202, 0xca}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/121, 0x79}, {&(0x7f0000002200)=""/211, 0xd3}, {&(0x7f0000002300)=""/153, 0x99}, {&(0x7f00000023c0)=""/234, 0xea}], 0x7)

04:55:09 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x1, 0x9, 0x400, 0x70bd2a, 0x25dfdbff, {0x3, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x81}, @NFCTH_STATUS={0x8, 0x6, 0x1}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000003)

04:55:09 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendmmsg$unix(r2, &(0x7f0000000440)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="3415bb30de44b745accd01ff0da58e74559396eecc7eb7a48c4d86ba7cf6a04b0eb8f51cbfd500d5467a0f845bbc512d492f3a2134d34bb22ae1dbecbc10ded534a0a32c4bfa19ed7bdd39f8916b35ba14fec895b3921f3390900af5a1c067120fee0c99bc5d73c1ee1bf2a18a0d9610c176c01f775fe5e46392acff84d5abb6f0ee6f", 0x83}, {&(0x7f00000000c0)="a0e163070653884ddb1aa2dfe4d59e12bb39d95399e17ee9d28f4cdec973bada46798bab23d97fc286", 0x29}, {&(0x7f0000000300)="26f311a167c7c8713884cc88f6d4d348f1786002b4c953d8edf47d9e7064994cb61e27f2d6a9c643bf15", 0x2a}, {&(0x7f0000000340)="4ec52dff2ee13a9e86fa636ac167d2d5ce6a92e9ce171ca349911a69e699d152874b3e38ba747fa5bab032d1c1f34c28748ae0ac2ac97e3421a4ef4ceda8fe3499d1936c41f27af20966762f169f39e88d2e840b52924e9f32ec255c6de8bb6bc77a08f80bae938bf56e2fd7e4d46a8d7a14c9754c8c63e45de43fe143835d5d7aa917d5e3b017078348e0c3075bd69e3ac42597030d700beb771fa21c1726288d7abc51bcaf03d83eee6de102518854ba1cdc64", 0xb4}], 0x4, 0x0, 0x0, 0x6010a5c7a143181f}], 0x1, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x744e6000)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:09 executing program 4:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x222080, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0x80984120, &(0x7f0000000080))
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000240)={<r1=>0x0, @in={{0x2, 0x4e22, @loopback}}, 0x80000000, 0x4, 0x3f, 0x80, 0x10, 0x3, 0x1}, &(0x7f0000000180)=0x9c)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000340)=0x9)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r1, 0x7}, 0x8)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  895.120133] protocol 88fb is buggy, dev hsr_slave_0
[  895.125277] protocol 88fb is buggy, dev hsr_slave_1
04:55:09 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000280)={0x9d0000, 0x1f, 0xfff, <r4=>r2, 0x0, &(0x7f0000000240)={0x400d6, 0x0, [], @p_u8=&(0x7f0000000200)=0xff}})
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300)='NLBL_UNLBL\x00')
sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8082000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="68000000ae58dd45f76edb4112e44bd6b73c319937f0b6caccd3b0cd8f46a6b68a5027487aacdd28c4921d4d286c821968b83eeda7d29a1629aa6eeac8aaac167a10a82e48b506ca6bde810db7a60f918574ecfa47", @ANYRES16=r5, @ANYBLOB="00032cbd7000ffdbdf250200000014000200ff02000000000000000000000000000105000100000000002400070073797374656d5f753a6f626a6563745f723a68616c645f6c6f675f743a73300014000200ff010000000000000000000000000001"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r6, 0xc04c5349, &(0x7f0000000180)={0x6, 0xe0b2, 0x800})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r7 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100)
syz_kvm_setup_cpu$x86(r2, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="48b8b8c20000000000000f23d80f21f835c00000100f23f8c462758e0d6e00000066b823010f00d00f019d0e0000000f799c5b1a0000000f01cfb9800000c00f3235008000000f30c4a1f85a6700c744240013000000c7442402d7d84492ff2c24c42191165e08", 0x67}], 0x1, 0x9ebed58c9d477307, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, @cstype3={0x5, 0xb}], 0x2)

04:55:09 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x4)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  895.374155] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  895.402444] syz-executor.2 cpuset=syz2 mems_allowed=0-1
[  895.432968] CPU: 0 PID: 14484 Comm: syz-executor.2 Not tainted 4.14.163-syzkaller #0
[  895.440894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  895.450256] Call Trace:
[  895.452863]  dump_stack+0x142/0x197
[  895.456502]  warn_alloc.cold+0x96/0x1af
[  895.460486]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  895.465347]  ? wait_for_completion+0x420/0x420
[  895.469942]  __alloc_pages_slowpath+0x23c6/0x2930
[  895.474805]  ? warn_alloc+0xf0/0xf0
[  895.478448]  ? __might_sleep+0x93/0xb0
[  895.482338]  __alloc_pages_nodemask+0x62c/0x7a0
[  895.487034]  ? rcu_read_lock_sched_held+0x110/0x130
[  895.492057]  ? __alloc_pages_slowpath+0x2930/0x2930
[  895.497097]  alloc_pages_current+0xec/0x1e0
[  895.501426]  kvm_mmu_create+0xdf/0x1e0
[  895.505326]  kvm_arch_vcpu_init+0x29c/0x8e0
[  895.509666]  kvm_vcpu_init+0x272/0x360
[  895.513574]  vmx_create_vcpu+0xfc/0x2aa0
[  895.517641]  ? mutex_trylock+0x1c0/0x1c0
[  895.521717]  ? handle_rdmsr+0x6e0/0x6e0
[  895.525697]  ? wait_for_completion+0x420/0x420
[  895.530290]  kvm_arch_vcpu_create+0x8c/0xc0
[  895.534627]  kvm_vm_ioctl+0x501/0x1600
[  895.538528]  ? __lock_acquire+0x5f7/0x4620
[  895.542778]  ? kvm_vcpu_release+0xa0/0xa0
[  895.546941]  ? trace_hardirqs_on+0x10/0x10
[  895.551192]  ? trace_hardirqs_on+0x10/0x10
[  895.555434]  ? __might_fault+0x110/0x1d0
[  895.559500]  ? save_trace+0x290/0x290
[  895.563308]  ? __might_fault+0x110/0x1d0
[  895.567376]  ? __fget+0x210/0x370
[  895.570835]  ? find_held_lock+0x35/0x130
[  895.574904]  ? __fget+0x210/0x370
[  895.578370]  ? kvm_vcpu_release+0xa0/0xa0
[  895.582526]  do_vfs_ioctl+0x7ae/0x1060
[  895.586420]  ? selinux_file_mprotect+0x5d0/0x5d0
[  895.591179]  ? lock_downgrade+0x740/0x740
[  895.595338]  ? ioctl_preallocate+0x1c0/0x1c0
[  895.599753]  ? __fget+0x237/0x370
[  895.603219]  ? security_file_ioctl+0x89/0xb0
[  895.607636]  SyS_ioctl+0x8f/0xc0
[  895.611009]  ? do_vfs_ioctl+0x1060/0x1060
[  895.615163]  do_syscall_64+0x1e8/0x640
[  895.619058]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  895.623920]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  895.629107] RIP: 0033:0x45af49
04:55:10 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=0x1, 0x0, <r5=>0x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r5}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r5}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5}, 0x78)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x9ebc901f42a6dc09, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r7, 0x3)
getsockopt$inet_mtu(r6, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4)

04:55:10 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7b16, 0x30000)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000240)=ANY=[@ANYPTR, @ANYBLOB="12577e1f2a2e52cb414c1ae679ed6469fa313bdbb326fb12f727c569d24bc11402426ccba9da4c99d1ba06b49656451c8c0297bf714eb2d468e0e39d8366731d0e1b8b4c18455be8749d3e1f18daa662a5b00863cb532315aaa2625e280884d3b21ecbc63c4c9d0beec190d0fa549143a9912be63eefe812d1b30e3f05a26168bb94d0ce9b40fdfb21acf3b94157d90e45516587a4fed8695472bdb500", @ANYRES16, @ANYRESDEC=0x0]], 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
iopl(0x1)

[  895.632300] RSP: 002b:00007f5c97d88c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  895.640010] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  895.647285] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005
[  895.654562] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  895.661832] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c97d896d4
[  895.669101] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
04:55:10 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x2a200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
setxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000140)='system_u:object_r:mail_spool_t:s0\x00', 0x22, 0x3)

04:55:10 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="74674d9da559921b229f86cd52951bb5554d2dd5b0e82adbbbe1bca3236f95f3515e9a9df061f802dce32a4303ad1552f632450c6dfe06d1c1f9ac1438f2a209aba3467b81f71c5471220effe53bcbfb0e5b4babc3c9cb9544b99d58ea093653534eb47d38f335c94f568583ee89b6a5119cb148aebbcc1befb6dbac2dbe4208d009e7f2c305ef4222cdb1edf46731e8e19b1800"], 0x94)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000180))

04:55:10 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800000000000000000000004300000063010000000000009700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:10 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
dup(r2)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:10 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = msgget$private(0x0, 0x404)
msgrcv(r0, &(0x7f0000000040)={0x0, ""/89}, 0x61, 0x0, 0x1000)

04:55:10 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000240)='\xc29;*5\xc7\xd0\xd4{<\t:\xf9\xe6\xef\x8c\x04\xad}\x8d\x1108\xd7\xd7\x10\xf7\xc1\xc1\x02\x00\x00\x00\x00\x00\x00\x00\x1a,\xe8\xc2a\x1d\x82R\xbbkc\xf2]\x84k\"\x93\xe0\xdd\xbf\x97?z\xe2\xfb\x82\x00\x00\x00\x00\x8c\xb6\xc3\x01\x17%\xe2\xbbTK\x00<.\xc9\xd34\xa1\x8b\xe47\xc2]\xec\xc6:8 \x825\xf2\xe2\x94Q\xf1P\x1b\xdf\x85\x1aT\x92$\xddi\xae\xb04\xff\xa4\xc1`\xca\xb9U\xfd\x0f8=\xc1\x9c8k\xd2\x8b\x02\xf1wMc3\x9e\x81\xdf4L\a\xc1#\t\xe9})\xccI\x92q\x836y\xc3<\x15b\xbb\x95\xb5,\x18\x05\x1dd\\G\x13\xa8\xe5\x17', 0xad38ede21424b8bc)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x5, 0x1}, 'port1\x00', 0x41, 0x100000, 0x2, 0x0, 0x4, 0x8, 0x5742, 0x0, 0x2, 0x2})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:10 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  896.266813] Mem-Info:
[  896.280672] active_anon:855819 inactive_anon:1744 isolated_anon:0
[  896.280672]  active_file:4479 inactive_file:5511 isolated_file:0
[  896.280672]  unevictable:0 dirty:15 writeback:0 unstable:0
[  896.280672]  slab_reclaimable:15665 slab_unreclaimable:126780
[  896.280672]  mapped:60103 shmem:1791 pagetables:27910 bounce:0
[  896.280672]  free:480624 free_pcp:372 free_cma:0
[  896.327304] syz-executor.2: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  896.356123] syz-executor.2 cpuset=syz2 mems_allowed=0-1
[  896.366809] Node 0 active_anon:1882092kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  896.407680] CPU: 0 PID: 14527 Comm: syz-executor.2 Not tainted 4.14.163-syzkaller #0
[  896.415705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  896.425070] Call Trace:
[  896.427677]  dump_stack+0x142/0x197
[  896.427699] Node 1 active_anon:1541284kB inactive_anon:76kB active_file:17856kB inactive_file:22040kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25104kB dirty:56kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  896.431302]  warn_alloc.cold+0x96/0x1af
[  896.431312]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  896.431333]  ? wait_for_completion+0x420/0x420
[  896.431348]  __alloc_pages_slowpath+0x23c6/0x2930
[  896.431372]  ? warn_alloc+0xf0/0xf0
[  896.480983]  ? __might_sleep+0x93/0xb0
[  896.484890]  __alloc_pages_nodemask+0x62c/0x7a0
[  896.489566]  ? rcu_read_lock_sched_held+0x110/0x130
[  896.494596]  ? __alloc_pages_slowpath+0x2930/0x2930
[  896.495466] Node 0 
[  896.499629]  alloc_pages_current+0xec/0x1e0
[  896.499646]  kvm_mmu_create+0xdf/0x1e0
[  896.499660]  kvm_arch_vcpu_init+0x29c/0x8e0
[  896.509922] DMA free:10492kB min:216kB low:268kB high:320kB active_anon:4176kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  896.510082]  kvm_vcpu_init+0x272/0x360
[  896.510096]  vmx_create_vcpu+0xfc/0x2aa0
[  896.510109]  ? mutex_trylock+0x1c0/0x1c0
[  896.520415] lowmem_reserve[]:
[  896.540211]  ? handle_rdmsr+0x6e0/0x6e0
[  896.540226]  ? wait_for_completion+0x420/0x420
[  896.540240]  kvm_arch_vcpu_create+0x8c/0xc0
[  896.540254]  kvm_vm_ioctl+0x501/0x1600
[  896.540270]  ? __lock_acquire+0x5f7/0x4620
[  896.566709]  0
[  896.568231]  ? kvm_vcpu_release+0xa0/0xa0
[  896.568244]  ? trace_hardirqs_on+0x10/0x10
[  896.568259]  ? trace_hardirqs_on+0x10/0x10
[  896.578765]  2569
[  896.582299]  ? __might_fault+0x110/0x1d0
[  896.582315]  ? save_trace+0x290/0x290
[  896.582324]  ? __might_fault+0x110/0x1d0
[  896.582336]  ? __fget+0x210/0x370
[  896.582346]  ? find_held_lock+0x35/0x130
[  896.582361]  ? __fget+0x210/0x370
[  896.582378]  ? kvm_vcpu_release+0xa0/0xa0
[  896.595931]  2569
[  896.597024]  do_vfs_ioctl+0x7ae/0x1060
[  896.597040]  ? selinux_file_mprotect+0x5d0/0x5d0
[  896.597053]  ? lock_downgrade+0x740/0x740
[  896.606441]  2569
[  896.608336]  ? ioctl_preallocate+0x1c0/0x1c0
[  896.608356]  ? __fget+0x237/0x370
[  896.608373]  ? security_file_ioctl+0x89/0xb0
[  896.620683]  2569
[  896.622071]  SyS_ioctl+0x8f/0xc0
[  896.622083]  ? do_vfs_ioctl+0x1060/0x1060
[  896.622098]  do_syscall_64+0x1e8/0x640
[  896.634877]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  896.634898]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  896.634908] RIP: 0033:0x45af49
[  896.644000] Node 0 
[  896.644804] RSP: 002b:00007f5c97d04c78 EFLAGS: 00000246
[  896.655088] DMA32 free:33436kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:60kB inactive_file:4kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:640kB local_pcp:388kB free_cma:0kB
[  896.658744]  ORIG_RAX: 0000000000000010
[  896.658751] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
04:55:11 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x42b981, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockname$tipc(r2, &(0x7f0000000280), &(0x7f00000002c0)=0x10)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$USBDEVFS_RESETEP(r3, 0x80045503, &(0x7f0000000200)={0x1, 0x1})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000240)=0xf4240)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/14, 0xe}, {&(0x7f0000000180)=""/68, 0x44}], 0x2)

[  896.658757] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000005
[  896.658763] RBP: 000000000075c1c0 R08: 0000000000000000 R09: 0000000000000000
[  896.658769] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f5c97d056d4
[  896.658776] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  896.835423] lowmem_reserve[]: 0 0 0 0 0
[  896.845601] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  896.908205] lowmem_reserve[]: 0 0 0 0 0
[  896.917002] Node 1 Normal free:1878740kB min:53508kB low:66884kB high:80260kB active_anon:1542284kB inactive_anon:76kB active_file:17856kB inactive_file:22040kB unevictable:0kB writepending:256kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20384kB pagetables:47012kB bounce:0kB free_pcp:744kB local_pcp:372kB free_cma:0kB
[  897.024811] lowmem_reserve[]: 0 0 0 0 0
[  897.033596] Node 0 DMA: 1*4kB (E) 10*8kB (H) 16*16kB (MEH) 6*32kB (MH) 6*64kB (UEH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10516kB
[  897.057355] Node 0 DMA32: 27*4kB (UMH) 457*8kB (UMEH) 830*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 33588kB
[  897.100794] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  897.131211] Node 1 Normal: 93*4kB (UME) 190*8kB (UME) 247*16kB (UE) 50*32kB (UME) 33*64kB (UE) 0*128kB 0*256kB 9*512kB (UM) 3*1024kB (ME) 3*2048kB (ME) 453*4096kB (M) = 1878868kB
[  897.165840] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  897.177938] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  897.198086] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  897.216876] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  897.233485] 11788 total pagecache pages
[  897.237506] 0 pages in swap cache
[  897.241026] Swap cache stats: add 0, delete 0, find 0/0
[  897.246392] Free swap  = 0kB
[  897.249414] Total swap = 0kB
[  897.255616] 1965979 pages RAM
[  897.258742] 0 pages HighMem/MovableOnly
[  897.262772] 335871 pages reserved
[  897.266226] 0 pages cma reserved
04:55:11 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00')
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8)
sendmsg$FOU_CMD_GET(r1, &(0x7f0000000400)={&(0x7f0000000080), 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r2, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000808}, 0x40010)

04:55:11 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xffc95692317ff5e6, 0x4000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:11 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f00000001c0)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x1)
r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0)
fcntl$setstatus(r2, 0x4, 0x44000)
io_setup(0x40000100000003, &(0x7f0000000200)=<r3=>0x0)
io_submit(r3, 0x653, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r2, &(0x7f0000000000), 0x377140be6b5ef4c7}])
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f0000000080)=""/122, 0x7a)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x2, 0x10}, &(0x7f0000000340)=0xc)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x14, &(0x7f0000000640)={r6}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r6, &(0x7f0000000240)=0x4)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000280)={0x0, 0x5}, 0x8)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r9 = getpid()
sched_setscheduler(r9, 0x5, &(0x7f0000000380))
fcntl$lock(r8, 0x1bee5ed2be6679a8, &(0x7f0000000100)={0x0, 0x3, 0xa8, 0x1, r9})
signalfd(r7, &(0x7f0000000180)={0x7}, 0x8)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:11 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x408002, 0x0)
read$dsp(r4, &(0x7f0000000100)=""/121, 0x79)
r5 = socket$kcm(0x2, 0x2, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xc0, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ab80)=0x1, 0x0, <r6=>0x0, 0x0, &(0x7f000000abc0)={0x106, 0x2}, 0x0, 0x0, &(0x7f0000000500)={0x1, 0x20d, 0x7ff, 0xffffffff}, &(0x7f000000ac40)=0x80000007, 0x0, 0x0, 0x0, 0x0, &(0x7f000000ac80)=0x4}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xb8, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, r6}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0xa, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000059000000000000000000040018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000027fb178296f0000d104f8ffffffffff18000000080022000000000001c7d905c0d811a2690000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x7, 0x80, &(0x7f0000000340)=""/128, 0x40f00, 0x2, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000400)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0xa, 0xff, 0x400}, 0x10, r6}, 0x78)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x20000000000000b1, &(0x7f0000346fc8)=@raw=[@call={0x85, 0x0, 0x0, 0x69}, @ldst={0x0, 0x0, 0x3, 0x6, 0xb, 0x8, 0x8}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6}, 0x78)

04:55:12 executing program 4:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x0, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
connect$x25(r1, &(0x7f0000000040)={0x9, @null='               \x00'}, 0x12)

04:55:12 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x40000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:12 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:12 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f0000000040)=0xfffffffc)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x7c, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:12 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x80900, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000100)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x33, 0x3, 0x7fffffff, 0x0, 0x1, 0x1, "d17e3434a0260975771aa1e8a68dd8fa1d94e6370da9ebc99279fd3cf719e12e0494dee55a76569a6c2e79f1fd7037e5049c9b"}}, 0x14b)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xb01000, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r2, 0x5386, &(0x7f0000000080))

04:55:12 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
accept$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000080)=ANY=[], 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))
r3 = socket(0x10, 0xa, 0x3)
getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000180)=""/18, &(0x7f00000001c0)=0x12)

04:55:12 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61, 0x0, 0xffffffffffffff80}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  897.761489] protocol 88fb is buggy, dev hsr_slave_0
[  897.766602] protocol 88fb is buggy, dev hsr_slave_1
[  897.771765] protocol 88fb is buggy, dev hsr_slave_0
[  897.776837] protocol 88fb is buggy, dev hsr_slave_1
04:55:12 executing program 4:
r0 = creat(0x0, 0x0)
recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/32, 0x20}, {&(0x7f0000000140)=""/76, 0x4c}, {&(0x7f0000000240)=""/12, 0xc}, {&(0x7f0000000280)=""/178, 0xb2}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/32, 0x20}, {&(0x7f0000001380)=""/167, 0xa7}, {&(0x7f0000001440)=""/79, 0x4f}, {&(0x7f00000014c0)=""/196, 0xc4}], 0x9, &(0x7f0000001680)=""/146, 0x92}, 0x40000000)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
lsetxattr$trusted_overlay_redirect(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)='trusted.overlay.redirect\x00', &(0x7f0000001800)='./file0\x00', 0x8, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x0, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0xf, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
recvfrom(r0, &(0x7f0000001840)=""/160, 0xa0, 0x100, &(0x7f0000001900)=@rc={0x1f, {0x9, 0x6, 0xa9, 0xa2, 0x20, 0x7f}, 0x3}, 0x80)

04:55:12 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000040)={r3, @in6={{0xa, 0x4e22, 0x200, @loopback, 0x3}}}, 0x84)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f0000000100)={0x1, 0x3})

04:55:12 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400001, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
splice(0xffffffffffffffff, 0x0, r5, 0x0, 0x30005, 0x0)
ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000100)={0x400, 0x6, 0x4, 0x8, 0xfffffffa})

04:55:12 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
accept4$bt_l2cap(r0, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x0)
openat$bsg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/bsg\x00', 0x40000, 0x0)

04:55:12 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x40000, 0x0)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000380)=0xff)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, 0xffffffffffffffff, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x1, 0x100)
write$selinux_load(0xffffffffffffffff, &(0x7f0000000240)={0xf97cff8c, 0x8, 'SE Linux', "5bfffdfff2263e52ca5402ad2c0d54d83534f72a0a84b86cb66021a2cc5cd05f4635a0addf74b96ce9a71a2598962ea4e2f70def2b7a3298cd2ccc4f2b6bdae4cebaa1eaeba7adc7c11fc871c4cdf2c6d160a79cfe59ffbb670c1392271c56d8ffc58d235687eb1ae1ace57cdac451d0c5e8822d31ace5a1558df759813834932cd1373ad831ad993d2804799760cbe3ff71315c19ca3c974cc267b4e848fd65c4bec5905f18961896f315c18e11b53b9debab57d8b46cae4ebf7dc9fa341e7a19e704253e66ec9b54acc22796583a752644008ffe3cde77466d42b0137e90c90408d4886985b7892135ddf85df59a49e269f76cdf66c0321018a2a5"}, 0x10c)
getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000100)=0x2, &(0x7f0000000140)=0x4)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/uinput\x00', 0x2, 0x0)
ioctl$UI_GET_VERSION(r6, 0x8004552d, &(0x7f0000000400))
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'vlan0\x00'})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000017000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, &(0x7f00000000c0)="ffb10c10ba4300b0c8ee660f38826f3cf30f01e80f69e866f20f38f015650f01c883dd000f0131baf80c66b87aa1cc8b66efbafc0ced", 0x36}], 0x1, 0x0, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000000))
openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x0, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4cb]})
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000440)={0xff, 0x4, 0x4, 0x0, 0xffff, 0x5, 0x7, 0x5, 0x1, 0xac, 0x0, 0x10, 0x0, 0x757c, 0x5, 0x7d, 0x0, 0x40, 0x80, [], 0x1f, 0x694})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000140)={[0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x4ca]})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
r11 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$BLKFLSBUF(r11, 0x1261, &(0x7f0000000180))
ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080))
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:13 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000a1b6251f0c9d6ce2ffffff63010000000000007b000000000000000000000000002ffbffffffffffff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  898.419113] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  898.459343] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  898.472176] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  898.485029] CPU: 1 PID: 14607 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  898.492942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  898.502305] Call Trace:
[  898.504927]  dump_stack+0x142/0x197
[  898.508576]  warn_alloc.cold+0x96/0x1af
[  898.512571]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  898.517434]  ? wait_for_completion+0x420/0x420
[  898.522042]  __alloc_pages_slowpath+0x23c6/0x2930
[  898.526912]  ? warn_alloc+0xf0/0xf0
[  898.530559]  ? __might_sleep+0x93/0xb0
[  898.534456]  __alloc_pages_nodemask+0x62c/0x7a0
[  898.539147]  ? rcu_read_lock_sched_held+0x110/0x130
[  898.544257]  ? __alloc_pages_slowpath+0x2930/0x2930
[  898.549297]  alloc_pages_current+0xec/0x1e0
[  898.553630]  kvm_mmu_create+0xdf/0x1e0
[  898.557526]  kvm_arch_vcpu_init+0x29c/0x8e0
[  898.561877]  kvm_vcpu_init+0x272/0x360
[  898.565783]  vmx_create_vcpu+0xfc/0x2aa0
[  898.569853]  ? mutex_trylock+0x1c0/0x1c0
[  898.573932]  ? handle_rdmsr+0x6e0/0x6e0
[  898.577917]  ? wait_for_completion+0x420/0x420
[  898.582512]  kvm_arch_vcpu_create+0x8c/0xc0
[  898.586849]  kvm_vm_ioctl+0x501/0x1600
[  898.590749]  ? __lock_acquire+0x5f7/0x4620
[  898.594997]  ? get_unused_fd_flags+0xd0/0xd0
[  898.599416]  ? kvm_vcpu_release+0xa0/0xa0
[  898.603581]  ? trace_hardirqs_on+0x10/0x10
[  898.607834]  ? trace_hardirqs_on+0x10/0x10
[  898.612094]  ? __might_fault+0x110/0x1d0
[  898.616169]  ? save_trace+0x290/0x290
[  898.619975]  ? __might_fault+0x110/0x1d0
[  898.624043]  ? __fget+0x210/0x370
[  898.627507]  ? find_held_lock+0x35/0x130
[  898.631573]  ? __fget+0x210/0x370
[  898.635034]  ? kvm_vcpu_release+0xa0/0xa0
[  898.639196]  do_vfs_ioctl+0x7ae/0x1060
[  898.643092]  ? selinux_file_mprotect+0x5d0/0x5d0
[  898.647854]  ? lock_downgrade+0x740/0x740
[  898.652020]  ? ioctl_preallocate+0x1c0/0x1c0
[  898.656444]  ? __fget+0x237/0x370
[  898.659909]  ? security_file_ioctl+0x89/0xb0
[  898.664329]  SyS_ioctl+0x8f/0xc0
[  898.667699]  ? do_vfs_ioctl+0x1060/0x1060
[  898.671849]  do_syscall_64+0x1e8/0x640
[  898.675736]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  898.680595]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  898.685796] RIP: 0033:0x45af49
[  898.688987] RSP: 002b:00007fe80f23dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  898.696707] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  898.703981] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 000000000000000b
[  898.711259] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  898.718539] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f23e6d4
[  898.725818] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  898.750121] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  898.755546] CPU: 1 PID: 14603 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  898.763431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  898.772790] Call Trace:
[  898.775394]  dump_stack+0x142/0x197
[  898.779038]  warn_alloc.cold+0x96/0x1af
[  898.783025]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  898.787884]  ? wait_for_completion+0x420/0x420
[  898.792488]  __alloc_pages_slowpath+0x23c6/0x2930
[  898.797353]  ? warn_alloc+0xf0/0xf0
[  898.801005]  ? __might_sleep+0x93/0xb0
[  898.804898]  __alloc_pages_nodemask+0x62c/0x7a0
[  898.809577]  ? rcu_read_lock_sched_held+0x110/0x130
[  898.814611]  ? __alloc_pages_slowpath+0x2930/0x2930
[  898.819651]  alloc_pages_current+0xec/0x1e0
[  898.823990]  kvm_mmu_create+0xdf/0x1e0
[  898.827891]  kvm_arch_vcpu_init+0x29c/0x8e0
[  898.832225]  kvm_vcpu_init+0x272/0x360
[  898.836128]  vmx_create_vcpu+0xfc/0x2aa0
[  898.840208]  ? mutex_trylock+0x1c0/0x1c0
[  898.844288]  ? handle_rdmsr+0x6e0/0x6e0
[  898.848290]  ? wait_for_completion+0x420/0x420
[  898.852887]  kvm_arch_vcpu_create+0x8c/0xc0
[  898.857224]  kvm_vm_ioctl+0x501/0x1600
[  898.861111]  ? __lock_acquire+0x5f7/0x4620
[  898.861122]  ? find_held_lock+0x35/0x130
[  898.861138]  ? kvm_vcpu_release+0xa0/0xa0
[  898.861147]  ? trace_hardirqs_on+0x10/0x10
[  898.861161]  ? trace_hardirqs_on+0x10/0x10
[  898.861170]  ? __might_fault+0x110/0x1d0
[  898.861180]  ? save_trace+0x290/0x290
[  898.861189]  ? __might_fault+0x110/0x1d0
[  898.861204]  ? __fget+0x210/0x370
[  898.869745]  ? find_held_lock+0x35/0x130
[  898.869759]  ? __fget+0x210/0x370
[  898.869770]  ? kvm_vcpu_release+0xa0/0xa0
[  898.869783]  do_vfs_ioctl+0x7ae/0x1060
[  898.913218]  ? selinux_file_mprotect+0x5d0/0x5d0
[  898.917988]  ? lock_downgrade+0x740/0x740
[  898.922154]  ? ioctl_preallocate+0x1c0/0x1c0
[  898.926574]  ? __fget+0x237/0x370
[  898.930038]  ? security_file_ioctl+0x89/0xb0
[  898.934453]  SyS_ioctl+0x8f/0xc0
[  898.937824]  ? do_vfs_ioctl+0x1060/0x1060
[  898.941978]  do_syscall_64+0x1e8/0x640
[  898.945874]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  898.950735]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  898.955925] RIP: 0033:0x45af49
04:55:13 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
pkey_alloc(0x0, 0x3)

[  898.959115] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  898.966833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  898.974209] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007
[  898.981485] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  898.988762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  898.996044] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  899.017052] warn_alloc_show_mem: 1 callbacks suppressed
[  899.017056] Mem-Info:
[  899.025331] active_anon:856102 inactive_anon:1746 isolated_anon:0
[  899.025331]  active_file:4479 inactive_file:5618 isolated_file:0
[  899.025331]  unevictable:0 dirty:37 writeback:0 unstable:0
[  899.025331]  slab_reclaimable:15693 slab_unreclaimable:126773
[  899.025331]  mapped:60129 shmem:1791 pagetables:27883 bounce:0
[  899.025331]  free:480240 free_pcp:393 free_cma:0
[  899.071418] Node 0 active_anon:1882108kB inactive_anon:6900kB active_file:68kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215116kB dirty:0kB writeback:8kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  899.100417] Node 1 active_anon:1542380kB inactive_anon:84kB active_file:17848kB inactive_file:22468kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25400kB dirty:124kB writeback:72kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  899.129876] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  899.167471] lowmem_reserve[]: 0 2569 2569 2569 2569
[  899.173582] Node 0 DMA32 free:34188kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:644kB local_pcp:404kB free_cma:0kB
[  899.214095] lowmem_reserve[]: 0 0 0 0 0
04:55:13 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00')
bind$netrom(r3, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x81, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0)

[  899.225435] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  899.267052] lowmem_reserve[]: 0 0 0 0 0
[  899.293110] Node 1 Normal free:1875312kB min:53508kB low:66884kB high:80260kB active_anon:1542328kB inactive_anon:84kB active_file:17848kB inactive_file:22492kB unevictable:0kB writepending:172kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20416kB pagetables:47000kB bounce:0kB free_pcp:980kB local_pcp:488kB free_cma:0kB
[  899.334707] lowmem_reserve[]: 0 0 0 0 0
[  899.354065] Node 0 DMA: 3*4kB (ME) 14*8kB (UEH) 16*16kB (UMH) 6*32kB (UH) 5*64kB (EH) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10492kB
04:55:14 executing program 4:
eventfd2(0x80, 0x80000)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000080)={0x2, 0x81})
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PPPIOCGDEBUG(r1, 0x80047441, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001f7b88f083fb837dbd43ffffff95000059df1527fc1000000000000bf8f8c443c90000000000"], &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  899.401951] Node 0 DMA32: 27*4kB (UMH) 516*8kB (UMEH) 842*16kB (UMH) 515*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 34252kB
[  899.425012] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  899.436982] Node 1 Normal: 217*4kB (UME) 161*8kB (UME) 175*16kB (U) 57*32kB (U) 30*64kB (U) 2*128kB (UM) 1*256kB (M) 7*512kB (UM) 4*1024kB (UME) 4*2048kB (UME) 452*4096kB (M) = 1876476kB
[  899.459509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  899.469258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  899.483002] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
04:55:14 executing program 4:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xc0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x9, 0x0, <r0=>0x0, 0x0, &(0x7f0000000080)={0x5, 0x4}, 0x0, 0x0, &(0x7f00000000c0)={0x1, 0x10, 0x0, 0x1}, &(0x7f0000000100)=0x7fffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x2}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x78)

[  899.508441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  899.537583] 11895 total pagecache pages
[  899.555236] 0 pages in swap cache
[  899.559299] Swap cache stats: add 0, delete 0, find 0/0
[  899.570379] Free swap  = 0kB
[  899.573526] Total swap = 0kB
[  899.576673] 1965979 pages RAM
[  899.584223] 0 pages HighMem/MovableOnly
04:55:14 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_G_EDID(r0, 0xc0285628, &(0x7f00000000c0)={0x0, 0x1ff, 0x5, [], &(0x7f0000000080)=0x9d})

[  899.624019] 335871 pages reserved
[  899.627521] 0 pages cma reserved
04:55:14 executing program 4:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x20000, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x16, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x50)

04:55:14 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x14, &(0x7f0000000240)=ANY=[@ANYRES32=r4, @ANYBLOB="af11e75e0817343c83f0a9c56315eea3db25a5bb83cb9a6e13c8fedf82dc915449a75289f1d9928e63ce71afb62c3d71b851bd5230721a80fc6e69f49503378eb70d8f09a7c2e2be9ebd82192c369d3b"], &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x863, 0x20}, &(0x7f0000000100)=0xc)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, 0xffffffffffffffff, 0x0)
syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  899.840111] net_ratelimit: 4 callbacks suppressed
[  899.840118] protocol 88fb is buggy, dev hsr_slave_0
[  899.850114] protocol 88fb is buggy, dev hsr_slave_1
[  899.855238] protocol 88fb is buggy, dev hsr_slave_0
[  899.860348] protocol 88fb is buggy, dev hsr_slave_1
04:55:14 executing program 4:
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000140)=0x3, 0xfffffd1d)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FS_IOC_SETFSLABEL(r3, 0x41009432, &(0x7f0000000240)="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")
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r4}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r4, 0xd05}, &(0x7f0000000080)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:14 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="590f1b56498b50c2137d1c5fead494e3db53717b1752291da77ebaa4c131fc618689815d26c63361fc3dd60afa4b654564c295f70f77e7430520eb81398c0c15ac8f366b04b8061e7acc7b6f28575541398fc4a1822fb44a8891f411a59dbb4882688193d6c44026558cda6f4d227c96f1665268e910f82f4ee66cf52de69887b0d8453d4236306b09a0ba9f1a")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:15 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000000c0)={<r3=>0x0, 0xfffffffd, 0x80000001, 0x4}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={r3, 0xffffff29, 0x0, 0x6}, &(0x7f0000000240)=0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  900.800118] protocol 88fb is buggy, dev hsr_slave_0
[  900.805249] protocol 88fb is buggy, dev hsr_slave_1
04:55:15 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000380))
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xc0, &(0x7f00000002c0)={0x0, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=0x5, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x5}, 0x0, 0x0, &(0x7f00000001c0)={0x5, 0x4, 0x3, 0xffff0000}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x80}}, 0x10)
get_robust_list(r2, &(0x7f00000004c0)=&(0x7f0000000480)={&(0x7f0000000440)={&(0x7f0000000400)}}, &(0x7f0000000500)=0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, r3, 0x0, 0x13, &(0x7f0000000080)='-/selinuxeth1eth1}\x00', r5}, 0x30)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:15 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc32, 0x10, 0x0}, 0x45)

[  901.040129] protocol 88fb is buggy, dev hsr_slave_0
[  901.045307] protocol 88fb is buggy, dev hsr_slave_1
04:55:15 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000b9e8a796d102f635000063010000000000009500000000000093"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
migrate_pages(r0, 0x8000, &(0x7f00000000c0)=0xffffffff, &(0x7f0000000100)=0xffffffffffffffff)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0)

04:55:15 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000000c0)=0xfffffffffffffff7)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
flistxattr(r5, &(0x7f0000000100)=""/79, 0x4f)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

[  901.360100] protocol 88fb is buggy, dev hsr_slave_0
[  901.365236] protocol 88fb is buggy, dev hsr_slave_1
04:55:16 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:55:16 executing program 4:
r0 = creat(0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000340)={0x19f0008, 0x8, 0x0, <r2=>0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x0, 0x4, [], @value=0x563}})
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000380))
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r3, &(0x7f0000000240)="db40951195b65329", 0x8)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r3, 0x0, 0xbe}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'wp512-generic\x00'}}, &(0x7f0000000140), &(0x7f0000000240)="49788faf1503b4fae8bf7a6f9a6c072806787a5e845a3f0a61a85450d522853020310587720de3b60e4f615b538b27d6038d2fcdc6ff49865c40c6845abbc49ca848315695521d3379649652cfec858637744a1b6b683e84a63426915ec752fd09db38959dea54d033c5851c6d840e624f19ca28a643f2945c80b3182b4fc69d9323d5d2bdb3c1ae6f94fadaa584b0aa67ceab5def2494d03b841b58d9bab6cdd6edb4877dcdea0cf6dc62205368c0147e7161640d62690fa1260f08a0c7")
ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000000000cc1d000000000000000063010000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:16 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r3, &(0x7f0000000240)="db40951195b65329", 0x8)
r4 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r5 = add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, &(0x7f0000000680)="038a8b9a8ef8fe3f12d4f572599573845b6bdb5fd5d97e0555e85bf097a19634d69a40f3004452098847757261e5152970aba6cc2c3f10296f0600000002623d0c6f7f8a1a0430a5303168bebed69e7bf278b62e75a0dfb36f8ca4ee0218fc898aa111afd212b4a61324ed13df464eb36a8c4b7e6470ad4743fbb44a0568b2c6ecc761af7c4901acce5ebe5808d3dd2845", 0x91, r5)
r6 = request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000180)='/dev/mISDNtimer\x00', r5)
r7 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r7, &(0x7f0000000240)="db40951195b65329", 0x8)
r8 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r3, r6, r7}, &(0x7f0000000240)=""/197, 0xc5, &(0x7f0000000400)={&(0x7f0000000340)={'cmac-aes-neon\x00'}, &(0x7f0000000380)="0c33621677ee671234939f50558b8754c2439170310aac5a654ece439cbe608627c63402fc1adc882dd7f23e99c077d36cb2b38c8a9706b934dabfd5c882a941b9b0644bddfeaf64511e23b3947ba70596458f295a96f32bdc8abae055469af8f5ff", 0x62})
write$binfmt_elf32(r1, &(0x7f0000000480)=ANY=[@ANYBLOB="4a9b1f51cfa67f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:16 executing program 0:
socket$isdn_base(0x22, 0x3, 0x0)
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:16 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x22040, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
fcntl$setown(r2, 0x8, r3)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r5, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffb)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0xdeb7c9159937f032, 0x70bd25, 0x25dfdbff, {0x3, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCGPGRP(r8, 0x540f, &(0x7f0000000280))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:16 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000180)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x4)
socket$isdn_base(0x22, 0x3, 0x0)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x4402, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="63f2352e7e4d3fc8302351d00f50"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x20000003})

04:55:16 executing program 4:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mount$bpf(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0xeae}}]})
mkdir(&(0x7f0000000140)='./file1/file0\x00', 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  902.248255] audit: type=1400 audit(1578632116.849:102): avc:  denied  { associate } for  pid=14707 comm="syz-executor.4" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
04:55:16 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/full\x00', 0x10000, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000080)={0x0, &(0x7f0000000240)=""/251})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$SO_TIMESTAMPING(r4, 0x1, 0xa7, &(0x7f00000000c0), &(0x7f0000000180)=0x4)

04:55:17 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
accept4$ax25(r1, &(0x7f0000000080)={{}, [@null, @rose, @bcast, @null, @null, @default, @default, @netrom]}, &(0x7f0000000180)=0x48, 0x80000)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7702ee1ccad41d9f2aba4cad44e266caa7ee8a394d496d032070bac4e3fcf8534b0d401eb7172ac82422e8ad48c0a0a8ba642dac3f6861e7666ac9c92611a98991aff6d9faaa6d05efb5d0eb291e39b421f61d9034f4aa5129a1b7dd8e2f810dd4896a7d74eafc362274199151485dd4ff67a6f822251f43b5c820ca75102c71d039c5476032a03ce0ba2e6b29984f4842ac1059453273bab10b137040f477980392b04b4939bec986888bf012ddec4d14acf92e1eff62d2d1876b5a15"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:17 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000140)={0x5, "5f9bf006217e17582bab901b1c29660a42d8f13d059bc0f1f22ac5644e6da89e", 0x2, 0x1})
statx(r1, &(0x7f00000000c0)='./file0\x00', 0x800, 0x800, &(0x7f0000000240))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x1)

04:55:17 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xcb3f245359bc5d38)

04:55:17 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2a5}, 0x240)
ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605)

04:55:17 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x2000, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:17 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20c801, 0x0)
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000080))
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0))

04:55:17 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="0a1bf0ff379f740a182b0000", @ANYRES32=r0, @ANYBLOB="0000000001feffffd863e6500000000018000000010000000000000009000000852ae0ff010000001f010100060000008510000004000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

04:55:17 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1000000000000000000000000000000063010000000000009500000000000000d746c6baeb946ec2549e5e394f3c150cb6a3ee626732f1682107d46b0000000000000000947d6eddcf104195"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
bind(r1, &(0x7f0000000100)=@caif=@dgm={0x25, 0x3f, 0x7}, 0x80)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x1})

04:55:19 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x256, 0x2a6c88e409137a97)
ioctl$SCSI_IOCTL_STOP_UNIT(r4, 0x6)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:19 executing program 4:
mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000)

04:55:19 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='?'], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f00000001c0)=0xe8)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000005800)={&(0x7f0000005880)=@newchain={0x56a8, 0x64, 0x4, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x2, 0xf}, {0x1, 0x10}, {0xfff3, 0x9}}, [@filter_kind_options=@f_cgroup={{0xb, 0x1, 'cgroup\x00'}, {0x5658, 0x2, [@TCA_CGROUP_EMATCHES={0x1078, 0x3, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x8, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xef80}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x1010, 0x2, @TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x8000, 0x0, 0x5a5}, "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"}}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x2, 0x1, 0xe}, {0x7, 0x5, 0x5, 0x2, 0x9, 0x3, 0x2}}}}]}, @TCA_CGROUP_ACT={0x3d6c, 0x1, @m_pedit={0x3d68, 0x12, 0x0, 0x0, {{0xa, 0x1, 'pedit\x00'}, {0x3d44, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0xb8, 0x5, [@TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2b52fd9dff97984b}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x44, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x8a3c15b4a99d4037}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe50, 0x4, {{{0x80000001, 0x4b980b30, 0x7, 0xfffffffc, 0x200}, 0x3, 0x3, [{0x8, 0x0, 0x3, 0x0, 0xff, 0x1}, {0x2, 0x40, 0x9, 0x7, 0xffffffff, 0x8001}]}, [{0x76, 0x0, 0x97a, 0x1f, 0x5f, 0x3}, {0x2, 0x0, 0x8, 0x2, 0xffffffff, 0x8001}, {0xfffffff8, 0x1, 0x2, 0x1, 0x2, 0x4}, {0x6, 0x2, 0x3, 0x400, 0x40, 0x6}, {0x6635e167, 0x10001, 0x3, 0x4, 0x7, 0x1}, {0x7, 0x8, 0x5, 0x400, 0x4f47, 0x91}, {0x1, 0xdc0b, 0x5, 0x1000, 0x9, 0x5}, {0x1, 0x8001, 0x7, 0x22c, 0x3, 0x1000}, {0x0, 0x6, 0xffff, 0x401, 0xdc}, {0x9, 0x5f24, 0x70aa, 0x7, 0xffff5f74, 0x7}, {0x7fff, 0xffffffff, 0x1f, 0x0, 0xfffffffd, 0x9}, {0xee, 0xbc0, 0x1, 0x8, 0x40, 0x1}, {0x1, 0x4433, 0x100, 0x9, 0x0, 0x70}, {0xacfb, 0x0, 0x251, 0x4, 0x4, 0x6}, {0x81, 0x2, 0x8001, 0x9, 0x7, 0x2}, {0x7, 0x80000001, 0x5a, 0x20, 0xfffffbff, 0x6}, {0xfffffffd, 0x2f65, 0xee05, 0x1, 0x0, 0x6}, {0x6, 0xffffff00, 0xfffffffb, 0xfffff001, 0x4, 0x289}, {0xae7, 0x4, 0x3, 0x7fff, 0xfffffede, 0x1f}, {0x1, 0x7, 0x6c, 0x8, 0x100, 0x14}, {0x3, 0x9c, 0x5, 0xfff, 0x9, 0x5}, {0x4, 0x6, 0x400, 0x1000, 0x7f, 0x29}, {0x3, 0x8, 0x0, 0x5, 0x5c4, 0x1f}, {0x0, 0x0, 0x7f, 0x3, 0x5b, 0x8}, {0x5, 0x80000001, 0xffff77b5, 0xfffffffe, 0x5, 0xd1c}, {0xffffffff, 0x3, 0x3, 0x3, 0x3, 0xacb}, {0x25, 0xcc, 0x847, 0x7f, 0x8001, 0x80000000}, {0x5, 0x7, 0x4, 0x400, 0x0, 0x2}, {0x48000, 0x7, 0x3, 0x0, 0x9}, {0x100, 0x9, 0x7f1, 0x1, 0x2}, {0xfff, 0xfffeffff, 0x4b4, 0x8, 0x3, 0x62}, {0x200, 0x6, 0xffff, 0x5, 0x2, 0x800}, {0x10001, 0x4, 0x7fffffff, 0x9, 0x1, 0x100}, {0x7fff, 0x80000000, 0xd3, 0x4c4af8aa, 0x800, 0x5}, {0x2, 0xfe95, 0x0, 0x1000000, 0x9, 0x1}, {0x9, 0x20, 0xffffffff, 0x6, 0x1ff, 0x20}, {0x5, 0xd6, 0x2, 0x16f, 0x0, 0x7}, {0x1ff, 0x7, 0x2, 0x1, 0x7f, 0x6a8}, {0x1ff8, 0x2, 0x1000, 0x7ff, 0x7}, {0x8, 0x1, 0x8, 0x9a62, 0x10001, 0x1f}, {0x5, 0x6, 0x1, 0x5, 0x6, 0x7}, {0x3, 0x5, 0x4, 0x7fff, 0xff, 0x6}, {0x8, 0x7, 0x80, 0x81, 0x1113b19f}, {0x8, 0x8, 0x2, 0xff, 0x1ab, 0xfffffff7}, {0x9, 0x80000001, 0x6, 0x0, 0x401, 0x9}, {0x40, 0x3, 0x200, 0x3, 0x7, 0xffff0001}, {0x1ff, 0x4, 0x0, 0x0, 0x1, 0x7fffffff}, {0x4, 0x7, 0xffffffff, 0x3a, 0xffffffff, 0x8}, {0x2, 0x3ff, 0xffffff2e, 0x5d3, 0x1, 0xf8}, {0x0, 0x0, 0x0, 0x4, 0x7, 0x7fffffff}, {0x6, 0x0, 0x7fff, 0x8, 0x1ff, 0xfffffbff}, {0x8, 0x9, 0x0, 0x3, 0x6, 0x1}, {0xffff17d8, 0x5, 0x4, 0x5, 0x80000001, 0x200}, {0x2, 0x2, 0x2, 0x6, 0x2, 0x5}, {0x20, 0x1000, 0xffffffe0, 0x9, 0xff, 0xdd13}, {0x2, 0x5f520d47, 0x9, 0x6, 0x9, 0x576}, {0x6, 0xfffffffa, 0x5, 0x8, 0x7ff, 0x5}, {0x1ff, 0xfff, 0x4, 0x0, 0x101, 0x1f}, {0x2, 0x5, 0x80, 0x800, 0x0, 0x5}, {0x0, 0xffff, 0x7, 0x3, 0x5, 0x3}, {0x5, 0x80000000, 0x9, 0x80000001, 0x6a, 0x3}, {0x4, 0x7, 0xfffff9e0, 0x5, 0x7}, {0x479d, 0x2, 0x4, 0x7, 0x9, 0xc}, {0x1ff, 0x0, 0xfd, 0x1, 0xd3, 0x1}, {0x6, 0x9, 0x4, 0x401, 0x1000}, {0x5, 0x4, 0x1c22, 0x7fff, 0x1ff, 0x1f}, {0xffffffff, 0x1000, 0x81, 0xd1, 0x3f, 0x1}, {0xffffff7f, 0xedc, 0x800, 0x5, 0x80000000}, {0x40, 0x7dc1, 0x6, 0x4, 0x5, 0x81}, {0x8, 0x3, 0x50000000, 0x4, 0x0, 0x400000}, {0x400, 0x1ff, 0x4, 0x200, 0x3ff, 0x3}, {0x706c, 0x401, 0x2, 0xfff, 0x8, 0x2}, {0x8, 0x3, 0x2, 0x5, 0x7fff, 0x9}, {0x100, 0x90, 0xaa1, 0x4, 0x7, 0x2}, {0x7, 0x8001, 0x5, 0x80000001, 0x80, 0x2}, {0x1f, 0x7, 0x6, 0x5, 0xffff, 0x1000}, {0x40, 0x0, 0x80, 0x9dd, 0xa80, 0x5}, {0xffff, 0xfffffff9, 0x988, 0x7, 0xff}, {0x8, 0xff, 0x0, 0x7ff, 0x22, 0x8}, {0x4000000, 0x7ff, 0x9, 0x3, 0x5, 0xe9}, {0x4, 0x8001, 0x1ce, 0x482c, 0x3b35, 0x7}, {0x3, 0x1, 0x8, 0x40, 0x5, 0xfff}, {0x8, 0x1000, 0xffffff55, 0x1, 0x800, 0x6}, {0x8b, 0x5, 0x3, 0x7fee, 0x1}, {0x8, 0x2, 0xae1f, 0x401, 0x8, 0x7}, {0x7d7f, 0x0, 0xff, 0x5, 0x6, 0x2}, {0x8, 0x4, 0xde, 0x8, 0x0, 0x40}, {0xc2, 0x4, 0x4, 0x20, 0x2, 0x73fa}, {0x1, 0x81, 0xb1b, 0x9, 0x0, 0x9}, {0x38000, 0x9, 0x7fff, 0x5, 0x3, 0x7fffffff}, {0x6, 0x1, 0x5, 0x2, 0xfffffffd, 0x8}, {0xfa1, 0x3, 0x425, 0x10000, 0x20, 0x200}, {0x4, 0x9, 0x8, 0x4, 0x5, 0x8}, {0x1000, 0x100, 0x4c95, 0x400, 0x80, 0x4}, {0x6, 0x7, 0x3ff, 0xfffffffd, 0x8, 0x39f}, {0xec, 0x101, 0x8, 0x2, 0x5}, {0x80000001, 0x9, 0x5da, 0x314, 0x9, 0x1f}, {0x1ff, 0x7, 0x4, 0xffffffc1, 0xfff, 0x2}, {0x400, 0x9, 0xfffffffa, 0x2, 0x8001, 0x2}, {0x7, 0xa6d, 0x9, 0xeaf, 0x0, 0xfffffffa}, {0x672, 0x9, 0x9, 0x9, 0x7, 0x9}, {0xfff, 0x9, 0x8, 0x0, 0x4, 0x5}, {0x101, 0x3, 0x1f, 0x10001, 0x4, 0x4}, {0x67, 0x6, 0x67, 0xff, 0xb33, 0x200}, {0x7, 0x7ff, 0x5, 0x1, 0x7fff, 0x80}, {0x5b4e, 0x100, 0xfffffffe, 0x3, 0x100}, {0x7, 0x9, 0x9f8, 0xfffffffa, 0x6, 0x40}, {0x5, 0x3, 0x7ff, 0x3, 0x1000, 0x5}, {0x80000001, 0x3f, 0x3120f6d2, 0x8}, {0x100, 0x7, 0xd724, 0x5, 0x3, 0x94}, {0x4, 0x7fffffff, 0x8, 0xfffffffb, 0x1, 0x7}, {0x3, 0x2, 0xfff, 0x3, 0x2, 0x2}, {0x2, 0x6, 0x6, 0x5, 0x1, 0xffffffff}, {0x800, 0x1ff, 0x9, 0x8001, 0x5, 0xf6}, {0x8001, 0x5, 0x0, 0x8001, 0x506, 0x6}, {0x9, 0x80, 0x8, 0x100000, 0x3, 0x7}, {0x1ff, 0xeff1, 0x7, 0x7, 0x0, 0x3}, {0x1, 0x10001, 0x8, 0xa50, 0x8001, 0x4}, {0xd4b9, 0x90000000, 0xfffffffe, 0x5, 0x80, 0x1000}, {0x101, 0x5, 0x101, 0x6, 0x0, 0x6}, {0xc40, 0x4, 0x7ff, 0x9, 0x8, 0x7}, {0x6, 0x8, 0x101, 0xb5, 0x4, 0x733d}, {0x1ff, 0x1, 0x69c, 0x4, 0x6, 0x1}, {0x4800000, 0x972, 0xf12, 0x7, 0x7, 0x8}, {0x1f, 0x3b57, 0x400, 0x4, 0x0, 0x81}, {0x80000000, 0x72, 0x3, 0x0, 0x5d, 0x1}, {0xe71, 0x7, 0x6, 0xffffff80, 0x3, 0xfffffff8}, {0x8, 0x3, 0x7, 0x1, 0x2eb0}], [{0x5, 0x1}, {0x2}, {0x4, 0x3}, {0x0, 0x1}, {0x0, 0x3}, {0x1}, {0x3, 0x3}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x2}, {}, {0x1}, {}, {0x4}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x7}, {0x2}, {0x2, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x8, 0x17a35dc72b8c424d}, {0x4, 0x2}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2}, {0x3}, {0x3, 0x1}, {0x0, 0x2}, {}, {0x4}, {0x1}, {0x691b07aa3356b09, 0x1}, {0x5}, {0x4}, {}, {0x0, 0x2}, {0x1}, {0x1, 0x1}, {0x8, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x2}, {0x3}, {0x0, 0xc2b21779692d887c}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0xf}, {0x1, 0x1}, {0x3}, {}, {0x2, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x2, 0x145ebcfde038a002}, {0x4, 0x1}, {0x4, 0x2}, {}, {0x3, 0x1}, {}, {0x2, 0x3}, {}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x5, 0x1}, {0x1}, {0x1}, {0x9, 0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {}, {0x2}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x1}, {0x4}, {0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x1}, {0x5}, {0x2}, {0x3}, {0x5, 0x3}, {0x4}, {0x2}, {0x2, 0x1}, {0x4, 0x93d4b874c6478d76}, {0x5}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x80, 0x3, 0x10000000, 0xf459, 0x9}, 0x6, 0x1, [{0x5, 0x5, 0x3b3, 0x64039b39, 0x874, 0x4}, {0xffffffff, 0x8, 0x130, 0x101, 0x8, 0x3}, {0x5, 0x4, 0x1, 0x7, 0x7785591d, 0x7}, {0x400000, 0x6, 0x200, 0x9, 0x6, 0xfffff73e}, {0x5b3, 0x800, 0x7, 0x6, 0x3f, 0x7}, {0x3, 0x574, 0x3, 0x8, 0x80, 0x8}, {0x1cb, 0x401, 0x8, 0x8000, 0x401, 0x8db4}]}, [{0x54, 0x7ff, 0x8, 0xfffffffa, 0x6, 0x5}, {0x0, 0x1, 0x2801, 0x4ca, 0xffff8001, 0x40000000}, {0x80000000, 0x9, 0x5, 0x1, 0x954, 0x1}, {0x2f, 0x10001, 0xfffffb2b, 0x80000000, 0x5, 0x7}, {0x1000, 0x9, 0x2, 0x2, 0xffffffff, 0x80000000}, {0x9, 0x4, 0x4, 0x7, 0xb8b0, 0x1f}, {0x19, 0x9, 0x3ff, 0x0, 0x3, 0xb7}, {0x1, 0x10001, 0x3f, 0x8, 0x29, 0x800}, {0x3ff, 0xffff12e3, 0x5, 0x0, 0x7, 0x1}, {0x2, 0xbf3e, 0x8, 0x8, 0xe626, 0xfffff3a1}, {0x5, 0xcb2, 0x0, 0x92, 0x8, 0x401}, {0x1ff, 0x7, 0x3, 0x3ff, 0x0, 0x4d3}, {0x8000, 0x7ff, 0x7, 0x29, 0xfffffff9, 0x9}, {0x7ff, 0xf5, 0x4, 0x200, 0x3, 0x2}, {0x4, 0x200, 0x6, 0x5, 0xcbf6, 0x20}, {0x2, 0x5, 0x1ff, 0x4, 0x4, 0x8}, {0x1, 0x4d4afa32, 0x6, 0x3, 0x7, 0x6}, {0x1, 0xdb, 0x7, 0x6, 0x4, 0x6}, {0x3, 0x5, 0x6, 0x4, 0x3, 0x800}, {0x3f, 0x7fffffff, 0x80000000, 0xfffffffd, 0x2120, 0xff}, {0x80000001, 0x4, 0x7, 0xfffffff9, 0x800, 0x1000}, {0x5, 0x2f68fd04, 0x0, 0x4, 0xfffffc00, 0x80000000}, {0x6, 0x5, 0x7, 0x7fff, 0x7ff, 0x8001}, {0x9, 0x400, 0x3, 0xfffffff9, 0x10000}, {0x0, 0x4, 0x9, 0xfff, 0x7, 0x9f}, {0x80000000, 0x5, 0x5, 0x6b, 0x4}, {0x4, 0x2e7d, 0x7, 0x400, 0x4, 0x5}, {0x0, 0x5, 0x9, 0x400, 0x8, 0x22c}, {0x8, 0x1c0000, 0x7, 0x4, 0x7ff, 0x748ff3ec}, {0x6, 0x67333e81, 0x7, 0x1, 0x4, 0x1ff}, {0x8, 0x7, 0x1, 0x81, 0x5, 0xf}, {0x3, 0xff5, 0xef5c, 0xffff832c, 0x0, 0x147}, {0x272, 0x0, 0x10001, 0xffffffff, 0xadae, 0x6}, {0x8001, 0x3, 0x2, 0x7f, 0x8, 0x1}, {0x8, 0xbe1, 0x2, 0x2, 0x5, 0x4}, {0x5, 0x1, 0x6, 0x5, 0x4, 0xffffffff}, {0x4, 0x8, 0x1, 0x3f, 0x9, 0x7fffffff}, {0x40, 0x8, 0x6, 0x4, 0x3, 0x3}, {0x1, 0x0, 0x8001, 0x401, 0x200, 0x30}, {0x4, 0xffffffff, 0x7, 0xf3, 0x9, 0x8}, {0x0, 0x10001, 0x7fffffff, 0xfffff601, 0x3, 0xfffffffa}, {0x5, 0x1f, 0x5, 0x40, 0x7, 0x31ef}, {0x1, 0x0, 0x10001, 0x4, 0x3, 0x1f}, {0x4, 0x3ec4, 0x90, 0x100, 0x6, 0x3ff}, {0x2, 0x9, 0xff, 0x5, 0x7, 0x3ff}, {0x80, 0x5, 0xe, 0xc49, 0xb90}, {0x4, 0xfff, 0x100, 0x10000, 0x1f, 0x6}, {0x10, 0x7, 0xfa4, 0x4, 0x8fd, 0x1}, {0x5, 0x401, 0x5, 0xaeab, 0x100000}, {0x200, 0x5, 0x3ff, 0x40, 0x800, 0x1}, {0x4, 0x4c, 0x1, 0x1000, 0x7f, 0xfffffff8}, {0x4, 0x9, 0x5, 0x45, 0x20, 0x6}, {0xffffff20, 0x6, 0x5, 0x10000, 0x992, 0x9}, {0x1f0e, 0x1, 0x4, 0x7ff, 0x5, 0x1f}, {0xee, 0x6, 0x9, 0x400, 0x6, 0x36f0fa4e}, {0x9, 0x4, 0xff, 0x48, 0xf95, 0x4}, {0x4, 0x1, 0xfffffff7, 0xff, 0x101, 0x12}, {0xffff, 0x1f, 0x9237, 0x6, 0x181d}, {0xd6, 0x8, 0x7, 0x1, 0x1, 0x8}, {0x0, 0x100, 0x3, 0x401, 0x7, 0x6}, {0x401, 0x81, 0x2, 0x20, 0xc9039cc, 0x1000}, {0x977, 0xaa7, 0x0, 0x400, 0x0, 0x251}, {0x1, 0x8, 0x1f, 0x81, 0xbf, 0x30a}, {0x1, 0x4, 0x40, 0x343, 0x80b, 0x2}, {0x0, 0x0, 0x800, 0xfffffffd, 0x2, 0x7ff}, {0x3a77, 0x9, 0x80000001, 0x2, 0x800, 0x7fffffff}, {0x3, 0x4, 0xfffffffd, 0x4, 0x3f, 0x5}, {0xd92, 0x20, 0x3, 0x4, 0x7ff, 0x1}, {0x5, 0x9, 0x7, 0xce3e, 0x40, 0x100}, {0xa5, 0xff, 0x81, 0x8, 0x401, 0x4}, {0x7, 0x0, 0x8001, 0x0, 0x4, 0x5}, {0xa7cd, 0xffff, 0x1f, 0x7, 0x0, 0x200}, {0x3, 0x1ff, 0x4, 0x6, 0x8, 0x9}, {0x5, 0x5, 0x1, 0x9, 0xf043, 0x2}, {0x7ff, 0x7, 0x5, 0x3, 0x4}, {0x2, 0x5, 0xffffffff, 0x800, 0x0, 0xfffffffd}, {0x8aeb, 0x1000, 0x5, 0xece5, 0x6, 0x10001}, {0x0, 0xffffffff, 0x401, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x6, 0xdf24, 0x1ff, 0x2}, {0x25d6, 0x6, 0x5, 0x0, 0x7ff, 0x9}, {0x3, 0xfffffffe, 0x81, 0x3, 0x2, 0xcf3}, {0xc00000, 0x2, 0x10000, 0x0, 0xb1c, 0xf82}, {0xe0d3, 0xfff, 0xfffff8a7, 0x7, 0xffffe000, 0x2}, {0xcc4, 0x4f, 0x3, 0x401}, {0x80, 0x80000000, 0x10001, 0xffff0000, 0x3f, 0x800}, {0x7, 0xfd9, 0x4, 0x4, 0xfff, 0x6}, {0x8, 0x9, 0xff, 0x1e00, 0x2}, {0xe8, 0xfff, 0x1, 0x4, 0x6, 0x9}, {0x9, 0x7, 0x9, 0x8, 0x9, 0x8d6}, {0x9, 0x1, 0xd769ed52, 0x61f4, 0x6, 0x40}, {0x5, 0x8001, 0x200, 0x6d, 0x400, 0x80000001}, {0xc84, 0x0, 0x2, 0x2, 0x2dd1, 0x5}, {0x6, 0x20, 0x101, 0x80, 0x10000, 0x6}, {0x1f, 0x3, 0x2, 0x72, 0x1f, 0x4}, {0x9, 0x6, 0x100, 0x0, 0x7f, 0x1}, {0x4, 0x1, 0x18, 0x80000001, 0x833, 0x9}, {0x0, 0x4f, 0x9, 0x0, 0x2, 0x6}, {0x2, 0x8, 0x1, 0x7, 0x9, 0x3}, {0x6, 0x0, 0x3f73, 0xfffffff8, 0x81, 0x2}, {0x20, 0x7, 0x36a, 0xfffffff7, 0x9, 0xffff}, {0x22, 0x80000001, 0x5494, 0x7, 0x4, 0x7}, {0x0, 0x7fff, 0x200, 0x7fffffff, 0x0, 0x1}, {0x0, 0x1, 0x7, 0x2, 0x99, 0x7}, {0x9, 0xe2bf, 0x0, 0x9, 0xfffffffa, 0x7}, {0x9, 0xe9, 0x4, 0x5, 0x3ff, 0x5}, {0x2, 0x1000, 0x9b5, 0x3, 0xd68, 0x80}, {0x41c, 0x3, 0x101, 0x9, 0x8, 0x1}, {0x9, 0xfffffffa, 0x7ff, 0x7, 0x4, 0x54}, {0x7, 0x10001, 0x3, 0x3ff, 0x3ff, 0x4}, {0x5, 0x400, 0x1, 0x1, 0x4, 0x2}, {0x8, 0x2, 0x1000, 0x6, 0x5, 0x9}, {0x8, 0x322, 0x2, 0x6, 0x3, 0xffffffff}, {0x4, 0x101, 0x3, 0x1, 0x0, 0x7}, {0xc00, 0x8, 0x40, 0x80, 0x4, 0x8000}, {0xfffffffb, 0x21, 0x8, 0x9, 0x5, 0x47f3}, {0x4, 0x2, 0x6, 0x252, 0x1, 0x3}, {0x3f, 0x5, 0xbed8, 0x401, 0x90, 0x3f}, {0x5078, 0x9, 0x6, 0x0, 0x800, 0xe92}, {0x11, 0x9, 0x0, 0xc9, 0x4, 0xc3}, {0x20, 0x7b7, 0x2, 0x3, 0x3, 0x8}, {0xcbf, 0x40, 0x9, 0x1ac7fb8a, 0x1, 0x3}, {0x8001, 0x5, 0x80000001, 0x7895, 0x0, 0x80}, {0x8, 0xc13931b8, 0x8, 0x7, 0x800, 0xc8}, {0x3, 0x80000000, 0x401, 0x10000, 0x1ff, 0xe48}, {0x3ff, 0x6, 0x1, 0x4, 0x5, 0x6e}, {0x4, 0x8, 0x32db9b50, 0x4, 0x8, 0x800}, {0x4, 0x6, 0x0, 0x568, 0x30, 0x8}, {0x5, 0x4cc9, 0x7f, 0xb045, 0x101, 0x1f}], [{0x3, 0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x2}, {0x74a8d44d21b42378, 0x1}, {}, {}, {0x1}, {0x4}, {0xc, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0xa4b150ed0f7243df}, {0x1, 0x1}, {0x1}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x2}, {0x7, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x6c4ab31599520fec}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2}, {0x4}, {0x5, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2}, {0x6}, {}, {}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0xa28abdec363a80f5}, {0x5, 0x1e4de15dafb31443}, {0x2}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x2}, {0x4, 0x2809fe90245d945a}, {0x5, 0x3}, {0x4, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x4}, {0x0, 0x3}, {0x4, 0x2}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x7ccc2056e2d25225}, {}, {0x2, 0x2}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x685fc67ef16bd114}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x3}, {0xb, 0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {}, {0x2, 0xf20440b01d79644f}, {0x3}, {0x2, 0x3b83958806f1ba3b}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x64, 0x5, [@TCA_PEDIT_KEY_EX={0x4c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0x10c, 0x5, [@TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x44, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x247c6d8006cf3535}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, @TCA_PEDIT_KEY_EX={0x54, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x3c, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x6a246bc0b1178fe0}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe98, 0x4, {{{0xfff, 0x6, 0xffffffffffffffff, 0x7, 0x7}, 0x7f, 0x1, [{0x7, 0xad92, 0x8, 0x6, 0xfffffca0, 0x27}, {0x8, 0xffffffff, 0xeb92, 0x6, 0x7e6, 0x9}, {0x4, 0x6, 0x5, 0x83, 0x20, 0x98}, {0x2, 0x9, 0x0, 0x2, 0x1, 0x7fffffff}, {0x7, 0x2, 0x9, 0xffff, 0x9, 0x6}]}, [{0x0, 0xbe, 0x1db80000, 0x5, 0x490, 0x2}, {0xfffffffe, 0x10000, 0x6, 0x4, 0x30, 0x101}, {0x4, 0x8, 0x9, 0x1000, 0x80, 0x9}, {0xcf6, 0x3, 0x1, 0x800, 0x2, 0x401}, {0x401, 0x6fc50720, 0x5, 0x6, 0xffff0000, 0x1}, {0x81, 0x7f, 0x101, 0xffffffc0, 0xffff, 0x2}, {0x9, 0xfffffffd, 0x2ec, 0x8, 0x8, 0x137f329f}, {0x4, 0x6532, 0x3, 0x4, 0x0, 0x6}, {0x0, 0x9, 0x81, 0x2e1, 0x8, 0x4}, {0x4, 0x4, 0x914, 0x2, 0x9}, {0x6, 0x7, 0x800, 0x3f, 0x400, 0x4}, {0x85, 0xffffff9f, 0x6, 0x1, 0x200, 0xf669}, {0x4, 0x10000, 0x99d, 0x36, 0x400, 0x3}, {0x7, 0x80000, 0xda, 0x101, 0x100, 0x8}, {0x7, 0x7, 0x100, 0x1}, {0x4, 0x100, 0x3f, 0x101, 0x3, 0x8001}, {0x2, 0x4, 0x3ff, 0x10001, 0x5, 0x2}, {0x0, 0xf5, 0x100, 0x2, 0xffff, 0x80000000}, {0x7ff, 0x7fffffff, 0xa0, 0x800, 0x0, 0x3}, {0x8, 0xf2, 0x3, 0x8, 0x963, 0x3}, {0x68, 0x401, 0x0, 0xb856, 0xfffffffc, 0x10000}, {0x4, 0x80, 0x4, 0x5, 0x80, 0x200}, {0xffffffff, 0x800, 0x0, 0x8000, 0xad, 0xcd52}, {0x85a5, 0x10001, 0x81, 0x1}, {0xc0db, 0x1, 0x0, 0xba9}, {0x80000001, 0x7f, 0xd7, 0x8, 0x1, 0x8001}, {0x0, 0x101, 0x58d2, 0x800, 0x1000, 0xffff0000}, {0x1, 0x6, 0x7, 0x9, 0xffffffe0, 0x5}, {0x10001, 0xfffffffa, 0x9, 0xfffffffc, 0x6, 0x8}, {0x32, 0x40, 0xfffffff8, 0x5, 0x80000001, 0xffff}, {0x6, 0x80, 0xfffffffe, 0x0, 0x9, 0x9}, {0x400000, 0x5, 0x2, 0xef300, 0x2, 0x9}, {0x2eae, 0x441, 0xde, 0x101, 0xfffffffe, 0x5f5}, {0xfdd0, 0x3, 0x2, 0x1, 0x8}, {0x3, 0x3ff, 0x9, 0x100, 0xb2, 0x8}, {0x400, 0x6, 0x9, 0x7, 0x5, 0xe1a}, {0x0, 0x3, 0x5, 0x8, 0x1, 0xa2f}, {0x1f, 0x8, 0x9, 0x1000, 0x8, 0xfffffeff}, {0x2, 0x101, 0x5, 0x9, 0x81, 0x6}, {0x10000, 0x1, 0xffffff81, 0x1, 0x1, 0x5b}, {0x0, 0x400, 0xffff0001, 0x7fffffff, 0x3f, 0xffff}, {0x80000000, 0x0, 0x3, 0xfffff801, 0x0, 0x2}, {0x1, 0x7, 0x0, 0x200, 0x2, 0x7}, {0xffff, 0x4, 0x9, 0x1, 0x80000000, 0x3d31f5}, {0x1ff, 0x2, 0x8, 0x5, 0x2, 0x5}, {0x9, 0x8, 0xdc4, 0x267b, 0x200, 0x8}, {0x9, 0x7, 0x2fd, 0x2, 0x0, 0x5}, {0x0, 0x3, 0x2, 0x8, 0x100, 0x7}, {0x9, 0x6, 0x81, 0xffff, 0x0, 0xffffffff}, {0xf87, 0x5, 0x2, 0x988, 0x7, 0x7fff}, {0x0, 0x4, 0x96a, 0x9031, 0x1, 0xfffffff7}, {0x400, 0x2, 0x99d6, 0x9, 0x2, 0x8}, {0x8000, 0x1, 0x4, 0x0, 0x1ff, 0x3d0}, {0x3, 0x915, 0xfffffff8, 0x3, 0x1000000, 0x81}, {0x62e2ca6c, 0x49, 0x10000, 0x7fffffff, 0xaa, 0x3f}, {0x3f, 0x7fff, 0xff, 0x20, 0x2, 0x2}, {0x65, 0x8, 0x5, 0xfffffffd, 0x6}, {0x80, 0x7fff, 0xfffffff7, 0x1, 0x7fff, 0x4}, {0x6, 0x7067, 0x7, 0x9, 0x3}, {0x38, 0x1ff, 0x9, 0x10000, 0x3, 0x101}, {0x9, 0x9, 0x8, 0x8, 0x0, 0x1ff}, {0x7fffffff, 0x5, 0x8000, 0xb05d, 0x101, 0x9}, {0x7, 0xff, 0xdb, 0x100, 0x8, 0x7}, {0x9, 0x81, 0x80, 0x3ff, 0xffffffff, 0x4}, {0x6f4, 0x9, 0x8, 0x200, 0x6, 0x401}, {0x2b0fcfb4, 0x3f, 0x0, 0x0, 0xd9, 0x3}, {0x1, 0x9, 0x1000, 0x8, 0x1}, {0x3, 0x401, 0x0, 0x200, 0x0, 0x5}, {0x4, 0xfffffff9, 0xfed000, 0x2, 0x40, 0x5}, {0x6, 0x75, 0x0, 0x7, 0x1, 0x9}, {0x8, 0x400, 0x9, 0xff, 0x0, 0x1}, {0x158a, 0x7, 0x3ff, 0x9, 0x2, 0x3}, {0x8, 0x7fffffff, 0x5, 0x1, 0x6, 0xc7}, {0x10000, 0x8, 0x7fff, 0xaf47, 0x724, 0xffff4b11}, {0x40, 0x3, 0x6, 0x1000, 0x7fff, 0x7}, {0x13012816, 0x3ff, 0x0, 0x32, 0xfff}, {0x1, 0x8, 0x5, 0xd, 0x20, 0x4a}, {0x2, 0x7fff, 0x8, 0x80000000, 0x7, 0x3}, {0x5, 0x9, 0x10000, 0x81, 0x1ff, 0x9}, {0x827, 0x7fff, 0xffffffff, 0x1, 0x3, 0xb35a}, {0x5a49, 0x8000, 0x0, 0xfffffff7, 0x4, 0x1}, {0xfff, 0x101, 0x7fff, 0x9, 0x4}, {0x1f, 0xe0, 0x1, 0x4, 0xfffffffc}, {0x10001, 0xffff, 0x2, 0x7, 0x3, 0xfffff001}, {0x4, 0x2, 0x1000, 0x8001, 0x9, 0xfffff001}, {0x5, 0x7, 0xc3, 0xf0d7, 0x7, 0x1000}, {0x8, 0x7f, 0x2, 0xfff, 0x7, 0x7fffffff}, {0xe6a, 0x8687, 0xfff, 0x0, 0x6, 0x71}, {0x4, 0xfffffffa, 0x9, 0xdc, 0x8, 0x9}, {0x7f, 0xd0, 0x20, 0x784c, 0x3, 0x9}, {0x9, 0x1f, 0x53ab74e3, 0x2, 0x5, 0x3}, {0x5, 0x7, 0x9, 0x1, 0x80000001, 0x7}, {0xa520, 0xffffffff, 0x0, 0xfffffffc, 0x10534c38, 0x7}, {0x3, 0x3, 0x3ff, 0x40004000, 0x0, 0x401}, {0x6699, 0x800, 0x1, 0x0, 0x9, 0x3}, {0x8cd, 0x7ff, 0x5, 0x200, 0x3cc4, 0x1}, {0x36c3c73c, 0x8, 0x8001, 0x1c0, 0x4980, 0xaad9}, {0x3, 0xf6, 0x81, 0x80, 0xfffffe01, 0x7ff}, {0x2a7, 0xc3, 0xd576597, 0x4226, 0x8, 0xb538}, {0x71c, 0x90, 0x0, 0x8, 0x1f, 0x368d2cb4}, {0x3, 0x7, 0x1, 0xffffff63, 0x1, 0x10001}, {0x1c, 0x6ad, 0xfffffe01, 0x800, 0x2}, {0xff, 0x6, 0x447, 0x7, 0x38, 0x7f}, {0x6, 0x7, 0x80, 0x4, 0x1, 0x9}, {0x8, 0x7f, 0x5, 0xfffffff7, 0x4}, {0xe6, 0x4, 0x6, 0x7, 0x1, 0x7}, {0x400, 0x0, 0x8001, 0xba, 0x80000001, 0x4c}, {0x80, 0x4, 0x1ff, 0x1fda697a, 0x2, 0x1}, {0xfff, 0x7, 0x101, 0xff, 0x4, 0x6cf447bf}, {0x9, 0x91, 0x200, 0x80000001, 0x1, 0x8}, {0xbd, 0x800, 0x8000, 0x2, 0x8, 0x4}, {0x9be, 0x2, 0x2, 0x58d, 0x7f, 0x1073}, {0x3, 0x10000, 0x5, 0x7, 0x3f, 0x8}, {0x80000001, 0x2c, 0x400, 0x8, 0x8, 0x1b}, {0x6, 0x101, 0xfffff8b8, 0x698, 0x0, 0x7158}, {0x991, 0x0, 0x8, 0x10001, 0xa1, 0x1f}, {0xff000000, 0x7fff, 0x8000, 0xffffffff, 0xfffffffa, 0x80000001}, {0xae5f, 0x3, 0x8000, 0xa15, 0x69b, 0x7fff}, {0x1, 0x3, 0x7, 0x800, 0x7, 0xc0000000}, {0x3, 0x1ff, 0x4, 0x1, 0x9, 0x78b2}, {0x8, 0x5, 0x3e5d, 0xffffff81, 0x1, 0x7ff}, {0x3, 0x101, 0x400, 0x5, 0x7, 0x1f}, {0x8, 0x10001, 0x1ff, 0xffffffe1, 0x40, 0x4}, {0x3, 0x7, 0x0, 0x2, 0x9, 0x4}, {0x9, 0x1, 0x2, 0x0, 0x1, 0x9}, {0x101, 0x9, 0x200, 0x6, 0xffff951d, 0x5}, {0xfffffffd, 0x6, 0x2, 0x1ff, 0x0, 0x12}, {0x2, 0x9, 0x2, 0x200, 0x11, 0x2}], [{0x2}, {0x2}, {0x2}, {0x3}, {0x1}, {0x2}, {0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x9f0f25d05de81675}, {0x1}, {0x2}, {0x4, 0x3}, {0x4, 0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4}, {}, {0x2}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x3}, {0x1}, {0xc3e5b2ecb8594870, 0x2}, {0x1}, {0xea24cb6a386a2a9e}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x0, 0x1}, {0x4}, {0x5, 0x3}, {}, {0x2}, {0x4da973da51f4f7c6, 0x1}, {0x3}, {0x7, 0x1}, {0x0, 0x2}, {}, {0x1}, {0x2}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0xf3f8242f8e3a7d47}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x2, 0xb1f97cb467130c69}, {0x0, 0x3}, {}, {0x3}, {0x3, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x2}, {0x2, 0x2}, {0x4}, {0x2}, {0x1}, {0x2}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0xe, 0x1}, {}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x68f5ddf8d94f212}, {}, {0x0, 0x1}, {0x1}, {0x5}, {0x2}, {0x5}, {0x5, 0x52dbceb05e2ce2e1}, {0x5}, {0x0, 0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x3}, {0x3}, {0x1}, {0xfd7491f3abb50188}, {0x5}, {0x5}, {0x1}, {0x5}, {0x2}, {0x3}, {0x4}, {0x0, 0x1}, {0x4, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x4}, {0x4}, {0x3}]}}, @TCA_PEDIT_KEYS_EX={0xe4, 0x5, [@TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0x24, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, @TCA_PEDIT_KEY_EX={0x14, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, @TCA_PEDIT_KEY_EX={0xc, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, @TCA_PEDIT_KEY_EX={0x34, 0x6, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x99671596a4331b7d}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, @TCA_PEDIT_KEY_EX={0x1c, 0x6, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}, @TCA_PEDIT_PARMS_EX={0xe80, 0x4, {{{0x800, 0x2, 0x0, 0x40, 0x1}, 0x1, 0x8, [{0x1, 0x7, 0x3f, 0x0, 0xffffffff, 0x2}, {0x8, 0x4, 0x9, 0x9, 0x0, 0x10000}, {0x31d6, 0x6, 0x1f, 0x2, 0x2, 0x8}, {0x0, 0x8, 0x45f9, 0x7, 0x5, 0x3adf}]}, [{0x401, 0xefa, 0x404, 0x8, 0x9, 0x200}, {0x3ff, 0x3, 0x8, 0x80000001, 0x0, 0x1}, {0x0, 0x6, 0xfffffffb, 0x40, 0x0, 0x9}, {0x3, 0x5, 0xf0, 0x5, 0x4, 0x4}, {0x9, 0x10000, 0x6, 0x8, 0x4, 0x80000001}, {0xffffffff, 0x8, 0x800, 0xfffffede, 0x10000, 0xffff}, {0xfffffc49, 0x5, 0x7fff, 0x1, 0x8}, {0x9, 0x9, 0x7f, 0x3ff, 0xfffffff8, 0x5ff9}, {0x7, 0x81, 0x3ff, 0xfffffc01, 0x7, 0x1f}, {0x3, 0x0, 0x3, 0x9, 0x2, 0x40}, {0xfffffffe, 0x4, 0xb90, 0xfffffffc, 0x0, 0xffffffff}, {0x2, 0xffffffff, 0x7, 0x1, 0x38, 0x3}, {0x2f, 0x6, 0x401, 0x1, 0x3ff, 0x24}, {0x459e, 0x94dc, 0xffffffff, 0x8, 0x7f, 0x8}, {0x79ae, 0x8, 0xffffffff, 0x7fff, 0x9}, {0x7f, 0x396, 0x8, 0x5, 0x484d, 0xfffffffe}, {0x3, 0x9, 0x4, 0x5, 0x6, 0x80}, {0x3ff, 0x8, 0xffffff63, 0x1, 0x1, 0x1ff}, {0xe1, 0x2, 0x8000, 0x8, 0x2, 0x4}, {0x4, 0x1, 0x358ab856, 0x9, 0x9, 0x8}, {0x1, 0x8, 0x6, 0xffffffe0, 0x5ed4794f}, {0x6, 0x1, 0x4, 0xcd, 0x81, 0xc7}, {0x3, 0x1, 0x81, 0x80000001, 0xc30, 0x3}, {0x1f, 0xba1, 0x43742a0, 0x80000001, 0x200, 0x4}, {0x1ff, 0x8, 0x7, 0x0, 0x9, 0x2}, {0x2, 0x6, 0x101, 0x1, 0xffff288d}, {0x4, 0x1, 0x80, 0x111, 0x20000, 0x20}, {0x6, 0xc65, 0xfff, 0x9, 0x3ff, 0x6}, {0x6, 0x6, 0xfffffff7, 0x6cc, 0x0, 0xc9a}, {0x3ff, 0x7, 0x5, 0x3b, 0x4, 0x61f}, {0x0, 0x8001, 0x9, 0x9, 0x9}, {0x401, 0x80000001, 0x100, 0x3, 0x0, 0x81}, {0x10001, 0x20, 0x9, 0xf40, 0xbc1, 0x6}, {0x8f08, 0x1, 0x63, 0x3, 0x100, 0x1}, {0x4, 0x3, 0x9, 0x7f2, 0x8, 0x4}, {0x893b, 0x9, 0xff, 0x200, 0x7}, {0x4, 0x7, 0x200, 0x40000000, 0x400, 0x2}, {0x2, 0xde, 0x9, 0x4, 0x3, 0x9}, {0x8, 0x0, 0x2, 0x0, 0x5, 0x6}, {0x5, 0x10000, 0x0, 0x0, 0x0, 0x1}, {0xffffff81, 0x400, 0x9, 0x4, 0x6, 0x3}, {0x12ce, 0x10, 0x49fbe084, 0x200, 0x2, 0x2}, {0x1, 0x80000001, 0x2, 0x40000, 0xf0f, 0x5}, {0x4, 0xfffffffb, 0x6, 0x9}, {0x400, 0xffffffe1, 0x4, 0x4, 0x0, 0x7ff}, {0x3, 0x5, 0x1000, 0x2b1, 0x3, 0x8001}, {0x0, 0x1, 0xff, 0x1, 0x5, 0x81}, {0x4, 0x8, 0x9, 0x5, 0x0, 0x2}, {0x6, 0x1f, 0x7, 0xfffff850, 0x6, 0x7}, {0x1, 0xa8, 0x0, 0x2, 0x10001}, {0x8001, 0x7ff, 0x4a43a5bb, 0x2, 0x3, 0x4}, {0x1ff, 0x0, 0x80000000, 0x7fff, 0x5, 0x1}, {0x5e8, 0x3, 0xc88, 0x0, 0x7, 0x1}, {0x5, 0xffffba02, 0x7, 0xffffffff, 0xdbd, 0x6}, {0x8, 0x8000, 0x1, 0x8, 0x2, 0x3}, {0x6, 0x3e4a, 0x7f, 0x8001, 0x0, 0x2}, {0x0, 0x820, 0x401, 0x7, 0x8000, 0x5}, {0xfffffffb, 0xffffffff, 0x9, 0x1, 0x101, 0x3}, {0x8, 0x80000001, 0x41e, 0x9, 0x9d9, 0x1000}, {0x9, 0x800000, 0x8000, 0xfffffff9, 0xa72f}, {0x1, 0x4, 0x6, 0x2e, 0xaaf, 0x8000}, {0xea8, 0x6, 0x2, 0xffff, 0x8, 0x1}, {0x80000001, 0x868, 0x5, 0x7, 0x3ff, 0x4}, {0xcf4f, 0x80000000, 0x1000, 0x4, 0xc2bb, 0x1}, {0x3, 0xfffffff7, 0x6, 0xd9ed, 0x9, 0xd99}, {0x6, 0x20, 0x143, 0x2, 0xca, 0x4}, {0x0, 0x7, 0x2, 0x67, 0xc0}, {0xfffffffa, 0x1, 0x1, 0x7c, 0x5, 0x1}, {0x7a, 0x40, 0x40, 0x200, 0x5}, {0x3, 0x4010, 0xfffffbff, 0x0, 0x1ff, 0x1}, {0x0, 0x7, 0x0, 0x2282, 0x421c, 0x5}, {0x4, 0x8, 0x5, 0x7ff, 0x7, 0x1000}, {0x1000, 0x9c1, 0x3, 0x4, 0x7, 0x5}, {0x971, 0x7fffffff, 0x3ff, 0x0, 0x2}, {0x3, 0x47, 0xa8dd, 0xecc5, 0x100, 0x3}, {0x6, 0x2, 0x8000000, 0x1, 0x3, 0xa00000}, {0x8, 0x401, 0x4, 0xda29, 0x4, 0x81}, {0x80000000, 0x5, 0x2, 0x3, 0xbdc7, 0x2}, {0x426, 0x5, 0x1, 0x2, 0x2, 0x8}, {0x5, 0x6fec, 0x200, 0x9, 0xba, 0x8}, {0xfb7, 0xfb, 0x69, 0x8, 0x56, 0x9}, {0x5, 0x10000, 0x77ce4ca3, 0x8000, 0x28, 0x1000000}, {0x80, 0x800, 0xa8, 0x9, 0x1, 0x1d1}, {0xa463, 0x1, 0x1000, 0x5, 0xf52, 0x8}, {0x80000000, 0x1, 0x80000000, 0xffffffff, 0x20, 0x3}, {0x100, 0x8, 0x2d, 0x0, 0x40, 0x3}, {0x7, 0x9, 0x0, 0x24000000, 0xffffffff, 0x99}, {0x9, 0x2, 0x7, 0x9, 0x80000000}, {0x7ff, 0x1f, 0x1f, 0xbca8, 0xb83, 0x7}, {0x4, 0x688, 0xfffffffa, 0x40, 0x5, 0x80}, {0x7fff, 0x1, 0x40, 0x9, 0x9}, {0x1, 0x81d0, 0x1000, 0x4, 0x10000, 0x5}, {0x7, 0x681, 0x81, 0x8001, 0xffff, 0x8000}, {0x3, 0x3, 0x200, 0x10000, 0x6f, 0x8221}, {0x3, 0x4, 0xaafa, 0x16, 0x80, 0xffff}, {0x1, 0xbf16, 0x200, 0x9, 0x2, 0x7f}, {0x6, 0x6, 0x3, 0x5, 0x1, 0x5}, {0x4, 0x200, 0x9, 0x4d, 0x3, 0x9}, {0x40, 0x3999d847, 0x1, 0x8, 0x200, 0x3}, {0x10000, 0x5, 0x4, 0x1f, 0x6, 0x3}, {0x1ff, 0x0, 0x40, 0x1, 0xffff, 0x5}, {0x8, 0x7, 0x375, 0x101, 0x400, 0xe091f2d3}, {0x1, 0x1ff, 0x4, 0xfffffffc, 0x10001, 0xfff}, {0x9, 0x1ff, 0x2, 0x0, 0x1, 0x1}, {0x5, 0x6, 0x9, 0x7, 0xfffffff7, 0x1}, {0x656, 0x5, 0x7fff, 0x4, 0x305, 0x6}, {0x4, 0x48c, 0x3ff, 0x5, 0x8, 0x800}, {0x2, 0x5, 0x5, 0x2, 0x6, 0x3}, {0x113a598, 0x7, 0x9, 0x51, 0x7fffffff, 0x8}, {0x2, 0x7, 0x200, 0x6, 0x5, 0xc39}, {0x8, 0x2, 0xcb, 0x1ff, 0x84, 0xa8}, {0x8, 0x2, 0x9, 0x7f, 0x7}, {0x2, 0x7f, 0x2c5, 0x2, 0x3, 0xb33}, {0x8, 0x1, 0x6, 0x8000, 0x7, 0x1781}, {0x9, 0x9, 0x5, 0x1, 0x2, 0xffff7fff}, {0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0xa69}, {0xffffffff, 0x8, 0x1f, 0x4, 0xed51, 0x1}, {0x2, 0x2, 0x4, 0x0, 0x577, 0x9}, {0x6, 0x1, 0x4, 0x0, 0x2, 0x7}, {0x2e73, 0x20000000, 0x8, 0x1, 0x6, 0x5}, {0x0, 0xffff, 0x2, 0x426c, 0x9, 0x100}, {0x67e, 0x4, 0x3, 0x1f, 0xfff, 0x9}, {0x80000000, 0x2, 0x3ff, 0x1000, 0x200, 0x4}, {0x0, 0x800, 0x4, 0x2, 0x9, 0xfff}, {0x7fffffff, 0xaf3c, 0x81, 0x7fff, 0x7fff, 0x9}, {0x0, 0xcb, 0x0, 0x4, 0x9, 0x7}, {0x400, 0x1f, 0x1f, 0x81, 0x3, 0x2}, {0x4, 0x6, 0x6, 0x9, 0x9, 0x2}], [{0x5, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3, 0xc5abcbb160f4f274}, {0x0, 0x3}, {0x0, 0x3}, {0x3}, {0x0, 0x1}, {0x5, 0x3}, {0x3, 0x1}, {0x3}, {0x1, 0x2}, {0x5}, {0xdaa7c06558980157, 0x1}, {0x4}, {0x8, 0x1}, {0x0, 0x1}, {0x5, 0xb16c99a9e7bb7b2}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x5}, {0x4, 0x1}, {0x8, 0x1}, {0xda41a3c375844848, 0x1}, {0x2}, {0xf355d7eceba4c605}, {0x4, 0x1}, {}, {0x1}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {}, {0x5}, {0xc9b3dd17155b5688, 0x2}, {0x3, 0x2}, {}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x2}, {}, {0x4}, {0x2}, {0x2}, {}, {0x0, 0x1}, {0xd, 0x1}, {0x1}, {0x5}, {0x5}, {}, {0x5, 0x1}, {0x2, 0x38f8b88465788974}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x1}, {0x4}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x3}, {0xa212789f49b7c473}, {0x3}, {0x1}, {}, {0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x2c62de7ff6f4e99e}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x1, 0x2}, {0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0xe4c25ab5ac1b845e}, {0x6, 0x1}, {0x2}, {0x5}, {}, {0x3}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5, 0x2}, {0xc}, {0x5}, {0x3, 0x1}, {0x5}], 0x1}}]}, {0x14, 0x6, "100fa2b8ebeebea0c4fb8d47ec96a0dc"}}}}, @TCA_CGROUP_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x8, 0x4, 0x400, {0x3, 0x0, 0x9, 0x200, 0x2, 0x1f}, {0x1, 0x3, 0x3, 0x81, 0xb7ce, 0x2a42}, 0x2, 0x6b3e, 0x6}}}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x7f, 0xf0c, 0x81, 0x89ff, 0xf38, 0x200, 0xfff, 0x7f, 0x8, 0x2, 0x9, 0xfffffff7, 0x2, 0x0, 0xfffffff8, 0xfffffffa, 0x408b, 0x6, 0x1f, 0x1, 0x2, 0x20, 0x100, 0x3, 0xff, 0xfffffffb, 0x7, 0xfff, 0xfffffac7, 0x0, 0xda, 0x6, 0x101, 0xfe27, 0x10000, 0x7, 0x0, 0x8, 0x80, 0x0, 0xffffffff, 0x7ff, 0x1, 0x9, 0x7ff, 0x7d5, 0x1, 0x2, 0x401, 0x6, 0x9, 0xa51, 0x74, 0x10000, 0x0, 0x8, 0x7ff, 0x200, 0x5, 0x7fff, 0x6, 0x39b, 0x800, 0x10000, 0xfff, 0x3, 0x3f, 0x20, 0xc3c0, 0x3f, 0x1f, 0x3, 0x5, 0x9, 0x7, 0x7fff, 0xfffffff7, 0x84f4, 0xe8, 0xfffffbff, 0x1, 0x400, 0x1, 0xff, 0x7f, 0x9, 0x7, 0x1f, 0x271, 0x8, 0x0, 0x8001, 0x8000, 0x2, 0x8000, 0x8, 0x1, 0x2, 0x3, 0x4, 0x80000001, 0x0, 0x59c8, 0x8000, 0x400, 0x6, 0x7f, 0x5, 0x0, 0x8, 0x8, 0xffff, 0x8000, 0xffffff81, 0x10001, 0x2, 0xffffffc1, 0xac, 0x6, 0xffffffff, 0x1ff, 0xffffffff, 0x1, 0x3ff, 0x8, 0x100, 0x6, 0x7, 0x4, 0x6, 0x3, 0x0, 0x0, 0x3, 0x1, 0x0, 0x4, 0x5, 0x9, 0xfffffffd, 0xd697, 0x3, 0x3, 0x800, 0x4, 0x21cd, 0x4, 0x2, 0x100, 0x20, 0x1ff, 0x78000000, 0x0, 0xff, 0x10000, 0x7, 0x80000001, 0x0, 0x0, 0xffff, 0x8001, 0x1, 0x7, 0x80, 0x4, 0x9, 0x139, 0x1, 0x1f, 0x9, 0xfffffff9, 0x3, 0x1, 0x10000, 0x1, 0x0, 0x6, 0x1, 0xdf, 0x6, 0x7, 0x0, 0x6, 0xc0, 0x7, 0x0, 0x4, 0x6, 0x1, 0x12fe437, 0x172b, 0x2, 0x2, 0x3, 0x5, 0x401, 0x100, 0x1d, 0x1ff, 0x8, 0x2, 0x6, 0x7ff, 0xffffdcfa, 0x75, 0xe3a, 0x1, 0xfc, 0x8, 0xffffff81, 0x244d, 0x3, 0x2, 0x400, 0x7, 0x71f8, 0x3, 0x5, 0x1, 0x80000000, 0xe5, 0xfffffff8, 0xdee, 0x3, 0x1, 0x1000, 0x9, 0x4, 0xffff0000, 0x7f, 0x1, 0xfff, 0xb1a, 0x76, 0x9, 0x5802, 0x5c5, 0x20, 0x81, 0xfffffffb, 0x9, 0x7, 0x80, 0xbf, 0x200, 0x81, 0x800, 0x20000000, 0x0, 0x6, 0x1, 0x8, 0x3, 0x1, 0x1, 0x5]}}, @TCA_CGROUP_POLICE={0x10, 0x2, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}}, @TCA_CGROUP_POLICE={0x10, 0x2, @TCA_POLICE_RATE64={0xc, 0x8, 0xf8b}}, @TCA_CGROUP_POLICE={0x408, 0x2, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x1f, 0x800000, 0x7, 0xffff, 0x401, 0x9048, 0x20, 0x401, 0x8000, 0x8, 0x5, 0xe7eb, 0x8000, 0x8, 0x80000001, 0x8000, 0x7fff, 0xffff, 0x7, 0x2, 0x6, 0x717a, 0x1f, 0x0, 0x2, 0x1, 0x8000, 0xfffffffd, 0x0, 0x80000001, 0x5, 0xdf1a, 0x401, 0x6, 0x6, 0x3, 0x6, 0x1, 0x0, 0x4, 0x1, 0x0, 0x9, 0x8, 0x100, 0x8000, 0x4, 0x88a7, 0xffffff62, 0x9, 0x8000, 0xfff, 0xff, 0x4, 0x217aca3c, 0xd03, 0xd28, 0x3, 0x4, 0x1, 0x3e30, 0x4, 0x44, 0x3, 0x5, 0xf39, 0x6, 0x3ff, 0xffff8000, 0x6, 0x7, 0x800, 0x7f, 0x0, 0x401, 0x4, 0x3, 0x7, 0x1, 0x0, 0x7, 0x5, 0x3, 0x1f, 0x80, 0x0, 0x5c0c, 0x8, 0xc484, 0x0, 0x7f, 0x2, 0x101, 0x8, 0x3ff, 0x3, 0x87, 0x5, 0xffffffe0, 0x0, 0xf4cc, 0x1, 0x83a, 0x200, 0x5, 0x7ff, 0x85, 0x20, 0x81, 0x2, 0x0, 0x83, 0x2, 0xdff2, 0x1616, 0x8, 0x5, 0x7, 0x0, 0xffffd620, 0x5, 0x8, 0x0, 0x10001, 0x8, 0x0, 0x8000, 0x7a, 0x52, 0x177d0000, 0x80, 0x80, 0x4, 0x0, 0x9, 0x9, 0xd3, 0xffff10ca, 0x83, 0x200, 0x5, 0x9cd7, 0xa780, 0xf7, 0x6, 0xffffef3e, 0x0, 0x3, 0x5, 0x1, 0x800, 0x1, 0x9, 0x12000, 0xfff, 0xffffffff, 0x3, 0xd90bcf1b, 0x7, 0x80, 0x7, 0x93d5, 0x4, 0x1f, 0x4, 0xdad, 0x800, 0x0, 0xffffffff, 0x4, 0x8, 0x26ea8040, 0x10000, 0xb7, 0x1, 0x3, 0x6, 0x0, 0x7fff, 0x5, 0x9, 0x2, 0x0, 0x7, 0x200, 0x4, 0x8, 0x6, 0x5, 0x102000, 0x3, 0x6, 0x10000, 0xd6, 0xf3dc, 0xff, 0x2, 0x2, 0x8001, 0x1000, 0x2, 0x8001, 0x8000, 0xa9, 0x7, 0x1ff, 0x1, 0xd93, 0xc8e9, 0xf2356, 0x101, 0x3, 0x9, 0x3, 0xc489, 0x7, 0xcee, 0x2, 0x5, 0x7d5, 0x7f, 0xf821, 0x5, 0x10001, 0x9, 0x12b9, 0x4, 0xfffffffb, 0xfff, 0x8, 0x6cbb, 0x1e, 0x8, 0x6, 0xfffffffd, 0xb536, 0x101, 0xae11, 0xa130, 0x2, 0x1ff, 0xfffffff8, 0x1, 0x3ff, 0x401, 0x800, 0x8, 0x2, 0x3, 0x9, 0x0, 0x9, 0x5, 0x9ed6, 0x9]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x3ff}, @TCA_RATE={0x6, 0x5, {0x1f, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3f}}, @TCA_CHAIN={0x8, 0xb, 0x6574}]}, 0x56a8}, 0x1, 0x0, 0x0, 0x80c1}, 0x8000)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={<r6=>0x0, 0x2}, &(0x7f0000000280)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000002c0)={r6, 0x9}, &(0x7f0000000300)=0x8)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:19 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r0, &(0x7f0000000240)="db40951195b65329", 0x8)
r1 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)="121dc12dba1d7f577fdd9694c0b7cbcc0dd99507bca159544d36d865b0db1fd319d45b85fe72ff54be8a9f0f5dd57fb432206d6c493fcd65188003d94c29f668415700551d580e5c56727a", 0x4b, 0xfffffffffffffffa)
r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f00000002c0)="f5", 0x1, 0xfffffffffffffffe)
keyctl$update(0x2, r3, &(0x7f0000000240)="db40951195b65329", 0x8)
r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
add_key$user(0x0, 0x0, &(0x7f0000000680)="038a8b9a8ef8fe3f12d4f572599573845b6bdb5fd5d97e0555e85bf097a19634d69a40f3004452098847757261e5152970aba6cc2c3f10296f0600000002623d0c6f7f8a1a0430a5303168bebed69e7bf278b62e75a0dfb36f8ca4ee0218fc898aa111afd212b4a61324ed13df464eb36a8c4b7e6470ad4743fbb44a0568b2c6ecc761af7c4901acce5ebe5808d3dd2845", 0x91, r4)
r5 = request_key(&(0x7f0000001280)='syzkaller\x00', &(0x7f00000012c0)={'syz', 0x1}, &(0x7f0000001300)='syz', 0xfffffffffffffffa)
r6 = add_key$user(&(0x7f00000003c0)='user\x00', &(0x7f0000001340)={'syz'}, &(0x7f00000000c0), 0x0, r5)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r6, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r2, r6}, &(0x7f0000000240)=""/4096, 0x1000, &(0x7f0000001240)={&(0x7f0000000180)={'rmd160-generic\x00'}})

[  904.960121] net_ratelimit: 12 callbacks suppressed
[  904.960126] protocol 88fb is buggy, dev hsr_slave_0
[  904.970206] protocol 88fb is buggy, dev hsr_slave_1
04:55:19 executing program 0:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$UHID_INPUT2(r0, &(0x7f0000000080)={0xc, {0x1b, "4ef93049c752d99ec042b872b03a92273fc205a92f0687671d5c28"}}, 0x21)
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="7796672cb9e57949b959e4bdbf9ca58900d5607a38938f1177c53951c67c1d2a21035a2dbfb1b9309e4553ec22ac50ddf798574ada762fb6da1f7f8b808fd006aff569cbf78e75e53169475e952d11c6852b2c7f80f45b0c53a6a994a87683b066dcd5ac6caf1ed8926b0950d41f8d57c041ad64e8fcadf29829e4f01f78d1e32931f6ad78"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))

04:55:19 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r1 = socket$rds(0x15, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000000c0)="8c5fcf3e52bc86954e5ebba09eda6c7be6aea18385348b193a9ea05a6b13daadc1ee1f3bea53ea71ca79e7333684ee34e07ed0baaa122cfbd0f26796a30a91e4de38e016c1c715f840be0e22721f7d4677eeef91999af10b65556a662131453804ba738f19a3f7d94b100f2d2fd2648a92814380b3d9d70ffebe21b791b6f357e5271ea0ff", 0x85, r1}, 0x68)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4)

04:55:19 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCCBRK(r2, 0x5428)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  905.200136] protocol 88fb is buggy, dev hsr_slave_0
[  905.205255] protocol 88fb is buggy, dev hsr_slave_1
04:55:19 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r1, 0xc080661a, &(0x7f0000000080)={{0x2, 0x0, @reserved="1e25ef35b37a1d99fde35018ac6696876117dad892adc675ded6f142dce95554"}})
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:20 executing program 4:
r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000600)='/proc/self/net/pfkey\x00', 0x101000, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000002780)={0x1, @bcast, @bpq0='bpq0\x00', 0x8, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8000, 0x8, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000400)={r3, @in={{0x2, 0x4e24, @rand_addr=0x3ff}}}, &(0x7f00000004c0)=0x84)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
sendto$unix(r5, &(0x7f0000000340)="c563d209e232dcdc92ff7464c42d133f33d7b32c7c50250566251b3f626f148020099f782aac38d066ec3e4f52e2c46dfac4d004213587cf0d46", 0x3a, 0x40818, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000240))
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r3, @in6={{0xa, 0x4e23, 0x80000000, @empty, 0xffffff00}}}, &(0x7f0000000140)=0x84)
ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000280)=""/146)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

04:55:20 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="da"], 0x1)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x22)
r3 = getpid()
sched_setscheduler(r3, 0x5, &(0x7f0000000380))
r4 = syz_open_procfs(r3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r6=>0x0, <r7=>0x0})
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYPTR64, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r6, @ANYRES64=r7/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776a3eb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd", @ANYRES32=r8, @ANYRES16], 0x8}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080d1)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@ipv4={[], [], @broadcast}, @in=@broadcast, 0x4e22, 0x3, 0x4e24, 0xffff, 0xa, 0x0, 0x180, 0x73, r5, r10}, {0x100000001, 0xfff, 0x7900000000000000, 0x401, 0x200000000000, 0x1, 0x786a, 0x1f}, {0x59, 0xfffffffffffffffd, 0xfff, 0x800}, 0x2, 0x6e6bb1, 0x1, 0x1, 0x1, 0x1}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in6=@local, 0x0, 0x1, 0x3, 0x81, 0x6, 0x48, 0x5}}, 0xe8)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000240)="42c602b453311859422c07d18ef92c3084d19bc5660c1cb5292779d3f5d5485214ecce079a63f9e509da2a23b2a39e79a237cfab6ae66352121aa83aa15266639035e0a193aa7225335e8171d81883284fedce61dd977707bd65a0f752588151e050ba049c4eeece516a5e9b593844420530cfa3c7b0dfdb35362db1f63eb579912a03b88000deb62b2d88283939e50536253297e5bcaa2d8d891092fc230fb4844d9d2008374becf6a64e3764e5a5d2a046b830312374bad624", 0xba, 0xa0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000000, 0x4011, 0xffffffffffffffff, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

[  905.520107] protocol 88fb is buggy, dev hsr_slave_0
[  905.525262] protocol 88fb is buggy, dev hsr_slave_1
04:55:20 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r5 = syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x10000)
readahead(r5, 0x7fffffff, 0x400)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  906.081487] protocol 88fb is buggy, dev hsr_slave_0
[  906.086647] protocol 88fb is buggy, dev hsr_slave_1
[  906.091819] protocol 88fb is buggy, dev hsr_slave_0
[  906.096886] protocol 88fb is buggy, dev hsr_slave_1
04:55:21 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f00000000c0)=0xb700)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:21 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x14, &(0x7f0000000640)={r2}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @multicast1}}, [0xfff, 0x7ff, 0x2, 0xe4c, 0x7fffffff, 0x4, 0x8, 0x6, 0xfffffffffffffffd, 0x3, 0x1000, 0xfffffffffffffffe, 0x2, 0x9, 0x1]}, &(0x7f0000000380)=0x100)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
read$eventfd(r3, &(0x7f0000000240), 0x8)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=<r5=>0x0)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000000c0)={{{@in6=@mcast2, @in6=@mcast1, 0x4e20, 0x20, 0x4e23, 0x200, 0x2, 0x120, 0x20, 0x9f, 0x0, r5}, {0xc0f1, 0x1, 0x100, 0xce2, 0x8, 0x1ff, 0xff, 0x1ff}, {0xffffffffffffffff, 0x20, 0x7f, 0x8}, 0x22, 0x6e6bb2, 0x1, 0x1, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x2, @in=@multicast1, 0x0, 0x4, 0x878e9e1eb2ec3795, 0x40, 0x0, 0x3f, 0x3}}, 0xe8)

04:55:21 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000180)={0x50, 0x0, 0x4, 0x4000, 0x33c3e263, {0x0, 0x2710}, {0x5, 0x2, 0x23, 0x7f, 0x1f, 0x8, "205cff76"}, 0x100, 0x4, @planes=&(0x7f0000000080)={0x726, 0x7e, @mem_offset=0xaf5, 0x80000000}, 0x101, 0x0, <r4=>r3})
ioctl$FBIOGET_CON2FBMAP(r4, 0x460f, &(0x7f00000000c0)={0x18})

04:55:21 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/246, 0xf6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000000c0)=0x9)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:21 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x200000)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000080)={'gre0\x00', {0x2, 0x4e24, @multicast1}})

04:55:21 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
r2 = creat(0x0, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f0000000240)={0x0, 0x3, [0x7fff, 0x5, 0x0, 0x6, 0x1, 0x2, 0x8, 0x401]})
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000000c0)={<r3=>0x0})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000100)={r3, 0x40000, r1})
perf_event_open(&(0x7f0000000280)={0x5, 0xfffffffffffffd73, 0x81, 0x7f, 0x1, 0xff, 0x0, 0x4, 0x40228, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000440), 0x8}, 0x2440, 0x100000000, 0x7, 0x0, 0x3, 0x10000, 0x5}, 0x0, 0xe, 0xffffffffffffffff, 0x5)
r4 = getpid()
sched_setscheduler(r4, 0x5, &(0x7f0000000380))
wait4(r4, &(0x7f0000000140), 0x80000004, &(0x7f0000000180))
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, <r6=>0x0, 0x8})
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000000640)={0x1, 0x2, 0x1000, 0xe2, &(0x7f0000000480)="84e1b2425b925cdd65fe2669408a6bac6f56ad2bb4cc1f6b8f8e18b783609c139b6b9e688d6f1f7c6cb1d8d05215b012b73ba3ca9a3fa1d85b91642d01d22bf5af131428b8d1bbac25ca66f41c48549be08f8ab06f15bc2a9239e7d94e3dadbc40a3a94a1ba6864fce3aa1527c55e34b958173fdba2c41f5830b9a54e930b4bdd5b11e14ab6e7c55e0d68fbf6a8bff0135c13f44138378f24f1624237d2e4893d5a2cfe003b3c32ee8404887ca986f2e7b2f2897080308464b3defe2c8840d2ab6487309565cecef09ca999007201246a1e960f242e2729ca4aafceff66718c49af5", 0xc0, 0x0, &(0x7f0000000580)="a1f8b01e2c4009469d3c5580a1921ed668af9a1e07f43a16363f4287a138ad369801027b944e8cfb6dec3103bc3e2480acc8b98d957d11563813bdace520a55fd3cba0a50f02ccff87390613c3098d02bc8548d75ddea0b6c798d7230a0eed4e4b815d78d47630188ed667364d4b4eab226baeb916b176e56752e336f16420fff2b747bb9e2fea24c0e6154afa863e6dac86bff6fcfd099d97673aad7154060e752322cbbf6e5d4f64019621fcc269a26e14eb31e314c23595fdbc4011f537cf"})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f0000000080)={r6, 0x80000})
ioctl$DRM_IOCTL_GET_MAGIC(r5, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
r8 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-monitor\x00', 0x300, 0x0)
ioctl$SIOCRSACCEPT(r8, 0x89e3)
r9 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x7fff, 0x2000)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r9, 0xc058534b, &(0x7f00000003c0)={0x6, 0x3f, 0x1000, 0x9, 0x10001, 0x20})

04:55:21 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=r8, @ANYRESOCT=r0, @ANYRES16=r2, @ANYRES16=r2, @ANYRES32=r4, @ANYBLOB="3606834eed86d3409fcfb3483fa11618c307ee3bb6ad247191b6e4085936b8bc7d466db9b68e1f976461e629fff4af658d90cf4205c654ac44b97ee727613754ed532087f536c3ec1eb97ce79fa9cc31c9f3c926", @ANYPTR64=&(0x7f0000000180)=ANY=[@ANYRESOCT=r5, @ANYRES16=r1, @ANYRESDEC=r5], @ANYRESHEX, @ANYRES64=r7]], 0x9)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:21 executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(0xffffffffffffffff, 0x80046402, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
creat(0x0, 0x0)
lseek(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r2, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r4, @ANYRES64=r5/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb1d252d6651b204c}, 0xc, &(0x7f0000000500)={&(0x7f0000000080)=@delchain={0x46c, 0x65, 0x8, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0x1001f}, {0xffff, 0xf}, {0x5, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x30, 0x1f}}, @TCA_RATE={0x6, 0x5, {0x7, 0x63}}, @filter_kind_options=@f_route={{0xa, 0x1, 'route\x00'}, {0x14, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0x6}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xec}]}}, @TCA_CHAIN={0x8, 0xb, 0xfff}, @filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x2a4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'vlan1\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'veth1_virt_wifi\x00'}, @TCA_FW_ACT={0x128, 0x4, @m_bpf={0x124, 0x1e, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0xd0, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x6, 0x8, 0x4, 0x22e5}}, @TCA_ACT_BPF_OPS={0x4c, 0x4, [{0x0, 0x5, 0x6, 0x80}, {0x2, 0x40, 0x7f}, {0xff, 0x3, 0x5, 0x1}, {0xffc0, 0x8, 0x3f, 0x8000}, {0x0, 0xd2, 0x20, 0x4}, {0x4, 0x8, 0x1f, 0x7}, {0x6, 0x7, 0x73, 0x1}, {0x2, 0x8, 0x3, 0xfff}, {0xd95a, 0x2, 0x1, 0x7fff}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4, 0x6, 0x1, 0x1f, 0xbeba}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9, 0x1, 0x3, 0x80000000, 0x4}}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x1000, 0x5, 0x0, 0xff}, {0x2, 0x6, 0x1f, 0x2}, {0x5, 0xd0, 0x6, 0xfff}]}, @TCA_ACT_BPF_OPS={0x1c, 0x4, [{0x7, 0x1c, 0x40, 0x2}, {0x100, 0x90, 0x5, 0x3}, {0x61, 0x0, 0x0, 0x1ff}]}]}, {0x46, 0x6, "fa62e9fa354a41bf6fa3dab58004e3f08b42106d341994f46138bd74c20ff15df5529e6d0b7d09f7641781a162677a3ff80066a25a2446c478f673a85694d04d4d60"}}}}, @TCA_FW_MASK={0x8}, @TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_ACT={0x74, 0x4, @m_tunnel_key={0x70, 0x1e, 0x0, 0x0, {{0xf, 0x1, 'tunnel_key\x00'}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x4, 0x5, 0x5, 0x7}, 0x2}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x100, 0x1, 0x8, 0x3, 0x43f}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, [], 0x29}}]}, {0xc, 0x6, "f8198514af8549f7"}}}}, @TCA_FW_POLICE={0xc, 0x2, @TCA_POLICE_AVRATE={0x8}}, @TCA_FW_MASK={0x8, 0x5, 0xffff}, @TCA_FW_POLICE={0x40, 0x2, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xfffffffffffffff3, 0x5, 0x80000001, 0x80, {0x5, 0x0, 0xfe, 0x4e, 0x3, 0x7}, {0x5f, 0x0, 0x42, 0x0, 0x8000, 0x1}, 0x0, 0x48000000, 0x7d}}}, @TCA_FW_ACT={0x6c, 0x4, @m_mpls={0x68, 0x20, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xf05c9}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f7}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x90c8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6003}, @TCA_MPLS_TC={0x5}, @TCA_MPLS_TTL={0x5, 0x7, 0x13}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88a2}, @TCA_MPLS_LABEL={0x8, 0x5, 0xfdb9a}]}, {0xb, 0x6, "2bc92ad165a20a"}}}}]}}, @filter_kind_options=@f_flower={{0xb, 0x1, 'flower\x00'}, {0x158, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e24}, @TCA_FLOWER_KEY_ICMPV4_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @empty}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x6, 0x5c, 0x7}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffff00}, @TCA_FLOWER_ACT={0x10c, 0x3, @m_skbedit={0x108, 0xd, 0x0, 0x0, {{0xc, 0x1, 'skbedit\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xa1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xffff}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0xffffffc1, 0x10000000, 0x1, 0x3ba}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0xaa, 0x6, "2a7d39baa742f06437e85139fe62a91f9056d27fe46d61aab509941ee5756013fd66523b7353927d7562ac1069cf60c8f449a8b0b798cb3e177247bb648ca11bf6b546ec540d28ed8e89e42d23452b29eaa24d44c15fe82d4e2e46d484ff9274db0582abceee7af783b3bc0980af75f8c9647f4bb136cc70437e3c4596caf84b12c2daa66d76131b89d542a4ab78b514caade6f29f1696b34681f0264395fe147ab293158a16"}}}}, @TCA_FLOWER_KEY_PORT_DST_MIN={0x6, 0x59, 0x4e24}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x7}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

04:55:21 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x80000, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x4, 0x1, 0x4, 0x70bd2c, 0x25dfdbfb, {0xc, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240800c0}, 0x800)
r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x100, 0x121000)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40040100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x4, 0x6, 0x51888e3e9603ecd5, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000a0f3}, 0xe78ec6d3ee10f5a9)
fchdir(r3)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:21 executing program 0:
r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX], 0x12)
r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7, 0x5e6830b43e868158)
ioctl$TIOCCONS(r2, 0x541d)
r3 = socket$inet(0x2, 0x3, 0x2)
ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f00000000c0)={0x1, 0x0, 0x18, 0x1f, 0x1f0, &(0x7f0000000380)})
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FICLONE(r3, 0x40049409, r2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r1, 0x0)
ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040))

04:55:21 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$nl_netfilter(r0, &(0x7f0000000440)={0x0, 0x12, &(0x7f0000000040)={&(0x7f0000000100)={0x268, 0x1, 0x5, 0x401, 0x0, 0x0, {0x0, 0xf0ffff}, [@typed={0x254, 0x100000001}]}, 0x268}}, 0x0)

04:55:21 executing program 0:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000080))
r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0)
r2 = memfd_create(&(0x7f0000000100)='\xc2=\x9cx\x14\xd8\xd1\xfc\xc6M\xdc\x92<LHi\xe7\xef\x8c[\x1ec\x16\x1108\xd7\xd7\x10\xf7808y\xc1\xc7\xb9t\xc8\xba\xc1\xc1R\xbbkc\xf2]\x84ki\"\x93\xe0O\xc0\\Iz\xe2\x80|\xa1\x14\x00'/80, 0x0)
write$binfmt_elf32(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f"], 0x1)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x4011, r2, 0x0)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000000c0)={0x0, 0x39, 0x1000}, 0x0, &(0x7f0000000180)="81fc802717b53b99b22cc0d5019ae06f98a7ac37add3db72b42a7ddbd02f19fdd4491ecd8ef9bba207bf07b6aa0354ebddbe0914c69215c684", &(0x7f0000000240)=""/4096)
ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000040))

04:55:21 executing program 0:

04:55:22 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x26140, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000080)={0x5a, 0x2, 0x2})

04:55:22 executing program 1:

04:55:22 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000000c0)=0x80000001)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:22 executing program 0:

04:55:22 executing program 1:

04:55:22 executing program 0:

04:55:22 executing program 1:

04:55:22 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x8000000201a7fe3, 0x0, 0x7, 0x61}]}, &(0x7f0000000080)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)

04:55:22 executing program 1:
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400))
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, 0x0)

04:55:22 executing program 4:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4100, 0x0)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000080)=0x7)
r1 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x8000, 0x600882)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2000003}, [@alu={0x8000000201a7fe3, 0x0, 0x200003e6, 0x61}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x78)

04:55:22 executing program 0:
r0 = socket(0xa, 0x3, 0xfe)
recvmmsg(r0, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2020, 0x0)

04:55:22 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = getpid()
process_vm_writev(r2, &(0x7f0000000400)=[{&(0x7f0000000040)=""/62, 0x3e}, {&(0x7f0000000200)=""/246, 0xf6}], 0x2, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/81, 0x51}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)=""/96, 0x60}, {&(0x7f0000000600)=""/216, 0xd8}], 0x4, 0x0)

04:55:22 executing program 4:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000040))

04:55:22 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = getpid()
getgid()
socket(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0)
tkill(r2, 0x9)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r5 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10)

[  908.047330] syz-executor.1: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  908.083046] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[  908.102031] CPU: 1 PID: 14896 Comm: syz-executor.1 Not tainted 4.14.163-syzkaller #0
[  908.109962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  908.119322] Call Trace:
[  908.121928]  dump_stack+0x142/0x197
[  908.125577]  warn_alloc.cold+0x96/0x1af
[  908.129570]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  908.134432]  ? wait_for_completion+0x420/0x420
[  908.139033]  __alloc_pages_slowpath+0x23c6/0x2930
[  908.143904]  ? warn_alloc+0xf0/0xf0
[  908.147546]  ? __might_sleep+0x93/0xb0
[  908.151444]  __alloc_pages_nodemask+0x62c/0x7a0
[  908.156122]  ? rcu_read_lock_sched_held+0x110/0x130
[  908.161149]  ? __alloc_pages_slowpath+0x2930/0x2930
[  908.166185]  alloc_pages_current+0xec/0x1e0
[  908.170518]  kvm_mmu_create+0xdf/0x1e0
[  908.174420]  kvm_arch_vcpu_init+0x29c/0x8e0
[  908.178754]  kvm_vcpu_init+0x272/0x360
[  908.182655]  vmx_create_vcpu+0xfc/0x2aa0
[  908.186725]  ? mutex_trylock+0x1c0/0x1c0
[  908.190802]  ? handle_rdmsr+0x6e0/0x6e0
[  908.194796]  ? wait_for_completion+0x420/0x420
[  908.199401]  kvm_arch_vcpu_create+0x8c/0xc0
[  908.203732]  kvm_vm_ioctl+0x501/0x1600
[  908.207626]  ? __lock_acquire+0x5f7/0x4620
[  908.211873]  ? kvm_vcpu_release+0xa0/0xa0
[  908.216030]  ? trace_hardirqs_on+0x10/0x10
[  908.220280]  ? trace_hardirqs_on+0x10/0x10
[  908.224521]  ? __might_fault+0x110/0x1d0
[  908.228587]  ? save_trace+0x290/0x290
[  908.232394]  ? __might_fault+0x110/0x1d0
[  908.236459]  ? __fget+0x210/0x370
[  908.239947]  ? find_held_lock+0x35/0x130
[  908.244015]  ? __fget+0x210/0x370
[  908.247476]  ? kvm_vcpu_release+0xa0/0xa0
[  908.251631]  do_vfs_ioctl+0x7ae/0x1060
[  908.255533]  ? selinux_file_mprotect+0x5d0/0x5d0
[  908.260295]  ? lock_downgrade+0x740/0x740
[  908.264454]  ? ioctl_preallocate+0x1c0/0x1c0
[  908.268874]  ? __fget+0x237/0x370
[  908.272342]  ? security_file_ioctl+0x89/0xb0
[  908.276763]  SyS_ioctl+0x8f/0xc0
[  908.280132]  ? do_vfs_ioctl+0x1060/0x1060
[  908.284295]  do_syscall_64+0x1e8/0x640
[  908.288186]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  908.293045]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  908.298235] RIP: 0033:0x45af49
[  908.301423] RSP: 002b:00007fda2b816c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  908.309157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  908.316434] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  908.323707] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  908.330982] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fda2b8176d4
[  908.338255] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
04:55:23 executing program 5:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={<r2=>0x0, 0x3ff, 0x3, 0x2}, &(0x7f0000000100)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x7, 0x1, 0x1, 0x4, 0xfffffe01, 0x5c, 0x1, r2}, 0x20)
pipe(&(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r6, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r4, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r10=>0x0, <r11=>0x0})
sendmsg$can_bcm(r8, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r9}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r10, @ANYRES64=r11/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd000000000000000000"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0x0, 0xd7a, 0x77, 0x1, 0x40, r6, 0x1f5d, [], r9, 0xffffffffffffffff, 0x3, 0x5}, 0x3c)
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10)
setsockopt$ARPT_SO_SET_REPLACE(r12, 0x0, 0x60, &(0x7f0000000880)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000001804000000000000200200000000000030030000300300003003000004000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB="00000000000000000000ffe9000000000000000000000000ebff000000000000000000000000000000000000000000000000008000"/64], @ANYBLOB="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"], 0x3)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffff9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0x2}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r1, &(0x7f00000002c0)={0x2, 0x22, @multicast1}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r3, 0x0, r7, 0x0, 0x30005, 0x0)

04:55:23 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000000000000000000000000000200630100000000000095800000a469b4ed"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x45)

[  908.408688] warn_alloc_show_mem: 1 callbacks suppressed
[  908.415520] Mem-Info:
[  908.417952] active_anon:859777 inactive_anon:1746 isolated_anon:0
[  908.417952]  active_file:4478 inactive_file:5739 isolated_file:0
[  908.417952]  unevictable:0 dirty:182 writeback:0 unstable:0
[  908.417952]  slab_reclaimable:15691 slab_unreclaimable:127270
[  908.417952]  mapped:60165 shmem:1791 pagetables:27918 bounce:0
[  908.417952]  free:476114 free_pcp:277 free_cma:0
[  908.488843] Node 0 active_anon:1882108kB inactive_anon:6900kB active_file:64kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:55:23 executing program 4:

[  908.609937] Node 1 active_anon:1556900kB inactive_anon:84kB active_file:17848kB inactive_file:22956kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25652kB dirty:724kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:55:23 executing program 4:

[  908.678947] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:55:23 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x7, &(0x7f0000b86000)={0x0, 0x0}, 0x10)

[  908.764314] lowmem_reserve[]: 0 2569 2569 2569 2569
[  908.782091] Node 0 DMA32 free:36324kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:64kB inactive_file:0kB unevictable:0kB writepending:4kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:256kB local_pcp:236kB free_cma:0kB
04:55:23 executing program 4:
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a7", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x3, 0x0, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000080)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000400))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[  908.843199] lowmem_reserve[]: 0 0 0 0 0
[  908.848696] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  908.905230] lowmem_reserve[]: 0 0 0 0 0
[  908.912241] Node 1 Normal free:1857604kB min:53508kB low:66884kB high:80260kB active_anon:1557100kB inactive_anon:84kB active_file:17848kB inactive_file:22956kB unevictable:0kB writepending:724kB present:3932160kB managed:3870192kB mlocked:0kB kernel_stack:20448kB pagetables:47192kB bounce:0kB free_pcp:1076kB local_pcp:440kB free_cma:0kB
[  908.949574] lowmem_reserve[]: 0 0 0 0 0
[  908.953757] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 19*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10480kB
[  908.973708] Node 0 DMA32: 41*4kB (UMEH) 677*8kB (UMEH) 890*16kB (UMEH) 516*32kB (UE) 1*64kB (E) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36396kB
[  908.988314] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  909.003026] Node 1 Normal: 51*4kB (UE) 62*8kB (UME) 34*16kB (UE) 58*32kB (UME) 42*64kB (UM) 1*128kB (M) 1*256kB (U) 1*512kB (M) 1*1024kB (E) 3*2048kB (UME) 450*4096kB (M) = 1857052kB
[  909.019902] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  909.034985] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  909.054859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  909.105185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  909.107574] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  909.131771] 12015 total pagecache pages
[  909.170559] syz-executor.4 cpuset=syz4 mems_allowed=0-1
[  909.187367] 0 pages in swap cache
[  909.194524] CPU: 0 PID: 14940 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0
[  909.199650] Swap cache stats: add 0, delete 0, find 0/0
[  909.202430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  909.202434] Call Trace:
[  909.202450]  dump_stack+0x142/0x197
[  909.202465]  warn_alloc.cold+0x96/0x1af
[  909.202475]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  909.202495]  ? wait_for_completion+0x420/0x420
[  909.202509]  __alloc_pages_slowpath+0x23c6/0x2930
[  909.202532]  ? warn_alloc+0xf0/0xf0
[  909.202552]  ? __might_sleep+0x93/0xb0
[  909.202565]  __alloc_pages_nodemask+0x62c/0x7a0
[  909.202578]  ? rcu_read_lock_sched_held+0x110/0x130
[  909.202589]  ? __alloc_pages_slowpath+0x2930/0x2930
[  909.202613]  alloc_pages_current+0xec/0x1e0
[  909.225349] Free swap  = 0kB
[  909.227479]  kvm_mmu_create+0xdf/0x1e0
[  909.227495]  kvm_arch_vcpu_init+0x29c/0x8e0
[  909.227507]  kvm_vcpu_init+0x272/0x360
[  909.227521]  vmx_create_vcpu+0xfc/0x2aa0
[  909.287359]  ? mutex_trylock+0x1c0/0x1c0
[  909.291413]  ? handle_rdmsr+0x6e0/0x6e0
[  909.295384]  ? wait_for_completion+0x420/0x420
[  909.299952]  kvm_arch_vcpu_create+0x8c/0xc0
[  909.304269]  kvm_vm_ioctl+0x501/0x1600
[  909.308149]  ? __lock_acquire+0x5f7/0x4620
[  909.312369]  ? kvm_vcpu_release+0xa0/0xa0
[  909.316497]  ? trace_hardirqs_on+0x10/0x10
[  909.320719]  ? trace_hardirqs_on+0x10/0x10
[  909.324937]  ? __might_fault+0x110/0x1d0
[  909.328982]  ? save_trace+0x290/0x290
[  909.332910]  ? __might_fault+0x110/0x1d0
[  909.336986]  ? __fget+0x210/0x370
[  909.340435]  ? find_held_lock+0x35/0x130
[  909.344484]  ? __fget+0x210/0x370
[  909.347923]  ? kvm_vcpu_release+0xa0/0xa0
[  909.352068]  do_vfs_ioctl+0x7ae/0x1060
[  909.355947]  ? selinux_file_mprotect+0x5d0/0x5d0
[  909.360683]  ? lock_downgrade+0x740/0x740
[  909.364817]  ? ioctl_preallocate+0x1c0/0x1c0
[  909.369220]  ? __fget+0x237/0x370
[  909.372660]  ? security_file_ioctl+0x89/0xb0
[  909.377058]  SyS_ioctl+0x8f/0xc0
[  909.380413]  ? do_vfs_ioctl+0x1060/0x1060
[  909.384551]  do_syscall_64+0x1e8/0x640
[  909.388432]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  909.393264]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  909.398438] RIP: 0033:0x45af49
[  909.401611] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  909.409302] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  909.416554] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  909.423813] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  909.431064] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4
[  909.438315] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  909.449715] Total swap = 0kB
[  909.464312] 1965979 pages RAM
[  909.474827] 0 pages HighMem/MovableOnly
[  909.490961] 335871 pages reserved
[  909.523158] 0 pages cma reserved
[  909.542058] Mem-Info:
[  909.545000] active_anon:859780 inactive_anon:1746 isolated_anon:0
[  909.545000]  active_file:4472 inactive_file:5746 isolated_file:6
[  909.545000]  unevictable:0 dirty:18 writeback:20 unstable:0
[  909.545000]  slab_reclaimable:15726 slab_unreclaimable:127405
[  909.545000]  mapped:60165 shmem:1791 pagetables:27908 bounce:0
[  909.545000]  free:475988 free_pcp:399 free_cma:0
[  909.632714] Node 0 active_anon:1882108kB inactive_anon:6900kB active_file:40kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):24kB mapped:215108kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:55:24 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
mlockall(0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900ffff0016000000a6ec7e053c87475c0000000c7d88000000140c44124bd8f878e638f8cb7002bee923aee78e58ddc76efbc7ae2d90bf0ea86e72d74898118fc7afce53bdd1dceaba2d46f741ca9b17c465d35b73179c138a340e8eef128d47d309620ab2ac897a9a52310f7c12a900670baee261c3a942e0efa85ebf56a1b07a6a9536defb634e8f92d6a0c730f248ea53fb"], 0x14}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

04:55:24 executing program 0:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x4340100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r2 = getpid()
getgid()
socket(0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
ioctl$BLKBSZGET(0xffffffffffffffff, 0x80041270, 0x0)
tkill(r2, 0x9)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x4000010000000013, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r5 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x2f)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10)

[  909.661269] Node 1 active_anon:1556888kB inactive_anon:80kB active_file:17848kB inactive_file:23004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:25584kB dirty:68kB writeback:68kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  909.690412] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  909.717017] lowmem_reserve[]: 0 2569 2569 2569 2569
04:55:24 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x43445b68da41ef8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000240), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VFIO_IOMMU_GET_INFO(r5, 0x3b70, &(0x7f0000000200)={0x18, 0x0, 0x0, 0xee})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  909.722137] Node 0 DMA32 free:36420kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6900kB active_file:40kB inactive_file:4kB unevictable:0kB writepending:8kB present:3129332kB managed:2634332kB mlocked:0kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:396kB local_pcp:152kB free_cma:0kB
[  909.755039] lowmem_reserve[]: 0 0 0 0 0
[  909.759070] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  909.853224] lowmem_reserve[]: 0 0 0 0 0
[  909.864380] Node 1 Normal free:1855944kB min:53508kB low:66884kB high:80260kB active_anon:1557188kB inactive_anon:80kB active_file:16948kB inactive_file:23204kB unevictable:1000kB writepending:248kB present:3932160kB managed:3870192kB mlocked:1000kB kernel_stack:20480kB pagetables:47136kB bounce:0kB free_pcp:740kB local_pcp:448kB free_cma:0kB
04:55:24 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7, <r2=>0x0, 0x1, 0x100000001})
ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000080)={0x200, r2})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid'}}, {@debug={'debug', 0x3d, 0x9}}, {@access_any='access=any'}, {@mmap='mmap'}, {@msize={'msize', 0x3d, 0x52}}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@fsname={'fsname', 0x3d, '/dev/dri/card#\x00'}}]}})

04:55:24 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x101000)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x200300, 0x0)
write$P9_ROPEN(r1, &(0x7f0000000080)={0x1a9, 0x71, 0x1, {{0x71cd7af1695c7b8f, 0x3, 0x4}, 0x7}}, 0xe75c)

[  910.018720] lowmem_reserve[]: 0 0 0 0 0
[  910.032098] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 19*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10480kB
[  910.095002] Node 0 DMA32: 32*4kB (UMEH) 675*8kB (UMH) 887*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36104kB
[  910.141818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  910.186471] Node 1 Normal: 91*4kB (UE) 176*8kB (UE) 73*16kB (UM) 67*32kB (UE) 43*64kB (UME) 2*128kB (UM) 0*256kB 1*512kB (M) 2*1024kB (UE) 1*2048kB (E) 445*4096kB (M) = 1835420kB
04:55:24 executing program 3:
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000002580)={0x401, 0x2}, 0xc)
syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x200, 0x9, &(0x7f0000002400)=[{&(0x7f00000000c0)="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", 0x1000, 0x80000001}, {&(0x7f00000010c0)="fcd4ecaab5e9a3191f02903d4eaeb7d599b2", 0x12, 0xfbd}, {&(0x7f0000001100)="9e168197e1ae91575bec086d13e80b09e4e916795e82e928687ffbf228491d1676f483a12dec37c503c413c4a34095e7d1d8d35fd5e91d53470aac131638933381debbdb685d73607445c6affa2d0264646f90f2ee39e48a55192b887d1500ee6207b3c3790737734c05119e7a436afcab619cd4bc866ed9d813a1a7a8c66d9889d865083d460b3616af83113d097cdc83bf5bc9ca3d7e29b204242b9d2125d22bba95b1fb6d70033a92a9bb3201fada2bf9d01efc1f5d2f9f4152", 0xbb, 0x7f}, {&(0x7f00000011c0)="84ffd12bec", 0x5, 0x4}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000002200)="19953ad11c38948abbf01ca4a454a9a39be7f33a800edbea81d5e3d1d2aaec302f8f27efc8a004251e1de6b429db7361f46561e6213f2884c242688b6a6c8c0ffebe5cc83374c89704b6e412dbd9", 0x4e, 0x1}, {&(0x7f0000002280)="5e447492b83ac650c9954ed70253b94e64cfe098bd3b4495cb81300f8c372d6316e3b51a842996aba9e05f0ae814204a5f98d90a584ae7d42972", 0x3a, 0x2}, {&(0x7f00000022c0)="8b49c4dd95e2b9d1c1b55e5f6be80871c0f3105e7e85e3f3aa90ca486636fb569ea96f9abf18476ffd310b2de3f70dad4fb48fd1fa7ac1b268ef20bce259e28de72f35295229584fec3b146b05030f5e0d830fc5d34387986692486b109e935f2ad60b31ad0a99e551a622860487dc2d2de8fb2de83c79ddd5f6aa146896fc8f3fb0e1a2d93ccf0e", 0x88, 0x3579}, {&(0x7f0000002380)="6717979b81216f9f885ec1e249ecddb7c8664e8c31e2404c0a3c4c98fe643432906569ea380c2ec07cbe3c8e5426a36459914f06109b6dd4f205748a7e09fc3aa515680be24f60922268eefaf85dcf9355c690eef382666ef284ae913fa75a1b624f93c66026b6bf4f89f14e762814f0aebca8ead823bede45d1bb52beaef746", 0x80, 0x6}], 0x402, &(0x7f0000002500)={[{@ikeep='ikeep'}, {@inode64='inode64'}, {@noquota='noquota'}, {@usrquota='usrquota'}], [{@appraise_type='appraise_type=imasig'}, {@smackfshat={'smackfshat', 0x3d, '/dev/dri/card#\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '/dev/dri/card#\x00'}}, {@measure='measure'}]})
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000025c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={'rose', 0x0}, 0x1, 'syz0\x00', @default, 0x0, 0x2, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, 0x0)

[  910.266295] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  910.292704] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  910.314933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  910.333594] XFS (loop3): unknown mount option [appraise_type=imasig].
[  910.338807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  910.364604] 15886 total pagecache pages
[  910.377139] 0 pages in swap cache
[  910.385262] Swap cache stats: add 0, delete 0, find 0/0
[  910.398310] XFS (loop3): unknown mount option [appraise_type=imasig].
[  910.401915] Free swap  = 0kB
[  910.410113] net_ratelimit: 12 callbacks suppressed
[  910.410119] protocol 88fb is buggy, dev hsr_slave_0
[  910.420198] protocol 88fb is buggy, dev hsr_slave_1
[  910.425322] protocol 88fb is buggy, dev hsr_slave_0
[  910.430414] protocol 88fb is buggy, dev hsr_slave_1
[  910.439983] Total swap = 0kB
[  910.443855] 1965979 pages RAM
[  910.453940] 0 pages HighMem/MovableOnly
[  910.462536] 335871 pages reserved
04:55:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, <r2=>0x0, 0x4})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000080)={r2})

[  910.486065] 0 pages cma reserved
04:55:25 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
mlockall(0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x0, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900ffff0016000000a6ec7e053c87475c0000000c7d88000000140c44124bd8f878e638f8cb7002bee923aee78e58ddc76efbc7ae2d90bf0ea86e72d74898118fc7afce53bdd1dceaba2d46f741ca9b17c465d35b73179c138a340e8eef128d47d309620ab2ac897a9a52310f7c12a900670baee261c3a942e0efa85ebf56a1b0"], 0x1}}, 0x0)
socket$alg(0x26, 0x5, 0x0)

04:55:25 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2)

04:55:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)
r1 = creat(0x0, 0x162)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
getpeername$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c)

04:55:25 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'ip6gre0\x00', 0x1}, 0x18)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_team\x00', <r5=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x88400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="59dd9162", @ANYRES16=0x0, @ANYBLOB="3e012bbd7000fddbdf251500000008000300", @ANYRES32=r5, @ANYBLOB="0a001a00ffffffffffff00000800010002000000"], 0x30}}, 0x80)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x9)
splice(r6, &(0x7f0000000140)=0x8000, r7, &(0x7f0000000340), 0x3, 0x5)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:25 executing program 4:
syz_emit_ethernet(0x7a, &(0x7f00000000c0)={@random="47fc4d3fbc4a", @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "e2c38b", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0)

04:55:25 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

04:55:25 executing program 4:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
write$binfmt_script(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x417)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
sendto$inet(r0, &(0x7f0000000200)="0c268a927f1f6588b967481241ba7860005c", 0xffffffffffffff11, 0x11, 0x0, 0xda)

04:55:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffc, 0xa6e8445838d564cb)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

[  910.886318] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  910.933177] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  910.965775] CPU: 1 PID: 15000 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  910.973742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  910.983106] Call Trace:
[  910.985706]  dump_stack+0x142/0x197
[  910.989348]  warn_alloc.cold+0x96/0x1af
[  910.993331]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  910.998190]  ? wait_for_completion+0x420/0x420
[  911.002787]  __alloc_pages_slowpath+0x23c6/0x2930
[  911.007651]  ? warn_alloc+0xf0/0xf0
[  911.011296]  ? __might_sleep+0x93/0xb0
[  911.015241]  __alloc_pages_nodemask+0x62c/0x7a0
[  911.019924]  ? rcu_read_lock_sched_held+0x110/0x130
[  911.024954]  ? __alloc_pages_slowpath+0x2930/0x2930
[  911.030001]  alloc_pages_current+0xec/0x1e0
[  911.034333]  kvm_mmu_create+0xdf/0x1e0
[  911.038243]  kvm_arch_vcpu_init+0x29c/0x8e0
[  911.042578]  kvm_vcpu_init+0x272/0x360
[  911.046475]  vmx_create_vcpu+0xfc/0x2aa0
[  911.050538]  ? mutex_trylock+0x1c0/0x1c0
[  911.054621]  ? handle_rdmsr+0x6e0/0x6e0
[  911.058608]  ? wait_for_completion+0x420/0x420
[  911.063199]  kvm_arch_vcpu_create+0x8c/0xc0
[  911.067529]  kvm_vm_ioctl+0x501/0x1600
[  911.071428]  ? __lock_acquire+0x5f7/0x4620
[  911.075679]  ? kvm_vcpu_release+0xa0/0xa0
[  911.079833]  ? retint_kernel+0x2d/0x2d
[  911.083728]  ? trace_hardirqs_on_caller+0x400/0x590
[  911.088753]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  911.093518]  ? check_preemption_disabled+0x3c/0x250
[  911.098539]  ? retint_kernel+0x2d/0x2d
[  911.102443]  ? selinux_file_ioctl+0x2b8/0x560
[  911.106956]  ? kvm_vcpu_release+0xa0/0xa0
[  911.111111]  do_vfs_ioctl+0x7ae/0x1060
[  911.115006]  ? selinux_file_mprotect+0x5d0/0x5d0
[  911.119770]  ? lock_downgrade+0x740/0x740
[  911.123933]  ? ioctl_preallocate+0x1c0/0x1c0
[  911.128352]  ? __fget+0x237/0x370
[  911.131829]  ? security_file_ioctl+0x89/0xb0
[  911.136248]  SyS_ioctl+0x8f/0xc0
[  911.139626]  ? do_vfs_ioctl+0x1060/0x1060
[  911.143785]  do_syscall_64+0x1e8/0x640
[  911.147681]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  911.152532]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  911.157723] RIP: 0033:0x45af49
[  911.160919] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  911.168634] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  911.175916] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
04:55:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x2})
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

[  911.183204] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  911.183210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  911.183216] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  911.210098] protocol 88fb is buggy, dev hsr_slave_0
[  911.215222] protocol 88fb is buggy, dev hsr_slave_1
[  911.430283] Mem-Info:
[  911.450186] active_anon:859895 inactive_anon:1747 isolated_anon:0
[  911.450186]  active_file:4202 inactive_file:5706 isolated_file:0
[  911.450186]  unevictable:9533 dirty:26 writeback:0 unstable:0
[  911.450186]  slab_reclaimable:15792 slab_unreclaimable:127096
[  911.450186]  mapped:64752 shmem:1791 pagetables:28035 bounce:0
[  911.450186]  free:466067 free_pcp:310 free_cma:0
04:55:26 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

[  911.508136] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:20kB inactive_file:0kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  911.540271] protocol 88fb is buggy, dev hsr_slave_0
[  911.545351] protocol 88fb is buggy, dev hsr_slave_1
[  911.575252] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  911.588823] Node 1 active_anon:1557272kB inactive_anon:84kB active_file:16788kB inactive_file:22824kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:43916kB dirty:100kB writeback:100kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  911.617765] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  911.626558] CPU: 0 PID: 15009 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  911.634475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  911.643862] Call Trace:
[  911.646456]  dump_stack+0x142/0x197
[  911.650074]  warn_alloc.cold+0x96/0x1af
[  911.654042]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  911.658877]  ? wait_for_completion+0x420/0x420
[  911.663454]  __alloc_pages_slowpath+0x23c6/0x2930
[  911.668289]  ? warn_alloc+0xf0/0xf0
[  911.671915]  ? __might_sleep+0x93/0xb0
[  911.675823]  __alloc_pages_nodemask+0x62c/0x7a0
[  911.680482]  ? rcu_read_lock_sched_held+0x110/0x130
[  911.685480]  ? __alloc_pages_slowpath+0x2930/0x2930
[  911.690485]  alloc_pages_current+0xec/0x1e0
[  911.694805]  kvm_mmu_create+0xdf/0x1e0
[  911.699110]  kvm_arch_vcpu_init+0x29c/0x8e0
[  911.703424]  kvm_vcpu_init+0x272/0x360
[  911.707297]  vmx_create_vcpu+0xfc/0x2aa0
[  911.711343]  ? mutex_trylock+0x1c0/0x1c0
[  911.715406]  ? handle_rdmsr+0x6e0/0x6e0
[  911.719363]  ? wait_for_completion+0x420/0x420
[  911.723932]  kvm_arch_vcpu_create+0x8c/0xc0
[  911.728246]  kvm_vm_ioctl+0x501/0x1600
[  911.732120]  ? __lock_acquire+0x5f7/0x4620
[  911.736357]  ? kvm_vcpu_release+0xa0/0xa0
[  911.740489]  ? trace_hardirqs_on+0x10/0x10
[  911.744713]  ? trace_hardirqs_on+0x10/0x10
[  911.748929]  ? __might_fault+0x110/0x1d0
[  911.752973]  ? save_trace+0x290/0x290
[  911.756753]  ? __might_fault+0x110/0x1d0
[  911.760816]  ? __fget+0x210/0x370
[  911.764267]  ? find_held_lock+0x35/0x130
[  911.768328]  ? __fget+0x210/0x370
[  911.771775]  ? kvm_vcpu_release+0xa0/0xa0
[  911.775924]  do_vfs_ioctl+0x7ae/0x1060
[  911.779816]  ? selinux_file_mprotect+0x5d0/0x5d0
[  911.784990]  ? lock_downgrade+0x740/0x740
[  911.789121]  ? ioctl_preallocate+0x1c0/0x1c0
[  911.793518]  ? __fget+0x237/0x370
[  911.796961]  ? security_file_ioctl+0x89/0xb0
[  911.801352]  SyS_ioctl+0x8f/0xc0
[  911.804706]  ? do_vfs_ioctl+0x1060/0x1060
[  911.808841]  do_syscall_64+0x1e8/0x640
[  911.812723]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  911.817564]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  911.822740] RIP: 0033:0x45af49
[  911.825910] RSP: 002b:00007fe80f23dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  911.833606] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  911.840862] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  911.848116] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  911.855384] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f23e6d4
[  911.862651] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  911.875496] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  911.902356] lowmem_reserve[]: 0 2569 2569 2569 2569
[  911.907426] Node 0 DMA32 free:36104kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:20kB inactive_file:0kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:380kB local_pcp:172kB free_cma:0kB
[  911.937628] lowmem_reserve[]: 0 0 0 0 0
[  911.941935] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:55:26 executing program 4:
socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r3+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528ac06}], 0x1, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

04:55:26 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000100)=r6)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x544a, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffd}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000000c0)=0x101, 0x4)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40002010}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0xd4, r8, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x68, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x810}, 0x640ac001)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  911.995165] lowmem_reserve[]: 0 0 0 0 0
[  911.999214] Node 1 Normal free:1820856kB min:53508kB low:66884kB high:80260kB active_anon:1557272kB inactive_anon:84kB active_file:16788kB inactive_file:22824kB unevictable:38108kB writepending:248kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20416kB pagetables:47364kB bounce:0kB free_pcp:1104kB local_pcp:452kB free_cma:0kB
[  912.199316] lowmem_reserve[]: 0 0 0 0 0
[  912.223037] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 20*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10496kB
[  912.313305] Node 0 DMA32: 32*4kB (UMEH) 681*8kB (UMH) 887*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36152kB
[  912.355474] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  912.387560] Node 1 Normal: 4*4kB (UME) 189*8kB (U) 108*16kB (UE) 85*32kB (UM) 44*64kB (UME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 1*1024kB (M) 1*2048kB (E) 440*4096kB (M) = 1815896kB
[  912.411889] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  912.433503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  912.448929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
04:55:27 executing program 1:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c)
recvmmsg(r0, &(0x7f0000000200), 0x4000000000001e1, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000240), 0x4)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)

[  912.473213] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  912.486592] 16597 total pagecache pages
[  912.490191] protocol 88fb is buggy, dev hsr_slave_0
[  912.496969] protocol 88fb is buggy, dev hsr_slave_1
[  912.509057] Mem-Info:
[  912.515402] 0 pages in swap cache
[  912.519496] Swap cache stats: add 0, delete 0, find 0/0
[  912.537708] active_anon:862026 inactive_anon:1745 isolated_anon:0
[  912.537708]  active_file:4199 inactive_file:5720 isolated_file:0
[  912.537708]  unevictable:9533 dirty:55 writeback:40 unstable:0
[  912.537708]  slab_reclaimable:15804 slab_unreclaimable:126751
[  912.537708]  mapped:64772 shmem:1791 pagetables:27990 bounce:0
[  912.537708]  free:464856 free_pcp:291 free_cma:0
[  912.582057] Free swap  = 0kB
[  912.592753] Total swap = 0kB
[  912.599730] 1965979 pages RAM
[  912.603326] 0 pages HighMem/MovableOnly
[  912.607530] 335871 pages reserved
[  912.611598] 0 pages cma reserved
[  912.623581] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:8kB inactive_file:12kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  912.689574] Node 1 active_anon:1570296kB inactive_anon:76kB active_file:16788kB inactive_file:22868kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:43996kB dirty:216kB writeback:160kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  912.803523] Node 0 DMA free:10480kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  912.867803] lowmem_reserve[]: 0 2569 2569 2569 2569
[  912.879004] Node 0 DMA32 free:35784kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:8kB inactive_file:12kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:332kB local_pcp:208kB free_cma:0kB
[  912.969602] lowmem_reserve[]: 0 0 0 0 0
[  912.981723] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  913.082856] lowmem_reserve[]: 0 0 0 0 0
[  913.109489] Node 1 Normal free:1823384kB min:53508kB low:66884kB high:80260kB active_anon:1557044kB inactive_anon:76kB active_file:16788kB inactive_file:22876kB unevictable:38108kB writepending:316kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20288kB pagetables:47108kB bounce:0kB free_pcp:944kB local_pcp:568kB free_cma:0kB
[  913.203441] lowmem_reserve[]: 0 0 0 0 0
[  913.217687] Node 0 DMA: 4*4kB (UME) 14*8kB (UMEH) 20*16kB (MEH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10496kB
[  913.248555] Node 0 DMA32: 31*4kB (MEH) 635*8kB (UMH) 890*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35828kB
[  913.280083] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  913.300462] Node 1 Normal: 153*4kB (UME) 209*8kB (UME) 219*16kB (UME) 120*32kB (UME) 55*64kB (UM) 9*128kB (M) 6*256kB (M) 5*512kB (M) 6*1024kB (ME) 4*2048kB (ME) 437*4096kB (M) = 1822684kB
[  913.343409] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  913.365926] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  913.383611] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  913.406355] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  913.428372] 16600 total pagecache pages
[  913.439987] 0 pages in swap cache
[  913.448066] Swap cache stats: add 0, delete 0, find 0/0
[  913.462610] Free swap  = 0kB
[  913.469098] Total swap = 0kB
04:55:28 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2)

[  913.478994] 1965979 pages RAM
[  913.485544] 0 pages HighMem/MovableOnly
[  913.492955] 335871 pages reserved
[  913.504503] 0 pages cma reserved
04:55:28 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0x1}, 0x10000, 0x0, 0x4}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:28 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000200)="12000000", 0x4, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2)

04:55:28 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48)
mlockall(0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001900ffff0016000000a6ec7e053c87475c0000000c7d88000000140c44124bd8f878e638f8cb7002bee923aee78e58ddc76efbc7ae2d90bf0ea86e72d74898118fc7afce53bdd1dceaba2d46f741ca9b17c465d35b73179c138a340e8eef128d47d309620ab2ac897a9a52310f7c12a900670baee261c3a942e0efa85ebf56a1b0"], 0x1}}, 0x0)

[  913.644396] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  913.693416] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  913.695958] syz-executor.4: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  913.710441] CPU: 1 PID: 15060 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  913.725651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  913.735021] Call Trace:
[  913.735036] syz-executor.4 cpuset=
[  913.737623]  dump_stack+0x142/0x197
[  913.737641]  warn_alloc.cold+0x96/0x1af
[  913.737651]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  913.737670]  ? check_preemption_disabled+0x3c/0x250
[  913.751423] syz4
[  913.753643]  ? retint_kernel+0x2d/0x2d
[  913.764664]  __alloc_pages_slowpath+0x23c6/0x2930
[  913.769534]  ? warn_alloc+0xf0/0xf0
[  913.772821]  mems_allowed=0-1
[  913.773172]  ? __might_sleep+0x93/0xb0
[  913.773185]  __alloc_pages_nodemask+0x62c/0x7a0
[  913.773198]  ? rcu_read_lock_sched_held+0x110/0x130
[  913.789847]  ? __alloc_pages_slowpath+0x2930/0x2930
[  913.794880]  alloc_pages_current+0xec/0x1e0
[  913.799222]  kvm_mmu_create+0xdf/0x1e0
[  913.803120]  kvm_arch_vcpu_init+0x29c/0x8e0
[  913.807446]  kvm_vcpu_init+0x272/0x360
[  913.811341]  vmx_create_vcpu+0xfc/0x2aa0
[  913.815405]  ? mutex_trylock+0x1c0/0x1c0
[  913.819475]  ? handle_rdmsr+0x6e0/0x6e0
[  913.823450]  ? wait_for_completion+0x420/0x420
[  913.828040]  kvm_arch_vcpu_create+0x8c/0xc0
[  913.832370]  kvm_vm_ioctl+0x501/0x1600
[  913.836265]  ? __lock_acquire+0x5f7/0x4620
[  913.840510]  ? kvm_vcpu_release+0xa0/0xa0
[  913.844660]  ? trace_hardirqs_on+0x10/0x10
[  913.848905]  ? trace_hardirqs_on+0x10/0x10
[  913.853144]  ? __might_fault+0x110/0x1d0
[  913.857213]  ? save_trace+0x290/0x290
[  913.861022]  ? trace_hardirqs_on_caller+0x400/0x590
[  913.866042]  ? __fget+0x210/0x370
[  913.869502]  ? find_held_lock+0x35/0x130
[  913.873570]  ? __fget+0x210/0x370
[  913.877030]  ? kvm_vcpu_release+0xa0/0xa0
[  913.881183]  do_vfs_ioctl+0x7ae/0x1060
[  913.885078]  ? selinux_file_mprotect+0x5d0/0x5d0
[  913.889838]  ? lock_downgrade+0x740/0x740
[  913.893993]  ? ioctl_preallocate+0x1c0/0x1c0
[  913.898409]  ? __fget+0x237/0x370
[  913.901874]  ? security_file_ioctl+0x89/0xb0
[  913.906290]  SyS_ioctl+0x8f/0xc0
[  913.909658]  ? do_vfs_ioctl+0x1060/0x1060
[  913.913815]  do_syscall_64+0x1e8/0x640
[  913.917710]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  913.922565]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  913.927751] RIP: 0033:0x45af49
[  913.930936] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  913.938644] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  913.945910] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  913.953184] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  913.960462] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  913.967734] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  913.975998] CPU: 0 PID: 15066 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0
[  913.983897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  913.993238] Call Trace:
[  913.995844]  dump_stack+0x142/0x197
[  913.999487]  warn_alloc.cold+0x96/0x1af
[  914.003452]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  914.008304]  ? wait_for_completion+0x420/0x420
[  914.012880]  __alloc_pages_slowpath+0x23c6/0x2930
[  914.017720]  ? warn_alloc+0xf0/0xf0
[  914.021341]  ? __might_sleep+0x93/0xb0
[  914.025217]  __alloc_pages_nodemask+0x62c/0x7a0
[  914.029880]  ? __alloc_pages_slowpath+0x2930/0x2930
[  914.034898]  ? check_preemption_disabled+0x3c/0x250
[  914.039907]  alloc_pages_current+0xec/0x1e0
[  914.044214]  kvm_mmu_create+0xdf/0x1e0
[  914.048087]  kvm_arch_vcpu_init+0x29c/0x8e0
[  914.052404]  kvm_vcpu_init+0x272/0x360
[  914.056275]  vmx_create_vcpu+0xfc/0x2aa0
[  914.060320]  ? mutex_trylock+0x1c0/0x1c0
[  914.064453]  ? handle_rdmsr+0x6e0/0x6e0
[  914.068415]  ? wait_for_completion+0x420/0x420
[  914.072983]  kvm_arch_vcpu_create+0x8c/0xc0
[  914.077289]  kvm_vm_ioctl+0x501/0x1600
[  914.081161]  ? __lock_acquire+0x5f7/0x4620
[  914.085381]  ? kvm_vcpu_release+0xa0/0xa0
[  914.089511]  ? trace_hardirqs_on+0x10/0x10
[  914.093737]  ? retint_kernel+0x2d/0x2d
[  914.097621]  ? trace_hardirqs_on_caller+0x400/0x590
[  914.102622]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  914.107361]  ? save_trace+0x290/0x290
[  914.111154]  ? check_preemption_disabled+0x3c/0x250
[  914.116164]  ? __fget+0x210/0x370
[  914.119612]  ? find_held_lock+0x35/0x130
[  914.123658]  ? __fget+0x210/0x370
[  914.127098]  ? kvm_vcpu_release+0xa0/0xa0
[  914.131230]  do_vfs_ioctl+0x7ae/0x1060
[  914.135100]  ? selinux_file_mprotect+0x5d0/0x5d0
[  914.139839]  ? lock_downgrade+0x740/0x740
[  914.143979]  ? ioctl_preallocate+0x1c0/0x1c0
[  914.148370]  ? __fget+0x237/0x370
[  914.151925]  ? security_file_ioctl+0x89/0xb0
[  914.156333]  SyS_ioctl+0x8f/0xc0
[  914.159732]  ? do_vfs_ioctl+0x1060/0x1060
[  914.163891]  do_syscall_64+0x1e8/0x640
[  914.167787]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  914.172627]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  914.177817] RIP: 0033:0x45af49
[  914.180994] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  914.188692] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  914.195956] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  914.203220] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  914.210473] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4
[  914.217731] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
04:55:29 executing program 1:
wait4(0x0, 0x0, 0x0, 0x0)
tkill(0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)

[  914.383612] Mem-Info:
[  914.408953] active_anon:859840 inactive_anon:1747 isolated_anon:0
[  914.408953]  active_file:4200 inactive_file:5726 isolated_file:0
[  914.408953]  unevictable:9551 dirty:22 writeback:0 unstable:0
[  914.408953]  slab_reclaimable:15815 slab_unreclaimable:126580
[  914.408953]  mapped:64777 shmem:1791 pagetables:28012 bounce:0
[  914.408953]  free:467150 free_pcp:334 free_cma:0
[  914.481520] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:12kB inactive_file:8kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:0kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
04:55:29 executing program 1:

[  914.542954] Node 1 active_anon:1557152kB inactive_anon:84kB active_file:16788kB inactive_file:22896kB unevictable:38180kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:88kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:55:29 executing program 1:

04:55:29 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r10 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r10, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r11 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r11, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r12 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r12, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r13 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r13, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRESHEX=r13, @ANYPTR, @ANYRESOCT, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYPTR, @ANYRESHEX=r6, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYRESOCT=r7], @ANYRESOCT, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRESHEX=r9, @ANYRESHEX=r10, @ANYRESHEX=r3, @ANYRESHEX=0x0]], @ANYRES64=r11, @ANYRESHEX=r12], 0x7b)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  914.633776] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  914.687501] lowmem_reserve[]: 0 2569 2569 2569 2569
[  914.708745] Node 0 DMA32 free:35768kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:12kB inactive_file:8kB unevictable:24kB writepending:0kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:416kB local_pcp:188kB free_cma:0kB
04:55:29 executing program 1:

[  914.767661] lowmem_reserve[]: 0 0 0 0 0
[  914.799998] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:55:29 executing program 1:

[  914.853747] lowmem_reserve[]: 0 0 0 0 0
[  914.858020] Node 1 Normal free:1821636kB min:53508kB low:66884kB high:80260kB active_anon:1557352kB inactive_anon:84kB active_file:16788kB inactive_file:22896kB unevictable:38180kB writepending:236kB present:3932160kB managed:3870192kB mlocked:38184kB kernel_stack:20512kB pagetables:47272kB bounce:0kB free_pcp:1052kB local_pcp:504kB free_cma:0kB
04:55:29 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x9, 0x0, 0x3, 0x1000}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:29 executing program 4:

[  915.065295] lowmem_reserve[]: 0 0 0 0 0
[  915.069800] Node 0 DMA: 3*4kB (UM) 14*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10476kB
[  915.147049] Node 0 DMA32: 32*4kB (UMEH) 648*8kB (UMH) 891*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 35952kB
[  915.164637] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  915.176069] Node 1 Normal: 183*4kB (UME) 128*8kB (UME) 365*16kB (UM) 139*32kB (UME) 56*64kB (UME) 10*128kB (UM) 10*256kB (UME) 10*512kB (UME) 5*1024kB (M) 4*2048kB (UME) 436*4096kB (M) = 1823756kB
[  915.284175] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  915.311721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  915.337958] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  915.364580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  915.377158] 16615 total pagecache pages
[  915.381670] 0 pages in swap cache
04:55:30 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2)

[  915.385305] Swap cache stats: add 0, delete 0, find 0/0
[  915.394484] Free swap  = 0kB
[  915.397692] Total swap = 0kB
[  915.401176] 1965979 pages RAM
[  915.404421] 0 pages HighMem/MovableOnly
[  915.408549] 335871 pages reserved
[  915.415799] 0 pages cma reserved
04:55:30 executing program 1:

04:55:30 executing program 4:
r0 = syz_open_dev$usbfs(&(0x7f0000001280)='/dev/bus/usb/00#/00#\x00', 0x200, 0x802)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000012c0)=ANY=[@ANYBLOB="0481"])

04:55:30 executing program 1:
openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x4004743d, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000007279a945eecb03fabf8e3edc6fed3053c38075aac8735e84bb6597f4740811a244bbaf34532a58e2e1f44c4e4dff9104eedecf73a149811a97feff163ed59784e08520f31fbce8a495b0001f9c9a219e77c187b787bbbedc34a60045403af6a595f28475039f0b4c7cd7ccad9aab929bb7b84ed8659e860b1e376bbdf0", @ANYRES32=<r2=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYBLOB="00000000950e372f402ac27b74085e6dd9556dc4915e2f7ecbb54eaa8ba7fef596252202cfc30438821e2d6171b701e3e61689529128754d74b9a9ade08600422fa286d89764796534f6cd80f10e50abbcbb66beefc40d75b9e10a354cb80233c7bd9a459d00984dff916b5af6fdd4a539726076025e1d10df704f05b4040b1d5a1f35a124d1530b97da4010915c714b6815e7c41df7c41cf7b07a30df24d159b38046c94a1431438e4dedbca90eb09feee37ff8a12cce61ed250d6577ce1babb6b18b4376ecdcd2c6a242359211acd234808a240a5dcfebcb0c8448172b344bd176103f7390c1748fdccf3823"], &(0x7f00000007c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0)

[  915.505370] usb usb2: usbfs: process 15109 (syz-executor.4) did not claim interface 0 before use
04:55:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}}], 0x1, 0x40, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="14b1df25", 0x4, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @empty}, 0x10)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r3})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x74100, 0x0)

[  915.644843] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  915.681129] net_ratelimit: 6 callbacks suppressed
[  915.681134] protocol 88fb is buggy, dev hsr_slave_0
[  915.691164] protocol 88fb is buggy, dev hsr_slave_1
[  915.715762] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  915.731365] CPU: 1 PID: 15112 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  915.739289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  915.739299] Call Trace:
[  915.751256]  dump_stack+0x142/0x197
[  915.754893]  warn_alloc.cold+0x96/0x1af
[  915.758873]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  915.763727]  ? check_preemption_disabled+0x3c/0x250
[  915.768748]  ? retint_kernel+0x2d/0x2d
[  915.772652]  __alloc_pages_slowpath+0x23c6/0x2930
[  915.777515]  ? warn_alloc+0xf0/0xf0
[  915.781161]  ? __might_sleep+0x93/0xb0
[  915.785056]  __alloc_pages_nodemask+0x62c/0x7a0
[  915.789733]  ? rcu_read_lock_sched_held+0x110/0x130
[  915.789746]  ? __alloc_pages_slowpath+0x2930/0x2930
[  915.789766]  alloc_pages_current+0xec/0x1e0
[  915.789780]  kvm_mmu_create+0xdf/0x1e0
[  915.808020]  kvm_arch_vcpu_init+0x29c/0x8e0
[  915.812368]  kvm_vcpu_init+0x272/0x360
[  915.816266]  vmx_create_vcpu+0xfc/0x2aa0
[  915.820336]  ? mutex_trylock+0x1c0/0x1c0
[  915.824414]  ? handle_rdmsr+0x6e0/0x6e0
[  915.828399]  ? wait_for_completion+0x420/0x420
[  915.833009]  kvm_arch_vcpu_create+0x8c/0xc0
[  915.837346]  kvm_vm_ioctl+0x501/0x1600
[  915.841237]  ? __lock_acquire+0x5f7/0x4620
[  915.845477]  ? kvm_vcpu_release+0xa0/0xa0
[  915.849629]  ? trace_hardirqs_on+0x10/0x10
[  915.853874]  ? trace_hardirqs_on+0x10/0x10
[  915.858112]  ? __might_fault+0x110/0x1d0
[  915.862175]  ? save_trace+0x290/0x290
[  915.865991]  ? trace_hardirqs_on_caller+0x400/0x590
[  915.871013]  ? __fget+0x210/0x370
[  915.874483]  ? find_held_lock+0x35/0x130
[  915.878550]  ? __fget+0x210/0x370
[  915.882009]  ? kvm_vcpu_release+0xa0/0xa0
[  915.886159]  do_vfs_ioctl+0x7ae/0x1060
[  915.890051]  ? selinux_file_mprotect+0x5d0/0x5d0
[  915.894813]  ? lock_downgrade+0x740/0x740
[  915.898968]  ? ioctl_preallocate+0x1c0/0x1c0
[  915.903386]  ? __fget+0x237/0x370
[  915.906854]  ? security_file_ioctl+0x89/0xb0
[  915.911277]  SyS_ioctl+0x8f/0xc0
[  915.914648]  ? do_vfs_ioctl+0x1060/0x1060
[  915.918803]  do_syscall_64+0x1e8/0x640
[  915.922693]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  915.927543]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  915.932734] RIP: 0033:0x45af49
[  915.936271] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  915.943982] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  915.951252] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  915.958524] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  915.965797] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  915.973069] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  915.983934] warn_alloc_show_mem: 1 callbacks suppressed
[  915.983951] Mem-Info:
[  915.992361] active_anon:859854 inactive_anon:1747 isolated_anon:0
[  915.992361]  active_file:4200 inactive_file:5738 isolated_file:0
[  915.992361]  unevictable:9533 dirty:28 writeback:0 unstable:0
[  915.992361]  slab_reclaimable:15836 slab_unreclaimable:126739
04:55:30 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x0, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x2710})
socket$inet(0x2, 0x4000000805, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)=0x8000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), &(0x7f0000000240)=0x4)

04:55:30 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x10841, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44b204}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="20010009", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRESOCT, @ANYRESHEX], @ANYRES16=r8], @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20800}, 0x2000c000)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  915.992361]  mapped:64752 shmem:1791 pagetables:28005 bounce:0
[  915.992361]  free:466934 free_pcp:401 free_cma:0
[  916.027384] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:12kB inactive_file:8kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  916.087402] Node 1 active_anon:1557188kB inactive_anon:92kB active_file:16788kB inactive_file:22944kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:44000kB dirty:172kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  916.150528] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  916.178423] lowmem_reserve[]: 0 2569 2569 2569 2569
[  916.185923] Node 0 DMA32 free:36032kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:480kB local_pcp:216kB free_cma:0kB
[  916.216266] lowmem_reserve[]: 0 0 0 0 0
[  916.221667] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  916.248301] lowmem_reserve[]: 0 0 0 0 0
[  916.254688] Node 1 Normal free:1822736kB min:53508kB low:66884kB high:80260kB active_anon:1557292kB inactive_anon:84kB active_file:16788kB inactive_file:22968kB unevictable:38108kB writepending:152kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20544kB pagetables:47528kB bounce:0kB free_pcp:1384kB local_pcp:564kB free_cma:0kB
[  916.286584] lowmem_reserve[]: 0 0 0 0 0
[  916.291756] Node 0 DMA: 3*4kB (UM) 14*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10476kB
[  916.309748] Node 0 DMA32: 32*4kB (UMEH) 656*8kB (UMH) 892*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36032kB
[  916.386231] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  916.458222] Node 1 Normal: 76*4kB (UME) 172*8kB (UME) 338*16kB (UM) 144*32kB (UME) 56*64kB (UM) 11*128kB (ME) 9*256kB (UM) 9*512kB (ME) 5*1024kB (M) 4*2048kB (UME) 436*4096kB (M) = 1822768kB
[  916.557064] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  916.599422] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  916.645420] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  916.654437] protocol 88fb is buggy, dev hsr_slave_0
[  916.654490] protocol 88fb is buggy, dev hsr_slave_1
[  916.654575] protocol 88fb is buggy, dev hsr_slave_0
[  916.654628] protocol 88fb is buggy, dev hsr_slave_1
[  916.691598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  916.704212] 16621 total pagecache pages
[  916.708467] 0 pages in swap cache
[  916.712398] Swap cache stats: add 0, delete 0, find 0/0
[  916.717992] Free swap  = 0kB
[  916.726623] Total swap = 0kB
[  916.729845] 1965979 pages RAM
[  916.733354] 0 pages HighMem/MovableOnly
[  916.737581] 335871 pages reserved
[  916.744934] 0 pages cma reserved
04:55:31 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket(0x10, 0x0, 0x0)
sendto(0xffffffffffffffff, &(0x7f0000000200)="120000", 0x3, 0x0, 0x0, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00'})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1c, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500080089ea010000000000f109a708f782", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/kvm\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000015000/0x1000)=nil})
pipe(&(0x7f0000000140))
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, 0xffffffffffffffff)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000400)={[0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x8955, &(0x7f0000000000)=0x2)

[  916.892781] syz-executor.0: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  916.927828] syz-executor.0 cpuset=syz0 mems_allowed=0-1
[  916.939075] CPU: 0 PID: 15139 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  916.946989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  916.956344] Call Trace:
[  916.958938]  dump_stack+0x142/0x197
[  916.962579]  warn_alloc.cold+0x96/0x1af
[  916.966560]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  916.971417]  ? wait_for_completion+0x420/0x420
[  916.976018]  __alloc_pages_slowpath+0x23c6/0x2930
[  916.980872]  ? retint_kernel+0x2d/0x2d
[  916.984770]  ? warn_alloc+0xf0/0xf0
[  916.995443]  ? check_preemption_disabled+0x3c/0x250
[  917.000471]  ? retint_kernel+0x2d/0x2d
[  917.004377]  __alloc_pages_nodemask+0x62c/0x7a0
[  917.009061]  ? rcu_read_lock_sched_held+0x110/0x130
[  917.014088]  ? __alloc_pages_slowpath+0x2930/0x2930
[  917.019112]  ? check_preemption_disabled+0x3c/0x250
[  917.024138]  alloc_pages_current+0xec/0x1e0
[  917.028469]  kvm_mmu_create+0xdf/0x1e0
[  917.032363]  kvm_arch_vcpu_init+0x29c/0x8e0
[  917.036694]  kvm_vcpu_init+0x272/0x360
[  917.040588]  vmx_create_vcpu+0xfc/0x2aa0
[  917.044655]  ? mutex_trylock+0x1c0/0x1c0
[  917.048729]  ? handle_rdmsr+0x6e0/0x6e0
[  917.052707]  ? wait_for_completion+0x420/0x420
[  917.057294]  kvm_arch_vcpu_create+0x8c/0xc0
[  917.061625]  kvm_vm_ioctl+0x501/0x1600
[  917.065513]  ? __lock_acquire+0x5f7/0x4620
[  917.069755]  ? kvm_vcpu_release+0xa0/0xa0
[  917.073907]  ? trace_hardirqs_on+0x10/0x10
[  917.078152]  ? trace_hardirqs_on+0x10/0x10
[  917.082389]  ? __might_fault+0x110/0x1d0
[  917.086456]  ? save_trace+0x290/0x290
[  917.090258]  ? __might_fault+0x110/0x1d0
[  917.094340]  ? __fget+0x210/0x370
[  917.097795]  ? find_held_lock+0x35/0x130
[  917.101859]  ? __fget+0x210/0x370
[  917.105320]  ? kvm_vcpu_release+0xa0/0xa0
[  917.109471]  do_vfs_ioctl+0x7ae/0x1060
[  917.113367]  ? trace_hardirqs_on_thunk+0x1a/0x1c
[  917.118129]  ? ioctl_preallocate+0x1c0/0x1c0
[  917.122542]  ? check_preemption_disabled+0x3c/0x250
[  917.127565]  ? retint_kernel+0x2d/0x2d
[  917.131469]  SyS_ioctl+0x8f/0xc0
[  917.134837]  ? do_vfs_ioctl+0x1060/0x1060
[  917.138997]  do_syscall_64+0x1e8/0x640
[  917.142887]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  917.147738]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  917.152931] RIP: 0033:0x45af49
[  917.156116] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  917.163832] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  917.173621] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000006
[  917.180908] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  917.188180] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  917.195453] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
04:55:31 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3)
sendfile(0xffffffffffffffff, r5, 0x0, 0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  917.440180] protocol 88fb is buggy, dev hsr_slave_0
[  917.445472] protocol 88fb is buggy, dev hsr_slave_1
[  917.571914] Mem-Info:
[  917.578108] active_anon:859871 inactive_anon:1747 isolated_anon:0
[  917.578108]  active_file:4201 inactive_file:5748 isolated_file:0
[  917.578108]  unevictable:9533 dirty:18 writeback:0 unstable:0
[  917.578108]  slab_reclaimable:15866 slab_unreclaimable:126259
[  917.578108]  mapped:64752 shmem:1791 pagetables:28013 bounce:0
[  917.578108]  free:467404 free_pcp:385 free_cma:0
[  917.687831] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  917.752148] Node 1 active_anon:1557376kB inactive_anon:84kB active_file:16788kB inactive_file:22988kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:43916kB dirty:68kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  917.780570] protocol 88fb is buggy, dev hsr_slave_0
[  917.780625] protocol 88fb is buggy, dev hsr_slave_1
[  917.833753] Node 0 DMA free:10476kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  917.860443] lowmem_reserve[]: 0 2569 2569 2569 2569
04:55:32 executing program 4:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8), 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b705369b2623", 0x18}], 0x1)

[  917.865727] Node 0 DMA32 free:36088kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19168kB pagetables:64628kB bounce:0kB free_pcp:392kB local_pcp:200kB free_cma:0kB
[  917.896447] lowmem_reserve[]: 0 0 0 0 0
[  917.900836] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  917.944616] lowmem_reserve[]: 0 0 0 0 0
[  917.948771] Node 1 Normal free:1822428kB min:53508kB low:66884kB high:80260kB active_anon:1557376kB inactive_anon:84kB active_file:16788kB inactive_file:22988kB unevictable:38108kB writepending:68kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20448kB pagetables:47424kB bounce:0kB free_pcp:696kB local_pcp:300kB free_cma:0kB
[  917.984631] lowmem_reserve[]: 0 0 0 0 0
04:55:32 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  917.988774] Node 0 DMA: 3*4kB (UM) 14*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10476kB
[  918.014144] Node 0 DMA32: 32*4kB (UMEH) 663*8kB (UMH) 892*16kB (UMH) 512*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36088kB
[  918.049094] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  918.064395] Node 1 Normal: 58*4kB (UME) 112*8kB (UME) 385*16kB (UME) 163*32kB (UME) 56*64kB (UM) 12*128kB (UME) 8*256kB (M) 10*512kB (UME) 6*1024kB (UM) 3*2048kB (ME) 436*4096kB (M) = 1822936kB
04:55:32 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)=0x8000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), &(0x7f0000000240)=0x4)

[  918.093061] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  918.093069] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  918.093076] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
04:55:32 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r5, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  918.093082] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  918.093086] 16634 total pagecache pages
[  918.093097] 0 pages in swap cache
[  918.093103] Swap cache stats: add 0, delete 0, find 0/0
[  918.093106] Free swap  = 0kB
[  918.093110] Total swap = 0kB
[  918.093116] 1965979 pages RAM
[  918.093119] 0 pages HighMem/MovableOnly
[  918.093122] 335871 pages reserved
[  918.093126] 0 pages cma reserved
04:55:33 executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
r0 = open(0x0, 0x4000000000141042, 0x0)
r1 = dup2(0xffffffffffffffff, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000000140)='auxv\x00')
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x2)
ioctl$RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000240)="39d1751ff71ec04e0364fa305802f55ce63da4bedd196ad41eed24818f786971be3f372e34a69f9bb77d43dcb813dc41c990c82802de8238df5c8fdeddce5f4b73099886209f1e3638b609be6c12b7d8f7018ff56842ceaf9bbd42d365f7acf70ca0f4546c439d6755c448715a3dea7fe3761068f8caabb32687a51f714c0d6bbb0e6b8248494298356eaaca24d5c204564e5ae54bc3585a3fa051dce43f4bed9e1e1104db1e0611823f45aa8aa9d7280c1b1d30e633448c642e3a8c0f3b899cedc24d6b3b84a68e4866ea1d53776f65e874e0212c1e973abe1bb5", 0xdb}], 0x1)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x6c, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1101}, [@IFLA_LINKINFO={0x4c, 0x12, @gretap={{0xb, 0x1, 'gretap\x00'}, {0x3c, 0x2, [@gre_common_policy=[@IFLA_GRE_TTL={0x5}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8001}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x5d28}], @gre_common_policy=[@IFLA_GRE_LINK={0x8}, @IFLA_GRE_OKEY={0x8, 0x5, 0x5}, @IFLA_GRE_OKEY={0x8, 0x5, 0x3}]]}}}]}, 0x6c}}, 0x0)

04:55:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4)
listen(r0, 0xfc0004)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)=""/236, 0xec}, {0x0}], 0x2, &(0x7f0000002740)=""/202, 0xca}, 0x7}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb)
recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400})

04:55:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000001c0)=0xc9, 0x4)
listen(r0, 0xfc0004)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000200)=""/236, 0xec}, {0x0}], 0x2, &(0x7f0000002740)=""/202, 0xca}, 0x7}], 0x1, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb)
recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400})

04:55:33 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0xfc0004)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0xb)
recvmmsg(r1, &(0x7f0000004900)=[{{&(0x7f0000001480)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001700), 0x0, &(0x7f0000001740)=""/4096, 0x1000}}], 0x500, 0x0, &(0x7f0000004a80)={0x77359400})

04:55:33 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f00000000c0), 0x4)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext, 0x6280}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:33 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x404, 0x0, 0x0, 0x0, 0x0, 0x636d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmdt(0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@ipx, 0x80, 0x0}, 0x2}], 0x1, 0x40, 0x0)
socket$inet(0x2, 0x4000000805, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, &(0x7f0000000100)=0x8000)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000180), 0x8)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f00000002c0))
clone(0x22004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit(0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000440)='status\x00')
preadv(r1, &(0x7f00000017c0), 0x1b4, 0x0)
r2 = socket(0x10, 0x80002, 0x0)
sendmmsg$alg(r2, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x3fa0996ed73daa6f, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000))
ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000180)=0x10000)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000200), &(0x7f0000000240)=0x4)

04:55:34 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:34 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='oom_score\x00')
r2 = dup(r0)
sendfile(r2, r1, 0x0, 0x523)

04:55:34 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:34 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x4, 0x13, r1, 0x0)
setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0), 0x4)

04:55:34 executing program 1:
r0 = socket$inet(0x2, 0x200000001, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @remote}, 0xc)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000300)={@multicast1, @local, 0x1}, 0x10)

04:55:34 executing program 1:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b)

[  919.844648] audit: type=1400 audit(1578632134.449:103): avc:  denied  { map } for  pid=15221 comm="syz-executor.1" path="/dev/nullb0" dev="devtmpfs" ino=1630 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=blk_file permissive=1
04:55:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:34 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:34 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x19b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0xffffffa6)
r4 = creat(0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x84000)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
bind$netrom(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:34 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:34 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:35 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe5}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0xff13)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f00000012c0)="20048a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a750fbf746bec66ba", 0xfe6a, 0xe, 0x0, 0xfffffffffffffe2b)

04:55:35 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$mice(0x0, 0x0, 0x8400)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:35 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:35 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

04:55:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  920.800117] net_ratelimit: 12 callbacks suppressed
04:55:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  920.800123] protocol 88fb is buggy, dev hsr_slave_0
[  920.800169] protocol 88fb is buggy, dev hsr_slave_1
[  920.800267] protocol 88fb is buggy, dev hsr_slave_0
[  920.800313] protocol 88fb is buggy, dev hsr_slave_1
04:55:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  920.931212] sd 0:0:1:0: [sg0] tag#6929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  920.931449] sd 0:0:1:0: [sg0] tag#6929 CDB: Test Unit Ready
04:55:35 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:35 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1582b65c7936814c, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x40000000200}, 0x2000, 0x1, 0x0, 0x0, 0x8}, 0x0, 0x2, 0xffffffffffffffff, 0x8)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/policy\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f00000004c0))
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000200)={'mangle\x00', 0x39, "038856e9dafa19f0981c91eeabef2a168396e8bcff62a9c2fa3c1a8c0738dd136a1b0738b2397a51c7637be15967c44f632019bf15ac4dd71f"}, &(0x7f0000000280)=0x5d)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='trusted.overlay.nlink\x00', &(0x7f0000000140)={'U+', 0x3}, 0x16, 0x2)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000340)=""/131, &(0x7f00000002c0)=0x83)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
perf_event_open(&(0x7f0000000400)={0x5, 0x70, 0x0, 0x3, 0x0, 0x3, 0x0, 0x3, 0x2084, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x101, 0x4}, 0x40, 0x1ff, 0x5, 0x2, 0xffffffff, 0x1f, 0x1ff}, 0x0, 0x2, r6, 0x5)

[  920.931669] sd 0:0:1:0: [sg0] tag#6929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.931848] sd 0:0:1:0: [sg0] tag#6929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.932058] sd 0:0:1:0: [sg0] tag#6929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.932298] sd 0:0:1:0: [sg0] tag#6929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.932448] sd 0:0:1:0: [sg0] tag#6929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.932608] sd 0:0:1:0: [sg0] tag#6929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.932786] sd 0:0:1:0: [sg0] tag#6929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.933049] sd 0:0:1:0: [sg0] tag#6929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.933317] sd 0:0:1:0: [sg0] tag#6929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.933478] sd 0:0:1:0: [sg0] tag#6929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.933658] sd 0:0:1:0: [sg0] tag#6929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.933869] sd 0:0:1:0: [sg0] tag#6929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.934088] sd 0:0:1:0: [sg0] tag#6929 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  920.934286] sd 0:0:1:0: [sg0] tag#6929 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  920.934459] sd 0:0:1:0: [sg0] tag#6929 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.600784] protocol 88fb is buggy, dev hsr_slave_0
[  921.601333] protocol 88fb is buggy, dev hsr_slave_1
[  921.738632] sd 0:0:1:0: [sg0] tag#6929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  921.738924] sd 0:0:1:0: [sg0] tag#6929 CDB: Test Unit Ready
[  921.739170] sd 0:0:1:0: [sg0] tag#6929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.739369] sd 0:0:1:0: [sg0] tag#6929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.739519] sd 0:0:1:0: [sg0] tag#6929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

04:55:36 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.739711] sd 0:0:1:0: [sg0] tag#6929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.739909] sd 0:0:1:0: [sg0] tag#6929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.740219] sd 0:0:1:0: [sg0] tag#6929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.740439] sd 0:0:1:0: [sg0] tag#6929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.740608] sd 0:0:1:0: [sg0] tag#6929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.740769] sd 0:0:1:0: [sg0] tag#6929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r7, @ANYRES64=r8/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', r6})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r9, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_inet_tcp_SIOCATMARK(r9, 0x8905, &(0x7f0000000100))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  921.740928] sd 0:0:1:0: [sg0] tag#6929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.741137] sd 0:0:1:0: [sg0] tag#6929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:36 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.741295] sd 0:0:1:0: [sg0] tag#6929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.741568] sd 0:0:1:0: [sg0] tag#6929 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.741809] sd 0:0:1:0: [sg0] tag#6929 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.742009] sd 0:0:1:0: [sg0] tag#6929 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
04:55:37 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.920149] protocol 88fb is buggy, dev hsr_slave_0
[  921.920186] protocol 88fb is buggy, dev hsr_slave_1
[  921.963473] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
04:55:37 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  921.963800] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready
[  921.963980] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.964131] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.964351] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.964509] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.964679] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.964801] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.964960] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.965129] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.965251] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.965429] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.965572] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.965753] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.965971] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:37 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:37 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:37 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1924a1f42bad5b433d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd06d4026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627dbaaf582393a2944b5f39be22eea4717fbc7bf1744386f4f70511a75d9afc60ba10f1fa55313f5683a709a5b0bf03005c4015cc0000000000001dbc3d7b48529175c97a1e48f918018d49cac053da9f58ae69f4c78751203b47c9a8a5074b4c6f4a8d9e1398fce2ab8959853f2d04ef26ac028d938e730b8e435aeb43f2ad789900000000000000000000009450003333ece2f9488cdbd16155ad5578d57ffe9ea25556354da491f265617cb943014b01b02587b3d3692e3c672da61a09aabf2d0a3bbc9dd3ad0d8f809cbea5aab8fd639ea795e57d6531a19783334b006ab7"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

[  921.966151] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  921.966319] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  922.880131] protocol 88fb is buggy, dev hsr_slave_0
[  922.880217] protocol 88fb is buggy, dev hsr_slave_1
04:55:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  922.963751] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  922.972899] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready
04:55:37 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SCSI_IOCTL_PROBE_HOST(r5, 0x5385, &(0x7f0000000340)={0x1000, ""/4096})
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="ce00000093090000d51d4afb30ab8b97929d4767c12131d3a42d18a40291ecdf99357ad992c3a14aece970234d9f4bef53fc28fbe674c1172a004855be5d7a21ee245e5f442d1526280c4c9f25bf16e5831ef13ff7ceb4a7a6dcd889573ec3dc0b7798bdf54e98d08ec66ade123b55fde9bd403b5cd6374ea8a9b5e5827bd5930a2738c91dd7164fbcf8e638e55f10fdbb4030b016d91df9c7d14cf0c6062c0e02b7a6363251c8f5c907a36bf33706632b74cf6bca9e0c1cd2e25dc5f21bd467c248780f69203bf5dd"], &(0x7f0000000100), 0x200)

04:55:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  922.979019] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.979228] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  922.979387] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.979641] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.980277] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:37 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  922.980479] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  922.980658] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.980858] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.981036] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.981247] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.981429] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  922.981607] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.981777] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  922.981956] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 4:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  922.982115] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:38 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  924.039979] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  924.040606] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready
[  924.040806] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.041005] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.041165] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.041327] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  924.041507] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.041685] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.041866] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  924.042044] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:38 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8)
r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0)
preadv(r7, &(0x7f00000017c0), 0x2cb, 0x400000000000)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, <r9=>0x0}, &(0x7f0000000280)=0x5)
setuid(r9)
stat(0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
fchownat(r7, &(0x7f0000000200)='./bus\x00', r9, r10, 0x400)
r11 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000000480)=<r12=>0x0)
r13 = getgid()
r14 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r14, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r15=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r15)
r16 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r17=>0x0}, &(0x7f0000cab000)=0x397)
setuid(r17)
r18 = getegid()
write$FUSE_DIRENTPLUS(r5, &(0x7f00000004c0)={0x2a8, 0x0, 0x6, [{{0x3, 0x0, 0x1f, 0x2, 0xc28, 0x7f, {0x0, 0x2369, 0x3, 0x0, 0x6, 0x1cb, 0x40, 0x2539, 0x1, 0x80000000, 0x7, r6, r10, 0x1, 0x400}}, {0x0, 0x10001, 0x0, 0x22}}, {{0x0, 0x0, 0x0, 0x20c, 0x7, 0x2, {0x3, 0x9, 0x7, 0x4, 0x3f, 0x5, 0x9, 0x3, 0xf54, 0x0, 0x9, r12, r13, 0x7, 0x6}}, {0x5, 0x1e, 0x26, 0x186, 'GPLwlan0*lonodevselinuxGPL)user+md5sum'}}, {{0x3, 0x0, 0xfffffffffffeffff, 0x6, 0x4, 0x602, {0x6, 0x401, 0x4, 0x1, 0x4, 0x4, 0x3, 0x3, 0x7fffffff, 0x2, 0x29, r15, 0xee00, 0xfffffff9, 0x5}}, {0x3, 0x3, 0x5, 0x5, 'ppp1)'}}, {{0x2, 0x0, 0x3, 0xffffffffffffffc1, 0x401, 0x1, {0x5, 0x8, 0x4, 0x2, 0x5, 0x4, 0x8, 0x8, 0xffff8001, 0x7fff, 0x7, r17, r18, 0x1ff, 0x583c}}, {0x2, 0x400, 0x1, 0x9, '%'}}]}, 0x2a8)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
getsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f00000000c0), &(0x7f0000000100)=0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r19 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r19, 0x0, 0xcb, &(0x7f0000000000), 0x10)
connect$inet(r19, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r20 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r20, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$netlink_NETLINK_RX_RING(r20, 0x10e, 0x6, &(0x7f00000002c0)={0x0, 0x1, 0xd70b, 0x80000001}, 0x10)
r21 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8301, 0x80)
getsockopt$IP_VS_SO_GET_SERVICE(r21, 0x0, 0x483, &(0x7f0000000200), &(0x7f0000000280)=0x68)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  924.042295] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.042454] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  924.042617] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.042836] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000))

[  924.042965] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000))

[  924.043125] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  924.043383] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
04:55:39 executing program 1:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:39 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0x0, &(0x7f0000000000))

04:55:39 executing program 0:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

04:55:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0x0, &(0x7f0000000000))

04:55:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0x0, &(0x7f0000000000))

[  925.072763] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
04:55:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, 0x0)

[  925.072978] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready
[  925.073221] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:39 executing program 5:
r0 = getpid()
capset(&(0x7f00000000c0)={0x19980330, r0}, &(0x7f0000000100)={0x10000, 0x4, 0x2, 0x4, 0x7fff, 0xa00})
pipe(&(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r2, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r1, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:39 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, 0x0)

[  925.073509] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.073660] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:40 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000080)={<r3=>0x0, 0x100000, r2})
ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f00000000c0)={r3})
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x12)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

[  925.073850] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:40 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, 0x0)

[  925.074021] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:40 executing program 3:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x3400)
ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, 0x0)

[  925.074200] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.074340] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.074490] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:40 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

[  925.074651] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.074911] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.075121] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.075329] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.075499] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.075718] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.075975] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  925.395675] capability: warning: `syz-executor.5' uses 32-bit capabilities (legacy support in use)
[  925.801930] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  925.802199] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready
[  925.802450] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.802708] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.802928] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.803130] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.803388] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.803579] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.803779] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.803959] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.804159] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.804338] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.804681] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.804918] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.805118] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.805317] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  925.805539] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
04:55:41 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:41 executing program 0:

04:55:41 executing program 3:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r2, r1}}, 0x18)
write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r2, 0xfff}}, 0x18)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x38902)
ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, 0x0)

04:55:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_SUBDEV_G_FMT(r1, 0xc0585604, &(0x7f0000000200)={0x3, 0x0, {0x0, 0x2, 0x0, 0x10, 0xe, 0xe, 0x0, 0x6}})
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000100)=0x8, 0x3)
ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, <r3=>0x0, 0x4})
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
recvfrom$inet(r4, &(0x7f0000000140)=""/41, 0x29, 0x20000001, &(0x7f0000000180)={0x2, 0x4e24, @remote}, 0x10)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={0x0, <r5=>0x0})
ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3, r5})
ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r2, 0x40045730, &(0x7f00000001c0)=0x8dec)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

[  926.080247] net_ratelimit: 12 callbacks suppressed
[  926.080253] protocol 88fb is buggy, dev hsr_slave_0
[  926.080292] protocol 88fb is buggy, dev hsr_slave_1
04:55:41 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x7, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}, {}]})
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/checkreqprot\x00', 0x50402, 0x0)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000640)={r7}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000200)={r7, 0x9}, &(0x7f0000000240)=0x8)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
r8 = socket$inet_smc(0x2b, 0x1, 0x0)
recvfrom$inet(r8, &(0x7f0000000680)=""/4096, 0x1000, 0x2023, &(0x7f0000000280)={0x2, 0x4e20, @loopback}, 0x10)

04:55:41 executing program 0:

04:55:41 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x246325d85669541b, 0x0)
r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0)
recvmsg$can_raw(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000000c0)=""/49, 0x31}, {&(0x7f0000000100)=""/173, 0xad}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000200)=""/84, 0x54}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/131, 0x83}, {&(0x7f0000001340)=""/88, 0x58}], 0x7, &(0x7f0000001440)=""/89, 0x59}, 0x10000)

04:55:41 executing program 3:

04:55:41 executing program 0:

04:55:41 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

04:55:41 executing program 3:

[  926.953855] sd 0:0:1:0: [sg0] tag#6929 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  926.963485] sd 0:0:1:0: [sg0] tag#6929 CDB: Test Unit Ready
[  926.969543] sd 0:0:1:0: [sg0] tag#6929 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  926.979080] sd 0:0:1:0: [sg0] tag#6929 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  926.988306] sd 0:0:1:0: [sg0] tag#6929 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  926.997484] sd 0:0:1:0: [sg0] tag#6929 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.006753] sd 0:0:1:0: [sg0] tag#6929 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.016882] sd 0:0:1:0: [sg0] tag#6929 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.026114] sd 0:0:1:0: [sg0] tag#6929 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.036503] sd 0:0:1:0: [sg0] tag#6929 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.046581] protocol 88fb is buggy, dev hsr_slave_0
[  927.047259] protocol 88fb is buggy, dev hsr_slave_1
[  927.048322] protocol 88fb is buggy, dev hsr_slave_0
[  927.048740] protocol 88fb is buggy, dev hsr_slave_1
[  927.069334] sd 0:0:1:0: [sg0] tag#6929 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.078543] sd 0:0:1:0: [sg0] tag#6929 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.087694] sd 0:0:1:0: [sg0] tag#6929 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:41 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:41 executing program 3:

04:55:41 executing program 0:
r0 = msgget$private(0x0, 0x0)
msgsnd(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03"], 0x1, 0x0)
msgrcv(r0, 0x0, 0x0, 0x2, 0x3000)

[  927.096973] sd 0:0:1:0: [sg0] tag#6929 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.106134] sd 0:0:1:0: [sg0] tag#6929 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.115349] sd 0:0:1:0: [sg0] tag#6929 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  927.124563] sd 0:0:1:0: [sg0] tag#6929 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
04:55:41 executing program 3:
shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil)
unshare(0xc000000)

04:55:41 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x20000, 0x0)
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00')
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r3, @ANYRES64=r4/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r5 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r5, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r6}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r7, @ANYRES64=r8/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
r9 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r11=>0x0, <r12=>0x0})
sendmsg$can_bcm(r9, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r10}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r11, @ANYRES64=r12/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00'})
r13 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r15=>0x0, <r16=>0x0})
sendmsg$can_bcm(r13, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r14}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r15, @ANYRES64=r16/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @dev}, &(0x7f0000000200)=0xc)
r17 = syz_open_procfs(0xffffffffffffffff, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r18=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0xfffffea0)
clock_gettime(0x0, &(0x7f0000000280)={<r19=>0x0, <r20=>0x0})
sendmsg$can_bcm(r17, &(0x7f0000000500)={&(0x7f0000000080)={0x1d, r18}, 0x10, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000010000e80e000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r19, @ANYRES64=r20/1000+30000, @ANYBLOB="0200000001000000020000202e020000cf92ce8655815dbe0f31b4492213671ab84ec2fc54e03dce6e79e021686cf18a01325111bc4165e9789f8776abeb4a9ebc918941c5393b3547f8aad826b896cd21c224b8a5f8cbbe5ad01157bc751e0a474b89ab601c3c27e3c6321243ba883edc8cfcd2740b14870d3c2565454fe52f38019066bf269dfd"], 0x6}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14)
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000004480)={0x0, @vsock={0x28, 0x0, 0x2711}, @l2tp={0x2, 0x0, @local, 0x3}, @can, 0x6, 0x0, 0x0, 0x0, 0xa36b, &(0x7f0000004440)='veth1_vlan\x00', 0x0, 0x3, 0x2})
r21 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r21, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockname$packet(r21, &(0x7f00000045c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000004600)=0x14)
r22 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r22, 0x112, 0xa, &(0x7f0000000040), 0x4)
recvmsg$can_bcm(r22, &(0x7f0000006a00)={&(0x7f00000067c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000006980)=[{&(0x7f0000006840)=""/87, 0x57}, {&(0x7f00000068c0)=""/157, 0x9d}], 0x2, &(0x7f00000069c0)=""/38, 0x26}, 0x10042)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006a40)={{{@in=@loopback, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in6=@local}}, &(0x7f0000006b40)=0xe8)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@mcast1}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000a40)=0xe8)
sendmsg$TEAM_CMD_PORT_LIST_GET(r17, &(0x7f00000070c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000007080)={&(0x7f0000000a80)={0x4fc, r0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x4fc}, 0x1, 0x0, 0x0, 0xc848}, 0x80)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r23 = socket$inet(0x2, 0x3, 0x2)
r24 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvme-fabrics\x00', 0x200, 0x0)
ioctl$TIOCGWINSZ(r24, 0x5413, &(0x7f0000000080))
ioctl$DRM_IOCTL_DROP_MASTER(0xffffffffffffffff, 0x641f)
setsockopt$inet_int(r23, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r25 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r25, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0)

04:55:42 executing program 0:
sched_setscheduler(0x0, 0x5, &(0x7f0000000140))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x11)

04:55:42 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000100)}, 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000100)={0x7, 'rose0\x00', {0x4}, 0x7})
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
recvfrom$llc(r4, &(0x7f0000000200)=""/193, 0xc1, 0x4c9efad24d6599aa, &(0x7f00000000c0)={0x1a, 0x5, 0x4, 0x5, 0x3, 0x0, @random="ecf497b5be17"}, 0x10)
r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x0, 0x0)
bind$netrom(r5, 0x0, 0xfffffffffffffe29)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20000000000}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:42 executing program 4:
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = dup3(r2, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_GET_CPUID2(r4, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[]])
dup2(r5, r4)

04:55:42 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, [], @bt={0x5, 0x8, 0xff, 0x9, 0x2, 0x0, 0x6, 0x2}})
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, 0x0)

[  927.643108] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  927.644102] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[  927.644804] CPU: 0 PID: 15518 Comm: syz-executor.3 Not tainted 4.14.163-syzkaller #0
[  927.644814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  927.644818] Call Trace:
[  927.644838]  dump_stack+0x142/0x197
[  927.644854]  warn_alloc.cold+0x96/0x1af
[  927.644865]  ? zone_watermark_ok_safe+0x2b0/0x2b0
04:55:42 executing program 1:
socket$inet_udp(0x2, 0x2, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f0000000840)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x5)
write$binfmt_misc(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5300000044a6aeabec2e1520000000000000001000fff64017db9820000000003b08d403ffff633b27e59aa144175dd106736d17c3f2c876c699010000000000000025da3f0fc7ec6e265600000800490d524fa45780fbe1924a1f42bad5b433d2e181baf9459c5c953948c6801d2c0945c08ba8c552fc99a7422007653872ecb4f63acdf680812d274014ae40b88f15ff2258dd247239ece16a61fd06d4026ed7360627ec60cb274e00da971f7ee096d74c92fad7e34bd5f0e4542636c2cb6222bc224609aba9e68d66d7e6241bf25e627dbaaf582393a2944b5f39be22eea4717fbc7bf1744386f4f70511a75d9afc60ba10f1fa55313f5683a709a5b0bf03005c4015cc0000000000001dbc3d7b48529175c97a1e48f918018d49cac053da9f58ae69f4c78751203b47c9a8a5074b4c6f4a8d9e1398fce2ab8959853f2d04ef26ac028d938e730b8e435aeb43f2ad789900000000000000000000009450003333ece2f9488cdbd16155ad5578d57ffe9ea25556354da491f265617cb943014b01b02587b3d3692e3c672da61a09aabf2d0a3bbc9dd3ad0d8f809cbea5aab8fd639ea795e57d6531a19783334b006ab7"], 0x1b1)
getrlimit(0x2, &(0x7f0000000080))
syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00')
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000780), 0x1000000000000226, 0x0)
getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, &(0x7f0000000380))
msgget$private(0x0, 0x0)
r1 = msgget$private(0x0, 0x8)
msgsnd(r1, 0x0, 0xa3, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f0000000a00)=ANY=[@ANYRESHEX], 0x1, 0x0)
msgctl$IPC_RMID(0x0, 0x0)
msgsnd(0x0, 0x0, 0x0, 0xc00)
msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x4})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180), 0x0)
r2 = memfd_create(&(0x7f0000000200)='\x00', 0x5)
ftruncate(r2, 0xc00000)
read(r2, &(0x7f00000000c0)=""/48, 0xfffffca3)

04:55:42 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = dup3(r2, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_GET_CPUID2(r4, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[]])
dup2(r5, r4)

[  927.644886]  ? wait_for_completion+0x420/0x420
[  927.644904]  __alloc_pages_slowpath+0x23c6/0x2930
[  927.644926]  ? warn_alloc+0xf0/0xf0
[  927.644945]  ? __might_sleep+0x93/0xb0
[  927.644957]  __alloc_pages_nodemask+0x62c/0x7a0
[  927.644969]  ? rcu_read_lock_sched_held+0x110/0x130
[  927.644979]  ? __alloc_pages_slowpath+0x2930/0x2930
[  927.644998]  alloc_pages_current+0xec/0x1e0
[  927.645011]  kvm_mmu_create+0xdf/0x1e0
[  927.645023]  kvm_arch_vcpu_init+0x29c/0x8e0
[  927.645036]  kvm_vcpu_init+0x272/0x360
[  927.645048]  vmx_create_vcpu+0xfc/0x2aa0
[  927.645056]  ? mutex_trylock+0x1c0/0x1c0
[  927.645071]  ? handle_rdmsr+0x6e0/0x6e0
[  927.645079]  ? wait_for_completion+0x420/0x420
[  927.645092]  kvm_arch_vcpu_create+0x8c/0xc0
[  927.645103]  kvm_vm_ioctl+0x501/0x1600
[  927.645113]  ? __lock_acquire+0x5f7/0x4620
[  927.645123]  ? get_unused_fd_flags+0xd0/0xd0
[  927.645136]  ? kvm_vcpu_release+0xa0/0xa0
[  927.645146]  ? trace_hardirqs_on+0x10/0x10
[  927.645161]  ? trace_hardirqs_on+0x10/0x10
[  927.645170]  ? __might_fault+0x110/0x1d0
[  927.645180]  ? save_trace+0x290/0x290
[  927.645189]  ? __might_fault+0x110/0x1d0
[  927.645200]  ? __fget+0x210/0x370
[  927.645217]  ? find_held_lock+0x35/0x130
[  927.645229]  ? __fget+0x210/0x370
[  927.645242]  ? kvm_vcpu_release+0xa0/0xa0
[  927.645255]  do_vfs_ioctl+0x7ae/0x1060
[  927.645270]  ? selinux_file_mprotect+0x5d0/0x5d0
[  927.645279]  ? lock_downgrade+0x740/0x740
[  927.645291]  ? ioctl_preallocate+0x1c0/0x1c0
[  927.645303]  ? __fget+0x237/0x370
[  927.645319]  ? security_file_ioctl+0x89/0xb0
[  927.645331]  SyS_ioctl+0x8f/0xc0
[  927.645341]  ? do_vfs_ioctl+0x1060/0x1060
[  927.645353]  do_syscall_64+0x1e8/0x640
[  927.645362]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  927.645377]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  927.645385] RIP: 0033:0x45af49
[  927.645390] RSP: 002b:00007f8e000f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  927.645400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  927.645406] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000006
04:55:42 executing program 4:
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  927.645411] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  927.645423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e000f36d4
[  927.645429] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  927.648539] Mem-Info:
[  927.648568] active_anon:863047 inactive_anon:1745 isolated_anon:0
[  927.648568]  active_file:4203 inactive_file:5785 isolated_file:0
[  927.648568]  unevictable:9533 dirty:147 writeback:0 unstable:0
[  927.648568]  slab_reclaimable:15898 slab_unreclaimable:126845
[  927.648568]  mapped:64777 shmem:1791 pagetables:28105 bounce:0
[  927.648568]  free:463476 free_pcp:298 free_cma:0
[  927.648587] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB isolated(anon):0kB isolated(file):0kB mapped:215092kB dirty:4kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
[  927.648605] Node 1 active_anon:1570080kB inactive_anon:76kB active_file:16796kB inactive_file:23136kB unevictable:38108kB isolated(anon):0kB isolated(file):0kB mapped:44016kB dirty:584kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
[  927.648609] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  927.648631] lowmem_reserve[]: 0 2569 2569 2569 2569
[  927.648650] Node 0 DMA32 free:36296kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:16kB inactive_file:4kB unevictable:24kB writepending:4kB present:3129332kB managed:2634332kB mlocked:24kB kernel_stack:19136kB pagetables:64628kB bounce:0kB free_pcp:536kB local_pcp:288kB free_cma:0kB
[  927.648673] lowmem_reserve[]: 0 0 0 0 0
[  927.648692] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  927.648712] lowmem_reserve[]: 0 0 0 0 0
[  927.648731] Node 1 Normal free:1807124kB min:53508kB low:66884kB high:80260kB active_anon:1570080kB inactive_anon:76kB active_file:16796kB inactive_file:23136kB unevictable:38108kB writepending:536kB present:3932160kB managed:3870192kB mlocked:38108kB kernel_stack:20800kB pagetables:47792kB bounce:0kB free_pcp:656kB local_pcp:132kB free_cma:0kB
[  927.648752] lowmem_reserve[]: 0 0 0 0 0
[  927.648771] Node 0 DMA: 3*4kB (UM) 15*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB
[  927.648850] Node 0 DMA32: 30*4kB (MH) 698*8kB (UMH) 892*16kB (UMEH) 511*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36328kB
[  927.653818] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  927.653873] Node 1 Normal: 41*4kB (UME) 0*8kB 1*16kB (E) 181*32kB (UE) 52*64kB (U) 7*128kB (UME) 3*256kB (U) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 437*4096kB (M) = 1807060kB
[  927.653960] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  927.653967] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  927.653974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  927.653981] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  927.653985] 16665 total pagecache pages
[  927.653996] 0 pages in swap cache
[  927.654001] Swap cache stats: add 0, delete 0, find 0/0
[  927.654005] Free swap  = 0kB
[  927.654008] Total swap = 0kB
04:55:43 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000200)='/dev/dri/card#\x00', 0x7ff, 0x2221c2)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r3=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x14, &(0x7f0000000640)={r3}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000340)={0x8366, 0x3ff, 0x3, 0x1000, 0x8000, 0x4, 0x63a, 0x80000000, <r4=>r3}, &(0x7f0000000380)=0x20)
setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000003c0)=@assoc_value={r4, 0x9}, 0x8)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f00000002c0)={0x4, 0x80000000, 0x1, 0xc6, &(0x7f0000000080)=""/198, 0x2d9, &(0x7f0000000000)=""/60, 0x54, &(0x7f0000000180)=""/84})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
uselib(&(0x7f0000000280)='./file0\x00')
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VHOST_SET_LOG_BASE(r6, 0x4008af04, &(0x7f0000000300)=&(0x7f0000000040))
ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f0000000240))

[  927.654014] 1965979 pages RAM
[  927.654018] 0 pages HighMem/MovableOnly
[  927.654022] 335871 pages reserved
[  927.654025] 0 pages cma reserved
[  927.888831] protocol 88fb is buggy, dev hsr_slave_0
[  927.904887] protocol 88fb is buggy, dev hsr_slave_1
[  928.180194] protocol 88fb is buggy, dev hsr_slave_0
[  928.482371] protocol 88fb is buggy, dev hsr_slave_0
[  928.532094] sd 0:0:1:0: [sg0] tag#6917 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK
[  928.541942] sd 0:0:1:0: [sg0] tag#6917 CDB: Test Unit Ready
[  928.547960] sd 0:0:1:0: [sg0] tag#6917 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.557220] sd 0:0:1:0: [sg0] tag#6917 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.566429] sd 0:0:1:0: [sg0] tag#6917 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:43 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
read$char_usb(r0, &(0x7f0000000200)=""/231, 0xe7)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0xfffffffffffffec6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x12880, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000340)}, 0x6003, 0x0, 0xfffff000, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14)
setsockopt$packet_buf(r4, 0x107, 0x6, &(0x7f00000000c0)="fc435a41f2d00e92cf5f073d8a16c09a0ee3f59fb2ffdedbdf044f14d9cf2672c60aa36c2eed", 0x26)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  928.575659] sd 0:0:1:0: [sg0] tag#6917 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.584801] sd 0:0:1:0: [sg0] tag#6917 CDB[40]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:43 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x81)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000580)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b75fb3488fd8015bba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377aba09e7b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10000174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d41f6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28b774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a800655d127de6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d8191643"})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r5 = dup3(r2, r3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = dup(r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$KVM_GET_CPUID2(r4, 0x4188aea7, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYPTR64=&(0x7f0000000380)=ANY=[]])
dup2(r5, r4)

[  928.593969] sd 0:0:1:0: [sg0] tag#6917 CDB[50]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.594237] sd 0:0:1:0: [sg0] tag#6917 CDB[60]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.594406] sd 0:0:1:0: [sg0] tag#6917 CDB[70]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.594575] sd 0:0:1:0: [sg0] tag#6917 CDB[80]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.594766] sd 0:0:1:0: [sg0] tag#6917 CDB[90]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
04:55:43 executing program 4:
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  928.594843] sd 0:0:1:0: [sg0] tag#6917 CDB[a0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.595018] sd 0:0:1:0: [sg0] tag#6917 CDB[b0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.595229] sd 0:0:1:0: [sg0] tag#6917 CDB[c0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.595534] sd 0:0:1:0: [sg0] tag#6917 CDB[d0]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  928.595769] sd 0:0:1:0: [sg0] tag#6917 CDB[e0]: 00 00 00 00 00 00 00 00 00 00 00 00
[  928.746719] syz-executor.3: page allocation failure: order:0, mode:0x14000c4(GFP_KERNEL|GFP_DMA32), nodemask=(null)
[  928.858889] syz-executor.3 cpuset=syz3 mems_allowed=0-1
[  928.866546] CPU: 0 PID: 15548 Comm: syz-executor.3 Not tainted 4.14.163-syzkaller #0
[  928.874449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  928.883810] Call Trace:
[  928.886412]  dump_stack+0x142/0x197
[  928.890073]  warn_alloc.cold+0x96/0x1af
[  928.894064]  ? zone_watermark_ok_safe+0x2b0/0x2b0
[  928.898913]  ? wait_for_completion+0x420/0x420
[  928.903484]  __alloc_pages_slowpath+0x23c6/0x2930
[  928.908321]  ? warn_alloc+0xf0/0xf0
[  928.911940]  ? __might_sleep+0x93/0xb0
[  928.915814]  __alloc_pages_nodemask+0x62c/0x7a0
[  928.920478]  ? rcu_read_lock_sched_held+0x110/0x130
[  928.925479]  ? __alloc_pages_slowpath+0x2930/0x2930
[  928.930495]  alloc_pages_current+0xec/0x1e0
[  928.934802]  kvm_mmu_create+0xdf/0x1e0
[  928.938677]  kvm_arch_vcpu_init+0x29c/0x8e0
[  928.942985]  kvm_vcpu_init+0x272/0x360
[  928.946858]  vmx_create_vcpu+0xfc/0x2aa0
[  928.950901]  ? mutex_trylock+0x1c0/0x1c0
[  928.954953]  ? handle_rdmsr+0x6e0/0x6e0
[  928.958911]  ? wait_for_completion+0x420/0x420
[  928.963491]  kvm_arch_vcpu_create+0x8c/0xc0
[  928.967808]  kvm_vm_ioctl+0x501/0x1600
[  928.971680]  ? __lock_acquire+0x5f7/0x4620
[  928.975901]  ? get_unused_fd_flags+0xd0/0xd0
[  928.980291]  ? kvm_vcpu_release+0xa0/0xa0
[  928.984421]  ? trace_hardirqs_on+0x10/0x10
[  928.988639]  ? trace_hardirqs_on+0x10/0x10
[  928.992858]  ? __might_fault+0x110/0x1d0
[  928.996912]  ? save_trace+0x290/0x290
[  929.000692]  ? __might_fault+0x110/0x1d0
[  929.004737]  ? __fget+0x210/0x370
[  929.008174]  ? find_held_lock+0x35/0x130
[  929.012219]  ? __fget+0x210/0x370
[  929.015660]  ? kvm_vcpu_release+0xa0/0xa0
[  929.019805]  do_vfs_ioctl+0x7ae/0x1060
[  929.023790]  ? selinux_file_mprotect+0x5d0/0x5d0
[  929.028548]  ? lock_downgrade+0x740/0x740
[  929.032689]  ? ioctl_preallocate+0x1c0/0x1c0
[  929.037092]  ? __fget+0x237/0x370
[  929.040542]  ? security_file_ioctl+0x89/0xb0
[  929.044940]  SyS_ioctl+0x8f/0xc0
[  929.048300]  ? do_vfs_ioctl+0x1060/0x1060
[  929.052435]  do_syscall_64+0x1e8/0x640
[  929.056323]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  929.061177]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  929.066358] RIP: 0033:0x45af49
[  929.069530] RSP: 002b:00007f8e000f2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  929.077231] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[  929.084501] RDX: 0000000000000081 RSI: 000000000000ae41 RDI: 0000000000000006
[  929.091768] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  929.099029] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e000f36d4
[  929.106283] R13: 00000000004c44c8 R14: 00000000004dae18 R15: 00000000ffffffff
[  929.266631] Mem-Info:
[  929.285844] active_anon:859993 inactive_anon:1746 isolated_anon:0
[  929.285844]  active_file:4200 inactive_file:5801 isolated_file:0
[  929.285844]  unevictable:9533 dirty:36 writeback:0 unstable:0
[  929.285844]  slab_reclaimable:15953 slab_unreclaimable:126221
[  929.285844]  mapped:64777 shmem:1791 pagetables:28100 bounce:0
04:55:43 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:43 executing program 1:
keyctl$revoke(0x3, 0x0)
keyctl$setperm(0x5, 0x0, 0x0)
io_setup(0x6, &(0x7f0000000500)=<r0=>0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
io_submit(r0, 0x1, &(0x7f0000000380)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000240)="7ef8545a7c31b2b12b5a72090b090971", 0x10}])

04:55:43 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  929.285844]  free:466931 free_pcp:432 free_cma:0
[  929.329309] Node 0 active_anon:1882108kB inactive_anon:6904kB active_file:8kB inactive_file:16kB unevictable:28kB isolated(anon):0kB isolated(file):0kB mapped:215100kB dirty:8kB writeback:0kB shmem:7080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 966656kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes
04:55:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2000, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x3, 0x2, 0x0, 0xda, 0x2, 0x2, 0xaf}, 0xffffffffffffff7d)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000, 0x1})
r2 = socket$inet(0x2, 0x3, 0x2)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x2c1)
pipe2(&(0x7f0000000140)={<r6=>0xffffffffffffffff}, 0x0)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r6)
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f0000000100))
getpriority(0x1, 0xffffffffffffffff)
getsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)

04:55:44 executing program 1:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x19b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0xffffffa6)
r4 = creat(0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x84000)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
bind$netrom(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:44 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_SCSI_RESET(r5, 0x2284, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0x10841, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
r8 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
sendmsg$TIPC_NL_SOCK_GET(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x44b204}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="20010009", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYPTR64=&(0x7f0000000280)=ANY=[@ANYRESOCT=r6, @ANYRESOCT, @ANYRESHEX], @ANYRES16=r8], @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x20800}, 0x2000c000)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

[  929.395349] Node 1 active_anon:1557864kB inactive_anon:80kB active_file:16792kB inactive_file:23188kB unevictable:38104kB isolated(anon):0kB isolated(file):0kB mapped:44008kB dirty:236kB writeback:0kB shmem:84kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 36864kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no
04:55:44 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  929.395354] Node 0 DMA free:10484kB min:216kB low:268kB high:320kB active_anon:4192kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
04:55:44 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x5, 0x8000}, 0x2)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
ioctl$KDADDIO(r5, 0x4b34, 0x7c)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x26, 0x0, 0x80, 0xff, 0x1f, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x9008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
getpeername$unix(r6, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40000000000)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:44 executing program 2:
r0 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x6, 0x100)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000200)={<r2=>0x0, 0x1}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000280)={0xfffc, 0x5, 0x8006, 0x0, 0x7f, 0x401, 0xd5, 0x9, r2}, &(0x7f00000002c0)=0x20)
r3 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$RTC_VL_CLR(r0, 0x7014)
ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000300)={0x81, 0x6, 0x1000, 0x3ff, 0x8, 0xfffffffe})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x400, 0x828, &(0x7f0000000040)="37b7ce28802862ad84764b74aeab604f76cadda2b2479e308bef23afde44ed5dc868cdb654222dac5a8abcdfe30ea3b2d84efd35e9b44c3bcc8e276f4b16293e8c24b8e8148ded57693ddc505ba4cfed2ede", &(0x7f00000000c0)="5b62bdcf2b8f49d22bb9f117207dff2ab1f9e08699d487e390854f8cfaf3f70f0e3b4f4dc9cf2b2baa12fcca518745f09d3a07122ae735452aed941302c032dcb98eda2d98cdaf293f2863a35022d64e15c7b83e87a72792dc4e75375154b7b2731d071dc5384a48f738ab871b04166c52581fc7925311628045565c9672fb425149eaf53ad3a3b7a6c1f9e0c4d8ea96d000cdd188f9477e757a968afe89f1e34134", 0x52, 0xa2})
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000340)=""/56)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x520, 0x1a8, 0x0, 0x0, 0xe8, 0x378, 0x488, 0x488, 0x488, 0x488, 0x488, 0x6, &(0x7f0000000380), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x4}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x2}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x8, 0x4, 0x3}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x401, 0x0, 0x0, 'veth0_to_team\x00', 'netdevsim0\x00', {0x80}, {0xff}, 0x67, 0x1, 0x4}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0xe}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x6, 0x2}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff000000, 0xffffff00, 'team0\x00', 'caif0\x00', {0x111ec02206d45854}, {}, 0xd001a06474406d3a, 0x6, 0x44}, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@icmp={{0x28, 'icmp\x00'}, {0x0, "64f0", 0x1}}, @common=@addrtype={{0x30, 'addrtype\x00'}, {0x4a729ee050c26224, 0x20, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xfff, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}, {0x8}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x6, 0x76, @ipv6=@mcast2, 0x4e24}}}, {{@ip={@broadcast, @local, 0x0, 0xffffff00, 'team_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x89, 0x3, 0x42}, 0x0, 0xe0, 0x110, 0x0, {}, [@common=@set={{0x40, 'set\x00'}, {{0x4, [0x0, 0x12133eec7f6a9da6, 0x3, 0x4, 0x3, 0x5], 0x6, 0x2}}}, @common=@unspec=@mac={{0x30, 'mac\x00'}, {@random="bafb5508771a", 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0xddb4, @loopback, 0x4e20}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x580)
syncfs(0xffffffffffffffff)

[  929.395373] lowmem_reserve[]: 0 2569 2569 2569 2569
[  929.395391] Node 0 DMA32 free:36264kB min:36380kB low:45472kB high:54564kB active_anon:1877916kB inactive_anon:6904kB active_file:8kB inactive_file:16kB unevictable:28kB writepending:8kB present:3129332kB managed:2634332kB mlocked:28kB kernel_stack:19136kB pagetables:64628kB bounce:0kB free_pcp:372kB local_pcp:116kB free_cma:0kB
[  929.395417] lowmem_reserve[]: 0 0 0 0 0
[  929.395433] Node 0 Normal free:0kB min:0kB low:0kB high:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:786432kB managed:0kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  929.395450] lowmem_reserve[]: 0 0 0 0 0
04:55:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$VIDIOC_TRY_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, &(0x7f00000000c0)={0x9b0000, 0x101, 0x1, <r1=>r0, 0x0, &(0x7f0000000080)={0x0, 0x2, [], @p_u32=&(0x7f0000000040)=0xa8}})
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=<r3=>0x0)
r4 = creat(0x0, 0x0)
ioctl$USBDEVFS_RELEASEINTERFACE(r1, 0x80045510, &(0x7f0000000440)=0x5)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000140)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000240)=0xe8)
ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000280)={0x7ff, 0xffff8f57, {r3}, {r5}, 0x7, 0x7})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
write$UHID_DESTROY(r1, &(0x7f0000000480), 0x4)
socket$phonet_pipe(0x23, 0x5, 0x2)
r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00')
sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20}, 0xb48d762445e9ff21)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$phonet(r8, &(0x7f00000004c0)={0x23, 0x1, 0x8, 0x4}, 0x10)

[  929.395467] Node 1 Normal free:1820468kB min:53508kB low:66884kB high:80260kB active_anon:1557864kB inactive_anon:80kB active_file:16792kB inactive_file:23188kB unevictable:38104kB writepending:284kB present:3932160kB managed:3870192kB mlocked:38104kB kernel_stack:20832kB pagetables:47772kB bounce:0kB free_pcp:804kB local_pcp:408kB free_cma:0kB
[  929.395487] lowmem_reserve[]: 0 0 0 0 0
[  929.395502] Node 0 DMA: 3*4kB (UM) 15*8kB (UMEH) 19*16kB (MH) 6*32kB (EH) 4*64kB (H) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 0*4096kB = 10484kB
[  929.395781] Node 0 DMA32: 32*4kB (UMEH) 692*8kB (UMH) 896*16kB (UMEH) 510*32kB (UE) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 36320kB
[  929.395833] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
04:55:44 executing program 2:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00')
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000080)={0x2, @capture={0x1000, 0x3, {0x4, 0x47}, 0x10001, 0x8983}})

[  929.395874] Node 1 Normal: 231*4kB (UME) 152*8kB (UM) 83*16kB (UME) 212*32kB (UME) 96*64kB (UM) 30*128kB (UME) 6*256kB (UM) 7*512kB (UME) 3*1024kB (UM) 1*2048kB (E) 437*4096kB (M) = 1820428kB
[  929.395958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  929.395964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  929.395970] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  929.395975] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  929.395978] 16682 total pagecache pages
[  929.395988] 0 pages in swap cache
[  929.395993] Swap cache stats: add 0, delete 0, find 0/0
[  929.395995] Free swap  = 0kB
04:55:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x5})

04:55:44 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  929.395998] Total swap = 0kB
[  929.396004] 1965979 pages RAM
[  929.396007] 0 pages HighMem/MovableOnly
[  929.396009] 335871 pages reserved
[  929.396012] 0 pages cma reserved
04:55:44 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x5584, 0x357f02)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x12000, 0x44)
sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x2, 0x100, 0x70bd2b, 0x25dfdbfd, {0x5, 0x0, 0x5}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:45 executing program 1:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x19b, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xfffffffe}]}, 0xffffffa6)
r4 = creat(0x0, 0x0)
pipe2(&(0x7f00000000c0)={<r5=>0xffffffffffffffff}, 0x84000)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040)=0x2, 0x4)
bind$netrom(r4, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:45 executing program 0:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$BLKFLSBUF(r4, 0x1261, &(0x7f00000000c0)=0xfffffffffffffff7)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
flistxattr(r5, &(0x7f0000000100)=""/79, 0x4f)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:45 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:45 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$PIO_FONT(r3, 0x4b61, &(0x7f00000000c0)="590f1b56498b50c2137d1c5fead494e3db53717b1752291da77ebaa4c131fc618689815d26c63361fc3dd60afa4b654564c295f70f77e7430520eb81398c0c15ac8f366b04b8061e7acc7b6f28575541398fc4a1822fb44a8891f411a59dbb4882688193d6c44026558cda6f4d227c96f1665268e910f82f4ee66cf52de69887b0d8453d4236306b09a0ba9f1a")
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:45 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:45 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:45 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x400000)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000002c0)=0x1c)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300)='/dev/nvme-fabrics\x00', 0x80400, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000380)={<r4=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r4})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={r4, 0x42972f0d5d4b6c47})
ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000001c0)=0x9)
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000)={r4, 0xb79fd5ad377957d7})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x202000, 0x0)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00e2ff2ad9c8df3670c8fa357cf600e1fad27b5b4fc5825b155d8d8fcee7446abf9c81cee78068cea300"/62], &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000140)={0x0, 0xde}, 0x8)

[  931.200175] net_ratelimit: 8 callbacks suppressed
[  931.200180] protocol 88fb is buggy, dev hsr_slave_0
[  931.200231] protocol 88fb is buggy, dev hsr_slave_1
[  931.200311] protocol 88fb is buggy, dev hsr_slave_0
[  931.200347] protocol 88fb is buggy, dev hsr_slave_1
04:55:45 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7cea, 0x100)
bind$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:46 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e23, 0x7fffffff, @rand_addr="0b10cfbed68d0dc4688042fbcabb9bf3", 0xa}, 0x1c)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_inet_SIOCDELRT(r5, 0x890c, &(0x7f0000000100)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e23, @empty}, 0x121, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)='dummy0\x00', 0x80000001, 0x4, 0xf001})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$P9_RLOPEN(r6, &(0x7f0000000240)={0x18, 0xd, 0x1, {{0x1, 0x0, 0x6}, 0x5}}, 0x18)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x30005, 0x0)
r7 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000040), 0x4)
recvfrom$inet6(r7, &(0x7f0000000340)=""/4096, 0x1000, 0x100, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @empty, 0x101}, 0x1c)

04:55:46 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 2:
prctl$PR_SET_TSC(0x1a, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000000005, 0xa8bd03)
r1 = gettid()
ptrace$getregs(0xe, r1, 0x40, &(0x7f0000000080)=""/73)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:46 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  932.000105] protocol 88fb is buggy, dev hsr_slave_0
[  932.000148] protocol 88fb is buggy, dev hsr_slave_1
04:55:46 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:46 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x664806643cc11d4b, 0x0)
ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000080))
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

04:55:47 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x256)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$EVIOCGABS0(r1, 0x80184540, &(0x7f0000000200)=""/204)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:47 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffffffffffe, 0x10400)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VHOST_GET_VRING_ENDIAN(r2, 0x4008af14, &(0x7f00000000c0)={0x3, 0x6})
socket$inet_sctp(0x2, 0x1, 0x84)

04:55:47 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:47 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:47 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = syz_open_pts(r3, 0x400)
ioctl$TCXONC(r4, 0x540a, 0x9)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x9cdf)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
setsockopt$PNPIPE_HANDLE(r3, 0x113, 0x3, &(0x7f0000000100)=0x6, 0x4)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r6=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0xb849}, r6, 0x1, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:47 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:47 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f00000000c0)=0x1, 0x4)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205647, &(0x7f00000002c0)={0x9c0000, 0x80000000, 0x8000000, <r3=>r2, 0x0, &(0x7f0000000080)={0x99096f, 0xfffff801, [], @p_u32=&(0x7f0000000300)=0xffffffff}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r4 = creat(0x0, 0x0)
sysinfo(&(0x7f0000000400)=""/68)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000380)={0xfffffffc, 0x4, 0x4, 0x10404, 0x2, {}, {0x1, 0x2, 0x1, 0x43, 0x6, 0xe6, "000cbb3a"}, 0x8000, 0x0, @planes=&(0x7f0000000340)={0x5, 0x1, @mem_offset=0xda85, 0x1}, 0xf6})
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/220, &(0x7f0000000280)=0xdc)

04:55:47 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

[  932.640102] protocol 88fb is buggy, dev hsr_slave_0
04:55:47 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  932.640121] protocol 88fb is buggy, dev hsr_slave_0
[  932.640151] protocol 88fb is buggy, dev hsr_slave_1
[  932.640162] protocol 88fb is buggy, dev hsr_slave_1
04:55:47 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:47 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

04:55:48 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f00000003c0))
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20000, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ADD(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xb77bd86713f8600}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0xcc, r5, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xb8, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc20c}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8e}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2d}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @loopback, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x8002)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r7 = add_key(&(0x7f0000000440)='rxrpc_s\x00', &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="72957e6d98b390ca42b19d4f4006cdbf2753dfb24cc2d57a1fb1a62d0c0d8149a27f", 0x22, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000400)='encrypted\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r7})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)

04:55:48 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r4, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x14, &(0x7f0000000640)={r5}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000004c0)={0x0, 0x3, 0x0, 0x709, 0x3a, 0xb026, 0x7, 0x7, <r6=>r5}, &(0x7f0000000500)=0x20)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={r6, @in6={{0xa, 0x4e23, 0x6, @local, 0x10000}}, 0x3, 0x6}, 0x90)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x0, @can={0x1d, r2}, @sco={0x1f, {0x5, 0x8, 0x0, 0x2, 0x40, 0x1}}, @xdp={0x2c, 0x4, 0x0, 0xb}, 0x26, 0x0, 0x0, 0x0, 0xb427, &(0x7f0000000200)='macvlan1\x00', 0x81, 0x80000001, 0x2})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r8 = socket$inet(0x2, 0x3, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, <r9=>0x0})
r10 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TUNSETSTEERINGEBPF(r10, 0x800454e0, &(0x7f0000000400))
waitid(0x1, r9, &(0x7f0000000700), 0x40000000, &(0x7f0000000780))
setsockopt$inet_int(r8, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FS_IOC_GETFLAGS(r8, 0x80086601, &(0x7f0000000080))
r11 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r11, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r11, 0x65, 0x4, &(0x7f0000000480)=0x1, 0x4)
ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000040))
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002240)='IPVS\x00')
sendmsg$IPVS_CMD_GET_CONFIG(r12, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002280)={0x14, r13, 0x1}, 0x14}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x804020}, 0xc, &(0x7f0000000600)={&(0x7f0000000300)={0xcc, r13, 0x1300, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_FWD_METHOD={0x6, 0x3, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x10001}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0xc}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xff}, @IPVS_DEST_ATTR_FWD_METHOD={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}]}, 0xcc}, 0x1, 0x0, 0x0, 0x800}, 0x80)

04:55:48 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:48 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

04:55:48 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:48 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_netdev_private(r3, 0x89fa, &(0x7f0000000100)="6e5ad997263733e9901652e5d54ad58ad37e3d18fb6889f9192447350cc401f823b0aac310b84fbc62c22983187f29702753eef6f7adbc9cf6484efffb5651379f50ff369879401bd0116d7b66713c1c6c793491759c5aaba914aec0f908983ac1cd67aebf83d517da8a")
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES16=r6], 0x2)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

04:55:48 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:48 executing program 0:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:48 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:48 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000100))
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r5 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x2)
ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:48 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:48 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:49 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket(0x5, 0x9faf7e0272eb0f2a, 0x6)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x78, 0x1, 0x1, 0x800, 0x70bd29, 0x25dfdbff, {0xc, 0x0, 0x3}, [@CTA_TUPLE_ORIG={0x64, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x277, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, {0x5, 0x1, 0x88}}]}]}, 0x78}}, 0x44800)
preadv(r1, 0x0, 0x0, 0x4)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
socketpair(0x5, 0x0, 0x0, &(0x7f0000000340)={<r3=>0x0, 0x0})
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r4=>0x0]}, &(0x7f000095dffc)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x32, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x1}]}, 0x20}}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000000c0), 0x4)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x2, r4}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x5, 0x209, 0x401, 0x6, r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0xffffffffffffffcd, &(0x7f0000000340)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast, 0x63, 0x4053f2f6, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]})

04:55:49 executing program 0 (fault-call:4 fault-nth:0):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:49 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:49 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:49 executing program 2:
r0 = creat(0x0, 0x2)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304}, "e69692c0715c2992", "aee41fcd18d147e5f3cae1280b072da6d65bc59e4039ab6d75165b94ed262bb3", "2a44c239", "7d391d4dd1cb675d"}, 0x38)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SNDCTL_DSP_GETFMTS(r1, 0x8004500b, &(0x7f00000005c0)=0x66b2)
r2 = accept4$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14, 0x80800)
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"/912], 0x390)
r3 = syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x4e41, 0x800)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r6, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="05000000", @ANYRES32=<r7=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x14, &(0x7f0000000640)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00 \x00'], &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000500)={<r8=>r7, 0x7, 0x1, [0x8]}, &(0x7f0000000540)=0xa)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000580)={r8, 0x9, 0x5, [0x8, 0xffff, 0x1, 0x1, 0x2]}, 0x12)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, 0x0)

04:55:49 executing program 0 (fault-call:4 fault-nth:1):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  934.497618] FAULT_INJECTION: forcing a failure.
[  934.497618] name failslab, interval 1, probability 0, space 0, times 0
[  934.497630] CPU: 1 PID: 15820 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  934.497636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  934.497640] Call Trace:
[  934.497661]  dump_stack+0x142/0x197
04:55:49 executing program 1:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  934.497677]  should_fail.cold+0x10f/0x159
[  934.497693]  should_failslab+0xdb/0x130
[  934.497703]  __kmalloc+0x2f0/0x7a0
[  934.497715]  ? __lock_acquire+0x5f7/0x4620
[  934.497724]  ? lock_downgrade+0x740/0x740
[  934.497801]  ? drm_ioctl+0x3d1/0x940
[  934.497813]  drm_ioctl+0x3d1/0x940
[  934.497845]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  934.497860]  ? drm_getstats+0x30/0x30
[  934.497874]  ? __might_sleep+0x93/0xb0
[  934.497883]  ? __fget+0x210/0x370
[  934.497897]  ? drm_getstats+0x30/0x30
[  934.497907]  do_vfs_ioctl+0x7ae/0x1060
[  934.497920]  ? selinux_file_mprotect+0x5d0/0x5d0
[  934.497929]  ? lock_downgrade+0x740/0x740
[  934.497939]  ? ioctl_preallocate+0x1c0/0x1c0
[  934.497951]  ? __fget+0x237/0x370
[  934.497968]  ? security_file_ioctl+0x89/0xb0
[  934.497981]  SyS_ioctl+0x8f/0xc0
[  934.497990]  ? do_vfs_ioctl+0x1060/0x1060
[  934.498002]  do_syscall_64+0x1e8/0x640
[  934.498013]  ? trace_hardirqs_off_thunk+0x1a/0x1c
04:55:49 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

[  934.498033]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  934.498044] RIP: 0033:0x45af49
[  934.498051] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  934.498065] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49
[  934.498072] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  934.498080] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  934.498088] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
04:55:49 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0x1, 0x1)
bind$netrom(r3, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100), 0xc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000000c0)={0x1, 'veth0\x00', {}, 0x6})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r5, 0x0, 0x30005, 0x0)

[  934.498096] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  934.589673] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  934.596943] audit: type=1400 audit(1578632149.199:104): avc:  denied  { setopt } for  pid=15824 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  934.655892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
04:55:49 executing program 0 (fault-call:4 fault-nth:2):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:49 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x20)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000480)={'batadv0\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="37000000040000000e"]})
r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80000, 0x0)
openat$cgroup_type(r1, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0)

04:55:49 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

[  934.841395] FAULT_INJECTION: forcing a failure.
[  934.841395] name fail_page_alloc, interval 1, probability 0, space 0, times 0
04:55:49 executing program 0 (fault-call:4 fault-nth:3):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  934.841405] CPU: 1 PID: 15839 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
04:55:49 executing program 0 (fault-call:4 fault-nth:4):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  934.841411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  934.841415] Call Trace:
[  934.841430]  dump_stack+0x142/0x197
[  934.841446]  should_fail.cold+0x10f/0x159
[  934.841468]  __alloc_pages_nodemask+0x1d6/0x7a0
[  934.841476]  ? fs_reclaim_acquire+0x20/0x20
[  934.841490]  ? __alloc_pages_slowpath+0x2930/0x2930
[  934.841508]  cache_grow_begin+0x80/0x400
[  934.841516]  __kmalloc+0x6bf/0x7a0
[  934.841523]  ? __lock_acquire+0x5f7/0x4620
[  934.841531]  ? drm_ioctl+0x3d1/0x940
[  934.841538]  drm_ioctl+0x3d1/0x940
[  934.841543]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  934.841550]  ? drm_getstats+0x30/0x30
04:55:49 executing program 0 (fault-call:4 fault-nth:5):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  934.841558]  ? __might_sleep+0x93/0xb0
[  934.841564]  ? __fget+0x210/0x370
[  934.841572]  ? drm_getstats+0x30/0x30
[  934.841578]  do_vfs_ioctl+0x7ae/0x1060
[  934.841585]  ? selinux_file_mprotect+0x5d0/0x5d0
[  934.841590]  ? lock_downgrade+0x740/0x740
[  934.841597]  ? ioctl_preallocate+0x1c0/0x1c0
[  934.841603]  ? __fget+0x237/0x370
[  934.841613]  ? security_file_ioctl+0x89/0xb0
[  934.841620]  SyS_ioctl+0x8f/0xc0
[  934.841625]  ? do_vfs_ioctl+0x1060/0x1060
[  934.841633]  do_syscall_64+0x1e8/0x640
04:55:49 executing program 1:
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  934.841639]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  934.841654]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  934.841661] RIP: 0033:0x45af49
[  934.841667] RSP: 002b:00007fe80f23dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  934.841678] RAX: ffffffffffffffda RBX: 00007fe80f23dc90 RCX: 000000000045af49
[  934.841684] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  934.841689] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000
[  934.841695] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f23e6d4
[  934.841700] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  934.911261] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  935.004420] FAULT_INJECTION: forcing a failure.
[  935.004420] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  935.004432] CPU: 0 PID: 15855 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  935.004438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  935.004441] Call Trace:
[  935.004456]  dump_stack+0x142/0x197
[  935.004471]  should_fail.cold+0x10f/0x159
[  935.004486]  __alloc_pages_nodemask+0x1d6/0x7a0
[  935.004496]  ? ____cache_alloc_node+0x162/0x1d0
[  935.004509]  ? __alloc_pages_slowpath+0x2930/0x2930
[  935.004517]  ? ____cache_alloc_node+0x162/0x1d0
[  935.004535]  cache_grow_begin+0x80/0x400
[  935.004548]  ____cache_alloc_node+0x17c/0x1d0
[  935.004560]  __kmalloc+0x21a/0x7a0
[  935.004570]  ? __lock_acquire+0x5f7/0x4620
[  935.004582]  ? drm_ioctl+0x3d1/0x940
[  935.004593]  drm_ioctl+0x3d1/0x940
[  935.004602]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  935.004628]  ? drm_getstats+0x30/0x30
[  935.004646]  ? __might_sleep+0x93/0xb0
[  935.004656]  ? __fget+0x210/0x370
[  935.004673]  ? drm_getstats+0x30/0x30
[  935.004685]  do_vfs_ioctl+0x7ae/0x1060
[  935.004699]  ? selinux_file_mprotect+0x5d0/0x5d0
[  935.004709]  ? lock_downgrade+0x740/0x740
[  935.004720]  ? ioctl_preallocate+0x1c0/0x1c0
[  935.004732]  ? __fget+0x237/0x370
[  935.004749]  ? security_file_ioctl+0x89/0xb0
[  935.004762]  SyS_ioctl+0x8f/0xc0
[  935.004772]  ? do_vfs_ioctl+0x1060/0x1060
[  935.004784]  do_syscall_64+0x1e8/0x640
[  935.004794]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  935.004809]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  935.004817] RIP: 0033:0x45af49
[  935.004823] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  935.004833] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49
[  935.004839] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  935.004845] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  935.004850] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  935.004856] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  935.102419] FAULT_INJECTION: forcing a failure.
[  935.102419] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  935.102430] CPU: 0 PID: 15863 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  935.102436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  935.102440] Call Trace:
[  935.102455]  dump_stack+0x142/0x197
[  935.102469]  should_fail.cold+0x10f/0x159
[  935.102479]  ? __might_sleep+0x93/0xb0
[  935.102501]  __alloc_pages_nodemask+0x1d6/0x7a0
[  935.102515]  ? __alloc_pages_slowpath+0x2930/0x2930
[  935.102526]  ? ____cache_alloc_node+0x1be/0x1d0
[  935.102537]  ? cache_grow_begin+0x335/0x400
[  935.102551]  cache_grow_begin+0x80/0x400
[  935.102562]  ? __cpuset_node_allowed+0xff/0x450
[  935.102573]  fallback_alloc+0x1fd/0x2c0
[  935.102586]  ____cache_alloc_node+0x1be/0x1d0
[  935.102599]  __kmalloc+0x21a/0x7a0
[  935.102608]  ? __lock_acquire+0x5f7/0x4620
[  935.102622]  ? drm_ioctl+0x3d1/0x940
[  935.102633]  drm_ioctl+0x3d1/0x940
[  935.102642]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  935.102655]  ? drm_getstats+0x30/0x30
[  935.102669]  ? __might_sleep+0x93/0xb0
[  935.102679]  ? __fget+0x210/0x370
[  935.102694]  ? drm_getstats+0x30/0x30
[  935.102710]  do_vfs_ioctl+0x7ae/0x1060
[  935.102723]  ? selinux_file_mprotect+0x5d0/0x5d0
[  935.102732]  ? lock_downgrade+0x740/0x740
[  935.102744]  ? ioctl_preallocate+0x1c0/0x1c0
[  935.102756]  ? __fget+0x237/0x370
[  935.102775]  ? security_file_ioctl+0x89/0xb0
[  935.102790]  SyS_ioctl+0x8f/0xc0
[  935.102801]  ? do_vfs_ioctl+0x1060/0x1060
[  935.102816]  do_syscall_64+0x1e8/0x640
[  935.102828]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  935.102849]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  935.102857] RIP: 0033:0x45af49
[  935.102862] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  935.102873] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49
[  935.102879] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  935.102886] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  935.102892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  935.102897] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  935.151311] FAULT_INJECTION: forcing a failure.
[  935.151311] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  935.151524] CPU: 0 PID: 15868 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  935.151531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  935.151535] Call Trace:
[  935.151550]  dump_stack+0x142/0x197
[  935.151566]  should_fail.cold+0x10f/0x159
[  935.151577]  ? __might_sleep+0x93/0xb0
[  935.151592]  __alloc_pages_nodemask+0x1d6/0x7a0
[  935.151605]  ? __alloc_pages_slowpath+0x2930/0x2930
[  935.151624]  alloc_pages_vma+0xc9/0x4c0
[  935.151634]  wp_page_copy+0xa5f/0x13d0
[  935.151649]  ? follow_pfn+0x220/0x220
[  935.151662]  ? do_raw_spin_unlock+0x16b/0x260
[  935.151672]  do_wp_page+0x24b/0x1250
[  935.151684]  ? finish_mkwrite_fault+0x620/0x620
[  935.151699]  __handle_mm_fault+0x1cc3/0x33d0
[  935.151712]  ? copy_page_range+0x1de0/0x1de0
[  935.151722]  ? find_held_lock+0x35/0x130
[  935.151741]  ? handle_mm_fault+0x1b6/0x7c0
[  935.151765]  handle_mm_fault+0x293/0x7c0
[  935.151778]  __do_page_fault+0x4c1/0xb80
[  935.151794]  ? vmalloc_fault+0xe30/0xe30
[  935.151809]  do_page_fault+0x71/0x511
[  935.151885]  page_fault+0x25/0x50
[  935.151899] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  935.151905] RSP: 0018:ffff8881af407c10 EFLAGS: 00010202
[  935.151914] RAX: 0000000000000007 RBX: 0000000000003fff RCX: 0000000000002fff
[  935.151920] RDX: 0000000000003fff RSI: ffff8881bb4119c0 RDI: 0000000020001000
[  935.151926] RBP: ffff8881af407c40 R08: ffffed1037682938 R09: 0000000000000800
[  935.151932] R10: ffffed1037682937 R11: 0000000000000006 R12: 0000000020000000
[  935.151938] R13: ffff8881bb4109c0 R14: 00007ffffffff000 R15: 0000000020003fff
[  935.151960]  ? _copy_to_user+0xb1/0xd0
[  935.151973]  drm_ioctl+0x4b8/0x940
[  935.151982]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  935.151993]  ? drm_getstats+0x30/0x30
[  935.152006]  ? __might_sleep+0x93/0xb0
[  935.152015]  ? __fget+0x210/0x370
[  935.152029]  ? drm_getstats+0x30/0x30
[  935.152042]  do_vfs_ioctl+0x7ae/0x1060
[  935.152055]  ? selinux_file_mprotect+0x5d0/0x5d0
[  935.152065]  ? lock_downgrade+0x740/0x740
[  935.152077]  ? ioctl_preallocate+0x1c0/0x1c0
[  935.152089]  ? __fget+0x237/0x370
[  935.152105]  ? security_file_ioctl+0x89/0xb0
[  935.152118]  SyS_ioctl+0x8f/0xc0
[  935.152128]  ? do_vfs_ioctl+0x1060/0x1060
[  935.152141]  do_syscall_64+0x1e8/0x640
[  935.152151]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  935.152166]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  935.152173] RIP: 0033:0x45af49
[  935.152178] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  935.152188] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49
[  935.152193] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  935.152199] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  935.152204] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  935.152209] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  935.257228] FAULT_INJECTION: forcing a failure.
[  935.257228] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  935.277228] CPU: 0 PID: 15870 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  935.289461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  935.289465] Call Trace:
[  935.289489]  dump_stack+0x142/0x197
[  935.289505]  should_fail.cold+0x10f/0x159
[  935.303248]  ? __might_sleep+0x93/0xb0
[  935.303264]  __alloc_pages_nodemask+0x1d6/0x7a0
[  935.303278]  ? __alloc_pages_slowpath+0x2930/0x2930
[  935.303287]  ? wp_page_copy+0xc83/0x13d0
[  935.303308]  alloc_pages_vma+0xc9/0x4c0
[  935.303319]  wp_page_copy+0xa5f/0x13d0
[  935.303333]  ? follow_pfn+0x220/0x220
[  935.303347]  ? do_raw_spin_unlock+0x16b/0x260
[  936.060324]  do_wp_page+0x24b/0x1250
[  936.060338]  ? finish_mkwrite_fault+0x620/0x620
04:55:50 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0xaef, 0x4, 0x4, 0x24004, 0x1, {}, {0x5, 0xc, 0x1, 0xe, 0xff, 0x0, "bf60e50d"}, 0x3, 0x1, @userptr=0x5, 0x6, 0x0, <r2=>r1})
ioctl$KVM_ASSIGN_SET_MSIX_NR(r2, 0x4008ae73, &(0x7f0000000100)={0x1, 0x3e})
ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000140)={0x0, @reserved})

04:55:50 executing program 0 (fault-call:4 fault-nth:6):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:50 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r6}, 0x8c6e, 0x1, 0x3})

04:55:50 executing program 0 (fault-call:4 fault-nth:7):
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  936.068737]  __handle_mm_fault+0x1cc3/0x33d0
[  936.068751]  ? copy_page_range+0x1de0/0x1de0
[  936.068763]  ? find_held_lock+0x35/0x130
[  936.068773]  ? handle_mm_fault+0x1b6/0x7c0
[  936.068793]  handle_mm_fault+0x293/0x7c0
[  936.068806]  __do_page_fault+0x4c1/0xb80
04:55:50 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0xfffffffffffd, 0x600003)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sync_file_range(r1, 0x2, 0x7fff, 0x3)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000000))
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

[  936.068818]  ? vmalloc_fault+0xe30/0xe30
[  936.068831]  do_page_fault+0x71/0x511
[  936.068851]  page_fault+0x25/0x50
[  936.068863] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  936.068868] RSP: 0018:ffff8881af6c7c10 EFLAGS: 00010202
[  936.068878] RAX: 0000000000000007 RBX: 0000000000003fff RCX: 0000000000001fff
[  936.068883] RDX: 0000000000003fff RSI: ffff8881af402a00 RDI: 0000000020002000
04:55:50 executing program 2:
r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x20000, 0x0)
ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d)
r1 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x80000000, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, 0x0)

[  936.068889] RBP: ffff8881af6c7c40 R08: ffffed1035e80940 R09: 0000000000000800
[  936.068895] R10: ffffed1035e8093f R11: 0000000000000006 R12: 0000000020000000
[  936.068900] R13: ffff8881af400a00 R14: 00007ffffffff000 R15: 0000000020003fff
[  936.068922]  ? _copy_to_user+0xb1/0xd0
[  936.068934]  drm_ioctl+0x4b8/0x940
[  936.068944]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  936.068956]  ? drm_getstats+0x30/0x30
[  936.068970]  ? __might_sleep+0x93/0xb0
[  936.068980]  ? __fget+0x210/0x370
[  936.068995]  ? drm_getstats+0x30/0x30
[  936.069006]  do_vfs_ioctl+0x7ae/0x1060
[  936.069019]  ? selinux_file_mprotect+0x5d0/0x5d0
[  936.069028]  ? lock_downgrade+0x740/0x740
[  936.069040]  ? ioctl_preallocate+0x1c0/0x1c0
[  936.069052]  ? __fget+0x237/0x370
[  936.069068]  ? security_file_ioctl+0x89/0xb0
[  936.069080]  SyS_ioctl+0x8f/0xc0
[  936.069090]  ? do_vfs_ioctl+0x1060/0x1060
[  936.069102]  do_syscall_64+0x1e8/0x640
[  936.069111]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  936.069125]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  936.069132] RIP: 0033:0x45af49
[  936.069136] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  936.069146] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49
[  936.069152] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  936.069157] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  936.069162] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  936.069168] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  936.204581] FAULT_INJECTION: forcing a failure.
[  936.204581] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  936.204593] CPU: 1 PID: 15881 Comm: syz-executor.0 Not tainted 4.14.163-syzkaller #0
[  936.204599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  936.204603] Call Trace:
[  936.204630]  dump_stack+0x142/0x197
[  936.204648]  should_fail.cold+0x10f/0x159
[  936.204662]  ? __might_sleep+0x93/0xb0
[  936.204680]  __alloc_pages_nodemask+0x1d6/0x7a0
[  936.204697]  ? __alloc_pages_slowpath+0x2930/0x2930
[  936.204709]  ? wp_page_copy+0xc83/0x13d0
[  936.204730]  alloc_pages_vma+0xc9/0x4c0
[  936.204744]  wp_page_copy+0xa5f/0x13d0
[  936.204758]  ? follow_pfn+0x220/0x220
[  936.204769]  ? do_raw_spin_unlock+0x16b/0x260
[  936.204782]  do_wp_page+0x24b/0x1250
[  936.204797]  ? finish_mkwrite_fault+0x620/0x620
[  936.204811]  __handle_mm_fault+0x1cc3/0x33d0
[  936.204825]  ? copy_page_range+0x1de0/0x1de0
[  936.204836]  ? find_held_lock+0x35/0x130
[  936.204846]  ? handle_mm_fault+0x1b6/0x7c0
[  936.204868]  handle_mm_fault+0x293/0x7c0
[  936.204881]  __do_page_fault+0x4c1/0xb80
[  936.204896]  ? vmalloc_fault+0xe30/0xe30
[  936.204913]  do_page_fault+0x71/0x511
[  936.204926]  page_fault+0x25/0x50
[  936.204950] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x20
[  936.204956] RSP: 0018:ffff8881b12afc10 EFLAGS: 00010202
[  936.204969] RAX: 0000000000000007 RBX: 0000000000003fff RCX: 0000000000000fff
[  936.204977] RDX: 0000000000003fff RSI: ffff88820185ba40 RDI: 0000000020003000
[  936.204984] RBP: ffff8881b12afc40 R08: ffffed104030b948 R09: 0000000000000800
[  936.204992] R10: ffffed104030b947 R11: 0000000000000006 R12: 0000000020000000
[  936.204999] R13: ffff888201858a40 R14: 00007ffffffff000 R15: 0000000020003fff
[  936.205028]  ? _copy_to_user+0xb1/0xd0
[  936.205043]  drm_ioctl+0x4b8/0x940
[  936.205056]  ? drm_mode_cursor2_ioctl+0x30/0x30
[  936.205071]  ? drm_getstats+0x30/0x30
[  936.205086]  ? __might_sleep+0x93/0xb0
[  936.205096]  ? __fget+0x210/0x370
[  936.205116]  ? drm_getstats+0x30/0x30
[  936.205128]  do_vfs_ioctl+0x7ae/0x1060
[  936.205141]  ? selinux_file_mprotect+0x5d0/0x5d0
[  936.205152]  ? lock_downgrade+0x740/0x740
[  936.205164]  ? ioctl_preallocate+0x1c0/0x1c0
[  936.205176]  ? __fget+0x237/0x370
[  936.205193]  ? security_file_ioctl+0x89/0xb0
[  936.205212]  SyS_ioctl+0x8f/0xc0
[  936.205224]  ? do_vfs_ioctl+0x1060/0x1060
[  936.205241]  do_syscall_64+0x1e8/0x640
[  936.205253]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  936.205269]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  936.205276] RIP: 0033:0x45af49
[  936.205280] RSP: 002b:00007fe80f25ec78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  936.205292] RAX: ffffffffffffffda RBX: 00007fe80f25ec90 RCX: 000000000045af49
[  936.205298] RDX: 0000000020000000 RSI: ffffffffffffffb0 RDI: 0000000000000003
[  936.205304] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  936.205311] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80f25f6d4
[  936.205317] R13: 00000000004c2837 R14: 00000000004d8bb0 R15: 0000000000000006
[  936.801825] net_ratelimit: 16 callbacks suppressed
[  936.801829] protocol 88fb is buggy, dev hsr_slave_0
[  936.801861] protocol 88fb is buggy, dev hsr_slave_1
[  936.812107] protocol 88fb is buggy, dev hsr_slave_0
[  936.826349] protocol 88fb is buggy, dev hsr_slave_1
04:55:51 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f00000010c0)='./file0\x00', &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000040)='./file0\x00', 0x101, 0x1, &(0x7f0000001080)=[{&(0x7f0000000080)="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", 0x1000, 0xffffffff}], 0x0, &(0x7f0000001180)={[{@largeio='largeio'}, {@logbsize={'logbsize', 0x3d, [0x33, 0x70, 0x76, 0x38, 0x38, 0x33, 0x35]}}, {@dax='dax'}, {@lazytime='lazytime'}, {@nouuid='nouuid'}, {@usrquota='usrquota'}, {@noattr2='noattr2'}], [{@euid_gt={'euid>', r1}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@appraise_type='appraise_type=imasig'}]})

04:55:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0xfffffffdfffffffe, 0x80002)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00')
sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0xe8, r3, 0x5a4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa6}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x48b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9afe}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc4000}, 0x4000)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:51 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:51 executing program 1:
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x25f4f78af31a048c, 0x0)
ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x5)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:51 executing program 0:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
openat$cgroup_ro(r2, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x4000)
ioctl(r3, 0x8, &(0x7f0000000000)="774a62e6e389c6862ea12af8caf4729f20e0979cf0d0f7b90bb5109f52d7a465568089e1005eca210c8f5e2985aefa5b1d18e4f1932835450516cedd23d80091da11d6fe2696293497ec80a7568a0c45c755df3e0766f8f5")

04:55:51 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x3}, 0x10)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:51 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x94, 0x400000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:51 executing program 3:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)
syz_open_procfs(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
dup3(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
readahead(r4, 0x3, 0xf4cf)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800e412}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x10)

04:55:51 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
fanotify_mark(r3, 0x86, 0x40001001, r4, &(0x7f0000000000)='./file0\x00')
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x14, &(0x7f0000000640)={r6}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r6, 0x800}, 0x8)

04:55:51 executing program 1:
perf_event_open(&(0x7f0000000580)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:51 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:52 executing program 2:
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0xde, 0x1000, 0x7, 0x0, 0x0, [{{}, 0x90b}, {{r1}, 0x1f}, {{r0}, 0x9}, {{r2}, 0x9}, {{r3}, 0x4}, {{r0}, 0x7}, {{}, 0x7}]})
r4 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10600)
bind$rose(r4, &(0x7f00000000c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))
r5 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x74d9607d6fa5a3d2)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, 0x0)

04:55:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000140)={0xa30000, 0x0, 0x40, <r1=>0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x9a0914, 0x2, [], @value64=0x9}})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0)='nl80211\x00')
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80108180}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x32f, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x8}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x20040804)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)

04:55:52 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

[  937.441179] protocol 88fb is buggy, dev hsr_slave_0
04:55:52 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  937.441217] protocol 88fb is buggy, dev hsr_slave_1
[  937.441291] protocol 88fb is buggy, dev hsr_slave_0
[  937.441327] protocol 88fb is buggy, dev hsr_slave_1
04:55:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x234040)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x2000, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1230000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000829bd7000fedbdf25030000005d4af08fd8adfd3f070000000c400300d10faa4443800d977c484d0000000000000000e6eeabec06ec8f288ca8088002000700000008000100010000000c0004000700000000000000080002007f00cf00140005000800200565"], 0x64}, 0x1, 0x0, 0x0, 0x2002490}, 0x24008045)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0))

04:55:52 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x748db1e8636a2b00, 0x0)
recvfrom$llc(r5, &(0x7f0000000100)=""/1, 0x1, 0x10100, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140))
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x191083, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

04:55:52 executing program 3:
socket$inet(0x10, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
syz_open_procfs(0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
pivot_root(&(0x7f0000000040)='./file0\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)
syz_open_procfs(0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x3, 0x300)
dup3(r0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$SEG6(0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'})
bind$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
readahead(r4, 0x3, 0xf4cf)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800e412}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r5=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200))
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x10)

04:55:52 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:52 executing program 4 (fault-call:2 fault-nth:0):
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))
recvmsg(r2, &(0x7f0000000740)={&(0x7f0000000140)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f00000002c0)=""/20, 0x14}, {&(0x7f0000000300)=""/74, 0x4a}, {&(0x7f0000000380)=""/211, 0xd3}, {&(0x7f0000000480)=""/189, 0xbd}, {&(0x7f0000000540)=""/71, 0x47}, {&(0x7f00000005c0)=""/78, 0x4e}], 0x7, &(0x7f00000006c0)=""/104, 0x68}, 0x8b3d1a217424c913)
setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000000), 0x2)
lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:userio_device_t:s0\x00', 0x371, 0x2)

04:55:52 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f0000000040)={0x0, 0x8})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:52 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))
socket$vsock_dgram(0x28, 0x2, 0x0)

[  938.250107] protocol 88fb is buggy, dev hsr_slave_0
[  938.250144] protocol 88fb is buggy, dev hsr_slave_1
04:55:53 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'macvlan0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}})
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_DEL_INTERFACE(r2, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x3}, 0xc, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="270000008399879efb79d1bca21a63b97b", @ANYRES16=r3, @ANYRESHEX], 0x3}, 0x1, 0x0, 0x0, 0x325871355089ae76}, 0x0)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
recvmmsg(r4, &(0x7f0000000980)=[{{&(0x7f0000000240)=@alg, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/113, 0x71}, {&(0x7f0000000500)=""/130, 0x82}, {&(0x7f00000005c0)=""/255, 0xff}], 0x3, &(0x7f00000006c0)=""/144, 0x90}, 0x401}, {{&(0x7f0000000780)=@ax25={{0x3, @netrom}, [@netrom, @remote, @bcast, @bcast, @null, @remote, @default]}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000800)=""/134, 0x86}, {&(0x7f00000008c0)=""/180, 0xb4}], 0x2}, 0x4}], 0x2, 0x0, &(0x7f0000000a00))
r5 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x8)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000000000))
ioctl(r1, 0x1, &(0x7f0000000380)="107698e617d5ec184a3f81636adec8ebacf3da739652ec4633473c9feef3325ad14a900d44e68efedb34f3460d6038304fcd71f1664ef7b439d19547dd83382906ec6a56e26b8c0f110000000000002d3797a791012230cf115590555a1414917aa50c18544113066f41e89ac51f4fdede678924abb2be56d3d79df6e2f41f76ab2284b260478ae499e88bd155af9ca98c8bbb68488b697366606a01cf51b04bfcc5477c6e8270fcdc328bb6609297a876d541f14255bb936a4c67f4bbe0f6ddbe5ecaa8d5bb9d898291861bd1c4842db65f7d0afb323a9c0578187918c969010400000000000078c710e7ee6d724f1409521f6b060031b368cc0626b5b3afd347b61a71d58ff988f3da552ecca0b72fbf89583a30004ba1c8d60232bd9469854994e71deac75ee0b82fcfad5bde2458e363ce09c087c54b334fd129ebfd037fd6fa491718af5537c8e46150aca2a6")

04:55:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2000000000, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040))

04:55:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3, 0x800000)
ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x4, 0xfffffffffffffeff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
r4 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCSIG(r4, 0x40045436, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x0, 0x0)
personality(0xbc00011)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000080)=""/166, &(0x7f0000000000)=0xa6)

[  938.524297] FAULT_INJECTION: forcing a failure.
[  938.524297] name failslab, interval 1, probability 0, space 0, times 0
[  938.524384] CPU: 0 PID: 15992 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0
[  938.524390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  938.524394] Call Trace:
[  938.524410]  dump_stack+0x142/0x197
[  938.524425]  should_fail.cold+0x10f/0x159
[  938.524440]  should_failslab+0xdb/0x130
[  938.524450]  __kmalloc+0x71/0x7a0
[  938.524529]  ? bit_cursor+0x9d6/0x1830
[  938.524541]  bit_cursor+0x9d6/0x1830
[  938.524556]  ? bit_clear+0x4a0/0x4a0
[  938.524590]  ? fb_get_color_depth.part.0+0xc0/0x1c0
[  938.524602]  ? fb_get_color_depth+0x5f/0x70
[  938.524613]  ? get_color+0x1bf/0x3b0
[  938.524631]  fbcon_cursor+0x4e3/0x6f0
[  938.524640]  ? bit_clear+0x4a0/0x4a0
[  938.524660]  set_cursor+0x1bd/0x240
[  938.524670]  redraw_screen+0x596/0x7c0
[  938.524683]  ? con_flush_chars+0x90/0x90
[  938.524702]  ? fbcon_set_palette+0x203/0x5b0
[  938.524717]  fbcon_modechanged+0x59e/0x880
[  938.524734]  fbcon_set_all_vcs+0x35f/0x420
[  938.524750]  fbcon_event_notify+0x75/0x17af
[  938.524764]  ? lock_acquire+0x16f/0x430
[  938.524806]  notifier_call_chain+0x111/0x1b0
[  938.524823]  blocking_notifier_call_chain+0x80/0xa0
[  938.524836]  fb_notifier_call_chain+0x25/0x30
[  938.524846]  fb_set_var+0xb09/0xcf0
[  938.524859]  ? fb_set_suspend+0x110/0x110
[  938.524869]  ? lock_acquire+0x16f/0x430
[  938.524878]  ? lock_fb_info+0x1f/0x80
[  938.524891]  ? lock_fb_info+0x1f/0x80
[  938.524904]  ? __mutex_lock+0x36a/0x1470
[  938.524915]  ? trace_hardirqs_on+0x10/0x10
[  938.524931]  ? mutex_trylock+0x1c0/0x1c0
[  938.524954]  ? mutex_lock_nested+0x16/0x20
[  938.524963]  ? mutex_lock_nested+0x16/0x20
[  938.524974]  do_fb_ioctl+0x3cc/0x940
[  938.524985]  ? fb_read+0x520/0x520
[  938.524999]  ? avc_has_extended_perms+0x8ec/0xe40
[  938.525009]  ? get_pid_task+0x98/0x140
[  938.525021]  ? avc_ss_reset+0x110/0x110
[  938.525034]  ? __lock_acquire+0x5f7/0x4620
[  938.525046]  ? lock_downgrade+0x740/0x740
[  938.525071]  ? __might_sleep+0x93/0xb0
[  938.525081]  ? __fget+0x210/0x370
[  938.525093]  fb_ioctl+0xe6/0x130
[  938.525101]  ? do_fb_ioctl+0x940/0x940
[  938.525110]  do_vfs_ioctl+0x7ae/0x1060
[  938.525120]  ? selinux_file_mprotect+0x5d0/0x5d0
[  938.525128]  ? lock_downgrade+0x740/0x740
[  938.525137]  ? ioctl_preallocate+0x1c0/0x1c0
[  938.525149]  ? __fget+0x237/0x370
[  938.525164]  ? security_file_ioctl+0x89/0xb0
[  938.525176]  SyS_ioctl+0x8f/0xc0
[  938.525185]  ? do_vfs_ioctl+0x1060/0x1060
[  938.525198]  do_syscall_64+0x1e8/0x640
[  938.525206]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[  938.525220]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  938.525228] RIP: 0033:0x45af49
[  938.525235] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  938.525248] RAX: ffffffffffffffda RBX: 00007fe609685c90 RCX: 000000000045af49
[  938.525255] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004
[  938.525262] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[  938.525270] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4
[  938.525277] R13: 00000000004c3903 R14: 00000000004d9f18 R15: 0000000000000005
04:55:53 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
write(r5, &(0x7f0000000200)="ba882d2f46fc2e91ca048d7ffc68590eb6e6f1b0c30196278f6be2eb462163345b9a9d07462c6f3cf65ef13a7bf4886103c2d6c9a8d99c57a95f52a499c21e5b2120ad53e0b30b991f8f9ea91eaa8083e37409dc75935479befb0c0381e62cdfa5519d19dd48385f76f90483f7a4575d281533c5eb8491dcb28cc5b332ce1ba1b8f4d926747a67955b2605ab50ffd321bce1962ed8107396dc01f8a8f3c86283c2b3c44c33997b8a662dc6263ca1ca4507d89c924a56a452f814fbe2278a45638bc8392ed273aff4bc44220da1342f89a4d77cca44ef986a27cc2bcfcfd6f37f0b9d71f9f45a5efd5309340b547779f102b2a43e252a0c3054", 0xf9)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:53 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:53 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4000000000007, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000080), 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0)

04:55:53 executing program 3:
r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r1=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x14, &(0x7f0000000640)={r1}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x0, @broadcast}}}, 0x0)
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)

04:55:53 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000000c0))
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})
ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)

04:55:53 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000080)={<r2=>0x0})
r3 = creat(0x0, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x800, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000040)=0x100, 0x3)
r5 = creat(0x0, 0x0)
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {0x0, r7, r6}}, 0x18)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={0x15, 0x110, 0xfa00, {r7, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x818, @ipv4={[], [], @multicast2}}, @in6={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x1000}}}, 0x118)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$VT_RESIZE(r8, 0x5609, &(0x7f0000000140)={0x1, 0x1147, 0xcef1})
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCNOTTY(r5, 0x5422)
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={r2, 0x0, r3})
r9 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r10, 0x112, 0xa, &(0x7f0000000040), 0x4)
clock_gettime(0x0, &(0x7f0000000380)={<r11=>0x0, <r12=>0x0})
futimesat(r10, &(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)={{0x77359400}, {r11, r12/1000+30000}})
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000)="d5d9853379b77a07b27be3dbcd1a659f74d98dba4c4262a18ef09f7bdedae737ff600a1238ff71040d3d84da1a7b0669342038b26d01b47ba7e2c7bf05874e3f05d3ff24350a262978a0e602abf4bd78a4a79c9ea00fef8d97187c5e9b828cebd912b28d173e1e7b566d2257f7228d213136232fb96d")

04:55:53 executing program 0:
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x90800, 0x0)
connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x2, 0x1, 0x3, {0xa, 0x4e21, 0x7fffffff, @mcast2, 0x81}}}, 0x32)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl(r4, 0xffffffffffffffb0, &(0x7f0000000080)="093d95b1d06651189bad2482f5ce678d5f3866ef5b54d6e6c87e3ea23f8da6ddbea585b278480caf47")
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TCGETS(r5, 0x5401, &(0x7f00000000c0))

04:55:53 executing program 0:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x1, 0x0)
ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000040)={0x1, 0x1, 0x11, 0x1f, 0x13f, &(0x7f0000000140)})
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0xd)
r3 = creat(0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xcd3a87a0ff78ed01}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r4, 0x2, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000010)
sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000000c0)={0x1c, r4, 0x10, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl(r1, 0xffffffffffffffb0, &(0x7f0000000000))

[  939.215538] BFS-fs: bfs_fill_super(): Inode 0x0000000d corrupted
04:55:54 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:54 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {0x0, 0x10000000}, {}, 0x0, 0xd0, 0x8})

04:55:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x101400)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r2, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r3 = fcntl$dupfd(r1, 0x406, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:54 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r6 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r6, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r7 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r7, 0x0, 0xcb, &(0x7f0000000000), 0x10)
accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0)
sendfile(r6, r0, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r8 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:54 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x748db1e8636a2b00, 0x0)
recvfrom$llc(r5, &(0x7f0000000100)=""/1, 0x1, 0x10100, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140))
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:54 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:54 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, {}, {0x4}, {}, {}, 0x0, 0xd0, 0x80000, 0x0, 0x0, 0x0, 0x4})

04:55:54 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:54 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x100}, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})
clock_gettime(0x0, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x8, 0x3, 0x4, 0x8, 0x2, {r1, r2/1000+30000}, {0x5, 0x0, 0x9, 0xfe, 0x1, 0x5, "26dee07b"}, 0x2, 0x4, @offset=0x4, 0x6, 0x0, <r3=>0xffffffffffffffff})
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000200)={0xf5cffff, 0x9, 0x7e0f, r4, 0x0, &(0x7f00000001c0)={0x9a0911, 0x4, [], @ptr=0xa99d}})

04:55:54 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240))
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
socket(0x26, 0xa, 0x3)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"})
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0)
r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa})
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000})
ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 3:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x748db1e8636a2b00, 0x0)
recvfrom$llc(r5, &(0x7f0000000100)=""/1, 0x1, 0x10100, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000200)='/dev/cec#\x00', 0x2, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
r6 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r6, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000140))
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:55 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x4}, 0x10080}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:55 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

04:55:55 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})
syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0)='l2tp\x00')

04:55:55 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

04:55:56 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, 0x0)

04:55:56 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:56 executing program 4:
r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x400)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x2, 0x8, 0xf22a, 0x5})
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'vlan1\x00', {'tunl0\x00'}, 0x401})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x2, &(0x7f0000000240)=""/113, &(0x7f00000003c0)=[{0x0, 0xf, 0xffffffff, &(0x7f00000002c0)=""/15}, {0x9, 0xc0, 0x6, &(0x7f0000000300)=""/192}]})
openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:56 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:56 executing program 0:
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000140)={0x6, 0x9, 0x4, 0x4000, 0x20, {0x0, 0x2710}, {0x0, 0x2, 0x20, 0xb0, 0x2, 0x4, 'r\v\"x'}, 0x5, 0x6, @userptr=0x262, 0x2d800000, 0x0, <r1=>r0})
ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f00000000c0)={0x6, 0x4})
r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6c7, 0x101200)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40100, 0x0)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={<r5=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r5})
r6 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x24, 0x8000)
ioctl$DRM_IOCTL_NEW_CTX(r6, 0x40086425, &(0x7f00000001c0)={r5, 0x2})
ioctl$DRM_IOCTL_GET_CTX(r4, 0xc0086423, &(0x7f0000000040)={r5, 0x1})
ioctl(r2, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:56 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240))
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
socket(0x26, 0xa, 0x3)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"})
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0)
r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa})
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000})
ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:56 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:56 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:56 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:56 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', {}, 0x1})
ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1)

04:55:56 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5ba}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
r2 = syz_open_dev$audion(&(0x7f0000000240)='/dev/audio#\x00', 0x9, 0x404)
ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000280)={{0x2, 0x4e23, @broadcast}, {0x6, @local}, 0x9958e04af76c0c14, {0x2, 0x4e20, @rand_addr=0x3}, 'netpci0\x00'})
sendto$inet(r1, &(0x7f0000000100)="a2d04d39469c308500f703871aab55333b9009b5c0b91ca7052afb47a8c45427", 0x20, 0x44080, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10)
ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000780)={0x1a, 0x6, 0x4, 0x8001000, 0x7fff, {0x77359400}, {0x0, 0xc, 0x30, 0x5, 0x3, 0xc1, "1d826b79"}, 0x4, 0x7, @fd, 0x80000, 0x0, <r3=>r1})
ioctl$SNDRV_PCM_IOCTL_RESUME(0xffffffffffffffff, 0x4147, 0x0)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2b, @empty, 0x4e24, 0x1, 'lblc\x00', 0x2, 0x9, 0x4b}, 0x2c)
setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000800)=0x5, 0x4)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})
r4 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r4, 0x0, 0xcb, &(0x7f0000000000), 0x10)
bind(r4, &(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x80)

04:55:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:57 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:57 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240))
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
socket(0x26, 0xa, 0x3)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"})
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0)
r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa})
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000})
ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  942.400123] net_ratelimit: 14 callbacks suppressed
[  942.400128] protocol 88fb is buggy, dev hsr_slave_0
[  942.400180] protocol 88fb is buggy, dev hsr_slave_1
04:55:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = perf_event_open$cgroup(&(0x7f0000000040)={0x5, 0x70, 0xb0, 0x9, 0x3f, 0x0, 0x0, 0x7, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x2, @perf_bp={&(0x7f0000000000), 0xc}, 0x1005, 0x1ff, 0x8, 0x2, 0x1, 0x535, 0xfffc}, 0xffffffffffffffff, 0xc, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:57 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x80)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
epoll_create1(0x0)
ioctl(r0, 0xffffffffffffffb0, &(0x7f0000000000))

04:55:57 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000240))
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r2 = creat(0x0, 0x0)
socket(0x26, 0xa, 0x3)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040), 0x4)
r3 = socket$inet(0x2, 0x3, 0x2)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_ifreq(r4, 0x8919, &(0x7f00000002c0)={'vlan0\x00', @ifru_data=&(0x7f0000000280)="15f964bea7019bfef87d3f541cb4b0f1456d437e17399ebdeef2de3009b485db"})
getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc)
r5 = socket$inet(0x2, 0x3, 0x2)
r6 = add_key(&(0x7f0000000440)='id_legacy\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="0096144e2724f4cf13b6ba6269585f9c2c7bd4d86d44bd17fb955ba44441a8e6344bbaf6cbf0a7e11101b049c3b0831a0027b01f97ab4a5e5dadcfa18a4ff6eb908b2b8b5a00b7b64d3daa85eea182345faa34083b31922542cbf2a492be71e3f8b8a73ce4df5804", 0x68, 0x0)
r7 = add_key$keyring(&(0x7f0000000600)='keyring\x00', &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffa)
keyctl$instantiate(0xc, r6, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'team0\x00', 0x20, 0x7fff0000000}, 0x30, r7)
setsockopt$inet_int(r5, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000100)={0x3, 'bond_slave_0\x00', {0x9d3}, 0xfffa})
setsockopt$inet_int(r3, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000140)={0x2, 'team0\x00', {0x80000000}, 0x1000})
ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f00000000c0)={0x2000, 0x7, 0x7, 0x400})
r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0)
ioctl$UI_DEV_DESTROY(r8, 0x5502)
ioctl$EVIOCGABS0(r2, 0x80184540, &(0x7f0000000300)=""/132)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000003c0)={0x80, 0xce, 0x7d, 0x6, 0x4, 0x8c, 0x1f, 0x1f, 0x80, 0x0, 0x3, 0x2, 0x1f, 0xe3}, 0xe)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:57 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:57 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:57 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:57 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:57 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10})
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x8}]}, 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x11f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30060870}, 0x40000)

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 3:
r0 = syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x5, 0x400)
ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000140)={0x2, 0x8, 0xf22a, 0x5})
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)={0x8, 'vlan1\x00', {'tunl0\x00'}, 0x401})
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MAP_BUFS(r1, 0xc0186419, &(0x7f0000000400)={0x2, &(0x7f0000000240)=""/113, &(0x7f00000003c0)=[{0x0, 0xf, 0xffffffff, &(0x7f00000002c0)=""/15}, {0x9, 0xc0, 0x6, &(0x7f0000000300)=""/192}]})
openat$selinux_create(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/create\x00', 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:58 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r1 = semget$private(0x0, 0x6, 0x14)
semctl$SETVAL(r1, 0x2, 0x10, &(0x7f0000000100)=0x4)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})
connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2711}, 0x10)

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

[  943.680126] protocol 88fb is buggy, dev hsr_slave_0
[  943.680172] protocol 88fb is buggy, dev hsr_slave_1
[  943.680234] protocol 88fb is buggy, dev hsr_slave_0
[  943.680266] protocol 88fb is buggy, dev hsr_slave_1
04:55:58 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x1)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0x10})
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PROTO_VERSION={0x8}]}, 0x2c}}, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1104}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x11f}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x30060870}, 0x40000)

04:55:58 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4)
r1 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040), 0x4)
getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000100)=0x14)
ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000140)={@remote, 0x47, r2})
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:58 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0xfffffffd}, {}, {}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:58 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:59 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

[  944.480466] protocol 88fb is buggy, dev hsr_slave_0
[  944.480501] protocol 88fb is buggy, dev hsr_slave_1
04:55:59 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, &(0x7f0000000040), 0x4)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:55:59 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:59 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
fstat(r1, &(0x7f0000000080))
open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000080)={0x9, 0x20000000001, "11"}, 0x300)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {}, {}, {}, 0x0, 0xd0})

04:55:59 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl(0xffffffffffffffff, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 3:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, {}, {0x0, 0xfffffffd}, {}, {}, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8})

04:55:59 executing program 4:
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb0\x00', 0x0, 0x0)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000000c0)={0x7, 'veth0_to_bridge\x00', {}, 0x3})
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x450, 0x8001, 0x0, 0x8, 0x0, {}, {}, {0x0, 0x0, 0x3}, {}, 0x0, 0xd0})
r2 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000040)=0x8, 0xffffffffffffffaf)
ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000100)={0x9, 0x31c, 0x2, 0x4, 0x800})

[  945.120547] protocol 88fb is buggy, dev hsr_slave_0
[  945.121204] protocol 88fb is buggy, dev hsr_slave_0
04:55:59 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:55:59 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 1:
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 5:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x801}]}, 0x10)
r3 = creat(0x0, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000040), 0x4)
bind$netrom(r3, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8080fffffffe)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
connect$inet(r4, &(0x7f0000000040)={0x2, 0xfffc, @remote}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
creat(0x0, 0x0)
splice(r0, 0x0, r4, 0x0, 0x30005, 0x0)

04:56:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

04:56:00 executing program 1:
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000000))

[  945.311011] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  945.311044] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  945.400966] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  945.400992] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  945.484829] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  945.484903] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  945.560552] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  945.560590] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  945.818126] kobject: 'loop5' (ffff8880a422d660): kobject_uevent_env
[  945.818154] kobject: 'loop5' (ffff8880a422d660): fill_kobj_path: path = '/devices/virtual/block/loop5'
[  945.916410] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  945.916447] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  946.007119] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  946.007149] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  946.085311] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  946.085351] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  946.162130] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  946.162159] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  946.243188] kobject: 'loop1' (ffff8880a40f2c20): kobject_uevent_env
[  946.243224] kobject: 'loop1' (ffff8880a40f2c20): fill_kobj_path: path = '/devices/virtual/block/loop1'
[  946.748697] kobject: 'loop5' (ffff8880a422d660): kobject_uevent_env
[  946.748725] kobject: 'loop5' (ffff8880a422d660): fill_kobj_path: path = '/devices/virtual/block/loop5'
[ 1144.802473] INFO: task syz-executor.3:16346 blocked for more than 140 seconds.
[ 1144.802482]       Not tainted 4.14.163-syzkaller #0
[ 1144.802485] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1144.802490] syz-executor.3  D28528 16346   9273 0x00000004
[ 1144.802511] Call Trace:
[ 1144.802532]  __schedule+0x7b8/0x1cd0
[ 1144.802540]  ? __mutex_lock+0x737/0x1470
[ 1144.802553]  ? firmware_map_remove+0x196/0x196
[ 1144.802567]  schedule+0x92/0x1c0
[ 1144.802576]  schedule_preempt_disabled+0x13/0x20
[ 1144.802585]  __mutex_lock+0x73c/0x1470
[ 1144.802599]  ? fb_release+0x55/0x150
[ 1144.802611]  ? mutex_trylock+0x1c0/0x1c0
[ 1144.802698]  ? do_lock_file_wait.part.0+0x1c0/0x1c0
[ 1144.802713]  ? fsnotify+0x11e0/0x11e0
[ 1144.802723]  ? unregister_framebuffer+0x40/0x40
[ 1144.802732]  mutex_lock_nested+0x16/0x20
[ 1144.802740]  ? mutex_lock_nested+0x16/0x20
[ 1144.802747]  fb_release+0x55/0x150
[ 1144.802757]  ? unregister_framebuffer+0x40/0x40
[ 1144.802766]  __fput+0x275/0x7a0
[ 1144.802779]  ____fput+0x16/0x20
[ 1144.802788]  task_work_run+0x114/0x190
[ 1144.802802]  exit_to_usermode_loop+0x1da/0x220
[ 1144.802814]  do_syscall_64+0x4bc/0x640
[ 1144.802822]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1144.802835]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1144.802842] RIP: 0033:0x414ae1
[ 1144.802847] RSP: 002b:00007ffde431c4b0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1144.802856] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000414ae1
[ 1144.802861] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[ 1144.802866] RBP: 0000000000000001 R08: ffffffff812aed7d R09: 00000000dbed58ec
[ 1144.802871] R10: 00007ffde431c590 R11: 0000000000000293 R12: 000000000075c9a0
[ 1144.802876] R13: 000000000075c9a0 R14: 0000000000760ff0 R15: 000000000075bf2c
[ 1144.802891]  ? __phys_addr+0x2d/0xe0
[ 1144.802910] 
[ 1144.802910] Showing all locks held in the system:
[ 1144.802922] 1 lock held by khungtaskd/1056:
[ 1144.802927]  #0:  (tasklist_lock){.+.+}, at: [<ffffffff8148c218>] debug_show_all_locks+0x7f/0x21f
[ 1144.802968] 1 lock held by rsyslogd/7097:
[ 1144.802970]  #0:  (&f->f_pos_lock){+.+.}, at: [<ffffffff8196689b>] __fdget_pos+0xab/0xd0
[ 1144.802994] 2 locks held by getty/7220:
[ 1144.802997]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803015]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803067] 2 locks held by getty/7221:
[ 1144.803070]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803088]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803108] 2 locks held by getty/7222:
[ 1144.803111]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803127]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803147] 2 locks held by getty/7223:
[ 1144.803150]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803167]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803187] 2 locks held by getty/7224:
[ 1144.803189]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803207]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803227] 2 locks held by getty/7225:
[ 1144.803229]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803247]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803266] 2 locks held by getty/7226:
[ 1144.803269]  #0:  (&tty->ldisc_sem){++++}, at: [<ffffffff866a6b83>] ldsem_down_read+0x33/0x40
[ 1144.803286]  #1:  (&ldata->atomic_read_lock){+.+.}, at: [<ffffffff834cc7b6>] n_tty_read+0x1e6/0x17d0
[ 1144.803414] 1 lock held by syz-executor.3/16346:
[ 1144.803417]  #0:  (&fb_info->lock){+.+.}, at: [<ffffffff83284d35>] fb_release+0x55/0x150
[ 1144.803436] 
[ 1144.803439] =============================================
[ 1144.803439] 
[ 1144.803444] NMI backtrace for cpu 0
[ 1144.803452] CPU: 0 PID: 1056 Comm: khungtaskd Not tainted 4.14.163-syzkaller #0
[ 1144.803457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1144.803460] Call Trace:
[ 1144.803470]  dump_stack+0x142/0x197
[ 1144.803482]  nmi_cpu_backtrace.cold+0x57/0x94
[ 1144.803536]  ? irq_force_complete_move.cold+0x7d/0x7d
[ 1144.803546]  nmi_trigger_cpumask_backtrace+0x141/0x189
[ 1144.803557]  arch_trigger_cpumask_backtrace+0x14/0x20
[ 1144.803566]  watchdog+0x5e7/0xb90
[ 1144.803580]  kthread+0x319/0x430
[ 1144.803588]  ? hungtask_pm_notify+0x50/0x50
[ 1144.803594]  ? kthread_create_on_node+0xd0/0xd0
[ 1144.803604]  ret_from_fork+0x24/0x30
[ 1144.803620] Sending NMI from CPU 0 to CPUs 1:
[ 1144.804449] NMI backtrace for cpu 1
[ 1144.804453] CPU: 1 PID: 16350 Comm: syz-executor.4 Not tainted 4.14.163-syzkaller #0
[ 1144.804456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1144.804459] task: ffff88804e5e01c0 task.stack: ffff8881a1040000
[ 1144.804461] RIP: 0010:match_held_lock+0x2d5/0x5f0
[ 1144.804464] RSP: 0018:ffff8880aed075b8 EFLAGS: 00000046
[ 1144.804468] RAX: dffffc0000000000 RBX: ffff88804e5e0a40 RCX: ffff88804e5e0a40
[ 1144.804471] RDX: 0000000000000000 RSI: ffffffff87f88620 RDI: ffff88804e5e0a62
[ 1144.804474] RBP: ffff8880aed07630 R08: 1ffff11008d40b84 R09: ffffed1008d40b8b
[ 1144.804477] R10: ffffed1008d40b8a R11: ffff888046a05c57 R12: 0000000000000000
[ 1144.804480] R13: 1ffff11015da0eb9 R14: ffffffff87f88620 R15: ffff8880aed07608
[ 1144.804483] FS:  00007fe609686700(0000) GS:ffff8880aed00000(0000) knlGS:0000000000000000
[ 1144.804486] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1144.804489] CR2: 000000c433c34780 CR3: 000000020e1a4000 CR4: 00000000001406e0
[ 1144.804492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1144.804495] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1144.804496] Call Trace:
[ 1144.804498]  <IRQ>
[ 1144.804500]  ? save_trace+0x290/0x290
[ 1144.804502]  ? kmem_cache_alloc_node_trace+0x379/0x770
[ 1144.804504]  __lock_is_held+0xb6/0x140
[ 1144.804506]  ? check_preemption_disabled+0x3c/0x250
[ 1144.804508]  lock_is_held_type+0x110/0x210
[ 1144.804511]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1144.804513]  rcu_read_lock_sched_held+0x110/0x130
[ 1144.804515]  consume_skb+0x276/0x340
[ 1144.804517]  sctp_chunk_put+0x179/0x270
[ 1144.804519]  sctp_chunk_free+0x56/0x70
[ 1144.804521]  sctp_packet_transmit+0x113f/0x3010
[ 1144.804524]  ? sctp_packet_config+0x9f0/0x9f0
[ 1144.804526]  ? sctp_packet_transmit_chunk+0x39/0x14e
[ 1144.804528]  ? sctp_transport_burst_limited+0x17b/0x1c0
[ 1144.804530]  sctp_outq_flush+0xd13/0x31b0
[ 1144.804533]  ? __sctp_outq_teardown+0xde0/0xde0
[ 1144.804535]  ? mod_timer+0x571/0xeb0
[ 1144.804537]  ? mod_timer_pending+0x1030/0x1030
[ 1144.804539]  ? prandom_u32_state+0x13/0x180
[ 1144.804541]  ? sctp_transport_hold+0x85/0xb0
[ 1144.804543]  sctp_outq_uncork+0x60/0x70
[ 1144.804545]  sctp_do_sm+0x417/0x4ae0
[ 1144.804547]  ? sctp_do_8_2_transport_strike.isra.0+0x880/0x880
[ 1144.804549]  ? __lock_acquire+0x5f7/0x4620
[ 1144.804551]  ? trace_hardirqs_on+0x10/0x10
[ 1144.804553]  ? trace_hardirqs_on+0x10/0x10
[ 1144.804555]  ? trace_hardirqs_on+0x10/0x10
[ 1144.804558]  ? sctp_generate_heartbeat_event+0x22a/0x400
[ 1144.804560]  ? debug_object_deactivate+0x1cc/0x350
[ 1144.804562]  ? __lock_is_held+0xb6/0x140
[ 1144.804564]  sctp_generate_heartbeat_event+0x1dd/0x400
[ 1144.804566]  call_timer_fn+0x161/0x670
[ 1144.804569]  ? sctp_generate_t3_rtx_event+0x2f0/0x2f0
[ 1144.804571]  ? __next_timer_interrupt+0x140/0x140
[ 1144.804573]  ? trace_hardirqs_on_caller+0x19b/0x590
[ 1144.804575]  run_timer_softirq+0x5b7/0x1520
[ 1144.804577]  ? sctp_generate_t3_rtx_event+0x2f0/0x2f0
[ 1144.804579]  ? add_timer+0xae0/0xae0
[ 1144.804581]  ? __lock_is_held+0xb6/0x140
[ 1144.804584]  ? rcu_lockdep_current_cpu_online+0xf2/0x140
[ 1144.804586]  __do_softirq+0x244/0x9a0
[ 1144.804588]  ? sched_clock+0x2e/0x50
[ 1144.804589]  irq_exit+0x160/0x1b0
[ 1144.804592]  smp_apic_timer_interrupt+0x146/0x5e0
[ 1144.804594]  apic_timer_interrupt+0x96/0xa0
[ 1144.804595]  </IRQ>
[ 1144.804597] RIP: 0010:__sanitizer_cov_trace_pc+0x1d/0x60
[ 1144.804600] RSP: 0018:ffff8881a1047208 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff10
[ 1144.804605] RAX: ffff88804e5e01c0 RBX: 0000000000001400 RCX: 0000000000000000
[ 1144.804608] RDX: 0000000000000000 RSI: ffff8880000a0000 RDI: ffff8880a5fcc340
[ 1144.804611] RBP: ffff8881a1047248 R08: 0000000000001400 R09: 0000000000000040
[ 1144.804614] R10: ffffed1014be6e43 R11: ffff8880a5f3721f R12: 0000000000000000
[ 1144.804616] R13: 0000000000000000 R14: ffff8880000a0000 R15: 0000000000000000
[ 1144.804619]  ? bitfill_aligned+0x26/0x190
[ 1144.804620]  cfb_fillrect+0x3d0/0x720
[ 1144.804622]  ? cfb_fillrect+0x720/0x720
[ 1144.804624]  vga16fb_fillrect+0x618/0x1880
[ 1144.804626]  ? memcpy+0x46/0x50
[ 1144.804628]  bit_clear_margins+0x2d5/0x4f0
[ 1144.804630]  ? bit_bmove+0x240/0x240
[ 1144.804632]  ? efifb_probe.cold+0x1379/0x1379
[ 1144.804634]  fbcon_clear_margins+0x292/0x320
[ 1144.804635]  fbcon_switch+0xd38/0x1820
[ 1144.804637]  ? fbcon_set_def_font+0x360/0x360
[ 1144.804639]  ? fbcon_set_origin+0x21/0x50
[ 1144.804640]  ? fbcon_scrolldelta+0x1100/0x1100
[ 1144.804642]  ? set_origin+0x108/0x3c0
[ 1144.804644]  redraw_screen+0x335/0x7c0
[ 1144.804645]  ? con_flush_chars+0x90/0x90
[ 1144.804647]  ? fbcon_set_palette+0x203/0x5b0
[ 1144.804649]  fbcon_modechanged+0x59e/0x880
[ 1144.804650]  fbcon_set_all_vcs+0x35f/0x420
[ 1144.804652]  fbcon_event_notify+0x75/0x17af
[ 1144.804654]  ? lock_acquire+0x16f/0x430
[ 1144.804656]  notifier_call_chain+0x111/0x1b0
[ 1144.804658]  blocking_notifier_call_chain+0x80/0xa0
[ 1144.804659]  fb_notifier_call_chain+0x25/0x30
[ 1144.804661]  fb_set_var+0xb09/0xcf0
[ 1144.804663]  ? fb_set_suspend+0x110/0x110
[ 1144.804664]  ? lock_acquire+0x16f/0x430
[ 1144.804666]  ? lock_fb_info+0x1f/0x80
[ 1144.804668]  ? lock_fb_info+0x1f/0x80
[ 1144.804669]  ? __mutex_lock+0x36a/0x1470
[ 1144.804671]  ? trace_hardirqs_on+0x10/0x10
[ 1144.804673]  ? mutex_trylock+0x1c0/0x1c0
[ 1144.804674]  ? down+0x50/0x90
[ 1144.804676]  ? mutex_lock_nested+0x16/0x20
[ 1144.804677]  ? mutex_lock_nested+0x16/0x20
[ 1144.804679]  do_fb_ioctl+0x3cc/0x940
[ 1144.804681]  ? fb_read+0x520/0x520
[ 1144.804682]  ? avc_has_extended_perms+0x8ec/0xe40
[ 1144.804684]  ? futex_wake+0x134/0x430
[ 1144.804686]  ? avc_ss_reset+0x110/0x110
[ 1144.804687]  ? __lock_acquire+0x5f7/0x4620
[ 1144.804689]  ? trace_hardirqs_on+0x10/0x10
[ 1144.804691]  ? __might_sleep+0x93/0xb0
[ 1144.804692]  ? __fget+0x210/0x370
[ 1144.804693]  fb_ioctl+0xe6/0x130
[ 1144.804695]  ? do_fb_ioctl+0x940/0x940
[ 1144.804697]  do_vfs_ioctl+0x7ae/0x1060
[ 1144.804699]  ? selinux_file_mprotect+0x5d0/0x5d0
[ 1144.804700]  ? lock_downgrade+0x740/0x740
[ 1144.804702]  ? ioctl_preallocate+0x1c0/0x1c0
[ 1144.804703]  ? __fget+0x237/0x370
[ 1144.804705]  ? security_file_ioctl+0x89/0xb0
[ 1144.804707]  SyS_ioctl+0x8f/0xc0
[ 1144.804708]  ? do_vfs_ioctl+0x1060/0x1060
[ 1144.804710]  do_syscall_64+0x1e8/0x640
[ 1144.804712]  ? trace_hardirqs_off_thunk+0x1a/0x1c
[ 1144.804714]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[ 1144.804715] RIP: 0033:0x45af49
[ 1144.804717] RSP: 002b:00007fe609685c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1144.804729] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045af49
[ 1144.804732] RDX: 0000000020000000 RSI: 0000000000004601 RDI: 0000000000000004
[ 1144.804734] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 1144.804736] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe6096866d4
[ 1144.804739] R13: 00000000004c3903 R14: 00000000004d9f18 R15: 00000000ffffffff
[ 1144.804740] Code: 85 00 03 00 00 44 8b 25 4a 4d 6f 08 45 85 e4 0f 84 7e ec 00 00 45 31 e4 48 b8 00 00 00 00 00 fc ff df 49 c7 44 05 00 00 00 00 00 <48> 83 c4 50 44 89 e0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 41 bc 01 
[ 1144.804806] Kernel panic - not syncing: hung_task: blocked tasks
[ 1144.804814] CPU: 0 PID: 1056 Comm: khungtaskd Not tainted 4.14.163-syzkaller #0
[ 1144.804818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1144.804821] Call Trace:
[ 1144.804830]  dump_stack+0x142/0x197
[ 1144.804841]  panic+0x1f9/0x42d
[ 1144.804848]  ? add_taint.cold+0x16/0x16
[ 1144.804860]  ? irq_force_complete_move.cold+0x7d/0x7d
[ 1144.804872]  watchdog+0x5f8/0xb90
[ 1144.804886]  kthread+0x319/0x430
[ 1144.804893]  ? hungtask_pm_notify+0x50/0x50
[ 1144.804900]  ? kthread_create_on_node+0xd0/0xd0
[ 1144.804913]  ret_from_fork+0x24/0x30
[ 1144.806460] Kernel Offset: disabled
[ 1146.155986] Rebooting in 86400 seconds..