ff996dece96fd67ad1f7547e08bf1786cb55054029cb440b23615fb750ef", 0x1000, 0x2, 0x0, 0x1}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x0, r19, &(0x7f0000001380)="21bd59e8cdc4faba62e195467c235a31c09a4c878a941b6d8481664a1a00e0b54306d5a38dc93b1680e8f54ea3e43c4801df2067a1e3e86fc7dbc1250248b5142c", 0x41, 0x4, 0x0, 0x2, r2}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x5, 0x1000, r20, &(0x7f0000001440)="8b76aed63f6198e56bfa9ab8cbbebc579428f72364f589", 0x17, 0x40, 0x0, 0x0, r33}, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x6, 0xe238, r3, &(0x7f00000014c0)="945f32d04bc261b8329f0077ebf9057d36d9f555db031a5d094486002ae33278984a718ab2497e3b6e11fbdbaad48ccede767c667289f80c2e491ef9fed8e33afdf98361629e577897203325e807847ad254c8a8b8bd83df5d501d6799a59b883eec88c17c05511bd917c6718cc89539667c3a17810a0fcb06f334c117f06e9c9d76b6708225d44f", 0x88, 0xb436, 0x0, 0x2, r36}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x16, 0xe0, r37, &(0x7f0000001600)="14b577e193aa720e20442fd3d0c18f2159b331d8b9421f1cb66ab161db3232fe429207e9b0006becf8918f79f0cc2d7d41a4cf652eb713f49753e8116502f700245556fc383e77de7b3f7096d309c8f5f5562bab0be8a064b8fff8aeaca6d66f26be9c8dfa45227d626e2518a77ba1a7346e7201fedb78e8647831e8a8d3d2a70090f6faafa3b5fdac4d8dfbfcfb208a5a174b57b479744d44e4c63c2b382ce862335a1c075997ce52", 0xa9, 0xfffffffffffffff7, 0x0, 0x1, r2}])
fcntl$dupfd(r4, 0x0, r3)
syz_emit_ethernet(0x2, &(0x7f0000000000)=ANY=[@ANYRESHEX=r1, @ANYRES16=r3], 0x0)
[ 345.910706] Memory cgroup out of memory: Kill process 10110 (syz-executor.1) score 9275000 or sacrifice child
[ 345.922414] Killed process 10110 (syz-executor.1) total-vm:72712kB, anon-rss:2208kB, file-rss:35804kB, shmem-rss:0kB
[ 345.937437] oom_reaper: reaped process 10110 (syz-executor.1), now anon-rss:0kB, file-rss:34844kB, shmem-rss:0kB
17:14:45 executing program 3:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$SEM_STAT(0x0, 0x0, 0x12, 0x0)
r0 = socket(0x10, 0x400000000080803, 0x0)
write(r0, &(0x7f00000001c0)="240000001a0025f00485bc04fef7001d020b49ffed000000800328000800030001000000", 0x24)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000fa3fff), 0x0, 0x0, &(0x7f00006f7000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f000059aff8), &(0x7f000034f000)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x8000, 0x204, 0x1f, 0x3f, 0x1, 0xfffffffb, 0x7, <r2=>0x0}, &(0x7f0000000200)=0x20)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000240)={r2, 0x4}, 0x8)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004ffc, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000040)=0x2000000000000074, 0x4)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00')
sendmsg$NET_DM_CMD_STOP(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r7, 0x4, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x24009083)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3)
r8 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0x1da9, 0x4)
sendto$inet(r3, &(0x7f0000000180)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba5c0fe3ac47b61db6b4c41bd1a5259e62506cda287b857aac", 0x8293, 0x4000002, 0x0, 0x27)
setsockopt$sock_timeval(r8, 0x1, 0x0, &(0x7f00000000c0)={0x77359400}, 0x10)
17:14:45 executing program 5:
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0)
writev(r1, &(0x7f00000000c0), 0x10000000000000ce)
17:14:45 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, r7, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x1e}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x6, 0x4e21, 0x1, 0xa, 0x60, 0xa0, 0xc, r5, r7}, {0x10001, 0x7, 0x75, 0xb8, 0x5, 0x1, 0x0, 0x5}, {0x100000000, 0x2c2, 0xd8d0, 0x3ff}, 0x4, 0x6e6bbc, 0x2, 0x2, 0x1, 0x3}, {{@in6=@empty, 0x4d5, 0x6c}, 0x2, @in=@empty, 0x3505, 0xbbf0516ce5a52387, 0x4, 0x20, 0xfb2, 0x4, 0x40}}, 0xe8)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000e9100aee531f8c58a59e83e4fbc0de2da96ab66a04a8", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100767469000c00020008000100", @ANYRES32=r9], 0x38}}, 0x0)
17:14:45 executing program 0:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\f7'], 0x2)
r1 = getpid()
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4205, r1, 0x2, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000001c0)={0x29, 0x37, 0x0, {0x0, 0x1, 0x1, r1, 0x171, '/dev/hwrng\x00'}}, 0x29)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000080)="5c84c1e4170e81faddee4b8ee5835f", 0xf}, {&(0x7f0000000200)="ff2fbcea5c1e6e820b76fb72f13c86fac194e6b566c0400d8c19bad2f13bcccc7e", 0x21}, {&(0x7f0000000240)="73c242e7b61cddd34f38edb6b43c5b2654842d53a720cbc9f29bae2f4838d6ed15e4a845e68ac2c45de9c13d1bc0c5", 0x2f}, {&(0x7f00000002c0)="a418bd38c528672caff29f2717644533b3879940ca01ac29440567eef7451c3efce42c5d1aa32566e3771422cf94b97c58309ca03fe40e1529b1c637fe13bc62c5894f4b030911330e097a540290d8fe91440f977ecd721a3d8194cd3966b2aa960d884def004e151f8117", 0x6b}], 0x4, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8)
signalfd(r2, &(0x7f0000000180)={0x101}, 0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x100, 0x0)
write$P9_RWSTAT(r5, &(0x7f0000000140)={0x7, 0x7f, 0x2}, 0x7)
17:14:45 executing program 1:
r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x10040, 0x0)
ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000280)={0xfffff001, 0x2, 0x0, 0x7, 0x9})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_S390_UCAS_MAP(r5, 0x4018ae50, &(0x7f00000002c0)={0x6, 0x2, 0x81})
r6 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = gettid()
tkill(r7, 0x1002000000013)
ioprio_get$pid(0x2, r7)
getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000140)={{{@in=@empty, @in6=@remote}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8)
mount(&(0x7f0000000000)=@md0='/dev/md0\x00', &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='udf\x00', 0x0, &(0x7f0000000100)='vcan0\x00')
[ 346.356686] selinux_nlmsg_perm: 353 callbacks suppressed
[ 346.356701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4329 sclass=netlink_route_socket pig=10134 comm=syz-executor.5
[ 346.424379] syz-executor.1 invoked oom-killer: gfp_mask=0x6040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0
17:14:45 executing program 5:
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='\x00\x00\x00\x00\x00egy\xc5\x8e\xcb\x1c\xf8\x8f\xca;\xa3?\xad\xae\x0f\xb5\x97ao3\xab\xcdY\x9a\xe3\xe5\xe1\xf4\x87\xac\xad\x80\xa3P\x8c\xea\x9c\xc7\x00\xeb\xf4X#\xe34\x80O]\x87\xdd\x894\xdal;w\xf8\xf8\v?v\xf0\xb8\xda=|\xa4\xba\xbbiq!\xd8g\xb7I\x12\x80')
r1 = openat$cgroup_ro(r0, &(0x7f0000000b00)='mem\x00\x01y7SwaS.\x06ur\x89\xc9B\xab\xe3\xfarent\x00\xaa\x1a\xfd\xae\v\xbf\xd8d\xbb\xaf9Q\xde\xfb\x1fY\xfb\x8do\xd1\x16\xce(\x82\xf1\xbf{5Z\x13\x15\x14\xd7\xb8\xce\xf20\x1e\xc0\xc2\xed<?\xc7\xb6s\xca\xff\x96\x9a}+Q\xd2\xd9{\xca\x86Vw\xde\xb3\x86\x91\xfd\xb5p\xdb$ j\xfb\xf8\xedw\xf4\x161a.\xc7\n\xe0X?\xc4\xf4BW\x01\x1f-\xcc\x01\xd0W\xc8\xf09\fV\x1b|A)\xb8\xda#NP\x1c\x9d\x93#V\x9f\"Kgn{\x96\xaa\xbd0\x8ef\x9d\xb88CP(}w\x8c\xbb\xdc%\ax \x10\xd1\n(\xa8=\xf54\xa9\xcb\xe9\x97T\xcf\xcf\x87t\x81\xfa\xaa\xf30\x8b\xb7\xea\xfc^\xb6\x95\x87E\x11\x89\x7f\xa0m\xd3&\tHvtD\x83\\6\xe0t\xa8\xdd\xa3\xa4\xd2\xb9\xb9{+\x1d\xa3\xd5Z;]*2\x99Os\bVW5\xe6\xe7\xdb\x95\x8d\xffY\xe0s\x7f\x9eK,\xae\xaeX\x15M@\xdd\x04`\xea\x03\xf7\x7f:\xc8HU3\xabX}\xa7S8s\xdb_\xc5\x9c\xc9Rw\x90G\xf3J\x9c\x8f\x91\xa1\xd6\x055?m\xed\x94\x9c\xb7(\x0f\xd3\xbc\xba\xc6T\xdd\x15\xf7+*Z3\x8e_Z\xa3k\xe4R\x1e\xc8\vYV\x8a\x8d\xad\x8cI\x88\fM\x19JX\x1f\xffe#|\x06\xfa86\xcb\x93\xea\xab\xcc\x864fC*I\x7fM\t7\x94}\x06\x1d\xc3\x9co-\xdd\xa6\x1b\xa8_\x1fBl\xc4:\xae\xfe4\x9e\xa9T\x91\xd9w\x05\xf8{\xd6@', 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/4\x00\xa7$\xbf\x05l\xb8\t\xd0\x06\xae\b\x86$dV\x92M%\xfd)0m6Z\x05\xae\xa7\rM\bp\xa6Q\x871B\x973\xfe\x05\x12\xf3\xd496\xf9\x1aM6\xb2|\xc5\x05\xbc\xe71g\xe4<&\xd2\xd8g\xb6\xa2U\xae\x9a\x17F\xa5xi\xe8_\xa8R\x96d\x99\xf6_E\xd0\x8f<\xa840\xd6\x84\xd0\x17\xafP\'\xdc{\b\x94\x00Y+\x18N\\\xc9\x1f\a\xf9X\x125\xb9\xd6\xbf\x1a4V\x10\xa6Uq\xceN\xeb\xa8M\xb2?\xda\xfb\xb1\x9d\x94\x13O\xab\xde\xc0t\x8c\")\x05~\x0f\xb8\xf3\xf6d\xbe\xad\xee\"\xaa\x91\x05\xcb9A\x1a\x8d&\x9e\x81\xcf\x9eWvT\x8a\xbfl\x8a\x83%\xec\x94\xfd\x90\xeb\xb3\xa3\xa8\x90\x90\xdb\xc2X\xf48\xd1\x83Eu\xe5c\xd7\xb7qe\xab\xae\xef*\x9e\x95\xde\xa0\x894r[\\\xc4?\xb7\xcfo\xdb\xbeR\xc5\xbc\xb34\xbe}\xf7n/4}\xbc.t\x94\x1c%\xcb\x93\xea\"Aa(\xd6FX\xd8\b\xd1\x10N{\xe8\xbc)\xc8\x1e6\xff\x95\xa3\xf3\x84\xf4\xa5\xe8f\xc2@\x1f7h\xb3\xd6\xab\x9a\x03\x95>V\\\xc4%T\x94M\xc7`\x83\xa1\xa0\xc8gn\xe3\xfe\xef[\xb3\xbd\x18R\x1b=\xab\x97$\x03\xaa\x84C\x0eWD\xeea\xf5\xb9\x82\xea\xbd5:\"\xf6f/\xa1\x8f%8\xa8\x1e\xcf\xb6\xa7\xe1\x1b1\x94\xc1G\xf9\xfc\xc77\x1c\x00'/370)
lseek(r2, 0x203ffffd, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
write$P9_RXATTRWALK(r2, &(0x7f0000000080)={0xf}, 0x20000357)
mremap(&(0x7f0000433000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil)
madvise(&(0x7f00000d9000/0x600000)=nil, 0x600000, 0x8)
getegid()
ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x8, 0x4, 0xd2, 0xa3})
ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$DRM_IOCTL_RM_MAP(r5, 0x4028641b, &(0x7f00000000c0)={&(0x7f00006e2000/0x1000)=nil, 0xfffffffffffffff8, 0x1, 0x80, &(0x7f0000ffa000/0x4000)=nil, 0x1})
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000000))
tkill(0x0, 0x0)
ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0)
[ 346.512482] syz-executor.1 cpuset=syz1 mems_allowed=0-1
[ 346.547955] CPU: 1 PID: 10057 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 346.554931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 346.564274] Call Trace:
[ 346.566860] dump_stack+0x172/0x1f0
[ 346.570480] dump_header+0x15e/0xa55
[ 346.574224] ? _raw_spin_unlock_irqrestore+0xa4/0xe0
[ 346.579320] ? ___ratelimit+0x60/0x595
[ 346.583194] ? do_raw_spin_unlock+0x57/0x270
[ 346.587598] oom_kill_process.cold+0x10/0x6ef
[ 346.592088] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 346.597613] ? task_will_free_mem+0x139/0x6e0
[ 346.602101] out_of_memory+0x362/0x1330
[ 346.606067] ? lock_downgrade+0x880/0x880
[ 346.610319] ? mem_cgroup_unmark_under_oom+0x8d/0xb0
[ 346.615411] ? oom_killer_disable+0x280/0x280
[ 346.619892] ? find_held_lock+0x35/0x130
[ 346.623950] mem_cgroup_out_of_memory+0x1d2/0x240
[ 346.628780] ? memcg_event_wake+0x230/0x230
[ 346.633092] ? do_raw_spin_unlock+0x57/0x270
[ 346.637490] ? _raw_spin_unlock+0x2d/0x50
[ 346.641631] try_charge+0xef7/0x1480
[ 346.645341] ? mem_cgroup_oom_trylock+0x1a0/0x1a0
[ 346.650183] ? rcu_read_lock_sched_held+0x110/0x130
[ 346.655190] ? __alloc_pages_nodemask+0x632/0x750
[ 346.660019] ? SOFTIRQ_verbose+0x10/0x10
[ 346.664075] memcg_kmem_charge_memcg+0x83/0x170
[ 346.668752] ? memcg_kmem_put_cache+0xb0/0xb0
[ 346.673236] ? cache_grow_begin+0x597/0x8c0
[ 346.677545] ? lockdep_hardirqs_on+0x415/0x5d0
[ 346.682113] ? trace_hardirqs_on+0x67/0x220
[ 346.686430] cache_grow_begin+0x3fa/0x8c0
[ 346.690567] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 346.696113] ? __cpuset_node_allowed+0x136/0x540
[ 346.700861] fallback_alloc+0x1fd/0x2d0
[ 346.704843] ____cache_alloc_node+0x1be/0x1e0
[ 346.709332] kmem_cache_alloc_node_trace+0xec/0x720
[ 346.714337] ? lock_downgrade+0x880/0x880
[ 346.718493] __kmalloc_node+0x3d/0x80
[ 346.722284] kvmalloc_node+0x68/0x100
[ 346.726078] xt_alloc_table_info+0x41/0xa0
[ 346.730304] do_ip6t_set_ctl+0x25a/0x498
[ 346.734355] ? compat_do_ip6t_set_ctl+0x160/0x160
[ 346.739195] ? mutex_unlock+0xd/0x10
[ 346.742913] ? nf_sockopt_find.constprop.0+0x226/0x290
[ 346.748194] nf_setsockopt+0x77/0xd0
[ 346.751918] ipv6_setsockopt+0x13e/0x170
[ 346.755973] tcp_setsockopt+0x8f/0xe0
[ 346.759769] sock_common_setsockopt+0x94/0xd0
[ 346.764258] __sys_setsockopt+0x17a/0x280
[ 346.768405] ? kernel_accept+0x310/0x310
[ 346.772459] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 346.777218] ? do_syscall_64+0x26/0x620
[ 346.781184] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 346.786545] ? do_syscall_64+0x26/0x620
[ 346.790514] __x64_sys_setsockopt+0xbe/0x150
[ 346.795027] do_syscall_64+0xfd/0x620
[ 346.798819] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 346.803995] RIP: 0033:0x45c58a
[ 346.807176] Code: 49 89 ca b8 37 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 ba 8c fb ff c3 66 0f 1f 84 00 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 9a 8c fb ff c3 66 0f 1f 84 00 00 00 00 00
[ 346.826064] RSP: 002b:00007ffe820f26e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 346.833776] RAX: ffffffffffffffda RBX: 00007ffe820f2710 RCX: 000000000045c58a
[ 346.841041] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[ 346.848302] RBP: 0000000000713cc0 R08: 00000000000002e8 R09: 0000000000004000
[ 346.855579] R10: 0000000000712fa0 R11: 0000000000000206 R12: 0000000000000003
[ 346.862836] R13: 0000000000000000 R14: 0000000000000029 R15: 0000000000712f40
17:14:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 346.906282] Task in /syz1 killed as a result of limit of /syz1
[ 346.940230] memory: usage 3644kB, limit 0kB, failcnt 16
[ 347.005746] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0
17:14:46 executing program 4:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)=<r3=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = gettid()
tkill(r7, 0x1002000000013)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r7, r1, 0x0, 0xe, &(0x7f0000000080)='memory.events\x00', <r8=>0x0}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r3, r6, 0x0, 0xe, &(0x7f0000000040)='memory.events\x00', r8}, 0x30)
getpid()
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0)
write$cgroup_int(r2, &(0x7f0000000200)=0x31039, 0x43400)
[ 347.056478] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
17:14:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 347.108452] Memory cgroup stats for /syz1: cache:0KB rss:76KB rss_huge:0KB shmem:0KB mapped_file:0KB dirty:0KB writeback:0KB swap:0KB inactive_anon:0KB active_anon:60KB inactive_file:4KB active_file:0KB unevictable:0KB
[ 347.134175] Memory cgroup out of memory: Kill process 10057 (syz-executor.1) score 9001000 or sacrifice child
17:14:46 executing program 3:
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="f2950f0149b9887714f0850c37"], 0x2)
r1 = getpid()
ptrace(0xffffffffffffffff, r1)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140))
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
[ 347.175755] Killed process 10057 (syz-executor.1) total-vm:72448kB, anon-rss:108kB, file-rss:35776kB, shmem-rss:0kB
17:14:46 executing program 5:
r0 = socket$inet6(0x10, 0x1200000000003, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5500000018007f7005fe01b2a4a270930a601480fea84302910400003900090022000c0014000000080005001400081001f3678b80142314e9030b975668a5b16732009b1100b1df13000000fb0000000000000000", 0x55}], 0x1}, 0x0)
17:14:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 347.235962] oom_reaper: reaped process 10057 (syz-executor.1), now anon-rss:0kB, file-rss:34880kB, shmem-rss:0kB
17:14:46 executing program 0:
syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x1, 0x163882)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0))
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00\x02\x17\x87:\xf4\x03\xdfc\x88,5I\xd7^\xb5D\xf7\xd7\xdb,(\xd5\x00\xc2\x06MG\xcd\xe9w\xe5s\x02\xf2\xea\xb6\xabsp\x12xT8\x01\x00\xd4S\xd8F\xab.x|\x8b\x87\xb0\xa2\xf5Y>\xb1 p\x998(\xe63\xcf\x7f\xac\x89F\x03n\x96\x15zsw\x98\xca\xcb3\xb6M=h\x01i.\xa3\xda}\x190~\xe7d6\xa5\x17\xb3\xe9\xd9QV\x0f\xf3\x02\xd6\xc1\xc3n\xcd*R\x9a\x95\x12\x05K\xa0<\xc9\xe3\xed\xab\xc9\x8bK\xb3\x86\xe2\x93f\x92iKA|e\x97k :,J36\x11\xf0\x99\x96\xb7]\xfd\xe3\v\xd8\x98\xc5o\xc6\xde\x80\xf7_\xc9\x8f\xaf\xf9\xd5\xb7ui\xea\xde\xd0\xeb\xd9\xf5_\v\xe2*\xa3\xf4\xab?n\xcb\x19i\x80\x91\xd2\xf6\x14\xfe!!0\x84L\x86\x81\x95,B\x11\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xab*[\xa5\xb217\x93\xf3\x88\x92\xa6\xde\x11\xa2-J\x9d\xc9\xb2\x97\xa3\x88v\x9eR\x155\xc7N!\xdb\"8\xc8I\xb9c\xed\xa7!\t\x85s\xb1\xa5\xa7R2Yf\x1c\xf8\xc2z>\xb1\x9c\x02a\x87\xe9\xb8\xf8\xdcv\xb6\xe4\xa6\n\x0e\x83lM7\xcc?\xea\x19\x99\xce\x1c\x10\xd2lQ(\xc7\xe9\xef\xd2Q\vY\xf58\x10|8}uE\xaf\xb4w;\xbc\xe4\x01\xd8\xf2\xf9u\xc1Dt\'\x84\xb5\xa4\x83\xeft\xfc\xf3\xdd\x87<B%\xd1g\xd6\xe3\xca8\x9aT\x0e\xf5iA\x05\x13\x02\x14\to\xca\xf7\x04\x15U2\xaef\x1d\xb6\x9f')
accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@remote, @bcast, @rose, @null, @remote, @null, @default, @rose]}, &(0x7f0000000080)=0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
dup2(r3, 0xffffffffffffffff)
17:14:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:46 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
times(&(0x7f0000000000))
add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000001c0)='g', 0x524, 0xfffffffffffffffb)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x86a40, 0x0)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4)
17:14:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pread64(r0, 0x0, 0x0, 0x0)
17:14:46 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0xffff, 0x0, 0x0, 0x0, 0x0)
17:14:46 executing program 5:
sysinfo(&(0x7f0000000000)=""/22)
r0 = socket(0xa, 0x3, 0x6)
r1 = socket(0x11, 0x800000003, 0x0)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
pipe2(&(0x7f0000000100)={<r11=>0xffffffffffffffff}, 0x4000)
getsockname$packet(r11, &(0x7f0000000040)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x1c4)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@local, @empty, @rand_addr="8859f195f5650529dfcfb18b9427c24d", 0x0, 0x0, 0x2, 0x400, 0x4, 0x210002, r12})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x392, &(0x7f0000000440)}, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r13=>0xffffffffffffffff})
close(r13)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xa, 0xfa00, {0x0, &(0x7f0000000000)={<r14=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @rand_addr="fe800000000000007029e5e36fc3e001"}, r14}}, 0x284)
syz_open_dev$dspn(&(0x7f0000000280)='/dev/dsp#\x00', 0x0, 0x200000)
pipe(0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r13, 0x54a0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
socket(0x200000000010, 0x5, 0x0)
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00)='TIPCv2\x00')
r15 = syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x0, 0x0)
getsockopt$inet_mreqn(r15, 0x0, 0x0, &(0x7f0000000340)={@loopback, @initdev}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0)
request_key(&(0x7f00000004c0)='cifs.spnego\x00', 0x0, 0x0, 0xffffffffffffffff)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
17:14:47 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x0)
sendto$inet6(r0, 0x0, 0xfffffffffffffe32, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0xc498ead121f97dd6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40142, 0x0)
faccessat(r3, &(0x7f0000000140)='./file0\x00', 0x80, 0x100)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28)
[ 349.597904] IPVS: ftp: loaded support on port[0] = 21
[ 349.683784] chnl_net:caif_netlink_parms(): no params data found
[ 349.718506] bridge0: port 1(bridge_slave_0) entered blocking state
[ 349.725025] bridge0: port 1(bridge_slave_0) entered disabled state
[ 349.732032] device bridge_slave_0 entered promiscuous mode
[ 349.739491] bridge0: port 2(bridge_slave_1) entered blocking state
[ 349.746756] bridge0: port 2(bridge_slave_1) entered disabled state
[ 349.754408] device bridge_slave_1 entered promiscuous mode
[ 349.774817] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 349.784518] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 349.802747] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 349.810605] team0: Port device team_slave_0 added
[ 349.816425] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 349.824066] team0: Port device team_slave_1 added
[ 349.834647] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 349.842099] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 349.917050] device hsr_slave_0 entered promiscuous mode
[ 349.963684] device hsr_slave_1 entered promiscuous mode
[ 350.027341] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 350.034653] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 350.049216] bridge0: port 2(bridge_slave_1) entered blocking state
[ 350.055629] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 350.062422] bridge0: port 1(bridge_slave_0) entered blocking state
[ 350.068839] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 350.085923] device bridge_slave_1 left promiscuous mode
[ 350.091483] bridge0: port 2(bridge_slave_1) entered disabled state
[ 350.132986] device bridge_slave_0 left promiscuous mode
[ 350.138836] bridge0: port 1(bridge_slave_0) entered disabled state
17:14:49 executing program 4:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r1 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x800, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0)
creat(&(0x7f00000000c0)='./file0\x00', 0x0)
r2 = socket(0x0, 0x0, 0x0)
sendto(r2, &(0x7f0000cfefee), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}, 0xffffffff}], 0x1, 0x12023, 0x0)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000300)=0x2)
eventfd2(0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x29002, 0x0, 0x4000000, 0x2}, 0x0, 0x100000004, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)
17:14:49 executing program 3:
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
setxattr$security_smack_entry(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.SMACK64MMAP\x00', &(0x7f0000000100)='keyring:%#G-+@vboxnet1systemwlan1\x00', 0x22, 0x1)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000140)={0x7, 0xfffffff8})
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
17:14:49 executing program 0:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$cgroup_int(r3, &(0x7f0000000140)='cpuset.cpus\x00', 0x2, 0x0)
r4 = openat$cgroup_subtree(r0, &(0x7f00000000c0)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r4)
openat$cgroup_ro(r0, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000200)=@nl=@proc, 0xf, &(0x7f0000001740)=[{&(0x7f0000000280)=""/220}, {&(0x7f0000000380)=""/224}, {&(0x7f0000000480)=""/119}, {&(0x7f0000000500)=""/100}, {&(0x7f0000000580)=""/160}, {&(0x7f0000000640)=""/96}, {&(0x7f00000006c0)=""/63}, {&(0x7f0000000700)=""/4096}, {&(0x7f0000001700)}]}, 0x9d3f}, {{&(0x7f0000001800)=@nfc, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001880)=""/234}, {&(0x7f0000001980)=""/14}, {&(0x7f0000001a40)=""/4096}], 0x0, &(0x7f0000002a40)=""/22}, 0x7ff}, {{&(0x7f0000002a80)=@isdn, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002b00)=""/40}]}, 0x10001}, {{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)=""/138}], 0x0, &(0x7f0000002c80)=""/66}, 0xfd80}], 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
readv(r4, &(0x7f00000002c0), 0x1a5)
ioctl$TIOCSERGETLSR(r3, 0x5459, &(0x7f00000001c0))
r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, &(0x7f0000000080)="b87dba92d65479a81e14be94c24e7637", 0x10)
17:14:49 executing program 5:
r0 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)
sendto$isdn(r0, &(0x7f00000000c0)={0x7bca, 0xe9, "bad9b6b7daff001ed50bd754a43997b8901e3abb219943b75f4fb85ae6a6e71a84776db97d2bf0182a871c1e3aba102bb6fbde3653a7b914f89cba"}, 0x43, 0x20000000, &(0x7f0000000140)={0x22, 0x1, 0x7f, 0x6, 0x4c}, 0x6)
r1 = socket$inet6(0xa, 0x801, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'bridge0\x00h\x00\x01\xd8\x00a\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000000)={'bridge0\x00\xff\xff\xfd\xfd\x00', 0xb779ef21efb66f11})
17:14:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pread64(r0, 0x0, 0x0, 0x0)
[ 350.318118] device hsr_slave_1 left promiscuous mode
17:14:49 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x4000, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0xc505, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0xfdffffff00000000}, 0x0)
[ 350.371694] device hsr_slave_0 left promiscuous mode
[ 350.417308] team0 (unregistering): Port device team_slave_1 removed
[ 350.428794] team0 (unregistering): Port device team_slave_0 removed
[ 350.441138] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 350.469412] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 350.546852] bond0 (unregistering): Released all slaves
[ 350.612884] bridge0: port 2(bridge_slave_1) entered disabled state
[ 350.620295] bridge0: port 1(bridge_slave_0) entered disabled state
[ 350.902242] o: renamed from bridge0
[ 350.986156] bridge0: port 1(bridge_slave_0) entered disabled state
[ 350.996862] bridge0: port 2(bridge_slave_1) entered disabled state
17:14:50 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='rdma.current\x00', 0x0, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140))
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f0000001780)="0800b5055e0bcfe87b0071")
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0)
17:14:50 executing program 3:
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
socket$kcm(0x2, 0x1, 0x0)
r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfff, 0x6a0c01)
ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xe6b)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4005})
r2 = socket$kcm(0x29, 0x5, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000500)='nr0\x01\x00`\xa1\x9e\xf9\xd2\xc6s\xd9\xa1W\x1c\xb9\xe16\x9b\xcda\xef~Iy:\xe1\x87\x12\xec\xeb\x1d\xaav\x94\x97\x80\v\x7f\xbb\xd3[\x17\f\x10u\x1d9\xae\xb6`\xd8c\xe4\x9b\x8cO;=\xadH\x90+[-l\xfd\n\xbd7,c\xbc\xf5\xd7\r\xf3\xfdM.\x8dD<\x88\xbc\x0eV7\xdd\x82\xfc45\xbe\xd4\xde]i<\x9ax\x1c\x86>\x05\xd8\xa6\xf8h\x9a[\xe2\x92\x16\x06\x1f?\xf5?\x8bk9fx\xe7\xba\x15^\xf9\x15-~C\xb1\xec\xcb#1\xeb\x8e\xb1\xedU\x86\xdc\xf8\xb3\xb0\xb9\x996\x1aD\xff,\"\xc2\xab\xbe\xf4-\xd2N\xab\xe6r3F\xa6\xe4l\x04\x99\xa2\x14B\xd8\xd0\r\xcbW\xf0\x13\xffu\x95\xed\xd0\xff\ai0\xde6u\xd3A\x17\xa4N\xb0\xe4\xf82\x93m\xa4NW\xe4:>6\xbdH\xd2\xa8[\xf4\xfdJ\x80N\x83\xf2\xf3\xcf7\x8aCZ\xf5\xe2\x87\xd4\xe2s7\xb4\xad\xa1\x1b&!\x982\xeck+8Dk;\x95\xfe7q\xe9\xf4,\xa3\x0f\xb2\x1e\x12\xf0\xa3\xd8\xbc-\x85EJ\xf9\xfc\xc0#-\x8f\xd9\tD\x8b\x01\xf4lY=1\xea\x1c\x92de\xe3ZA\x99\a\x9c<\xa4\x11(\xb1|\xb0\x1f\xbf[R+\xe0\xfd\x02\x02*\xda7\xfe\xcc\x14\xb6\xc8\xc8\x83\x18\x83\xb8Z\x11\x06\xf2\xf8g\x02\rR\x9f\x17\xa3P\xf2\r\xd3\xbfQ\xa9\x8c\xfd\xa7\f.68\xa4\x83\xfd?\x87\x94\v\xb4x\xb0|L\x11\x03\x94\xc0\t=\x17\x95P\x89\xf2\xca\x97\xbb\xe0u\x12L\x9b\x85\x96\xe0\b\xbf\n\x02\x8bS\x9c\xecyl\xec\x9b\xf5\x85\xeb\x80\xfe>\r&')
perf_event_open$cgroup(&(0x7f0000000380)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
17:14:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = dup3(0xffffffffffffffff, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pread64(r0, 0x0, 0x0, 0x0)
17:14:50 executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x200000)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x400009)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700)
r8 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="006d656d6f72792044afa0e7bc96ced280fd1839441df97d474a1b440a0fc7ad57c107021666e9046a7700bd762737a5ec65dd7cd0100f768867776c1c932f3c52d06025afa24e038011043c58fa7d6e1192d2fcb9d8116e00"/98], 0xda00)
write$cgroup_int(r9, &(0x7f0000000200), 0x43400)
[ 351.101537] 8021q: adding VLAN 0 to HW filter on device bond0
17:14:50 executing program 4:
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x3008}, 0xc, &(0x7f0000000080)={&(0x7f0000000780)=@newtaction={0x1300, 0x30, 0x100, 0x70bd27, 0x25dfdbfc, {}, [{0x1078, 0x1, @m_police={0x1074, 0x18, {{0xc, 0x1, 'police\x00'}, {0x102c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0xff, 0xfffffff7, 0xff, 0x0, 0x8001, 0x2, 0x0, 0x6, 0xfff, 0x8, 0x2, 0x1, 0x2, 0x80, 0x9, 0x92d5, 0xff, 0x7ff, 0x5, 0x8, 0x4, 0x59, 0x80000000, 0x7fffffff, 0x85, 0x3be, 0x80000000, 0xa4a, 0xc2e, 0xd760, 0x8, 0x1, 0x5, 0xcb7d, 0x9, 0x923b, 0x0, 0x20, 0x9, 0xfff, 0x6, 0xe2, 0x0, 0x31bc, 0xcb60, 0x1, 0x6, 0x80000001, 0x3e2, 0x5, 0x7ff, 0x7, 0x6, 0x3, 0x9, 0xee2, 0x7ff, 0x5138ea2c, 0x7, 0x200, 0xfff, 0xcac1, 0x2, 0xfff, 0x7, 0x101, 0x0, 0x40aaf06a, 0x2, 0x101, 0x7, 0x40, 0x3, 0xfffffffc, 0x200, 0x0, 0x8, 0x79, 0x7, 0x2, 0x6, 0x1, 0x80000001, 0x1, 0x0, 0x5, 0xfff, 0x7, 0x4, 0x4, 0x6, 0x7a000000, 0x4, 0x5, 0x40, 0x200, 0x8, 0x0, 0x7, 0x200000, 0x5, 0x4, 0x66, 0x8, 0x5, 0x3, 0x7d23, 0x10000, 0x6, 0x2, 0x2, 0xc64, 0x7f, 0x8, 0x100, 0x0, 0xffffffff, 0x7f, 0x9, 0x2, 0x7fff, 0x6, 0x7, 0x80000000, 0x1, 0x8, 0x80000000, 0x40, 0x4, 0x7, 0x7, 0x7, 0x3, 0x6, 0x0, 0x6, 0x7ff, 0x7fff, 0x1, 0x1, 0x1, 0xfab4, 0x6, 0xa4, 0x722a198f, 0x585767e2, 0x1, 0x7, 0xd4, 0x0, 0x1f, 0x0, 0xea, 0x50eb, 0x8, 0x1ff, 0x1f, 0x101, 0xa437, 0x5, 0x7, 0x2, 0xff, 0x96, 0x3, 0x0, 0x2, 0x1, 0xffffff1f, 0x401, 0x4, 0x2c, 0x7, 0xffffffff, 0x9, 0xe91, 0x2, 0x7, 0x3ff, 0x1, 0x7, 0x2f0, 0x3, 0x3, 0xfd7b, 0x62c0, 0x5, 0x5, 0x6, 0x20, 0x756f, 0x3, 0x7fff, 0x8, 0x7, 0x582, 0xff, 0x4e, 0x0, 0x0, 0xff, 0x2941, 0xabc3, 0x0, 0x2, 0x5, 0x4b, 0x5, 0x52f, 0x7, 0x2, 0x6, 0x2b, 0x100, 0xb2fb, 0x8000, 0xfff, 0x2a, 0x0, 0x129a, 0x4, 0x80000000, 0x200, 0xca, 0x1, 0x7, 0xffffffff, 0xbc, 0x5c4, 0x1, 0x5, 0x3ff, 0x1, 0x6, 0x4c, 0x5, 0x200, 0x2, 0x3, 0x4, 0xffff, 0xffffff41, 0x92, 0x9, 0x7, 0x9f1, 0x5, 0x4, 0x400, 0x1ff, 0x1, 0xfffffffb, 0xfff, 0x7ff, 0x7ff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x10001, 0x9, 0x9, 0xdbf, 0xf2, 0x1, 0x1f, 0x7, 0x4, 0x4, 0x20a, 0x9, 0x4, 0x2, 0x7fffffff, 0x5, 0x5, 0x2, 0x10001, 0x7, 0x5, 0x5, 0x2, 0x6, 0x9, 0x81, 0x81, 0x5, 0x101, 0x48, 0x400, 0x7, 0x1, 0x57f2, 0xc1d, 0xfffffffd, 0xffffffff, 0x200, 0x4000, 0x0, 0x5, 0xfff, 0x80000000, 0x401, 0x101, 0x1, 0x1, 0x101, 0x1, 0x0, 0x100, 0x36, 0x6, 0x9, 0x80000000, 0x8, 0x1ff, 0x7, 0x3, 0x7f, 0x1, 0x6, 0x4, 0x1f, 0x34d, 0x5, 0x4, 0x3987, 0x9, 0xffffffff, 0x3, 0x5, 0x6, 0x2f5c, 0xb6, 0x5, 0x400, 0x8, 0x1, 0x9a, 0x2, 0x1, 0x8, 0x5, 0x4c, 0x4, 0x200, 0xfffffffd, 0x2, 0x1f, 0x2ef0232d, 0x2, 0x3, 0xcfa, 0xdb3, 0x0, 0x6b6b5503, 0x1, 0xffffffff, 0x80, 0x0, 0x7, 0xbb, 0x7, 0x4, 0xdbf, 0x8, 0x1, 0x5, 0x3, 0xb7, 0xfffffff8, 0xc, 0x3, 0x0, 0x3, 0x0, 0x1, 0x80000000, 0x2, 0x9, 0x0, 0x10001, 0x9, 0x8, 0x6, 0xffffffff, 0x101, 0x0, 0x8001, 0x800, 0x1, 0x2, 0xffff25d0, 0x3f00000, 0x32c, 0x5, 0x101, 0x28a, 0x2000000, 0xdfae, 0x4, 0x7, 0x1ff, 0x0, 0xfffffff9, 0xa40, 0x7fffffff, 0x9, 0x2, 0x8, 0x22fc, 0x9, 0x7, 0x9, 0x3, 0x9, 0x80000001, 0x3, 0xf601, 0x1000, 0x7, 0xfff, 0x9, 0x1, 0xbd74, 0x2, 0x4, 0xffffffff, 0x9418, 0x7, 0x8001, 0x5, 0x0, 0x3ff, 0x5, 0x0, 0xffffff0e, 0x6, 0x1, 0x4d1, 0x9, 0x1, 0x7, 0x7f, 0x0, 0x8, 0x7, 0x673, 0x456, 0x5, 0x99ad, 0x5, 0x3, 0x4, 0xd68, 0x7f, 0xfffffffe, 0xfffffffe, 0x6, 0x0, 0x6, 0x3f, 0x7, 0x101, 0x10001, 0xffff, 0x7, 0x1, 0x7, 0x23c, 0x0, 0x1, 0x8, 0x100, 0x759, 0x100000, 0x0, 0x6, 0x101, 0x8, 0x80000000, 0x0, 0x7, 0x2, 0x8, 0x6, 0x9ec5, 0x4b8, 0xfffff567, 0x3f, 0x7fff, 0x8001, 0x7f, 0xfffff000, 0x67a591c0, 0x4, 0x800, 0x7, 0x10001, 0xffffffc1, 0x80000000, 0x9, 0x8, 0x8001, 0x78b2, 0x8, 0x3, 0x9, 0x2, 0xccd, 0x81, 0x4, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x2, 0xffff, 0x80000001, 0x4, 0x2, 0x3a41, 0x9, 0x5, 0x7, 0x20, 0x5, 0xff, 0x7ff, 0x2, 0x0, 0x7ff, 0x8000, 0x9, 0xfffffffb, 0x3, 0x10000, 0x5, 0x80, 0x0, 0x800, 0x9, 0x401, 0x101, 0x0, 0x7, 0x80000001, 0x2, 0x2ac, 0x2, 0xcfa5, 0xfffffffd, 0x7fffffff, 0x1, 0x3, 0x1000, 0x3, 0x16, 0x0, 0x8001, 0x3, 0xef1f, 0xfffff800, 0x3ff, 0x2b, 0x4, 0x40, 0x5, 0x1, 0xffffffff, 0x1, 0x0, 0x3, 0xd6a9, 0x47, 0x4, 0x4, 0x6, 0x7a5, 0x3, 0x1, 0x5, 0x6, 0x0, 0x7, 0xdb, 0x5, 0xffffffc1, 0x8001, 0xff, 0x6, 0x2, 0x4, 0x2203, 0x1, 0x4, 0x8, 0x5, 0x5, 0x9e6, 0x10001, 0x7, 0x8c, 0x7fffffff, 0x5, 0x20, 0x7, 0x7fffffff, 0x80000000, 0x6, 0x32, 0x400, 0x0, 0x0, 0x8001, 0xffffffff, 0x5a4, 0x8000, 0x6, 0x8, 0xa0, 0x40, 0x7, 0x0, 0x6, 0x6, 0x7, 0x1f, 0x5, 0xffff0000, 0x4, 0x7, 0x7, 0x5, 0x7, 0x2, 0xfffffffe, 0xbb, 0xa62a, 0x6, 0x401, 0xf6ff, 0xe032, 0x9, 0x0, 0xfff, 0x2, 0x5, 0x10000, 0x10000, 0x100, 0x5, 0x5, 0xfffffbff, 0x1, 0x80000000, 0x0, 0x379, 0x7ff, 0x1f, 0xc4, 0xaa4, 0x80000001, 0xffffffff, 0x0, 0xffff552a, 0x80000001, 0x3f, 0x0, 0x0, 0xfffffffa, 0x100, 0x323f, 0x101, 0x1, 0x1, 0x7, 0x49d8, 0x180, 0x6, 0x2, 0xfff, 0x8, 0x3, 0x4de5, 0x8001, 0x9, 0x0, 0x8, 0x4, 0xfffffffa, 0x1f, 0x59b, 0x7f, 0x9, 0x40, 0xe4d, 0x9, 0x3, 0x0, 0x2d38, 0x4ffee8c2, 0x1, 0x9, 0x0, 0x3, 0x5, 0x5, 0x10001, 0x9ccb, 0x6, 0x73ee, 0xffffff00, 0x6, 0x20, 0x9, 0xffffffff, 0xffff, 0xffff, 0x7fff, 0xfffffff7, 0x4, 0x101, 0x7, 0x9, 0x6, 0x4, 0x7, 0x7, 0x82, 0x8, 0x3ff, 0x81, 0xfffffffc, 0x100, 0x1, 0x4, 0x8, 0x1, 0x5ca, 0x4, 0x0, 0x7, 0x3ff, 0x5, 0xc2, 0x5, 0x8, 0xfff, 0x4, 0x9, 0x5, 0x7, 0x571b, 0x9, 0x6, 0x7, 0x6, 0x65c, 0x4, 0x1f, 0x6b8, 0x2, 0x2, 0x4, 0xd61, 0x40, 0x3cee, 0x58, 0x7, 0xffff]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x10000}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x0, 0x5e, 0x3, 0x400, 0x1, 0x186b22da, 0x10000, 0x5a, 0x3, 0x81, 0x9, 0x523c, 0x9, 0x6fbf, 0x8, 0x7f, 0x1, 0x3, 0x1f, 0x9, 0xfffff575, 0x1, 0x8, 0xff, 0x6, 0x4, 0x5, 0x2, 0x5, 0x81, 0x8, 0xfffffffa, 0xffffff01, 0x0, 0x4, 0x0, 0x2, 0x8, 0x40, 0x80, 0x6, 0xef, 0xca325ad, 0x2333, 0x1f, 0x5, 0x3, 0x6, 0x1, 0x4, 0x0, 0x5, 0x7fffffff, 0x4, 0x72a7, 0xff, 0x1, 0x1, 0xfffffffc, 0x3f, 0x0, 0x1, 0x80000001, 0x1, 0xe1152b9, 0x2, 0xfffeffff, 0x8, 0xfffffbff, 0x7, 0x5, 0x800, 0x0, 0x9, 0x8, 0x9, 0xfff, 0x200, 0x100, 0x100, 0x4, 0x80000000, 0x7, 0x10001, 0x200, 0x1f, 0x5, 0x1, 0x9, 0x3, 0xfffff001, 0x1, 0x10000, 0x0, 0x6, 0x10001, 0x1, 0x2, 0x3, 0x4000800, 0x1, 0x0, 0x0, 0x200, 0x0, 0x7f, 0xfffff9a9, 0x9, 0x80000000, 0x1c7, 0x9, 0x9, 0x9, 0xfff00000, 0xfe, 0x5, 0x1000, 0x6, 0x8, 0x7, 0x4, 0x2, 0x9, 0x8, 0x7, 0x1ff, 0x80000000, 0x0, 0x5, 0x184547e6, 0x2, 0x5, 0xfffffffa, 0x20, 0x8, 0x0, 0xfffffffb, 0x1ff, 0x657d, 0x101, 0x7f, 0xfffffff7, 0x1, 0x0, 0x7fffffff, 0x3, 0xffff8000, 0x7, 0x3, 0x80000001, 0x0, 0x5, 0x2, 0xffffffff, 0x46, 0xfffe000, 0x2, 0x1, 0x6, 0xffff8000, 0xfdb9, 0x5, 0x1f, 0xd8b6, 0x40, 0x7, 0x2, 0x5, 0x5, 0xfffffffa, 0x53e2, 0xb6, 0x7, 0x6, 0xfffffff8, 0x9, 0x8d37, 0x10000, 0x7fffffff, 0x2, 0x3b, 0xfff, 0x0, 0x7, 0x69, 0x0, 0x1ae, 0x1, 0x1, 0x2a, 0x1, 0x3, 0x1ff, 0x9, 0x101, 0x7, 0x11b8, 0xfff, 0x4d0, 0x6, 0x9, 0x5, 0x7, 0x1, 0xffff, 0x400, 0x2d, 0x3d, 0x1, 0x3, 0x6, 0x3, 0x4, 0x7f, 0x0, 0x1, 0x1ff, 0x1, 0x3f, 0x20, 0x6, 0xffff, 0x18b9, 0xfffffffa, 0x0, 0x1, 0x1, 0x401, 0x7ff, 0x0, 0x1, 0x1, 0x5, 0x7, 0x8001, 0x1d63, 0x9, 0xd9a, 0x5, 0x27de, 0xfffffff9, 0x100, 0x7, 0x7fff, 0x5, 0x1, 0xc3, 0x3ff, 0x8, 0x1, 0x3ff, 0x1ff, 0x100000, 0x3, 0x7f]}]}, {0x34, 0x6, "c202315eb9acf5f67a504325d2713767eae656fc38bfbecd7d62d09e3a4f9db44113e28cee9951b815bea5ecbdb40b"}}}}, {0x17c, 0x1, @m_gact={0x178, 0x7, {{0xc, 0x1, 'gact\x00'}, {0xa0, 0x2, [@TCA_GACT_PARMS={0x18, 0x2, {0x800, 0x2, 0x20000009, 0xaa, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x1000, 0x0, 0x1c14, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x4, 0x5, 0x1, 0xe68c}}, @TCA_GACT_PROB={0xc, 0x3, {0x3, 0x207e, 0xffffffffffffffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x101, 0x5, 0x100, 0x200}}, @TCA_GACT_PARMS={0x18, 0x2, {0x1, 0x80000001, 0x10000006, 0x7, 0xfffffffe}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0xbf0, 0x4}}, @TCA_GACT_PROB={0xc, 0x3, {0x5, 0x2343, 0x7}}]}, {0xc4, 0x6, "effdd365821fc7bd84003842d6ca627befd6acd0df20047b66494bf6cec900bec4c07a486c296514878f9aefcdedd3d14bf5dd24679f234c162f4d93fa2a038c6dd5a4f800f96a7c9ec941d5f689a7797d8d08f8c6bfad620dec6a89a041ca96d394d8c4756a24117b2a592a62c93427be78dfaf8a9695d0bc8656e15410cac88a049c806bae3c93947599af27ded082c35ce716059795ad0a44d350005b315a0aeadf24e1f06fbab9469b4864777ec9b62ef2b0f9bb61711ba87b0ab178"}}}}, {0xf8, 0x1, @m_csum={0xf4, 0x15, {{0xc, 0x1, 'csum\x00'}, {0x20, 0x2, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xfffffffa, 0x2, 0xa96, 0x8}, 0x38}}}, {0xc0, 0x6, "353dd3ae0afeb3df547c36a0db92d12ad1a9dd162cd940216b99e85f9cdf7553c43c06e40ec593996f5274fdf2d9a690bd7e1e816381b5bce6abb1d9de2e98ccf971e09a8e1ba03b3825aea7d045a4e923e105f26a8d073c71858d09c0b0563875042beef280b7de0fff4a98b0f52d3bfc85d3bd6c159b7132a59ce92cd5ad481642f77ca9e3a91f0382a46a50a0250375bc980f78d753958193697b2ff9716b0e47be913ef0ac007930ed59cfcf51c7e7e35ff118560b80c6916fb2"}}}}]}, 0x1300}, 0x1, 0x0, 0x0, 0x3090}, 0x48d1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_NMI(r5, 0xae9a)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@textreal={0x8, &(0x7f0000000000)="660f151e984e3e660f3a4270660d0fc75e000f070f32f2a666b835182a580f23d00f21f86635200000050f23f8f3ab36f36f65660f2256", 0x37}], 0x1, 0x0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000000))
ioctl$KVM_RUN(r5, 0xae80, 0x0)
[ 351.201177] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 351.295938] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 351.307138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 351.325126] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 351.357801] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 351.373478] 8021q: adding VLAN 0 to HW filter on device team0
[ 351.401973] device nr0 entered promiscuous mode
[ 351.416275] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 351.438313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 351.449975] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 351.476777] bridge0: port 1(bridge_slave_0) entered blocking state
[ 351.483236] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 351.808249] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 351.824233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 351.832238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 351.854189] bridge0: port 2(bridge_slave_1) entered blocking state
[ 351.860702] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 351.869807] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 351.881120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 351.892439] device nr0 entered promiscuous mode
[ 352.242843] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready
[ 352.250551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 352.268012] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready
[ 352.296563] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 352.310546] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 352.350871] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 352.375193] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready
[ 352.398036] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready
[ 352.413138] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 352.421910] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 352.430226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 352.438141] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 352.448567] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready
[ 352.455960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 352.464298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 352.474107] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 352.480178] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 352.506536] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 352.528827] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 352.652810] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
[ 352.675274] tls_set_device_offload_rx: netdev not found
17:14:52 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x22040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="b26d0000b97cd3bd0b5d227e839e8d8ed0534a9b57ce6cfd6ba292411db8b437ac0bcf34ae05b014261419deb3a025561af4635f68a0fd226efa77457a928ce4a577a58ed461cad7d26979fcc3dcb9950e286629069945750b4879248cf3aa0dfdea243cf63a482ee99b7d2877375eeefc0280151250a89b7b5154c139c1b8c849016f6c1062083f0d7910db8efdaa3714aedc941edbd2bb6991832c6eb7c501c77562f5a5813041a6cc99ad7174a903244015c72c858ee6aebd381b6cd796f4e546bd0e5509b1a25de0a93d666a1faf4736175c25485372e85955312e12794235f8b0f35ca838a9bad31e3e2b9575e8cf9bb393fceca9a2a374ae6170607ebdac8e612a6d6a447f97de7ffad8413192c36e3829a0e2afe633084f3fc9da2bdb1ed0c181c8a3e64e043377d8597231424a9cad22ed200d8532a29c86", @ANYRES16=r1, @ANYBLOB="000127bd7000fddbdf25030000006400010044000400200001000a004e23000000000000000000000000000000000000000000020000200002000a004e2200000100fe880000000000000000000000000001ba000000100001007564703a73797a31000000000c0002000800030001000080"], 0x78}, 0x1, 0x0, 0x0, 0x84402}, 0x1)
semctl$GETVAL(0xffffffffffffffff, 0x4, 0xc, &(0x7f0000000280)=""/68)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
prctl$PR_GET_TSC(0x19, &(0x7f00000001c0))
signalfd4(r3, &(0x7f0000000240)={0x491}, 0x8, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x6, &(0x7f0000000100)={&(0x7f0000000000)={0x8c, 0x39, 0x829, 0x0, 0x0, {0x1, 0x1000000}}, 0x99a1}, 0x1, 0xffffff7f0e000000}, 0x0)
17:14:52 executing program 0:
ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000100)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @dev}})
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x561d577d2e8d1da, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0)
17:14:52 executing program 5:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r4}, 0x10)
r5 = dup2(r1, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0xe70a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
accept4(r9, &(0x7f00000005c0)=@ll={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x80, 0x7454821960b1aef7)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket$netlink(0x10, 0x3, 0x0)
r13 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r14, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB='t\x00'/11, @ANYRES32=r14, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r14, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
r18 = fcntl$dupfd(r17, 0x0, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200)
getsockname$packet(r18, &(0x7f00000010c0)={0x11, 0x0, <r19=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001100)=0x14)
sendmmsg$inet(r6, &(0x7f00000011c0)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="6f07694714bb7299099e909faa742427f2e301c88e49c67e913e9f40e5a8db264114be5bbb8f89fbb9abe4ea7db1989070847d0bb65ea6d66cdb4e5907a7b705bfc5f665a54b199e6ece280a90c5b85be7f65af91b91e0f3dae2c7d625a9e718c1792ddb100fa6e9bb9e75dd810e95b6b9a5a88a34ac33a9bf411298f2754f3d5f3f8d278238d5e2cb87366a808b50bcd7c21daac45eb58cabe7fb6925f2ebb051bbb1a4d94fe81c8af12b49e2b9a35c9c23524dcc095e12388fea173d24fe94f73eb5d996ff961d80f399ba65a60b4e8f0d8df76aed494e00b8f4b54876f5", 0xdf}, {&(0x7f0000000480)="842560b8a388f60ed8eee0f63a71a66e1129c52e9708f4d4de7f177cf199dfcd06cd8fb0", 0x24}], 0x2, &(0x7f0000000680)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x1f, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x38}}, {{&(0x7f00000006c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000700)="428c88f8497ca765e20151b0b1c2101494c8dd52bb42b82272f8292b20a541107ab97f164d26aa06b092cf244d980b3b182b1c4822605a7d36c38c7903dd1052e4263cfa1ad256458452199b3af49298c02306dc22a15bf42c35369ea8d5f3d9aa52f54f7fc5c8c2228a169a87a9b7bef320a351154e6c05bd87e0fe123cd9e44f0ce09f720d305d157ee61ab545e34f97237d986f46d30e7f39178d7a0e0c0bbdfc6f301446cdea45b0226a3d5eda0d5f8cbdda6ff2e24707483b261ccdce5ef7be2f83e83e85", 0xc7}, {&(0x7f0000000880)="d8647db2bf4f9f9770c55f5d0fa9eef0e65107023947da9557d1b40b1acba64a62a569b960f2d5cd0c64601f930f141b6c2d29a203199b77194aac2d84a0694772d3f025e2dfaefa5d793070b257e4040dce0826147721d81b931fecf3386ccbc0f5e3f08336bccff44ddb36b22a804f923db620ac0aedfb63a6ac70e9708433fe1b3f8e54981a4233511467b1191fc6ca83fbac5997aaa8e5306fa329579b44c756a52c84fd46aee7b73301aa7878164b57cf32741cd37e39d8218c8f9d8ef86cc8a2163f8ed00e199fe279b16a6a61499035fdc180df3ba62d9ea41feb", 0xde}], 0x2, &(0x7f0000000980)=[@ip_ttl={{0x14, 0x0, 0x2, 0x1d4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xbb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xf78}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ra={0x94, 0x6, 0x6}, @ra={0x94, 0x6, 0x1}, @rr={0x7, 0xf, 0x98, [@local, @remote, @local]}, @lsrr={0x83, 0x7, 0x3f, [@multicast2]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}], 0xb0}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000a80)="c4fa33daf05132896910a6a352dfbc62d2312710ece40b75f675ef8a865bcf15d429cfdf03a641983bf9cd7f99efa4b625df7cddfb25f39c8fe690fe87d5df0c0a3e92c7710818537b85666ddd511852be042a39fbc66bdbec", 0x59}, {&(0x7f0000000b00)="25a33a7ccdbbcc931b70777b460bc0ed6087fba07327c59c50c570e7fce73dffb7c5c535dddd075a0a483b99efda6d8c48f0c75c397c09c6611b716fa6b26924b40c09337138be36bd84fd8384c89582a3e617c8cff9984b21911958fc649b12a88218d9339c8f85182e09aa240f10f727b3716bcc4eac204f195c1903fde571a25b32fcdcba8a3fb8b573cbfc3b90aac63ef661887239", 0x97}, {&(0x7f0000000bc0)="af0bc1d968ee92832e912bcb7a1234abb7700141088ca48b82d64ca7413a232c784e57376f9e618162a5a1582d2eefc5498827b6c58f22f7212e73e3d2", 0x3d}, {&(0x7f0000000c00)="f7499b7440a714f1c058c140ab23285eca5d55efd965cb943a402b9d4ea6e2de3541f67f9e01e4f79bc47f43a593806d995c00ce310491821c6aed8013b198293f80a25b82e1c67b1b1a8c6660326710bb53d77f1df9cfab13a06b900787a99d86f1b99ce55a88ab9673cc23ec8ef96036b0fefb4b8366e75d1d9b2352ddfd8808f82fdd603f2a8917876bf8503390e8e7bf858161e2c190394bdade14089c6486d9dc982ce475608b93f75bec3b19bce1fe2f438cb580bbfa14758d25f4a00245a9c8bdbc70e56c6c9405a85e9457e2641fcd292ff5b7ecf1035e8d59938157260fc2054717acf90964", 0xea}], 0x4, &(0x7f0000001300)=[@ip_retopts={{0xa8, 0x0, 0x7, {[@cipso={0x86, 0x29, 0x0, [{0x0, 0xa, "92fc87047ba2ca3a"}, {0x2, 0x9, "d0dcf9e0619ec4"}, {0x3, 0x10, "679f529c22f0e1a15a6df6a75491"}]}, @rr={0x7, 0x13, 0x3f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @local]}, @cipso={0x86, 0x59, 0xffe, [{0x1, 0xb, "4a3a677da5cfaeb71d"}, {0x0, 0x10, "02771f09c3aca0fd5578f75ce754"}, {0x5, 0x10, "27a1642bd968b76d4e74034e03f0"}, {0x1, 0xc, "94a0f900cfe3a7c28118"}, {0x1, 0x8, "1f51d7fd76b4"}, {0x0, 0x7, "0f5aec74dd3822842a0fff664d60"}, {0x2, 0x3, "89"}, {0x2, 0x3, "9e"}, {0x7, 0x7, "fd353b8d9e"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_retopts={{0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7d7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}], 0x100}}, {{&(0x7f0000000e40)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000001a80)="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", 0x1000}, {&(0x7f0000000e80)="2ab399fe5902c1c58f02bb2ab41181fde3b606a7c9e945fdaf1e7a721d9f630d1e8560f6ff11c41cb21b4c8137471b519cf8f242d3567b1386c686cb6178655e583450c06120cb8f23c7f7e3cdbd854eebd2387aa50782eb7266c823a8e42d84d0a45a447498442abe8f2a4409e71a68909a5ebc390d3d098de6bf6a54c0e839e56704135345f4aa74593ae6834df900f62e9bec6b0b823248a09c35075512fc7e618b1f87b9f35bc8eca8a512e3ac99f025f004ef31f85bc4652ebba2604ce4b9a488cf0953059ac6d6cc25184a9a7a71a733a710f532ace5be7524db4cb99a7ac5c7d76fb309fa66a8f9c32b541ad78dfce4ea2c74a3", 0xf7}, {&(0x7f0000000f80)="7fb85f1a261527e5bf1fe56e81986062f2dec699944aea9953bc0ebebae70d33cfd12f0df5cb0d61046d5c59a0e0337c", 0x30}], 0x3, &(0x7f0000001000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xfffffffffffffec1}}, {{0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r19, @multicast1, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x70}}], 0x5, 0x2000)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x3ff, 0x20, &(0x7f0000000100)={0xa1, 0x0, 0x0, 0x300, 0x1}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
r22 = fcntl$dupfd(r21, 0x0, r20)
ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200)
r23 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r24 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000e00000/0x200000)=nil, &(0x7f0000f00000/0x1000)=nil, &(0x7f0000f6e000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)="9e810825f3b6034a5ee971c8bf07f5abde3d2b512285d9f897be2b", 0x1b, r0}, 0x68)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r24, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r25=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r23, 0x84, 0x72, &(0x7f00000019c0)={r25}, &(0x7f0000001a40)=0xc)
r26 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r27 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r27, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000b13db00b84ba54a47ce6bc6e333b4e02053548998bd06450bfbf14c229702b74017a3bebe04cd025daec799076381754cc8024d015922ed96c4f0cd90e65", @ANYRES32=<r28=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r26, 0x84, 0x72, &(0x7f00000019c0)={r28}, &(0x7f0000001a40)=0xc)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r28, @in6={{0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffd}}, 0x3, 0x6}, 0x90)
[ 352.711627] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
17:14:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
dup3(0xffffffffffffffff, r1, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:52 executing program 3:
r0 = socket$inet_sctp(0x2, 0x801, 0x84)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r3, r2, 0x0)
mount$9p_tcp(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000240)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@mmap='mmap'}], [{@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}, {@context={'context', 0x3d, 'user_u'}}, {@dont_measure='dont_measure'}, {@uid_eq={'uid', 0x3d, r2}}]}})
sendmsg(r0, &(0x7f0000000180)={&(0x7f0000000000)=@in={0x2, 0x0, @local}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)='#', 0x1}], 0x1, 0x0, 0x0, 0x9000004}, 0x0)
17:14:52 executing program 1:
r0 = socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000001c0)={r3, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)=""/206, 0xce, 0xffffffffffffffff}}, 0x10)
r4 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008108040f80ecdb4cb92e0a480e1810000000e8bd6efb120009000e000100400000ff050005001204", 0x2e}], 0x1}, 0x0)
17:14:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
dup3(0xffffffffffffffff, r1, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 352.866859] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'.
17:14:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 352.909233] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=10273 comm=syz-executor.5
17:14:52 executing program 3:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
dup3(0xffffffffffffffff, r1, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 352.965519] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'.
17:14:52 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x0, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffd0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8, 0x300000}, 0x10}, 0x70)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00'}, 0x10)
17:14:52 executing program 3:
syz_emit_ethernet(0x6e, &(0x7f0000000300)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x689, 0x3}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x38, 0x2f, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000]}, {[@fragment={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}], @icmpv6=@dest_unreach={0xffffff86, 0x0, 0x0, 0x0, [0x7, 0x608], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0x3, 0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3, 0x0, 0x0, 0x5]}, @mcast1}}}}}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000000)=@gcm_128={{}, "de8b463ad91830bd", "a7db55aa5d5451ec4f0b47e5b02394b0", "4644041a", "558d82d100f9449c"}, 0x28)
17:14:52 executing program 0:
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x40, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x8040ae9f, &(0x7f00000000c0)={0x7a, 0x4, [0x3b, 0x0, 0x40000084], [0x3a]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = dup2(r4, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000000))
17:14:52 executing program 5:
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x0)
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGSKNS(r4, 0x894c, &(0x7f00000000c0)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
accept$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000200)={0xffffffff, 0x3a3f}, 0xc)
r8 = fanotify_init(0x43, 0x80000)
fcntl$setpipe(r8, 0x407, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
perf_event_open(&(0x7f000001d000)={0x1, 0xff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
write$FUSE_STATFS(r1, &(0x7f0000000100)={0x60, 0x0, 0x3, {{0x425, 0x80, 0x2, 0x3, 0x7, 0x8, 0x5, 0x3}}}, 0x60)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r3, 0x0, 0x30005, 0x0)
17:14:52 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x4000000000014, &(0x7f00000000c0)=0x2, 0x4)
r1 = syz_open_procfs(0x0, 0x0)
preadv(r1, 0x0, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000007f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000400)="9f", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)='!', 0x1}], 0x1}}], 0x127ad, 0x0)
syz_open_procfs(0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$IMHOLD_L1(r4, 0x80044948, &(0x7f0000000040)=0x3000)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
17:14:52 executing program 1:
syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={[{@show_sys_files_no='show_sys_files=no'}, {@fmask={'fmask'}}, {@dmask={'dmask'}}, {@umask={'umask'}}, {@mft_zone_multiplier={'mft_zone_multiplier'}}, {@umask={'umask', 0x3d, 0x2}}, {@dmask={'dmask', 0x3d, 0xfffffffffffffffc}}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}]})
r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80000, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_SET_GSI_ROUTING(r6, 0x4008ae6a, &(0x7f0000000200)={0x2, 0x0, [{0xffff, 0x4, 0x0, 0x0, @msi={0x2, 0x400, 0x4}}, {0x200, 0x1, 0x0, 0x0, @adapter={0x7ff, 0x5, 0x7, 0x401, 0x3f}}]})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$RTC_WIE_ON(r3, 0x700f)
[ 353.263856] protocol 88fb is buggy, dev hsr_slave_0
[ 353.269019] protocol 88fb is buggy, dev hsr_slave_1
[ 353.335626] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 353.345919] protocol 88fb is buggy, dev hsr_slave_0
[ 353.345957] protocol 88fb is buggy, dev hsr_slave_1
17:14:52 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x48000)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000040)={0x3, r5})
r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000180)={0xa, 0x7})
[ 353.379005] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size.
17:14:52 executing program 4:
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000100))
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x808001, 0x0)
r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
dup2(r2, 0xffffffffffffffff)
r3 = accept(0xffffffffffffffff, &(0x7f0000000240)=@can, &(0x7f00000004c0)=0x80)
getsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000580)=""/96, 0x0)
write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="3a258211f663a7724bdef64346bc14b7b0f781659f8056d1d3abf9d1a54bfce1e77551a8bd678625f508300200000040847bc2fdffff01a1f62ac71e85445d8f244f6be479ffffffffff8756ea7d486588272169d8b90f1d7106f5776f7894ee47382b88117e669c6e3203e63a6a05995f5ed104fcf8722be75fa42c080601d48e7081161161a2793d1429196b"], 0x8d)
perf_event_open(&(0x7f0000000800)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r1, r1, &(0x7f0000000000), 0x8080fffffffe)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
fcntl$dupfd(r4, 0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
getpid()
socket$inet6(0xa, 0x2, 0x0)
[ 353.502806] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[ 353.536879] ntfs: (device loop1): ntfs_fill_super(): Unable to determine device size.
17:14:52 executing program 0:
mknod(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)
execve(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
mknod(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
clone(0x180000105, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x6}, 0x2000, 0x800007f}, 0x0, 0x80000000000, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000))
r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r3, &(0x7f0000000080)={0x14}, 0xfffffff4)
r4 = gettid()
tkill(r4, 0x1002000000013)
write$cgroup_pid(r3, &(0x7f0000000000)=r4, 0x12)
17:14:53 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil)
mmap(&(0x7f00008da000/0x1000)=nil, 0x1000, 0x0, 0xb4972, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x44000)
io_setup(0x3, &(0x7f0000000200)=<r1=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
io_submit(r1, 0x200000000000013c, &(0x7f0000000300))
[ 353.823876] protocol 88fb is buggy, dev hsr_slave_0
[ 353.829544] protocol 88fb is buggy, dev hsr_slave_1
17:14:53 executing program 1:
perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0)
unshare(0x0)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000440))
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_ifreq(r0, 0x8991, &(0x7f00000000c0)={'bond0\x00\x16\b\xea\xff\xff\x80\x00\x06\x02\xff', @ifru_names='bond_slave_1\x00t\x00'})
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000240)={'bond0\x00\xe1\x03\f\x00!!\x00\x01\x00\x01', @ifru_names='bond_slave_1\x00\x00\x00\b'})
17:14:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:53 executing program 3:
r0 = socket(0x2, 0x2, 0x0)
setsockopt(r0, 0x0, 0x16, 0x0, 0x0)
17:14:53 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 354.121922] audit: type=1400 audit(1571591693.422:119): avc: denied { ioctl } for pid=10360 comm="syz-executor.1" path="socket:[41081]" dev="sockfs" ino=41081 ioctlcmd=0x8991 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
17:14:53 executing program 5:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000240)={0x77359400}, 0x10)
recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
timer_create(0x0, &(0x7f0000cd0000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = gettid()
tkill(r1, 0x14)
[ 354.170229] bond0: Releasing backup interface bond_slave_1
17:14:53 executing program 2:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:14:53 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
sendto$inet(r0, 0x0, 0xfffffffffffffc6d, 0x20000800, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendto$inet(r0, 0x0, 0x0, 0x240, 0x0, 0x0)
17:14:53 executing program 2:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:14:53 executing program 5:
r0 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
keyctl$revoke(0x3, 0x0)
keyctl$describe(0x6, r0, 0x0, 0x0)
17:14:53 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b00)={0x9, 0x1d, 0x6, 0xc, 0x2}, 0x2c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f00000000c0), 0x2}, 0x20)
[ 354.769739] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 354.813536] bond0: Releasing backup interface bond_slave_1
17:14:55 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)='1', 0x1}], 0x1, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x1, 0x0)
17:14:55 executing program 2:
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:14:55 executing program 5:
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000480)='./cgroup\x00', 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0)
sendmsg$sock(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="95ea8e71615a8cd504f8a39c1ec5787640110719d673492b415f20df8900dacc5497079cdded372a526da70f7e6167741ae8486a7c45b602574825da3bb0621b10eb0a534ce56e635c6f35b4dc7396815e902bb71cc3fd22393a9860edecaeb0718399f7114364261ee831ac317aa2c9a42f762442bd10c1ea339db1840b55a79500cb6a68dba72a803b9310503f62340d7197fb9f9f6112774396bdd25326031b32113f3e3bec8cce2d2df85fd63124ee6203d7b1a88b8d302b3af7d800a8847c16d9d3b1fe4b53ed6959c1aa1c36bec942692e20d451203f72e8dc2379a04dc2c2c5", 0xe3}, {&(0x7f00000000c0)="16914c9e6a0cd2ed7505b86e83f7a1477363f60025b6c9a3e0aeb343a82be9c48d08aca759eef9e34009d4799416b630d22cd5660e45a6748f67f2433744b07cdb62ad9390e134debd1e36a387df57df2e5cbd4a128a49b2d9ae420a0d8d9d3cc71fcf89934a2ab391619ae12e817807d6bd23155ea7bb53f9fe8e776df9e15ff8320b05b5215771b5973507e50788244f973ad1ef5d7561332339b189b77e0faa56bd9a", 0xa4}, {&(0x7f0000000300)="7e075361d4a932df1f2c71bd468ce935948f3dd3e23bf37e8447fd62683bebde288a8dbc16278a43adcc5ff0796f409491c30004052be47f42b7f0cb3c3c7f0d60bfac007786c5ce2a6fff060c645922e805beaf0040b25ba6b4cbb1ac374b507acd7fb4eeb48947954c5ca365831f1a1eefba8f8d1673079fce747cde2b3c5bde72d77453f2359ee7af7452e8a178f388f027549b04fa61053d82a32ab0c6abaf74ba96b2e3d97351a6bf9ed0a1ae6c21c32d2e0a96bbd6e951bfd6f4c8bb4f56a81aa2b9df5e3faefc0ec3bd", 0xcd}, {&(0x7f0000000000)="ae96274b295390db04dcdbb6c6b27c6c33c9390f9690446d2a8b3a912be53f21323d092e3ca4c2f4bf4fa105e1e06dbfddd64e0c811b06", 0x37}, {&(0x7f0000000040)="029ee3755967309a173e6b28f5174e8388e0", 0x12}, {&(0x7f0000000c00)="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", 0x1000}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000000400)="7ab21cb0dd30443556cf6ce9cf8fe28e17e98be389565cdb57ea4f", 0x1b}, {&(0x7f00000004c0)="afdc8923b1cb7c1b013e82658ddea626e5dd9686006a93ec15af3385db3eae2fe3d8f7d59f5ce3902ba41dde859426ef53ea5087c0307d46e978d55e3c48d910a6cbb6c746ff03f730c0ade0469c99cba9ef96672f6da742ae94c83eaa0a7de7f14432ca70eb9399bacbfcbe202f5dbf7908c216d6774618dd2dee061a356b3a279c34b35b71677dd73152e5192f045c43ec9b356fdefe4dfbea8266c7937a5ec177a35315714df1c76e8a", 0xab}], 0x9, &(0x7f0000000440)=[@timestamping={{0x14, 0x1, 0x25, 0xffffff00}}], 0x18}, 0x40)
write$cgroup_int(r0, &(0x7f0000000080), 0x297ef)
socket$kcm(0x29, 0x2, 0x0)
socket$kcm(0x29, 0x41d9cd25e9d41b2, 0x0)
17:14:55 executing program 4:
r0 = socket$kcm(0x2b, 0x1, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="2e0000001900050bed0080647e6394f20100d2000500fc3711407f480f000300120000000200009ef88000f01700", 0x2e}], 0x1}, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="b4050f00000000009500000007004caa5a47871683d1343bbb27672c67682fc0dbf3bd049790cebf1d3978cd7e3faab94312043ffd4e83bf2e675cb8c9d8048083915a76459789d46cc221841050382344ef972e0197ac8e5597ebd8f0c60b726f3784ac6d589663d9f1c8752e9808cdb0f4a23c926d6a6725b09a039df05ac5d898930c318ca8af9b76da5df741a63b53f2a4816ae3af8e6f72abcf6d44ac11f58c85a3f5ea0efd2e6f2c596de6791dd47a083b6d4b3b31871a9ffb88e0fe59de81f6d676a7c2"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1}, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(r3, &(0x7f0000000240)='cpu.stat\x00', 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x4000, 0x0)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x10)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x9f', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup.cpu//y\xf3l\x00@\x05:$\x92\t71\xf7|6\xaf@W\xda\xea\xf2\x897~', 0x1ff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r6 = perf_event_open(&(0x7f0000000340)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r6)
ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, 0x0)
r7 = gettid()
perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd82, 0xfffffffffffffffd, 0xccd, 0x0, 0x0, 0x0, 0x7fff, 0x27c0, 0xf, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x2000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}}, r7, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r5, 0x40086602, 0x400007)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f00000003c0)='keyringuser-\x00')
write$cgroup_pid(r8, &(0x7f0000000000), 0x10000000d)
ioctl$TUNSETFILTEREBPF(r5, 0x6609, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0000002b008163e45ae08700000000040f0000000000bc4cc91b4dd66d1c958c00"/46, 0x2e}], 0x1}, 0x0)
17:14:55 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000080))
r0 = socket$kcm(0x11, 0x3, 0x300)
r1 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4)
sendmsg$kcm(r1, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0x0)
17:14:55 executing program 1:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0)
unshare(0x400)
poll(&(0x7f0000000000)=[{r0}], 0x1, 0x0)
17:14:55 executing program 2:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:56 executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0}, 0x2c)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x8080, 0x0)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/policy\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket(0x2, 0x803, 0xff)
add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9)
connect$inet(r1, &(0x7f0000000240)={0x2, 0x0, @remote}, 0x10)
r2 = syz_open_procfs(0x0, 0x0)
sendfile(r1, r0, 0x0, 0x72439a6b)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000bfff0)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x2}}, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x0, 0x100000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
write$nbd(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000200))
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000440)={{{@in, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, 0x0)
17:14:56 executing program 2:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:56 executing program 3:
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket(0x0, 0x0, 0x0)
poll(0x0, 0x0, 0x8000000000000200)
r0 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000700)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto$inet(r0, &(0x7f0000000500)="00abe6d29e6101cb8b41eea5cf2e67fea541e9b7b65fe42e517d5f81d2919e1b2f4cf7f77a16fc3e961a0847916c7c2d9b77cd3160567341263cf19b3b2c6177e7065dda850c756c06aede12e9da8118bb5464ad07fa6146f6903ee57345cbd7551f547bdbe947b4f9a0b28cf29a28eda534fc6e2c9bf2c36c87da9ad79e6e7090", 0x4202692d7f740df1, 0x4000801, 0x0, 0xfffffffffffffeda)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'})
recvfrom$inet(r0, &(0x7f0000000440)=""/98, 0x7cd97198ffceeca1, 0x0, 0x0, 0xffffffffffffffae)
pipe(&(0x7f0000000000))
read(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg(0xffffffffffffffff, 0x0, 0x0)
read(r0, &(0x7f00000001c0)=""/244, 0xffffff52)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = gettid()
tkill(r2, 0x1000000000013)
17:14:56 executing program 2:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:56 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xee68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x403662521ed92188}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20008004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
syncfs(r1)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ptmx\x00', 0x58000, 0x0)
dup2(0xffffffffffffffff, r2)
writev(r2, &(0x7f00000023c0), 0x1000000000000252)
r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x1000f4)
r4 = open(&(0x7f0000000180)='./bus\x00', 0x100, 0x0)
sendfile(r3, r4, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6(0xa, 0x8000000000080001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
r6 = syz_open_procfs(0x0, &(0x7f0000000240)='coredump_filter\x00')
r7 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
sendfile(r6, r7, 0x0, 0x80000000)
r8 = syz_open_procfs(0x0, &(0x7f0000000240)='coredump_filter\x00')
r9 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
sendfile(r8, r9, 0x0, 0x80000000)
syz_open_procfs(0x0, &(0x7f0000000240)='coredump_filter\x00')
syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
socket(0x10, 0x80002, 0xc)
r11 = socket(0x10, 0x80002, 0xc)
sendmmsg$alg(r11, &(0x7f0000000140), 0xc51b8afe4856d64c, 0x0)
sendfile(r11, r10, 0x0, 0xff)
r12 = syz_open_procfs(0x0, &(0x7f0000000240)='coredump_filter\x00')
r13 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
sendfile(r12, r13, 0x0, 0x80000000)
syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000)
r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x20, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
dup2(r14, r5)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'veth0_to_bridge\x00', 0xd000})
pipe2(&(0x7f00000001c0)={0xffffffffffffffff, <r15=>0xffffffffffffffff}, 0x80000)
write$cgroup_pid(r15, &(0x7f0000000080), 0xfffffffffffffc7a)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
17:14:56 executing program 0:
r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x800)
ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000100))
r1 = timerfd_create(0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f0000000000)={{}, {0x0, 0x1c9c380}}, 0x0)
timerfd_gettime(r1, &(0x7f00000000c0))
write$binfmt_elf32(r1, &(0x7f0000000fc0)=ANY=[@ANYBLOB="7f454c4605093f3f05000000000000000600030000800000c403000038000000d3030000020000000600200002000800070009000000000051e574640300000009000000557f000002000000000800004000000001000000d6fec57e3e9a52bf083f45393e9297942cbffc133974dd4c46e1670e200e1e4b8df0fa7fb31538b5b27a9184a94423c5546bb2f14b3dc2598a5798b51fd026afc4ea95e3f4b8e4a7822bdb2b508edbde4c6ef32b28064c5ca40a58477e9c6083514193f8de1e1af9bc11b3d3c18abff6307169c995c352c47830718dffefaac9095a31d660e4539ba1d658ee113cae6b9b9ffd3b741c7feacaa8f95fcb07aae80a35733564c40ca8845e8aefd92df8053e47665e85312fb6cd152afd10b2c02af4d27a72759d21107ca709b0b3b078ea7a8d446b131888d64244e68c488721cb2bdc6eed94ce480efd54a0540b6215e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000139e38500786940600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000af5410c50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000085c55fc0088b3a6b931444ab8b09e956dcecd37245761bbf9d60c23152bdc9d513c20bc2a03f2b59b25cd5bda78171cb8106d78f37bbb3990063926c72f3ad3a241dc987aca2ef8e4f00329c69b336e081e5cbad0b9491373a31fbae18bc634d05ea5c804a4bcae50c251de6e3dc3d710afec7a953521946f3684e2e885c4cd90a00006459372bebe82df8b5efb7590236431a6c022b282dcc9a416e84d440b13d2f2f052765e285045598a6d53dbd3cd8fb3dec9eac401150e1377d20c4d57e346aed5bb3d56c6f8431a0e18cb1d0d8d62fb0530d3e79f9107ee225ed9d471d0e318f883686883da43edfc4ee2a1f763420773796515a27b25024212597f97f4473fbddff6df33f291a1021eb48233efee4a6d9c294937d53c5aef5dea79e7a089404c2e1edb1a13f0fb1b2730280f3a3ea3f1f37ee8f3a645c6dd2fc5d87e447666a48149e61abdbb5b091c0c09fff61370f508934d3933b254c2d5e4a67c9a63680744b36a2f2d515d3a91b4e49fee3779658c5df589d06af26066ebf90b116ddb29e4fd0e146291f075594"], 0xb3e)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getrusage(0x0, &(0x7f00000002c0))
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BLKIOOPT(r3, 0x1279, &(0x7f00000001c0))
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r4)
r5 = creat(&(0x7f0000000280)='./bus\x00', 0x0)
fsetxattr(r5, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000000)='-{vmnet1[cpuset\'wlan0${system$\x00', 0x20, 0x0)
17:14:56 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 357.184996] audit: type=1804 audit(1571591696.482:120): pid=10449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir220107351/syzkaller.6bvoEw/82/bus" dev="sda1" ino=16551 res=1
17:14:56 executing program 1:
add_key$keyring(&(0x7f00000004c0)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$read(0xb, 0x0, 0x0, 0x0)
setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)='./file0\x00', 0x8, 0x0)
ioctl$VT_OPENQRY(0xffffffffffffffff, 0x5600, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080))
syz_open_pts(r1, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
write(r0, &(0x7f00000001c0), 0xfffffef3)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
[ 357.670359] audit: type=1804 audit(1571591696.972:121): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir220107351/syzkaller.6bvoEw/82/bus" dev="sda1" ino=16551 res=1
17:14:57 executing program 4:
r0 = open(0x0, 0x153042, 0x0)
write$P9_ROPEN(0xffffffffffffffff, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc0, 0x45)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0406618, &(0x7f0000000080)={{0x2, 0x0, @identifier="81b2210394a9d525c792967074143b7b"}})
r1 = gettid()
write$P9_RCLUNK(0xffffffffffffffff, 0x0, 0xa7e1172)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, 0x0)
r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
fstat(0xffffffffffffffff, 0x0)
fstat(0xffffffffffffffff, 0x0)
write$P9_RMKNOD(r2, 0x0, 0xffffffffffffffa7)
tkill(r1, 0x16)
17:14:57 executing program 0:
socket$kcm(0x10, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040))
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000300)="97f3d0af2c287d65b6fa0b5b59d989c92d8f4bbe81c9ce93", 0x18}, {&(0x7f0000000e00)="c56584bd68fec7867063193c2f4e907ab93b571755a0296cd462441d0e601548bd2c1a78530d6cc36fc10a17f69d71e6dd8262b2be1ab9ee159b4bc06fa8c5639f7793761724f63b949edaa70abee0e1758b552d4a346374ba71", 0x5a}, {&(0x7f0000000ec0)}], 0x3}, 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.current\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_user\x00', 0x0, 0x0)
r1 = socket$kcm(0x29, 0x5, 0x0)
recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000001600)=""/4096, 0x1000}, {&(0x7f0000002600)=""/4096, 0x1000}, {&(0x7f0000000640)=""/237, 0xed}, {0x0}, {&(0x7f00000004c0)=""/88, 0x58}], 0x6, &(0x7f00000009c0)=""/214, 0xd6}, 0x60fba71e74ca3d67)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
17:14:57 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x0, 0xffffffffffffff3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040))
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x26b, &(0x7f0000000f80), 0x1fa}, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
sendmsg(0xffffffffffffffff, 0x0, 0x40)
perf_event_open(&(0x7f00000002c0)={0x0, 0x70, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffff9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x266, 0x0, 0x101, 0x0, 0x1f, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0x7, 0x1, 0x0, 0x0, 0xffffffff, 0x0, 0x3, 0x1, @perf_bp, 0x8000, 0x9, 0x1, 0x0, 0x100000001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)
r2 = socket$kcm(0x11, 0x0, 0x300)
recvmsg$kcm(r2, &(0x7f0000002600)={&(0x7f0000002240)=@ll={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, 0x80, 0x0}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200}, [@alu={0x0, 0x0, 0x3, 0x99e1ee530ff1a670, 0x1}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, [], r3, 0x1, r4, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, 0x0}, 0x70)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002e00)={r1})
r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f00000003c0))
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000dc0)={r5, &(0x7f0000000c00)="4b814e8f529005bf8419525bcbafc7ac20dc6def7cf60fe0f472a4739ca00f1574ffc8e7603d6ca1db46884c813f22b04afb40da4867eb282deeb8b113e866bbb332e3bb3eb5cc4a3d106f1c57bb9447df0585e2c18c3d4d766c53a95e25edd736d558953126fd2c7e579b6748fd98264063a103034f1847bc63cce389d106b054a00e5e8403c2a82886ddf4cef99bdcfbd6a157eabd7f3ed2d736f6ca429e5f0fc844a6f0e48ed2b5a65bc1a897b0e23c0e3a4d426930311656fe0a19e1529eed72b1ec7e1ef9db3e45cbb6023627bffc", &(0x7f0000000d00)="25e47ec3ac62b8c09c49f92c56734894e160be8dd7b854f8094bdceb3834e8b6b027c2a23edcb722b7fdf0ad10531a2eeb231bf216b889686b49cfd5ad639452b4c1003d3bb873e96c69835b0014e5d34f"}, 0x20)
ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x1000100)
ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
[ 357.779049] audit: type=1804 audit(1571591697.082:122): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/83/file0" dev="sda1" ino=16689 res=1
17:14:57 executing program 4:
r0 = socket$netlink(0x10, 0x3, 0xa)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}]}]}, 0x28}}, 0x0)
17:14:57 executing program 5:
perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getpriority(0x2, 0x0)
[ 358.002850] audit: type=1400 audit(1571591697.302:123): avc: denied { create } for pid=10492 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
17:14:57 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x108, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getresgid(0x0, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0)
getpid()
setpriority(0x2, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00000000000000)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000001e00)={0x0, 0x2})
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getgid()
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
dup3(r2, r1, 0x0)
[ 358.070527] audit: type=1400 audit(1571591697.332:124): avc: denied { write } for pid=10492 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
17:14:57 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000600))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000200)={0x20, 0x0, 0x0, 0x8})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040))
17:14:57 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:57 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = socket$caif_seqpacket(0x25, 0x5, 0x0)
ppoll(&(0x7f0000000000)=[{r1}, {r0, 0x10105}], 0x2, 0x0, 0x0, 0x0)
17:14:57 executing program 3:
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0)
fchdir(r0)
r1 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
r3 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ftruncate(r4, 0x208200)
write$UHID_CREATE(r3, &(0x7f0000000400)={0x0, 'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0}, 0x120)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
fcntl$setstatus(r1, 0x4, 0x44800)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}])
17:14:57 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x108, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
getresgid(0x0, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000180)={'icmp\x00'}, 0x0)
getpid()
setpriority(0x2, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x6c00000000000000)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000001e00)={0x0, 0x2})
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getgid()
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
dup3(r2, r1, 0x0)
17:14:57 executing program 5:
17:14:57 executing program 0:
17:14:57 executing program 5:
17:14:57 executing program 4:
17:14:57 executing program 3:
17:14:57 executing program 0:
17:14:57 executing program 5:
17:14:57 executing program 4:
17:14:58 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:14:58 executing program 0:
17:14:58 executing program 3:
17:14:58 executing program 5:
17:14:58 executing program 1:
17:14:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000001c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
17:14:58 executing program 0:
[ 359.105960] audit: type=1400 audit(1571591698.412:125): avc: denied { map } for pid=10554 comm="syz-executor.4" path="/dev/binder4" dev="devtmpfs" ino=17420 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1
17:14:58 executing program 5:
17:14:58 executing program 1:
17:14:58 executing program 3:
17:14:58 executing program 4:
17:14:58 executing program 1:
[ 359.240581] audit: type=1400 audit(1571591698.412:126): avc: denied { set_context_mgr } for pid=10554 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
17:14:59 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:14:59 executing program 0:
17:14:59 executing program 3:
17:14:59 executing program 5:
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$kcm(0x2, 0x1000000000000002, 0x0)
socketpair(0x4, 0x0, 0x5, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x11, 0x3, 0x300)
r3 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4)
sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000680)="61634d856c126f522a54ecf419e69d97ff8b691fd099d6b2a0a829d505f37dfd1444471dc4f636bf3b0ce496970df0c5cf4720d482e92c407bae5a7ad5584a1c49b6916b", 0x44}], 0x2}, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
sendmsg$kcm(r3, &(0x7f0000003d00)={&(0x7f0000000380)=@in={0x2, 0x4e23, @local}, 0x80, 0x0}, 0xfd00)
write$cgroup_subtree(r3, &(0x7f0000004840)=ANY=[@ANYBLOB="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"], 0xfdef)
socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000340)={0x0, 0x0})
recvmsg(r1, &(0x7f0000004580)={&(0x7f0000003e40)=@hci, 0x80, 0x0}, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
close(0xffffffffffffffff)
socket$kcm(0x2b, 0x0, 0x0)
17:14:59 executing program 1:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0xe6)
r1 = socket(0x10, 0x802, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14)
sendmmsg(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0)
17:14:59 executing program 4:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46800)
write$cgroup_type(r0, &(0x7f0000000200)='threaded\x00', 0x175d900f)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x9032, 0xffffffffffffffff, 0x0)
17:14:59 executing program 0:
r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$unlink(0x9, r0, 0xfffffffffffffffd)
17:14:59 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:14:59 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x6ee089ee, @dev={0xfe, 0x80, [], 0x19}, 0x10000}, {0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, 0xe84e, [0xff, 0x200, 0x3, 0x3, 0x1, 0x8001, 0xfff, 0x3]}, 0x5c)
r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000080)={{}, [@rose, @default, @default, @netrom, @bcast, @default, @netrom, @rose]}, &(0x7f0000000100)=0x48)
sendto$ax25(r1, &(0x7f0000000140)="07bffd87e1714dc26b3693", 0xb, 0x4000000, 0x0, 0x0)
r2 = semget(0x0, 0x1, 0x5d4)
semctl$IPC_RMID(r2, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e23, 0xc9a, @mcast2, 0x9}, 0x1c)
getpeername$tipc(0xffffffffffffffff, &(0x7f00000001c0)=@name, &(0x7f0000000200)=0x10)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
getsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000280)=0x3, &(0x7f00000002c0)=0x4)
r4 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40)
ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000340)=0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/pfkey\x00', 0xc000, 0x0)
io_setup(0x10000, &(0x7f00000003c0)=<r5=>0x0)
io_cancel(r5, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x1, 0x3f, 0xffffffffffffffff, &(0x7f0000000400)="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", 0x1000, 0x3, 0x0, 0x4}, &(0x7f0000001440))
nanosleep(&(0x7f0000001480)={0x77359400}, &(0x7f00000014c0))
r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001500)='/dev/mixer\x00', 0x800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r6, 0xc08c5334, &(0x7f0000001540)={0x3, 0x4, 0x5, 'queue0\x00', 0x4})
mq_getsetattr(r3, &(0x7f0000001600)={0x6, 0x4, 0x5, 0x81, 0x7fffffff, 0x8, 0x20, 0x5}, &(0x7f0000001640))
r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001680)='/dev/vga_arbiter\x00', 0x8100, 0x0)
ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000001700)={{0x3}, 0x8, 0x7f, 0x4, 0x4, &(0x7f00000016c0)="3b50e4d4"})
r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000001740)='/dev/qat_adf_ctl\x00', 0x2db2f2a7668ad01, 0x0)
ioctl$NBD_CLEAR_SOCK(r8, 0xab04)
getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001780), &(0x7f00000017c0)=0x18)
r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000001800)='/dev/dlm_plock\x00', 0x710800, 0x0)
write$P9_RREADLINK(r9, &(0x7f0000001840)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10)
fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000001880)='trusted.overlay.opaque\x00', &(0x7f00000018c0)='y\x00', 0x2, 0x0)
sched_yield()
r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001900)='/dev/dlm-monitor\x00', 0x404080, 0x0)
mkdirat$cgroup(r10, &(0x7f0000001940)='syz1\x00', 0x1ff)
17:14:59 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:14:59 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000000)=[{0x28, 0x0, 0x0, 0xffff00000}, {0x80000006}]}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
write$binfmt_misc(r2, &(0x7f00000000c0)={'syz1', "6d98741b9728d20c93de468f89aa8f5117f2aff2cab3d703e72a6f91f71aec8a4f"}, 0x25)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4)
connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl(r4, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
17:14:59 executing program 5:
openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/relabel\x00', 0x2, 0x0)
r0 = semget$private(0x0, 0x4, 0x0)
semop(r0, &(0x7f0000000240)=[{0x0, 0x6}, {0x0, 0xfffffffffffffff8}], 0x2)
semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000000)=[0x80])
semtimedop(r0, &(0x7f0000000040)=[{0x0, 0x20, 0x1000}, {0x0, 0xffff, 0x1000}, {0x0, 0xfe01, 0x800}, {0x1, 0xd74, 0x3000}, {0x0, 0x1, 0x1000}, {0x2, 0x0, 0x1000}], 0x6, &(0x7f00000000c0)={0x0, 0x989680})
syz_emit_ethernet(0x32, &(0x7f0000000080)=ANY=[@ANYBLOB="ef25d863aaaa108853bf696708004500c145156b000000219078ac2414bbac1414aa0015e8000400907805e5704400cd98e8"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000000))
17:14:59 executing program 4:
r0 = open(&(0x7f00000003c0)='./file0\x00', 0x802, 0x88)
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[0x40, 0x4, 0xcd5, 0x2], 0x4, 0xf0, 0x5, 0x1, 0xd94, 0x5, {0x1, 0x2, 0x9, 0x9, 0x9, 0x3f, 0x5, 0xdc, 0x7fff, 0x3ff, 0x4, 0x2, 0x7053be56, 0x3, "e25486a3d55dd0ef830a5d673dac175e4c1c0281eaa846bc134c079b906e9331"}})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400)
ioctl$sock_SIOCGPGRP(r11, 0x8904, &(0x7f0000000340)=<r12=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000380)=r12)
io_setup(0x3, &(0x7f0000000300))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
r16 = openat$cgroup_procs(r15, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
fcntl$dupfd(r18, 0x0, r17)
ioctl$EXT4_IOC_MOVE_EXT(r16, 0xc028660f, &(0x7f00000002c0)={0x0, r17, 0x401, 0xa03e, 0x6, 0x1})
ioctl$TIOCGSID(r8, 0x5429, &(0x7f0000000040))
r19 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x210500, 0x0)
sendto$rose(r19, &(0x7f00000001c0)="d96b5108751013ebda4cc72e225101668cd80817c8f09c2dc4809b9c6e23ba7f098ace708195bb2d04fccf40461df91b7e700441bdf5160b56ec700a80416f9495a1206701f61fc61a4030366870", 0x4e, 0x8000, &(0x7f0000000240)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x2, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRESDEC=r5, @ANYBLOB="280012000c00010069703667726500f50eb17300140800ad3ec104000000000000000000000000bb"], 0x5}, 0x1, 0x0, 0x0, 0x10000082}, 0x800)
17:14:59 executing program 1:
stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
syz_mount_image$msdos(&(0x7f0000000200)='msdos\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffffffe, 0x0, 0x0, 0x141018, &(0x7f00000000c0)=ANY=[@ANYBLOB="646f733178666c6f7070792c336d616500000000eeffffffffff7fff3d6d73646f73002c6d61736b3d4d41595f524541442c657569643c", @ANYRESDEC=r0, @ANYBLOB="2c7391626a577401806502c61e5a4f0007006f"])
17:14:59 executing program 2 (fault-call:2 fault-nth:0):
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 360.383611] protocol 88fb is buggy, dev hsr_slave_0
[ 360.388876] protocol 88fb is buggy, dev hsr_slave_1
17:14:59 executing program 5:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x0)
keyctl$chown(0x4, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0)
r0 = inotify_init()
r1 = syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f0000000600)={0x80000000, "25324b7bc612b1b1f02e812075151a939ea6dfa345caff14bb6a92d6ae07e33d"})
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0xfe)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000180)={0x57fca2ad78830915, 0x1, @start={0x4}})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in=@initdev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8)
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x1c1c48caff529d04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setgid(r7)
fchownat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', r5, r7, 0x1000)
r8 = inotify_init()
inotify_add_watch(r8, &(0x7f0000000100)='./file0\x00', 0xfe)
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
rmdir(&(0x7f0000000200)='./file0\x00')
17:14:59 executing program 4:
mmap(&(0x7f0000000000/0xdbb000)=nil, 0xdbb000, 0x0, 0x32, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffffa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8208}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x80000)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
setsockopt(r1, 0x800000010d, 0xd, &(0x7f0000d14ffc)="02", 0x1)
17:14:59 executing program 1:
setxattr$security_smack_entry(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.SMACK64IPIN\x00', &(0x7f0000000180)='vfat\x00', 0x5, 0x2)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000340)='/dev/zero\x00', 0x240, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
fstat(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$UI_BEGIN_FF_ERASE(r8, 0xc00c55ca, &(0x7f00000006c0)={0x8, 0x0, 0x3})
setgid(r5)
stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r9=>0x0})
mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x3004, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@allow_other='allow_other'}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x9}}, {@blksize={'blksize', 0x3d, 0x200}}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read'}}, {@max_read={'max_read', 0x3d, 0x3}}], [{@euid_lt={'euid<', r9}}, {@fsname={'fsname', 0x3d, 'cgroup@:'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/nbd#\x00'}}, {@obj_type={'obj_type', 0x3d, 'lo%posix_acl_accessem1trusted'}}]}})
syz_open_dev$ndb(&(0x7f0000000240)='/dev/nbd#\x00', 0x0, 0x10002)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0x4}, 0x2421, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="dc2ac86d4b66732e66617400080441000500077008f80000d8c32d8cbe59628cf9d9ed7b2c", 0xfffffffffffffd1d}], 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x3, 0x800)
[ 360.626060] audit: type=1400 audit(1571591699.922:127): avc: denied { setopt } for pid=10636 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
17:15:00 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0xfffffffffffffcab, 0x0}, 0x10)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101080, 0x0)
ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f00000000c0))
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x5, 0x6, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x189)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r3}, 0x2c)
syz_init_net_socket$ax25(0x3, 0x2, 0x65)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r4, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20)
17:15:00 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[0x4b1]})
ioctl$VIDIOC_SUBDEV_G_EDID(r1, 0xc0285628, &(0x7f0000000100)={0x0, 0x4, 0x0, [], &(0x7f0000000000)=0x3})
close(r4)
socket$inet6(0xa, 0x3, 0x3c)
r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ubi_ctrl\x00', 0x204, 0x0)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @local, 0x19}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0x4240a4d0)
splice(r2, 0x0, r4, 0x0, 0x19404, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$IMSETDEVNAME(r8, 0x80184947, &(0x7f00000001c0)={0x7, 'syz0\x00'})
17:15:00 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='smaps\x00\xbe#\xd7c\xbf\t\v|=\x12\x9aT\xda\x8a\x18\x1f2\x80\xd1\x1ah\x1a84\xd4\xfd\xc4\xf4g\x06\xf9\xe5\xd0=K{W\xd1Yc\xf3\xd6\t>RL\"\xc5f+%\x8d\xb9L\xc3w\x1a\xe1\xc1\xc9\xc0\xab\x1f/K\x8a\"\xf0\xf0\xa0\xa9\xeb\xb5g\xa2\xd6\xf1\xb2\xb3\x03\x92\xfe\xf6+\x15\x06\x05\xb2n\xa9\xe2\xa4\xe3\x85!M\xeb&')
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000004c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
sendfile(r1, r0, 0x0, 0x100000000000002)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001300)='memory.current\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3)
r2 = socket(0x80000000000000a, 0x2, 0x0)
modify_ldt$read(0x0, &(0x7f0000000000)=""/109, 0x6d)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000080)={0xd6, 0x2, 0x4, 0x8, {}, {0x5, 0x2, 0x4, 0x8, 0x2, 0xeb, "ffb2e4ab"}, 0xeacb, 0x3, @offset=0x1, 0x4})
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
17:15:00 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
pipe2(&(0x7f0000000300)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x83800)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000015000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f6300a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x49f)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000100)={'nlmon\t\x00\x7f\xed\xb1[\xe5\xa3\xcd\xb6\x00'})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
accept(0xffffffffffffffff, &(0x7f0000000280)=@generic, &(0x7f0000000080)=0x80)
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x0, 0x4cb, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x2], 0x100000})
r4 = syz_open_dev$media(&(0x7f0000000400)='/dev/media#\x00', 0x184, 0x242200)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r4, 0x4040aea4, &(0x7f0000000440)={0xd7c0, 0x7, 0x9, 0x1, 0x6})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/status\x00', 0x0, 0x0)
ioctl$RTC_WIE_OFF(r5, 0x7010)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
getsockopt$MISDN_TIME_STAMP(r8, 0x0, 0x1, &(0x7f0000000340), &(0x7f0000000380)=0x4)
17:15:00 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
r3 = dup3(r1, r2, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, r5, 0x0)
r7 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r6)
r8 = socket(0x10, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000200)={{0x4, 0x8}, {0xb6}, 0x3, 0x0, 0x1f})
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r10, r9, 0x0)
keyctl$search(0xa, r7, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r10)
r11 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, &(0x7f0000cab000)=0xc)
r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r13, r12, 0x0)
request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r13)
keyctl$instantiate(0xc, r7, &(0x7f00000001c0)=@encrypted_load={'load ', 'ecryptfs', 0x20, 'trusted:', '/dev/net/tun\x00', 0x20, 0x9, 0x20, [0x34]}, 0x3b, r13)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x2b4, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, [], 0x11}}, {@in6=@mcast2, 0x0, 0x32}, @in=@multicast1, {}, {0x0, 0x1}, {}, 0x70bd2b, 0x0, 0x2, 0x0, 0x0, 0x44}, [@tmpl={0x1c4, 0x5, [{{@in6=@local, 0x4d6, 0x6c}, 0xa, @in=@broadcast, 0x3507, 0x1, 0x611f04413bbcd87c, 0x21, 0x2, 0x8, 0x7f}, {{@in=@remote, 0x4d2, 0xff}, 0x2, @in6=@rand_addr="51789621688b4a154b670cee66dd0ef9", 0x3501, 0x2, 0x3, 0x7f, 0x4, 0x7fffffff, 0x80000001}, {{@in6=@mcast2, 0x4d3, 0x32}, 0xf5737af41f9d525e, @in6=@local, 0x0, 0x0, 0x3, 0xfe, 0x1, 0x78, 0x576}, {{@in6=@local, 0x4d3, 0xe6}, 0x51695008426781bc, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3503, 0x0, 0x2, 0x9, 0xff, 0x27eb, 0x80000000}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in6=@empty, 0x3501, 0x3, 0x2, 0x40, 0xc309, 0x0, 0x6}, {{@in6=@ipv4={[], [], @remote}, 0x4d5, 0xff}, 0xa, @in6=@mcast1, 0x0, 0x3, 0x0, 0x18, 0x800, 0x7, 0x997}, {{@in6=@loopback, 0x4d6, 0x6c}, 0x2, @in=@multicast2, 0x3507, 0x0, 0x2, 0x80, 0x8, 0x100, 0x7fffffff}]}]}, 0x2b4}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r16, 0x84, 0x21, &(0x7f00000002c0)=0x1, 0x4)
fcntl$dupfd(r15, 0x0, r14)
r17 = dup(r15)
ioctl$TCFLSH(r17, 0x540b, 0x745)
17:15:00 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
fcntl$setflags(r4, 0x2, 0x1)
setsockopt$inet_udp_int(r2, 0x11, 0x66, &(0x7f0000000080), 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, <r9=>0x0})
ioctl$TIOCSPGRP(r8, 0x5410, &(0x7f0000000180)=r9)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, 0x0, 0x0)
recvfrom$inet6(r1, &(0x7f00000001c0)=""/31, 0xfffffffffffffe3c, 0x100, &(0x7f0000001880), 0x17c)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
r10 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
ioctl(r10, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
shutdown(r1, 0x1)
r11 = accept4(r0, 0x0, 0x0, 0x0)
sendto$inet6(r11, &(0x7f00000000c0), 0xffffffffffffff47, 0x0, 0x0, 0x1a)
[ 361.080910] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
17:15:00 executing program 0:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @dev}, @igmp={0x1e, 0x0, 0x0, @local}}}}}, 0x0)
[ 361.241510] audit: type=1400 audit(1571591700.542:128): avc: denied { map } for pid=10678 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
17:15:00 executing program 5:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.capability\x00', &(0x7f0000000200)=@v1={0x1000000, [{0x4, 0x1}]}, 0xc, 0x3da8644712fb1d40)
syz_open_dev$swradio(0x0, 0x1, 0x2)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, 0x0, 0x840)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000500})
[ 361.345671] FAULT_INJECTION: forcing a failure.
[ 361.345671] name failslab, interval 1, probability 0, space 0, times 1
[ 361.363710] CPU: 0 PID: 10633 Comm: syz-executor.2 Not tainted 4.19.80 #0
[ 361.370682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 361.380047] Call Trace:
[ 361.382651] dump_stack+0x172/0x1f0
[ 361.386305] should_fail.cold+0xa/0x1b
[ 361.390209] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 361.395324] ? lock_downgrade+0x880/0x880
[ 361.399495] __should_failslab+0x121/0x190
[ 361.403750] should_failslab+0x9/0x14
[ 361.407561] kmem_cache_alloc+0x2ae/0x700
[ 361.411722] taskstats_exit+0x6c8/0xcea
[ 361.415704] ? taskstats_user_cmd+0xcf0/0xcf0
[ 361.420214] ? _raw_spin_unlock_irq+0x5e/0x90
[ 361.424723] ? acct_collect+0x699/0x860
[ 361.428707] do_exit+0x44d/0x2fa0
[ 361.432167] ? find_held_lock+0x35/0x130
[ 361.436235] ? task_work_run+0x118/0x1c0
[ 361.440314] ? get_signal+0x384/0x1fc0
[ 361.444222] ? find_held_lock+0x35/0x130
[ 361.448295] ? mm_update_next_owner+0x660/0x660
[ 361.452985] ? _raw_spin_unlock_irq+0x28/0x90
[ 361.457492] ? get_signal+0x384/0x1fc0
[ 361.461386] ? _raw_spin_unlock_irq+0x28/0x90
[ 361.465892] do_group_exit+0x135/0x370
[ 361.469265] overlayfs: conflicting lowerdir path
[ 361.469794] get_signal+0x3ec/0x1fc0
[ 361.478269] do_signal+0x95/0x1960
[ 361.481825] ? __inode_security_revalidate+0xda/0x120
[ 361.487045] ? avc_policy_seqno+0xd/0x70
[ 361.491233] ? __sanitizer_cov_trace_cmp4+0x16/0x20
[ 361.496274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 361.501841] ? setup_sigcontext+0x7d0/0x7d0
[ 361.506195] ? kick_process+0xef/0x180
[ 361.510103] ? task_work_add+0x9c/0x110
[ 361.514099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 361.519658] ? fput+0x128/0x1a0
[ 361.522953] ? ksys_pread64+0x121/0x1c0
[ 361.526928] ? exit_to_usermode_loop+0x43/0x2c0
[ 361.526941] ? do_syscall_64+0x53d/0x620
[ 361.526952] ? exit_to_usermode_loop+0x43/0x2c0
[ 361.526968] ? lockdep_hardirqs_on+0x415/0x5d0
17:15:00 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:00 executing program 0:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x4, 0x3, 0x4}}, 0x14)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x2)
r2 = getpid()
ptrace(0xffffffffffffffff, r2)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140))
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
fcntl$setstatus(r3, 0x4, 0x400)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe003, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
[ 361.526983] ? trace_hardirqs_on+0x67/0x220
[ 361.527000] exit_to_usermode_loop+0x244/0x2c0
[ 361.527017] do_syscall_64+0x53d/0x620
[ 361.527036] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 361.527048] RIP: 0033:0x459a59
[ 361.527061] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 361.527067] RSP: 002b:00007fdaaca6bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000011
17:15:00 executing program 3:
mount$bpf(0x20000000, &(0x7f0000000380)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz'}, &(0x7f0000000a80), 0xfffffffffffffffd)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0xb2)
syz_mount_image$msdos(&(0x7f00000001c0)='msdos\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2, &(0x7f0000000480)=[{0x0, 0x0, 0x1}, {&(0x7f0000000340)}], 0x402, &(0x7f0000000080)=ANY=[@ANYBLOB="646973636172642c6e6f646f74732c646f7473f01e5e361c959feef97c666d891df7b7cfb20b63509e29f5757cd04b88227d87d3b8cf9033000000000000000000000000f7550ad220fb16eeedb3c2f316a2c0b2e7d9c45e6f844cba7cc97761580b275aa8a4059c056f06cb179046370dfd4abef171689b60e0a188d99089649d1b90e872721360330d0954d4c0cf07af28f48f39f0a9776d42918fd445c3e51bb47e8da6b03c6746cb7b6a79f360f342cd7410885f81b5061b1d29cbf347a37abc1039593ba38b752d2528738676974d7a8ebcea51ef462c328a6a35e4f5a4c19f8c"])
[ 361.527081] RAX: fffffffffffffffc RBX: 00007fdaaca6bc90 RCX: 0000000000459a59
[ 361.527089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 361.527096] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 361.527103] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fdaaca6c6d4
[ 361.527110] R13: 00000000004c6fc3 R14: 00000000004dc800 R15: 0000000000000004
17:15:00 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x7ffffffff000, 0x0)
17:15:01 executing program 5:
open(0x0, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x3)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@getqdisc={0x28, 0x26, 0x8, 0x70bd25, 0x3, {0x0, r3, {0xffe9, 0x3}, {0xffe0, 0xfff3}, {0xa}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40004000}, 0x80803)
creat(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x10, 0x0)
r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fchdir(r5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r6, &(0x7f0000000000)='threaded\xa0', 0x4004)
17:15:01 executing program 1:
statfs(0x0, &(0x7f0000000500)=""/207)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x80, 0x0, 0x0, 0x0, 0x81, 0x603b613231c6bdd9, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x6, 0x200, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$tipc(0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f0000000400))
pipe(0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0)
pipe(&(0x7f0000000100))
pipe(&(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
tee(r1, r2, 0x0, 0x0)
pipe(&(0x7f0000000100))
pipe(0x0)
pipe(0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000fb, 0x0, 0x0, 0x0, 0x0, 0x800], 0x1f004})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
17:15:01 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0xf0ffffff7f0000, 0x0)
17:15:01 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
r0 = socket$inet(0x2, 0x6000000000000003, 0x6)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='ip6gre0\x00', 0xffffffffffffffaf)
sendto$inet(r0, 0x0, 0x0, 0x404c0c0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000000c0)={0x7b, 0x5, [0xc0010058, 0x0, 0xc0010000, 0xfffffffffffffffd], [0xc1]})
sendto$inet(r0, &(0x7f0000000080), 0xfe7a, 0x0, &(0x7f00000001c0), 0x10)
[ 361.854917] audit: type=1400 audit(1571591701.162:129): avc: denied { create } for pid=10705 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[ 361.894919] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters.
17:15:01 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x7ffffffff000)
[ 361.979341] audit: type=1400 audit(1571591701.162:130): avc: denied { write } for pid=10705 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
17:15:01 executing program 4:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1, 0x0, 0x110})
17:15:01 executing program 3:
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x2000, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000300)={0xf, 0x1f, 0x1, 0x80}, 0xf)
r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fa, &(0x7f0000000140)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10)
r3 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x105084)
r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a3", 0x1}], 0x1, 0x81003)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0x0, 0x3ff, 0x3ff, 0x0, 0x0, 0x5})
ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r4)
sendfile(r2, r3, 0x0, 0x102000002)
r5 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, r5, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="3300000028252c037cb97d17c4a8e12a4ba8b7a1939890e5c2ac15acb5d7f84ac26bbee41d020000003733d254df12aad7417f4a92a9441e3e77cd8d1938b2750a966c64ab709bc4b7a0aaa9b17ba5fd1b94c14c2bbea9fd1245bb570f207d5e117dda425173db27e7a019b9f3c52b9efa19f539a8c632686a1eaed667173817438ea1991532b878ea7c88766df4362c72127e575aa0b0c60ef182cba0fd61b6ac5109580a5f6f9c19a55bc4cd07e1b700000000000000ca98105babaeea5e0000000000"]})
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x110, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=ANY=[@ANYBLOB="3300000028252c037cb97de23da76cf990753ea1939890e5c2ac15acb5d7f84ac26abee41dd9ede0802d33d243df12aad7417f4a92441e3e77cd8d1938b2750a966c6400ab709bc4b7a0aaa9b17ba5fd1b94c14c2bbea9fd1245bb570f207d425173db27e7a019b9f3c52bee9c814339a8b832686a1eaed667173817438ea1991532b878ea7c88766df4362c72127e575aa0b0c60ef182cba0fd61b62c5109580a5f6b0000000000005f4cb700"/196]})
syz_open_dev$video(&(0x7f0000000100)='/dev/video#\x00', 0x200, 0x400400)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r8 = syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x0, 0x2)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r8, 0xc08c5336, &(0x7f0000000340)={0x8, 0x80000000, 0xca, 'queue1\x00', 0x9})
17:15:01 executing program 5:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$NBD_SET_TIMEOUT(r2, 0xab09, 0x101)
syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x4c00, 0x1, &(0x7f0000000000)=[{&(0x7f0000000040)="601142e006000a0090040300001af5c97f13", 0x12, 0x400}], 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xa1d, 0x200000)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000180)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000580400002802000028020000280200000000000028020000880300008803000088030000880300008803000003000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000eeffffff00"/48], @ANYBLOB="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"], 0x4b8)
openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x8082, 0x0)
17:15:01 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0xf0ffffff7f0000)
17:15:01 executing program 5:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000380)={0x6, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 'ovf\x00', 0x1, 0x9, 0x17}, 0x2c)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
removexattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_access\x00')
write$P9_RVERSION(r2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = dup2(r5, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid={'access'}}]}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = syz_open_dev$cec(&(0x7f00000002c0)='/dev/cec#\x00', 0x3, 0x2)
ioctl$TIOCLINUX7(r9, 0x541c, &(0x7f0000000300)={0x7, 0x1})
r10 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r10, 0x40045402, &(0x7f0000000080)=0x1)
[ 362.198975] audit: type=1400 audit(1571591701.172:131): avc: denied { read } for pid=10705 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
17:15:01 executing program 1:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x1)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x2900, 0x0)
ioctl$RTC_VL_CLR(r2, 0x7014)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
sendto$inet(r1, 0x0, 0xffffffa9, 0x20040885, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10)
17:15:01 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, &(0x7f0000000000)=0x7fff, 0x4)
[ 362.397486] kvm [10724]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc0010000 data 0xfffffffffffffffd
17:15:01 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160554]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000780)={"54abec7338595f275a2292c45ff078f1cbbf04241d1c3421ec9bf61b2221bc18246e74f0001e36735c2ad340bf94ad2a35cfc5d0953a3b2bfd41e2e051c6765447395415a9b05dffbe957e300168dc46f8377130fd28e50a805a6005ab6167da65430e3fcc214d7893c6d91026b5f5192f346a367dbc8ae5df0fd099b4e7a6dadd7f555b203f504eda86e0e8d8c5f319604db5a686750d03bf3a67210063e9a17ca0a1ccd80a7d57cb034b828b784b14c9e5dd70ca358c6819c3df7f4443dced6d9a56bb54eac6538cc61c5e9ef3bda9feeb62cbe4f0e1d1c7f6cbbcada85dbb247b0551773f0734e6f4733db49c22e497557c2f74bfa0e4af9b6228643f180d9f9e1e2bcdf0c35a5b8c388e728b574a066e190800db7b42573f534b8f60e8f756dc4d8dec7ad58b0474fc002851b265cc72099d43115828ac723e73009150fcf7196b4133e2988d4b0fc459e57293afef8837fa0d5d24b984a95cb4bdc48fc9c6e73ebee6b1a3239b2c0eef7c751ccb9f2dcdc3c69173db48df6b5d6e59e6465283de675a8d053e7f3abf86f43006a5a0c6225a589c12583e767b9d817f17bf690444a18e6f8a35b2cb4b60c191efbb16393560b568ee6c82bed918aa4a34b575ac9966b395aafa7fc3b7f467b484eb7d2617e0a240e8acbc2a7e02b650f7d1be52f462be20faa32dd88eb041e2c46b24ed7ab79c10f05296f5461f4ebda25dd7b9908da4be62b0871b169016fab8aae31c7ba45e5b30b7556a062999f43d2dbb9995d2d5de72ffe885bf6bce45caa470933c0906807da75cd38533d8f16d875452c543b259e78215011d2be638eab023513cfe0693d3107e17cfc87e038fc7d1db232d15307fe1d2a818d0a4bde2c53d221111ffa646514dd1fbd3c011b058f79c6fb0a31857ea309018bf72180a434611195c975cf5e285777231b6f158ecaf212183600379fe9762277c13cb6cde9cc0178b883fd1f210180e599f8eb33d33a9ff0f70db1de485b2f2434f2707bf9a54bb6aff687c515c430d5087f4d53a57adf7c97a06dcc61d7733a93dc505d57d8d5c83bf83e345a979307d708756c3f0f1c53a28883b665fda239019f32fc6f07d700d05023e9ef5b66d4b6be57ffd6fe39703fd4eed61535568f47ee51eff8290618e8387d0ba0d00c5bc4585d2d85688af46bb1da08bf42901634cb10e6b03ee276c16980090b59f3c57b428ae0a7ede758c781e2a5a8585e903adde0a0a281a7779a59067d82985655d9138b75042970e11aee4b95b8bcf232473767cca0139b2c2fb40045c6e031950c314015db2524c3f2fe941f249d158a44aa14774e61b2ee185bdfea8f317e440a39533c6db7ffd3c2b626c1e1e088bcebc59526b016cc6a0e4b766c3f00f619d366e5a4378bc15f805a6fb8c9400"})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x79dc9288cbc7c41e, 0x0, 0x2000, 0x2000, &(0x7f0000001000/0x2000)=nil})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
[ 362.423725] audit: type=1400 audit(1571591701.682:132): avc: denied { map } for pid=10743 comm="syz-executor.3" path="socket:[41842]" dev="sockfs" ino=41842 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=packet_socket permissive=1
[ 362.463403] protocol 88fb is buggy, dev hsr_slave_0
[ 362.468595] protocol 88fb is buggy, dev hsr_slave_1
[ 362.475867] kvm [10724]: vcpu0, guest rIP: 0xfff0 disabled perfctr wrmsr: 0xc1 data 0x0
17:15:01 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
sysinfo(&(0x7f0000000200)=""/28)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
socketpair(0x487d82ca5292fe42, 0x80000, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
17:15:01 executing program 5:
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}})
syz_mount_image$xfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000340)=[{0x0}], 0x402000, &(0x7f0000000440)=ANY=[])
pipe(0x0)
eventfd(0x0)
creat(0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000000001ca, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x5)
openat(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x2, 0x3}}, 0x10, &(0x7f0000002800)=[{0x0}, {0x0}], 0x1, 0x0, 0xffffffffffffffdc}, 0x8810)
[ 362.614288] audit: type=1400 audit(1571591701.922:133): avc: denied { create } for pid=10764 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_crypto_socket permissive=1
17:15:02 executing program 1:
r0 = socket$inet6(0xa, 0x805, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x272c, 0x395200)
lsetxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2)
ioctl$VIDIOC_QUERYSTD(r2, 0x8008563f, &(0x7f0000000200))
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff40700000337f6d42bc70000000000000950000000000000053f70dd549673106972055bfd00152ce37f8a1c1f60400872b847627d0e8aec0efdfba2314f0305001b3c2d4b282c0f2bf18c4843baf3a5a38281539b5304d0eb657c5f2bb8b00000000000000000000af7c89c3ceb9f62e1918660fb1c450a288e10fa05084ca0ec513f220658819ece61480399cf7217956fc0bc1e9d9"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746'}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4)
socket$packet(0x11, 0x2, 0x300)
sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000080)=')', 0x1}], 0x1}}], 0x1, 0x0)
17:15:02 executing program 0:
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x80101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8335453580ecc3ba)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000040)={'team_slave_0\x00', @ifru_data=&(0x7f0000000000)="3f86ee7fa87593c47cae79dd79a12ad9570421a8d98e2cba5b2694a7b18a09ba"})
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000540), &(0x7f00000005c0)=0x10)
[ 362.713421] protocol 88fb is buggy, dev hsr_slave_0
[ 362.718618] protocol 88fb is buggy, dev hsr_slave_1
17:15:02 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$binfmt_misc(r2, &(0x7f0000000000)={'syz0', "9e331bc822caf4ac15f18c962b99d948f62ca6032a0486484f733850521ef8c32f84d3d9e18d61c3ca0eb4325ea2039ffdbe494c0b4c50cb7238f7e4a901823ffffce95aceeca6d455e7239aa332c0169d29ae2cae301f39e6b6f9a535edf1516a4e7242"}, 0x68)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c80, 0x0)
getpid()
r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, 0x0)
keyctl$clear(0x7, r4)
request_key(0x0, 0x0, 0x0, r4)
socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080), 0x14)
[ 362.819169] audit: type=1400 audit(1571591702.122:134): avc: denied { prog_load } for pid=10784 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
17:15:02 executing program 3:
syz_emit_ethernet(0x66, &(0x7f0000000180)=ANY=[@ANYBLOB="0180ce880000035c7e39c5e486dd600009000030000080000000000000000000ffffe0000002ff020000000000000000000000000001800090780009040060b680fa0000000000000000000000000000ffffffffffff00000000000800000000ffffac14ffbb"], 0x0)
r0 = semget$private(0x0, 0x1, 0x0)
semctl$SETVAL(r0, 0x0, 0x10, &(0x7f0000000000)=0xcbcb)
17:15:02 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x22000)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000080)={'\x00', 0x8, 0x8f})
17:15:02 executing program 4:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x101042, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x100000001)
ftruncate(r2, 0x200004)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x1f9, 0x24, 0x2, r2})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendfile(r5, r1, 0x0, 0x104)
17:15:02 executing program 5:
rt_sigprocmask(0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x8)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/dlm-monitor\x00', 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000001b40)=0x80000000, 0x4)
setrlimit(0x1, &(0x7f0000000080))
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_RECVNXTINFO(r7, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000180)=0x4)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, r4}])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/btrfs-control\x00', 0x802, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$EVIOCGLED(r12, 0x80404519, &(0x7f0000000580)=""/4096)
r13 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
17:15:02 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x12}, 0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r3=>0x0, @local, @empty}, &(0x7f00000000c0)=0xc)
bind$packet(r2, &(0x7f0000000100)={0x11, 0x16, r3, 0x1, 0x20, 0x6, @local}, 0x14)
r4 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = getpgrp(0xffffffffffffffff)
ioctl$TIOCSPGRP(r7, 0x5410, &(0x7f0000000180)=r8)
[ 363.098820] syz-executor.1 (10786) used greatest stack depth: 21120 bytes left
17:15:02 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000001080)=ANY=[@ANYBLOB="06df2462", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000010c0)=0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x3f)
mq_timedsend(r3, &(0x7f0000000080)="e654fc246f8331dce59197f87d209ac210aa63753a4fd28ef2d759fcceda72fed1af76b0205d42d280d12bddef083198c1acb3733239fb3d9f959bc35f1024d9894232bf6ca7ec763a4bdddbd68ff2dc41d0059e07a4d49a70b15a4110734129bce595ccfa24716093c16e50198447a2b403d97b7d372af7b86ace7b6adab68242976435f4dfce0d059acf63280704bc71432c80b4c54894b9f340778853eb3593e05b8369383cead518fa65055f88adfe238975368f7cdcf811230d8966e2ed8d88fad20b5bef3b1a982f9b70743bc960799aa02ff6cc19370146bab2fe167a763bb3caec39e95a0ca1f940d7a023929df8943811a4db10929c3e0f9eed84a9c538e7871447dfb6f081824a80f5ab5a5a8e50b89cb0634b949a637257d2287a20e9191fa07c996b863dbe8b114ea5fec26879b6bd1672ad4495976ef682aadefbd08afbb60dfb76ed6bc54eeeceb28fa2369616ebeb08064dd539d3e371cac30c0c98a78b46a15182f48a7ab6e577473ea75863cbe90809d19aaa54088d80709236e2f625a3ce9a9c45aed6c7e3dffaa8af25da52b0bd74df661cb50b3703d8913d9493ec4260297516ad29e1c866fc202638e25c6647cb8545643e947d4bfc3b03d4f0bc24450902e1b3607a89390057b358689f96e62020115e9c535413058affa124c33f89dceab78db6d148c639b673f45e97dec43a29e04b42842e8c412b1f8f3345cb3e69f14725ac5c284143dbff8c9b2896227b18de713a8521bdb2d4d36a1425886173b791e42af2f10a4b338c4546b10c452da765c22e16b89d278267615f97bcf0df76a472f9fb8209d46718fa80fce3f2de700c946a67016099e39e5b05991dc7ee97e5cdb7f37d33da6d7082d2f65dd59329dbf1585528e349f7b55779c10ebb89dbfc77995c3925411d46aa143020e06d2f38090de6ebbd693dda6f91823e26f7c0bc42f345fe1345a997dc9b38c1dcd0dacf58be9c23f123e2b5f33207cdc6da8df3957ec2db2000ff157e5128e71cfe74d05d1d3b310b7b98bbe84c486da3ecbaf07487a357108549b77f55ea0cd343cf2b2f1509bd7e591a12f75d97d4c99a52234650a20ddb8a65b494c6c2c2a7377a1554af133f16cfcbd6d197f717d13d144779e1afc1eb1d2b6f73990af2a19874fe4c9629086b8186e75732809a6752cea1a69ace3a4a3b2016a0730472cc837cb4b310e7802bcf0c4f9f0ec8db99e35ff356145f125bba273456f7b6fc685c89fa57248a1cf854c4878f234f90c85bd1e76703a7fb27a5b1716b158f33bc001f726b6e1b06182011a74160222c97ced9f487f8db997a5f9fd4f15a7d8a4574cdfa8f25650fc11f52413e67e2da125fc5644a0ea3146a30cb3b19be1c10d7977438489d0b424cb336e20ca3f4f681b94322a725011a2cb42bbe963bfd05e28252d7a580bea730a2c2de4b6c984a36495a7d5410de70ba9f8052f453c3dea04edfb762dacded09178e39a551ea08cbaa182e76cf384d3f6d82243e702dde37f14e72e3cc35c2c7761ccd9337d893ce8c5002b41edfef4222f57a46ee1145d591331ae42bc85b7b765aaf4ae53e42dbbecaa2610f3929c307ce98eac7a4eb57b1c1d02ddc361dc5308d92487c7f186f1fed6d25491595672be10ace412f95bd70c094167dbb4523aa0d13d103d1801332a4916c67f125da80380c283e43150a08da6d5eeff93b325efefbda8a774579dc599ab183a399ea2e90d51434c4b76e3b3ab7bda037865d62e523b4dacdd899b394ecd1a4d7308469f9e1f73dc4d564b0f24c2f8e11be83698f9a4f197a23fda23e95caea7ed1ecd93a9f7a842d751b1018b23bf133cf949d547385fc208ab82e42753524b6eeee092d0c8bcd380706407b764bb10044c9d8296b7087ded0caf1e1c2f987244647112d9c237e44acd79eb77f17bddb5d495c34ecd7ddc3dadf27b5796a8638a4e5e12bef760ca8e67956d31e51744e4ff88fdda030e2de76286cf93ab2dd9e213af09f012b536f21b1e41e3a044e528116ee12383c4edc96e78c11672fe4b7068043c0ad86d5759e0390e757a254e71df5e7cfd81af11addf86afb3182be0255f65a9355f29087e0a102d6b0bf3c9f9beeafb620f863c48d133f23a2ba649b5f2c0fd45138440e89d8b825ff5aedaaf05195113a421a695ca43da579440b288b1e233e81f5cda3bf98ca9cceba2ffa3ff13e1b78065d5e3fd4e07563c1de069eff5fd86e31a20cf8222d668a13416703a125ec39b080c3b9c14a62239b4ccb2cf9f496c0a66e8cc0521dc88743b72e55e90af07808bbc87af5311c0c8ff62e96fcc9af293f9bbb6329bedf1754387342bc741ad04060147491928449ed8ac28ebd7ab41b115dc0166877dedc07e79f659757be333803e73dad01e6d258e33e95a30b6858274d93b1281aa6f592f73f337cdbf30a93c517515ccd324867db7dab24c380ba9fbfdc728fba3b290eb8dcc78584ecdcd271a8f7008f70fcfad5d107c6d0b9846127f982fdd4d4391f76aabe093922a5540ac422bc7c4a92664c1285708aa23a78852f74647faa04683e465bea1c1e180b6d121d9bf1654e525ec9e56e81132faccb15cc7b0f973303f9656401e5828d49fe7aa5abb61a372fea72eb6c9a06e3767556276ab49792b1ac0b4f96898fe6d920928a6391b29372c1891a2e23a96afc3630e48b0ee457fec3c5c234513c3525602674916c33143b0a26624ce980a69d78681ab40c08cffbeecf8b66e7e624a2ef2d8a07493ad8632b2ee777c5f3e1b17dafbedc6580fe90344187f2d8f84035eb2872d9dd94107bca9b2514a8ca69173bab91a730ec83bdb62b753b0164b09c7e3505de88f5ed06acda16b82585182f419359db1ec9744b4d56e8f5d809f6d33ebee00e0e3b031ed77c2b02cae6a87bcaa8c7b2a3d4ece74e69076d4062bd2b936328de60b02cc36a933db57e7211a9934db32072a1258af1f9b79424a10b927158280c9eb152989f599174d536bad15888525ed1b67525dadac3817ed548fee0d1fa650f2ddc9dda382973d40a84b37ddf2a5500606dc36c007a58499cb0c75b7605c40071a6360462c5210cbf6ed7315848a1f7f64656a20dc7873823312661322a651730a41cc61ac980fda78d932fb080a8d0d17d90918018f2673dfc9c7af7a5eff87210f4bfcb3d51a10137dcf14e5231b8f4e848ef0d57992f780bca2baf3d232c7ad90e8045e8f0ef1d750d5c949d7dbc65fcd5a612726e7658be1b167f405bc2f1225889e2faf45e31304466efe6fbb503cdfb5e0af906f6d5796d921b0595e4ec3cc865fa8dcbedfa017c0805f3e21989bfe59f3218c1a25a4482518a4d42906e9cfa5cf9bf874ea903338cf355fce1d7d0c8425e62ca967b8bc5967a44cfa8641dc1375f4b4e23b84ece2d5436790f14961ae435234692ed16f2c59b7b1bbb4fb2cb8c516efc6c78497bdc27f1145c3475a09b6963aaa49a086d52d704ffbc2f2531c88d7a618d1c9aa77d899ddefca9e2502816b15210e381ad25ba14125b63433e19acaf3c9bd23a33cd5e82b3d44f70d4b981ff8f8dd727980265e0be65cd2ff36e5159411ad61583334663492bfc75c7de0baccfd714bf653be79be7b795c928038d893761570a3bcbd45ba6dcc082579911d4d2ec9f671c6cd9c9c390c67f9897831fa1d160ecb41923c2358168aaf3f3db358e309d967fb20de37bd807906bbfb5ea3e47ba898616ab666b0c05b9e95144ef9890447c41f16c026438e4f5a8456d602db03ff6556d5e2de8a4954b6b2a3fcc8bb0e0e4e1325633962a3cd701ad21eba1b8a396aa3f78bbedbde0daa4c443e6939d770bbad4043490c6afcc14f92cdd39e15f6c60f5a535d5b53154ff0c8c0ff936d61a7a7878eead0cd847bc895189865d9496ff8d4f101472c827b03f9305f9d84b9995a9d32383257a8675367fa30c4efcaf59f14a07d8b4ac23d20036d891644cfc77b65dab7a79d0183ce2a78ca97764a7ef15bb8f6cb934255ba91c7ff1755ef4843270c45318ecb54122d76276d4247b586bbe0b81b7780f6ea6ef1d4f1adc2a18645647efb05b772a38dccc25aba5abf314508aa0e1d5dc367e3223609605d6a0055607295d2e5d43cc4b384dcac188e331d868b86806e053b23f7357022aad897172f312d5e05db066b70bba85b25dece625384d20e9227633c6e38efbfd26e8358cbb4b5b59db369d84cb353ca1ab97ae2901156797770e735bf674b46c2402db3a74de39d2f28c5f57db32b184a548cfaff2fec1a2f22bf1ac981b7374865b9a086acb632494b302ae90717221c776bd9be780b79a1a21df992947a657690130f549c307daddec607b9766aefef37a00533ba7245b20405294f99c8cf912ccaa2acdead0fc733e0758581bc3b091c1e3b52399a388c06ec22266f04efbbc7dbd4b7c714fe76b7ebfff3038252f605e5fc8a072eb25225536e4aba3396b0ae6daaf384235aafde0c4086985b7a040a27561fde3e9df86f755a11d25ed31ddf5bcfb9bf87ee79f77d7d2e145b7efdfc7ad33a8747b7fd3518b9b463b571b3210f9c9a01154b155e22c1d042a4985843c949bf8c75115432c7b8d1c5b7ab8e39c04b18e39fa5d3fbd7bd388a7b3abc2916109221873853e1dcc2ce28b139665d79e02461c3a98a49f4ddd4e51bf0a1ec6d455f528ac3dc959f6e8412ee97edb9b7bf12bae2f83af134ebcd30aa613b85ea666cbfff45cdaea796f74ce3dc8796cf2ee01477f6c18aa92dc1a573122f89f1cba3e40b3f7adb3d20c5130675d463b940638491329fef7ee662eb5ecfd54adc8c524311d72ba6cb49891948422a717bb0a431a42046205fcc28d2307e15b20a26a1cf1775a05a6fc44f9dfe4ab2573123ab515cf9f20a8ceb718f249688948b4c87c53718d554566f521fb21e107431ef42358d0f3aa0b2d57c1f2e1030f4661846982e631e7d314507e9b2f1f268a939bc555f6af580f77b4dbe71d029b14756d69f63fdab1f2fcef2a8bd161353304541bf7f9d036a4d4d7e6683e70824cfcd65066065d0ed865306b494ee5f2535390a15181877467ddc21e7ecf94158ac57d069345a792226f45308877ca1694991b4505d2e7e83a4154a22652e210481be4ecc2ea72980a572af88ecbb77e92a88685a26547aaaf61627dc4512fd403d77c87f0e32e4bdd9117add50d55fe85a312882b0cfb5f1ae74bff3f93789ca76bf7b267766344b59af65e191c1aad054b7055eceeea990cff5460bd8f766d082936d3589e900de3ca35a866ed05e647943139cc3bdd0b1544962d472b8240660bbe670e7ef348e0f0d8fbfa5dece9eaf699c69f2ce311acdb7ed5353b70c29beb907eaf347ca6adb195d9c818faf858101065e7dede5189c4dd35e17ab128e267adc99777cc22c2401b133e8470817c159ce8a4175c3f3af66a5ab4cfd32186ef4b57f266c5b4eff4fa1d9837b2311a3b54b600f185640ef6f8ede433395c779dbb34b88b1004b56624e0b5bcb8b9ae4b6101275a8f11e5e7a57bb798e97e52e79dae32e02ea0a198a39067422dca4ff4032bb67493429a9a642254e9c6b4a5ec6e117d88e7e5d8895c193c080ce58e966c3f32d38f0ed791b44d8f3c14bacabf89b009e49b9d6c195184c71bd6b2020e617fe6829d87fc49f9ea956342b3ae0cb862563ff549bfadd52bb269d299fc714ed9aa12e0f845a27dfc03dcb80c8b54128b3efa328a0df1d55dbae161e4d4d5a1a64e4e55257465c9882230a143ac208c64d7753324b77ee6d857c3", 0x1000, 0x4, &(0x7f0000000000)={0x0, 0x989680})
17:15:02 executing program 3:
r0 = socket$inet6(0xa, 0x803, 0x2)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x80000000000001}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0x0, 0x0, 0x0, 0x2}}, 0xe8)
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f0000000100)={{0xd}, 0xfb, 0x0, 0xae, 0x8, &(0x7f0000000000)="f5fdc138c1ec01500be8ce2d57be290d23f44158e32c7f2da7bddff551e6d8afa51a4516fa4bb0ec8c082e9810b512894b7f3c17a497ff68cd526ed974919bdd06b7dc2f7b8382cdb2c9d2c678a3b2680250e2c2be52b213383a6fb103955a688d03bf7e8c48cc47b1d1464f081304feb86164f033eadb5051b046027aa55dd248140c7d7c5f4c1c572259fbaa0778a0b6e4a66b86ec51f820cda58d39168ff277c137ede19ff54a0e9503265d03"})
sendmmsg(r0, &(0x7f0000008440)=[{{0x0, 0x1aa, 0x0}}], 0x400000000000107, 0x0)
17:15:02 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0x20, 0x1)
bind$vsock_stream(r1, &(0x7f0000000340)={0x28, 0x0, 0x0, @hyper}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
pselect6(0x40, &(0x7f0000000040)={0xffffffffffff8000, 0xd8b7, 0x4c, 0x1, 0x4, 0x1, 0x9, 0x40}, &(0x7f00000000c0)={0x4d1b, 0x6, 0xfffffffffffffffc, 0x5, 0x401, 0x8, 0x3ff}, &(0x7f0000000200)={0xff, 0x9, 0x1f, 0x1000, 0xfffffffffffffffd, 0x92, 0x56, 0x1000000000008000}, &(0x7f0000000240), &(0x7f00000002c0)={&(0x7f0000000280)={0x6}, 0x8})
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000140)={0xa0}, 0xa0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0)
sendto$inet(r2, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0x0)
17:15:02 executing program 4:
r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0)
ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f0000000040)=0xb07)
ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0x6, 0x0, 0x9, 0x100000001})
getpeername$packet(r0, &(0x7f00000003c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r2=>0x0})
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={<r3=>0x0, @remote, @remote}, &(0x7f0000000600)=0xc)
sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="94a72ffe9931d5ce7234fc377b9e1208aee4a755ddbde9f80aeffb639ac5c42b1b69faca48c72d6705279c2656ffeb3e45855504cb55f9c0e2e80cf8bea65a873ffb0dae26cd2e4cfd6596b433ece1b1dda1bce3157c3927159b1477da6e8e42b7c7c6cf7ab655d62e8a81bdf00bca6b6c4033980a0fd7de0ef583348497d2f717ff5d853b4ba37288b0379b82ab266e021254e7d37b0ca9ae9b3a576eb461b153acc5eb1863e826de4c697c3251d1459d9186c4a802ec", 0xb7}, {&(0x7f00000001c0)="4e3e2cbef1a562a8c876a7a177e1357b6682716e6da5baa3fcd6e4f3a42e29a58ff51bfc11c821476659b4dcc67c946aedae81ad900dde950717bb86b6284d1499c835bdb93f71831b4ab46649bebd40f29ad6d36eabe755b402c353f4605def05ac6796337ef3c7685f1549bc4f18c7ff2095dd3c3007ec9ff22978e6736906ed89fa74f720e76587bf9f2527eda0e8909d38a979011ee5563263e0f9b93f35ed2b388962560fd1c7fcf1f9ea", 0xad}, {&(0x7f0000000280)="53778a566e68f4d02b9799ecc7a0e19348a68c9f67bbd569a06c8abadea00d4501f270548414e6dcae1b5a314f09bf913b328f89f6d27a6674edbba23692bbe32597626c6ed3cb2bb969cac95648c8e314286cc17d3a647b9076fa95bdbaa79902f76c724db22c60dcd0edbff0d61967803b8a6bfc1ab849a187c78b52a623d2fc4b4676a783cf85dec26acd3ea4ff2b3e286aeee071b1465b0c4dc8a2f25a24063547b310c887c5a6ae087906354ad180d4e062efeefdc7ce3f5be886c8e577ddb1299a92b56593bdbf19f702b2af5a3beb320533cf4460cbf7adec5b940b439abff0", 0xe3}], 0x3, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @remote, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @remote}}}], 0x78}, 0x4001802)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000700), &(0x7f0000000740)=0x4)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000780)='/selinux/mls\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000007c0)={'veth1_to_bond\x00', {0x2, 0x4e23, @remote}})
ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000800))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000840))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
finit_module(r5, &(0x7f0000000880)='/dev/vcs\x00', 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
r6 = syz_open_dev$swradio(&(0x7f00000008c0)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000009c0)={'ipddp0\x00', <r7=>r2})
r8 = geteuid()
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000a00)={{{@in6=@empty, @in6=@ipv4={[], [], @empty}, 0x4e22, 0xc44, 0x4e20, 0x2, 0x2, 0x40, 0xa77ac0152439138b, 0x87, r7, r8}, {0x9, 0x8000, 0x10000, 0x0, 0xfff, 0x80000000, 0x1, 0x3}, {0x6, 0x80000000, 0x4, 0x1}, 0x5, 0x6e6bb1, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x3506, 0x1, 0x17bd3c8cb40122de, 0xfa, 0xfff, 0x9, 0x5}}, 0xe8)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000b00)=0x8001, 0x4)
r9 = syz_open_dev$audion(&(0x7f0000000b40)='/dev/audio#\x00', 0x2, 0x6dc2885de74bd288)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000b80)={<r10=>0x0})
ioctl$DRM_IOCTL_SWITCH_CTX(r9, 0x40086424, &(0x7f0000000bc0)={r10, 0x2})
r11 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000c00)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
setsockopt$bt_BT_SNDMTU(r11, 0x112, 0xc, &(0x7f0000000c40)=0x9, 0x2)
r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c80)='/dev/sequencer\x00', 0x200000, 0x0)
ioctl$RTC_PIE_ON(r12, 0x7005)
setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000cc0)=0x5, 0x4)
r13 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000d00)='/dev/nullb0\x00', 0x480800, 0x0)
ioctl$BLKRESETZONE(r13, 0x40101283, &(0x7f0000000d40)={0x80, 0x4})
17:15:02 executing program 5:
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x2e610000, 0x280c}, 0xc)
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x101000, 0x0)
write$capi20_data(r0, &(0x7f0000000080)={{0x10, 0x683, 0x7e, 0x83, 0x8, 0x3}, 0x1a, "63eee501389561fafa9813596b739078a81b5abd2b52ff7723c7"}, 0x2c)
r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x6, 0x80000)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x4, 0x440b, 0x7fff, 0xbbf, <r2=>0x0}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x7, 0xf5565992f54ea498, 0xffffffe1, 0x80, r2}, &(0x7f00000001c0)=0x10)
ioctl$VIDIOC_OVERLAY(r1, 0x4004560e, &(0x7f0000000200)=0x5)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x2, 0xa, 0x1b, 0x2, "347869814f75222cbf8a3dcbf5ed1ebf7f189d6baf35e992973aba18230075cf0399bb8682d0740280a0f31ba4bb4db8c2c12b185abe6797499b2ba26c06d43d", "2b00ebf8d775436470a72c3afb8d4f00b62a2c4c80531a34fd089d17ab30a467", [0x0, 0x1]})
pipe(&(0x7f0000000300))
r3 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
r4 = gettid()
ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f0000000340)={0x1, 0x3f, r4, 0x0, 0xee01, 0x0, 0x7, 0x4})
openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x15200, 0x0)
fdatasync(r0)
r5 = creat(&(0x7f00000003c0)='./file0\x00', 0xa)
bind$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
r6 = syz_open_dev$sndpcmc(&(0x7f0000000440)='/dev/snd/pcmC#D#c\x00', 0x2, 0x18200)
ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000480)={0x9, 0x99, "21bf3b5a1cb4039d573f017b9095429ab5b6892d0f01ccbbb85b9744dc7c1a20e5cd74da1e5be0c7fe473bb78fe8e5b8e9b41001e2c96a2abab1d340460d9d929876b0aedbb5f303ff0e3fe5c0d80f63ef4ef45b73c78ad17f24b4793350183bc9b4d6470556264a92495387872a11799c1fd396f966217a900ed2058fb8dd567333140e143b02eee115bf7bce93869243f064f99165568d67"})
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000540))
r7 = socket$caif_seqpacket(0x25, 0x5, 0x1)
fcntl$setpipe(r7, 0x407, 0x598)
r8 = syz_open_dev$cec(&(0x7f0000000600)='/dev/cec#\x00', 0x3, 0x2)
ioctl$GIO_CMAP(r8, 0x4b70, &(0x7f0000000640))
r9 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil)
shmat(r9, &(0x7f0000ffc000/0x2000)=nil, 0x2000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000680)={0x12, 0x3}, 0xc)
r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/cachefiles\x00', 0x2, 0x0)
getsockopt$inet6_mtu(r10, 0x29, 0x17, &(0x7f0000000700), &(0x7f0000000740)=0x4)
r11 = syz_open_dev$vcsa(&(0x7f0000000780)='/dev/vcsa#\x00', 0xe000000000000000, 0x50b081)
setsockopt$inet6_opts(r11, 0x29, 0x0, &(0x7f00000007c0)=@dstopts={0x44, 0x5, [], [@ra={0x5, 0x2, 0x1f}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x9}]}, 0x38)
17:15:02 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x305200, 0x0)
r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10000, 0xfd40c469c568cd4c)
ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, r2, 0x1})
r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
write$capi20(0xffffffffffffffff, &(0x7f00000001c0)={0x10, 0x81, 0x84, 0x81, 0x4, 0x1ff}, 0x10)
write$P9_RFSYNC(r3, &(0x7f0000000180)={0x7, 0x33, 0x2}, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000200)={<r10=>0x0, 0x401}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000280)={0x81, 0x2, 0x8, 0x8001, r10}, &(0x7f00000002c0)=0x10)
pread64(r0, 0x0, 0xfffffffffffffe4d, 0xfffffffffffffffe)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x410003, 0x0)
17:15:02 executing program 1:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x3000)=nil)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, 0x0, 0x0)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_CTX(r6, 0xc0086420, &(0x7f0000000000)={<r7=>0x0})
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000040)={r7, &(0x7f0000000140)=""/151})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
17:15:02 executing program 3:
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r2, r1, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000180)='\x1a\xdb\x04\x89lts\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x42420, &(0x7f00000001c0)={[], [{@appraise_type='appraise_type=imasig'}, {@pcr={'pcr', 0x3d, 0x14}}, {@euid_lt={'euid<', r1}}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$VT_WAITACTIVE(r8, 0x5607)
name_to_handle_at(r5, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x7c, 0x1, "a4ad430ac91051ddb59f785fcb11c858ce706cf64f2152b1d674e32cd204ef1c638675017e17e857ee2b00e08666f1298a0801f8bcd438f6c1be38a96ee1241860949d1242915adfb9409affba211990ce2c31f4118981bc4a056360ba55efa751d685101e2522acec5621f07f2457f77d8dec6f"}, &(0x7f0000000140), 0x2000)
17:15:02 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x9, 0x80, 0x7)
17:15:02 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
r2 = dup3(0xffffffffffffffff, r1, 0x80000)
read$eventfd(r2, &(0x7f0000000000), 0x8)
r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, {0x2, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}})
17:15:02 executing program 5:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0x69, &(0x7f0000000140)="5495e1eae899ac37d0ff6581e3057507df5a5cff0a10648879d6476cebfe5d841307f4c1e5f2303e1745fcd61ffcbb27d12c7e25247b01192d115351c29a67e76393d1b5cb30a316edbe9153f0ef9a08c2a6bd746bbd1950f456b45e55315c49bf90f57998c579cc6c", 0x0, 0x0, 0x0})
pipe(&(0x7f00000004c0))
syz_mount_image$vfat(&(0x7f00000001c0)='vfat\x00', 0x0, 0x0, 0x1, &(0x7f0000000800)=[{&(0x7f0000000240)="ca6ccb51a37f1506d4ea36003bc0ac0cdf2c1e2201", 0x15}], 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000020000100080000000000000000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x400}], 0x4801, 0x0)
17:15:02 executing program 0:
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={0x0}}, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000001c0)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x0, {0x2, 0x0, @remote}, 'bpq0\x00'})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x7}, 0x8)
r3 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r3, &(0x7f00000002c0)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c)
sendmmsg(r3, &(0x7f00000002c0), 0x4cc, 0x0)
17:15:02 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000001, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f00000000c0)={0x4736c2735aaaae24, 0xef9, 0x5, [], &(0x7f0000000080)={0x990afa, 0x6, [], @p_u8=&(0x7f0000000000)=0x1}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000100)='f2fs\x00', &(0x7f0000000140)='./file0\x00', 0x5b, 0x2, &(0x7f0000000240)=[{&(0x7f0000000180), 0x0, 0x1}, {&(0x7f00000001c0)="0af4cda24948e53c1d6c588dfe7cbe2a9238d1d005410b5622d502ee95ce15f4ba0f3b3e38c775ff65f666dc1043d9175db8ed1d7738bd3664c8d4bc70e6dfd399f8", 0x42, 0x9}], 0x80000, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"])
17:15:03 executing program 1:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$packet(0x11, 0x2, 0x300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000006c0)={0x96, 0x6, 0x1000}, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xfff}]}, 0x10)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = gettid()
tkill(r12, 0x1002000000013)
ptrace$peek(0x2, r12, &(0x7f0000000280))
fcntl$dupfd(r11, 0x0, r10)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r9, @ANYRES16, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES32, @ANYPTR], @ANYRES32, @ANYRESOCT, @ANYRESOCT=r2, @ANYRESOCT, @ANYRESOCT, @ANYRESHEX=r10, @ANYRESOCT], @ANYRES64, @ANYRES32, @ANYBLOB="0b1d38cd17353bb917ba4d7fbccc85aac99f92311b7a15a68c72477c6fd53cf6aa4e187aafaf0c9cdc3edf86a8a0e418d31b4fbb0f88c066f353c80df26513ce9ec77dd6ce0005b4405c6c8a7e10eade1deab6b57884c733bf4fdc9cb5096155016e1ffb4c435b28133bba72d6a3afc94daff03aa383baa058abed329913e39bb6e937041fa9bfb060dff9a6fc95ab9a9d5d0033647dd8e5b0dd9f78432c1f11cf011f9787a58b0ef1984c31ec18bb4fd7dc08acb0c9ae2eaf880dbe", @ANYRES64=0x0, @ANYRESHEX, @ANYRESDEC=r8, @ANYRESOCT], 0x115)
bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1020400}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x120, r13, 0xd1a, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x1c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_LINK={0x48, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb573}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3f5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}]}, @TIPC_NLA_MEDIA={0x18, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x690}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb1c7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x36}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffff7f}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800)
connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
splice(r0, 0x0, r6, 0x0, 0x30005, 0x0)
17:15:03 executing program 4:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setstatus(r4, 0x4, 0x2800)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x5a)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x2cb, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
setsockopt(r6, 0x401, 0x80000001, &(0x7f0000000100)="f555d0d56e32ed6ece354b0a590c44de3ccfb014101aae675838ee2cc78270ac20bf77bbcaa148bfb4efa4a5f046a92944f3f654736fc1636505b941b095d13c24e2ebf920d900e36933042ffcd793daed19ec18732ba1b85cf4407f7ea49d9815b8a945954c1435a45bcaa88104069690a1818c8822d6938f1055b1fb4ade6abd2c644ad3f77eae1b677286b578674a2b", 0x91)
recvmmsg(r3, &(0x7f000030efc4), 0xd1, 0x40002040, 0x0)
17:15:03 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
r9 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r9, r8, 0x0)
r10 = getegid()
write$FUSE_ENTRY(r6, &(0x7f0000000180)={0x90, 0x55b4bbe1a3ce5bd4, 0x2, {0x3, 0x3, 0x6, 0x3f, 0x5, 0x6, {0x5, 0x8001, 0x40, 0x799, 0x64, 0x800, 0x40, 0x10001, 0x5, 0xfaf, 0x0, r8, r10, 0x8, 0x8538}}}, 0x90)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
r14 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r15 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="3037c54e", @ANYRES32=<r16=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r14, 0x84, 0x72, &(0x7f00000019c0)={r16}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000000000)={<r17=>r16, 0xa268, 0x200}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r17, 0x60, "1dc6526a4528a3ff15edefa677133beebcf217153f5998604645fa07faacb47c4cdb22521123fa07710e16d7dff1d69adf3815d8dbe07879d1e7c2350a0235ffb5e9b3782cc43eca910d1c9ce913bd2c6d9e9c31144903c58bd654b24d483dce"}, &(0x7f0000000140)=0x68)
write$selinux_load(r0, 0x0, 0x0)
17:15:03 executing program 3:
mkdir(0x0, 0x0)
mount$bpf(0x20000000, 0x0, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="b00f177038bf673bf210629e39a62db885971f2c1331e975f7ec8458a433d3b968f3c0f66f37dcb2c0935feaeeeb56593ce607b94e0b4e128f97125ce8995f1b6b95f401e46d348c221d0b52c3229114f61055e2f3744f69dcb7da1b5a0030e1d8975dc9a127488e0253118ac5511c8c8e7b4519224de98b3734cc34f3cc"], 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40)
unshare(0x20600)
geteuid()
getsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='se\xe3urity.ima\x00', &(0x7f00000003c0)=ANY=[], 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fcntl$getown(r3, 0x9)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$sock_inet_SIOCDARP(r10, 0x8953, &(0x7f0000000300)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x10, {0x2, 0x4e23, @multicast2}, 'rose0\x00'})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r7, &(0x7f0000000000)="3899831d4e7f41543574878037c4d10175390611fcc937d7d1a248bcf3c0bbb5e14f1703ec62c2d5caf4b46537eb0c58d0bd4f3628bf7255dc39d5d7400a70a645858a684e6cf6fe74328637c8a062274aba891b9866484a829a02b33b3680ea9016cb4ba8075dc4d7b23bec8b569864480cfbc92aeeb3220d8ce500423a1e26abafd92293e078733cc9b6da91e743d44f66e365e4c28e9e3eeda6ab9cf02d4850618f8b4f29c74d424a6248ee938894a73d6c8e6dfbcb05845fa904bb16b2e3f48eaad6a04a65604dba775c886a", &(0x7f0000000100)="0868cd66c0c58a831a0d7482a6516c6f1e2ff9c114db2a396dee226f8e77d9f718545861490ca073114c1d", 0x1}, 0x20)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
17:15:03 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="ca6cab2aacffd2b3b092a0dc7608000000", @ANYRES32=<r6=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000019c0)={r6}, &(0x7f0000001a40)=0xc)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r6, 0x4}, 0xffffffffffffffb0)
pread64(r0, 0x0, 0x50, 0xffffffffffffffff)
17:15:03 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x4000000000802, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000000c0)={0x1000, &(0x7f0000000000), 0x2, r1, 0x8})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
17:15:03 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'bond0\x00', 0x43732e539841a49b})
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
bind(r2, &(0x7f0000000140)=@l2={0x1f, 0xe4, {0x20, 0x3, 0x7, 0x9, 0x7, 0x4}, 0x9, 0x21}, 0x80)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010800fb4989b18c1cda778fff6000"/31, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b00000000000800110001000000"], 0x30}}, 0x0)
dup3(r1, r0, 0x0)
17:15:03 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x11, 0x1a001000000}}, &(0x7f0000000080)='GPL\x01', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x8}, 0x10}, 0x70)
getrandom(&(0x7f00000000c0)=""/247, 0xf7, 0x1)
[ 364.046196] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 364.062913] input: syz1 as /devices/virtual/input/input9
17:15:03 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='\xa4\tev/usbmon#\x00', 0x0, 0x2)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 364.127278] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.5'.
17:15:03 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x5f, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe}, 0x10}, 0x70)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x3ab, 0x4000, &(0x7f00000000c0)="b9ff030e720d698cb89e40f086dd1fffffff00003a00632177fbac141414e9", 0x0, 0x100, 0x0, 0x0, 0x22a, &(0x7f0000000040)="a72704258b024e40caf1133c44f6a4608a8f7b2d00"/35}, 0x28)
17:15:03 executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="85000000070000000f000000000000009500000000000000e69af319549ec681016d92279b3ff5a0a3e9d627d404a74d"], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)
[ 364.223887] protocol 88fb is buggy, dev hsr_slave_0
[ 364.229524] protocol 88fb is buggy, dev hsr_slave_1
17:15:03 executing program 2:
uname(&(0x7f00000001c0)=""/110)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$CAPI_GET_MANUFACTURER(r2, 0xc0044306, &(0x7f0000000080)=0x9)
r3 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
pread64(r3, 0x0, 0xffffffffffffffd7, 0x0)
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm], 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
r8 = fcntl$dupfd(r5, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = dup2(r1, r8)
r10 = socket(0xa, 0x1, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
fcntl$dupfd(r12, 0x0, r11)
ioctl$FICLONERANGE(r10, 0x4020940d, &(0x7f0000000240)={r11, 0x0, 0x9, 0x869, 0x8})
write$vhci(r9, &(0x7f00000000c0)=@HCI_VENDOR_PKT={0xff, 0xc1}, 0x2)
[ 364.394610] cgroup: fork rejected by pids controller in /syz2
[ 365.743429] net_ratelimit: 8 callbacks suppressed
[ 365.743439] protocol 88fb is buggy, dev hsr_slave_0
[ 365.753416] protocol 88fb is buggy, dev hsr_slave_1
[ 365.823449] protocol 88fb is buggy, dev hsr_slave_0
[ 365.828549] protocol 88fb is buggy, dev hsr_slave_1
[ 366.303443] protocol 88fb is buggy, dev hsr_slave_0
[ 366.308546] protocol 88fb is buggy, dev hsr_slave_1
[ 366.623452] protocol 88fb is buggy, dev hsr_slave_0
[ 366.628558] protocol 88fb is buggy, dev hsr_slave_1
17:15:06 executing program 4:
r0 = getpid()
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0)
r2 = syz_open_dev$admmidi(0x0, 0x10000, 0x0)
ioctl$VIDIOC_STREAMOFF(r2, 0x40045613, &(0x7f0000000300)=0xe003)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000100))
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, 0x20402})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x6)
getcwd(&(0x7f0000000080)=""/72, 0x48)
17:15:06 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
clock_adjtime(0x4, &(0x7f0000000040)={0x82, 0x100, 0x1cb2, 0x80000000, 0x7, 0x5, 0x4, 0x3ff, 0x3, 0x2, 0x0, 0x63, 0x22f7c, 0x5, 0x1, 0x3, 0x0, 0x7, 0x3f, 0x4, 0x3f, 0x6, 0x1, 0x1000, 0x100, 0x1})
r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup(r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$ASHMEM_SET_NAME(r8, 0x41007701, &(0x7f0000000140)='\x00')
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000006000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
17:15:06 executing program 5:
syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = semget(0x2, 0x2, 0x200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = fcntl$dupfd(r13, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
fstat(r14, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r15=>0x0})
r16 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
setgid(r17)
r18 = getuid()
r19 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r19, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r20=>0x0})
setgid(r20)
semctl$IPC_SET(r2, 0x0, 0x1, &(0x7f0000000180)={{0x6, r15, r17, r18, r20, 0xaf48fa0400c993bc, 0xd3}, 0x44c2, 0x400, 0x81})
fcntl$dupfd(r1, 0x0, r0)
preadv(r1, &(0x7f0000001340)=[{&(0x7f0000001100)=""/108, 0xfffffffffffffd93}, {&(0x7f0000001180)=""/213, 0xd5}, {&(0x7f0000000040)=""/21, 0x15}, {&(0x7f0000001280)=""/31, 0xdc}, {&(0x7f00000012c0)=""/94, 0x5e}], 0x5, 0x0)
17:15:06 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='.d\x05\x00\x00\x00\xff\x00\x00\x00n#\x00', 0x0, 0x0)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r3, r2, 0x0)
r4 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r3)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r6, 0x0)
keyctl$search(0xa, r4, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r7)
r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r7)
keyctl$KEYCTL_PKEY_QUERY(0x18, r8, 0x0, &(0x7f00000000c0)='vboxnet1selinux\x00', &(0x7f0000000100))
pread64(r0, 0x0, 0x0, 0x0)
17:15:06 executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0xe8000)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r0, &(0x7f0000000100)="a8d27dce2091e7c679f99db1f720ec8010e88b279c17c19af8dbc18508c4732acf3d4d13d1c94a881b47a5358920ecfee1e74776147e95b40ffdc37174af409365cfebee04fdf85432fc598a73a0e5f5dbde2f63d30c26af46716aeb715cabf5118c44173c2de5cbda189aa6a2cd734736d4eb375936ea9c9a4a9e93aa18bcd6e3de7da99809ab1aa4a601d111162b16a3cbd7fbaa785423e2127cdea8a2f4bac364dd52283027f51fbbd46d0a44e872ca9545469cfb0741defbd922fcdf52125c920f27a5e41f073b", &(0x7f0000000200)=""/212, 0x4}, 0x20)
r1 = syz_open_dev$loop(&(0x7f00000004c0)='/d\xe5v/loop#\x00', 0x101, 0x505483)
r2 = memfd_create(&(0x7f0000000080)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0)
pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003)
ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2)
fallocate(r1, 0x11, 0x0, 0x100000001)
17:15:06 executing program 1:
pipe(&(0x7f0000000300)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="040100001a0005020000000000000000ff010000000000000000000001ffffffff00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000004d23c000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000099add287"], 0x4}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
splice(r0, 0x0, r3, 0x0, 0x4ffe0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000000080)=<r7=>0x0)
ptrace$getregs(0xe, r7, 0xffe0000000000, &(0x7f0000000340)=""/217)
17:15:06 executing program 0:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{}, 'syz1\x00', 0x50})
prctl$PR_GET_NO_NEW_PRIVS(0x27)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
[ 366.991614] input: syz1 as /devices/virtual/input/input11
17:15:06 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0)
[ 367.032691] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 367.043850] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
17:15:06 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
poll(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$IMGETDEVINFO(r4, 0x80044944, &(0x7f0000000000)={0x6})
[ 367.101373] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
17:15:06 executing program 3:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x80000101005, 0x0)
r1 = dup2(r0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
ioctl$int_out(r2, 0x2, &(0x7f0000000140))
ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000000000)=""/246)
pwritev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)='\x00!', 0x2a5}], 0x1, 0x0)
17:15:06 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmmsg$sock(r0, &(0x7f0000000f80)=[{{&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x1, 0x3, {0xa, 0x4e23, 0x7f, @loopback, 0x5}}}, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)="61cd447f0244f23a736fc776054ce0c42b17395d477564f36d5641e2fa224b10d7d676846eef4f3839e021cebd3668fb00f9b142a784c9ba22a7e2742430c789fd0615200b4f5918f6451728ad89bca510cdfc93c1c1090e47609c7bd112eba5b12136f0b54aa24c937840ee2159c445933bdbb62853d248ab639b033dd4a5065be661c5e23704a0bf8d66606bc522cca556575b14a7df0029bf913b7507aa12934d0bba2f8e9545dd757dceebefa2be22e664084eeb27a0ced9a88e6c42d4faba7e12598c3786d10a1ee54135eea370e4df2f75b2caaa3d1c51c93e6eac59e8b86b870266e96db2", 0xe8}, {&(0x7f00000002c0)="a65b01aa1ea246f8f33e10410eb98ea3643420f652b3ac1da601375bfe29a523adfa7c04e7bc15205600760aaff2ee16e076847f9d6a65c4345ae100fa261f2ed6fc1a87bd0934931769a4461928bcfcb7bd04f8b6214dea672e11952b212ecbc731727a6efd532b991e2fec7958bd8f9991f7ea911b3f521422aac6514232998697fa80968d48dbb4dce9c56a882aad4a6349f7034415cc4e0c8f78766d65dcb01edb3486f6a048609e22bfa29da4", 0xaf}, {&(0x7f0000000380)="4a6c674062f0747d9d2f38b30aa569e22ca291402a674bdded76dad4f153953d8e83a66773de309226cd", 0x2a}, {&(0x7f00000003c0)="b9fe09a7b585bfe679eb8f817a593f32af53d6", 0x13}], 0x4, &(0x7f0000000440)=[@mark={{0x14, 0x1, 0x24, 0x428}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{&(0x7f00000004c0)=@un=@abs={0x2, 0x0, 0x4e20}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)="424d1f1ed22b97aceec49bfc70f3e277fb70932f3a6d9d18158557bd3843d51c77aadbde57061dffdb5be6d90526d6bac1b76b3fdf54429797b7d53bfaa8f3278f5b0cb9d1719a3507afa604a37e77d686215adc3b42d32edd10695fe91f3495e672bb15a9549d9989879d33a8841493a9", 0x71}, {&(0x7f00000005c0)="6d03cd4aa42c22ff4aa9f86a80cc45f8fcf55873d3d64a9b1e4fda00e1e565318d0cc054b0f83ab6e7b5ccd988e7ef7c353cf6b23587ab77985086777ccdd253b2761a1d967f390a5214e074ee02d316e143290683656f", 0x57}, {&(0x7f0000000640)="17f6d2afad116b21ac5b23932239e7a6931a19f9ab75a3f393b83f62ba93afe19d065bc62fa0c344129c771d6564776c6ce9614a1739a816cb7874a5", 0x3c}, {&(0x7f0000000680)="e1e438b41748d99ce58523e37496a51b563517669ee1770f6ae34fe3c0c2730f018144c9d192944adf0983e8490edf82b4cc32bb6cd60e86d84881a7d9c58ec99d0d284886adc066ee189b6d63aed0aac72b71538a0817f25c99d4a4e7bf5b4eff00", 0x62}, {&(0x7f0000000700)="0f267a6e89f87b8a82c452d75a11ae30a0138c001b36efea464abb4661b56e78826646e65d868569016bcae9160b725c536285b9a5df839c719373774f5ed073790bbc8751185cfbd8eea931d71e71fc645f9c8d2af7075be9c134ff5f44bee605172cae92", 0x65}], 0x5, &(0x7f0000000800)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xffff}}], 0x48}}, {{&(0x7f0000000880)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000900)="ef89eef73a56cb02aa78e5f17fac86465e9f41255ea51cdfeedf6a9c07c016d014a55dced5d8caaa0bf637ec7eafb301650a4db011d59f569d61d646ccecb6c890a26f4bfd7e8126758bd22d88d1b061c69e6962ffe3960e507567a580ecfd9a0760085f1ec38c3e26e2e6b943858f74ae59fca5f79f231c7755f544662c976d6454616487ea29911cc919707f67ce97", 0x90}, {&(0x7f00000009c0)="2540f3af6ef1117b3254d8e01c65352b6da5e941bf9d2ccd388fa458e782efedfc5ab2a70c35d08c8822605a21dba0fa2f8173bec580017c53d26369d8cf24295b346b2c69e01003df020d8422660ce097fa2bb8c0ce1b3738c3b073083243b9991d75aaeb2ea555029628ce469d9702e632be25cdc74e055109e6e648266fc3f8494e3640f0ac4bfbd3c2d68dc9c30eba089abc12b29d8d7c08296d71f4a7c897b57b6be5c305a1ad8f72436c40c7c5e160f273a6b16390770911fe5240ad08d3c36aeb", 0xc4}], 0x2}}, {{&(0x7f0000000b00)=@isdn={0x22, 0x6, 0x1, 0x35, 0x5}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b80)="7b74f8a4a5c5c35ec8ad68df586e1b6fb4f92067e548e88a8e45351b55ad6241e73bb75b4c88a027f757b04f3f8cb452efdd00d7b778bf3b9942f17c89c8e4fb176c15b3132735e42beb3d2c8c6aaf494b5ab252279be0b20390e9529c6622bf8158cdd073b1a18fe0d27fa0c7b96a74167bcde2d859936a25e96b0aa7cf0e4c61e442c4322a6f99bd7c55528ccfb44c0c94c509bca21e60bf1d7ae7a39970f08f6396433ec3b265ed9711de4f82", 0xae}, {&(0x7f0000000c40)="49ae7bffd7b1632782550c24c5a0ea99c887f2e5b9d4312ebcabb8efd7dd8875c821294b49658d8623da53c2af", 0x2d}], 0x2, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0x60}}, {{&(0x7f0000000d40)=@vsock={0x28, 0x0, 0x7fffa256, @hyper}, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)="1f2d45534fbec9bc8fb576450ec6bdc4f95fbf68622ce71eb628f8a7b876eea8efb33685ec504d1e1d3f2796ddf8dc912802bfa4ab3b96f9e1786aba60ec86880fa7e86e762aa81cdf46df9bfd4da7fecba9aaabe9ea9a8c2220f7af6a328f8bdfab67c6eabef4548be7430605d040d23cb336a3a4dff00063fe3e1664d84179cc0ffeb4a1fada492a41c01a3f56879ec8f1634e291644bb1784c8576fe00278dd8df159b3", 0xa5}], 0x1, &(0x7f0000000ec0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x10000}}, @txtime={{0x18, 0x1, 0x3d, 0xf1d6}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}], 0x90}}], 0x5, 0x40000)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x40)
r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @raw_data=[0x1, 0xfffffeff, 0x6, 0x80000001, 0x5, 0x2, 0x2, 0x8, 0x8001, 0x8001, 0x100000, 0x7, 0x4, 0x4, 0x6, 0x0, 0x0, 0x60c, 0x3f, 0x0, 0xb5, 0x6, 0xff, 0x8, 0x3, 0x8, 0xbed, 0x1, 0x3, 0x2, 0x9, 0x5]})
[ 367.176458] input: syz1 as /devices/virtual/input/input12
[ 367.178143] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.243843] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.278405] *** Guest State ***
[ 367.292014] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7
[ 367.307548] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.338291] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871
[ 367.367734] CR3 = 0x0000000000000000
[ 367.371647] RSP = 0x0000000000000000 RIP = 0x0000000000000000
[ 367.380481] RFLAGS=0x00020402 DR7 = 0x0000000000000400
[ 367.393299] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000
[ 367.399664] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
17:15:06 executing program 5:
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000000c0)='./file0\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = dup2(r3, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
syz_mount_image$vfat(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="dc2ac86d4b66732e66617400080441000500077008f80000d8c32d8cbe59628cf9d9", 0x22}], 0x0, 0x0)
[ 367.413227] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000
[ 367.443636] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 367.455087] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.461910] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 367.485481] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 367.494685] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 367.503085] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.532654] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000
[ 367.558345] GDTR: limit=0x0000ffff, base=0x0000000000000000
[ 367.572019] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000
[ 367.578183] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.585813] IDTR: limit=0x0000ffff, base=0x0000000000000000
[ 367.603748] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000
[ 367.617113] EFER = 0x0000000000000000 PAT = 0x0007040600070406
[ 367.628773] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000
[ 367.643678] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pig=11039 comm=syz-executor.1
[ 367.671488] Interruptibility = 00000000 ActivityState = 00000000
[ 367.682973] *** Host State ***
[ 367.686733] RIP = 0xffffffff811c9733 RSP = 0xffff888077bf78c0
[ 367.698457] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040
[ 367.707025] FSBase=00007fead2ca5700 GSBase=ffff8880ae900000 TRBase=fffffe0000003000
[ 367.715148] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000
[ 367.721069] CR0=0000000080050033 CR3=000000008b3f5000 CR4=00000000001426e0
17:15:07 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x2, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x13)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f0000000080), &(0x7f0000000080)="877f20b9fa01025a3399c674974e74c598bdcaabd4ebec8b2a8cc795d18fe34ba3b494fe40a376b84851015a57a925d299b95ba1f8c3a008d65c7390a76e8c15b653fb093fb2e5610736733ab41977a7fea9be43decf89689ea137b38f242a34828e9824ce541f4b56b70625e58eea7b43f042f1c2176ab107c896bafc2dd1a96ddcbca95d4a49311f9cc8e54bf75747f8369a6dedf409be3c8be71f6ddc9cdbb74b8a2751be7f5815bb7f7db6af1437f351aeb0f57d8ec32a70f2ec010c19303c0d125bb525f888e9c1c8f443ee5bf807cb4bb526"}, 0x2a2)
pread64(r0, 0x0, 0x0, 0x0)
[ 367.728241] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87001400
[ 367.735431] EFER = 0x0000000000000d01 PAT = 0x0407050600070106
[ 367.741495] *** Control State ***
[ 367.745133] PinBased=0000003f CPUBased=b5a06dfa SecondaryExec=000000e3
[ 367.752031] EntryControls=0000d1ff ExitControls=002fefff
[ 367.758528] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000
[ 367.765923] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000
[ 367.776551] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000
[ 367.791569] reason=80000021 qualification=0000000000000000
[ 367.796656] kauditd_printk_skb: 2 callbacks suppressed
[ 367.796671] audit: type=1400 audit(1571591707.092:137): avc: denied { map_create } for pid=11076 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[ 367.811158] IDTVectoring: info=00000000 errcode=00000000
[ 367.831607] TSC Offset = 0xffffff38f69658b3
17:15:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffe, 0x0, 0xc, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000000c0)={'syz'}, &(0x7f0000000900)="585ccbc4ed83b836c1a6474914dc5500b66147b3c7218a91690000000042e3d35228897501f93191b076ac446ff0022b8753a1fa74ff569f435fb3bae96efb74b50ec93c2db8eae3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000000000000000000000000000000000195e23", 0x395, r0)
r2 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x0, 0xfffffffffffffffd)
socket$inet6_sctp(0xa, 0x5, 0x84)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r2}, &(0x7f0000000700)=""/243, 0x356, &(0x7f0000000040)={&(0x7f0000000580)={'poly1305-simd\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x02\x00\x00\x00\x0f\x00@\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00'}, &(0x7f0000000180)})
17:15:07 executing program 5:
r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x20600, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f00000000c0)={0x5, 0x0, &(0x7f0000000180)="624b68733f7d9fbc6e0010fb3725c998a1ad443dc51576a17e9f36f8decdbf9486743a23bd6d86e70e37b55cd8253f78d156a6b2967bd68557c489a1a16e2ad258619d62af114058d8f618b0d4f6fcb01563472f0029b8e8bed2c71804f1c06dfcd2b1bc0bc75b04f5b17e89d05ee480d5f134dc43bc55b0bce2df49f7bef52e40abe0ce432062a9964d120abafef5aa489e696ed16874e95795f05fd127c26d4f695ef8059530de31dd48515ceb4a09b278fa96c585988a6aafb73faace8d4eb1275c2dc960d874ba3a73aefb365e6ff4013c06e8aea1cde42a54332ba0ca905672a3a023542e48bbb435f205db634d6659215dad41c4a01b92316dee", &(0x7f0000000280)="5e61dd4b7e23452f2ae42b3277ed1cfabc597b58fc1f0d8b2b711d17839e73194a856ee40e4398ba54835b6606d40465a38918519f557efa15073ec8bc73f9e8de497152f2b153f5bc6b4d830dafe2ab59adff4373a5661c7b6e90eec3dd5c88dc43f2e67c0ca36e0ee9c30aa00f744cb96fba8a77e0dfec0401049035c53c3a5c4cec4ea133a03e1442c898d2", 0xfd, 0x8d})
openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x410000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000340)=""/115, 0x73)
ioctl$USBDEVFS_RESETEP(0xffffffffffffffff, 0x80045503, &(0x7f0000000080)={0x5})
17:15:07 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
r11 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r12=>0x0}, &(0x7f0000cab000)=0xc)
r13 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r13, r12, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000003c0)={{{@in=@multicast1, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8)
getresuid(&(0x7f0000000500), &(0x7f0000000540)=<r15=>0x0, &(0x7f0000000580))
r16 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r16, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r17=>0x0}, &(0x7f0000cab000)=0xc)
r18 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r18, r17, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@ipv4, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000006c0)=0xe8)
lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r20=>0x0})
r21 = getegid()
r22 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r22, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r23=>0x0})
setgid(r23)
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000007c0)={{}, {0x1, 0x8}, [{0x2, 0x4, r12}, {0x2, 0x735044ffeb5ac0dc, 0xffffffffffffffff}, {0x2, 0x4, r14}, {0x2, 0x4, r15}, {0x2, 0x1, r17}, {0x2, 0x2, r19}, {0x2, 0x4, r20}], {0x4, 0x4}, [{0x8, 0x3e74f399d642a480, r21}, {0x8, 0x2, r23}, {0x8, 0x1, 0xee00}], {0x10, 0x1}, {0x20, 0x1}}, 0x74, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRES64, @ANYRESDEC=r5, @ANYPTR=&(0x7f0000000180)=ANY=[@ANYRESHEX=0x0, @ANYPTR=&(0x7f0000000040)=ANY=[@ANYPTR, @ANYPTR, @ANYRESOCT, @ANYRES32=r6], @ANYRESOCT, @ANYBLOB="29e4e2daf0ffc7e01adf4faa98fbbdb80dce9963b9f8af108df6dadfd4f2d22bc944304ccc3d73e56c316a31b2e0696ca13587d241e94ae20707255507476e76c4fcd9882f58c9c3cd55e2917cb764241770d70df62c9d51afef6f7c03183c4d6c8d83829a81a32a71b8e645df7ab62b42ef753d70b3d56912667342428d49cfd6316fb1df350103be15b2a3d8ec386b728ce72e6f04e948fec929b5921148e30805cb87bd130a75c8176c503e6ad0ec63773b2de87736cba16c3c6fbb4a9de3c7ed601dc1224c49", @ANYRESHEX, @ANYBLOB="ee252b6cedbbdd4ac0bf87e3c175d05a657169c1826383f889730dc834ca55e038ce27cd09125b87574b04cda464b2556e78882587a19e4bff0ae4e63e943add3eea5682647fa59a78dbe5ad62518a2c6c96ba0bb4440cffe24eb69bded4b1ed7dfdfd79f29209a03bf15b4aa2d1e8296ab08cc970980b4e3b45500e88b7adf2a58e38bd0fd521507ac5ec061c3499ac42d6c90913d816d06ab5684d2f14680b87d7a5db5b8424519cd9a27f03e60d", @ANYRES32=r10, @ANYRESOCT=0x0]])
17:15:07 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x7, &(0x7f00000000c0)={@dev, @dev, <r3=>0x0}, &(0x7f0000000100)=0xc)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'yam0\x00', r3})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x1c, 0x0, 0x1, 0x7f}, 0x14)
fcntl$dupfd(r5, 0x0, r4)
r6 = dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr, 0x2abd}, 0x1c)
dup3(r6, r7, 0x0)
17:15:07 executing program 1:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000040)={@multicast2, @multicast1, 0x2}, 0xc)
r1 = socket$unix(0x1, 0x0, 0x0)
getpeername(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2001001, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000240)={0x1ff, 0x8}, 0xc)
linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x800)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
preadv(r3, &(0x7f00000017c0), 0x3a8, 0x0)
setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f00000003c0)=0x4, 0x4)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x3a8, 0x0)
r5 = dup3(r2, 0xffffffffffffffff, 0x80000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
ioctl$BLKIOMIN(r5, 0x1278, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001400000802000000ec00080000000000", @ANYRES32=0x0, @ANYBLOB="000004000000000008001b000000000074fd02d766ff61ea0fed87e6b17f1e623002edf035b6f556dc7cfe2a24efbbc264d4f6194e4c51a9b3e9961142f417e6c80a0b75e4bcbf5d3d11ff228eaa371922d79d50d894689ebb32716214c209618cc6f0e24bbf182fb4aef183d9a7393ad68bebe979c1b42de756dc2c1ee14b997747543196f60f3153d8769c5632de5f876bdfea199fa6e633b2524968eb5b7fc67c39e8f58b8a5887168b26a76b6a01a1ea264ef8d2a33c4c5bce6dcbcf65b399b15f248fab72b9dc625e73a68b1f24806843da7290"], 0x28}}, 0x0)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00')
r7 = gettid()
tkill(r7, 0x1002000000013)
ioprio_set$pid(0x1, r7, 0x6)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000380)={0x9, 0xd5, 0x3798, 0x8, 0xe1e, 0x4abf})
setsockopt$inet_mreqsrc(r0, 0x0, 0xc, 0x0, 0x0)
r8 = dup(0xffffffffffffffff)
r9 = accept4$tipc(r8, &(0x7f0000000280), &(0x7f00000002c0)=0x10, 0x80800)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r9)
ioctl$sock_inet_tcp_SIOCATMARK(r8, 0x8905, &(0x7f0000000000))
memfd_create(&(0x7f0000000100)='\x88])+\x00', 0x5)
pselect6(0x40, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000200), 0x0)
[ 367.834929] audit: type=1400 audit(1571591707.092:138): avc: denied { map_read map_write } for pid=11076 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[ 367.836508] TPR Threshold = 0x00
[ 367.863753] EPT pointer = 0x000000004593a01e
[ 367.868276] Virtual processor ID = 0x0001
17:15:07 executing program 4:
openat(0xffffffffffffff9c, 0x0, 0x800000, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
timer_create(0x0, 0x0, 0x0)
r1 = dup(r0)
shmget(0x3, 0x2000, 0x78000000, &(0x7f0000ffb000/0x2000)=nil)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, <r3=>0x0}, &(0x7f0000000180)=0xc)
setuid(r3)
getegid()
mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7e074a87a844c887f9cf14332adae3bf4dd23fc1c0af9773459245"])
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
setuid(0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
getpgrp(0x0)
shmctl$IPC_SET(0x0, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000100)=0x81, 0x195)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x8000000004e20}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x1, 0x4)
rmdir(0x0)
setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0)
setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000440), 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000080)=@fragment, 0x8)
getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
r4 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0)
ftruncate(r4, 0x7fff)
sendfile(r1, r4, 0x0, 0x8040fffffffd)
17:15:07 executing program 0:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x75f491b4e024e30c, 0x0)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000019c0)={r5}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r5, 0xfff}, &(0x7f0000000140)=0x8)
r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x50020, 0x0)
r8 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r9 = fanotify_init(0x0, 0x0)
fanotify_mark(r9, 0x2000000000000011, 0x2, r8, 0x0)
write(r6, &(0x7f0000000600)="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", 0xe00)
sendfile(r6, r7, 0x0, 0x12000)
17:15:07 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000d0fff5)='/dev/audio\x00', 0x0, 0x0)
ioctl$int_in(r1, 0x80000000005008, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
accept4(0xffffffffffffffff, &(0x7f0000000000)=@hci, 0x0, 0x80000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00')
r4 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/exec\x00', 0x2, 0x0)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f00000001c0)={0x40, 0x8})
sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r3, 0x1, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r10, r9, 0x0)
r11 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r10)
r12 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r13=>0x0}, &(0x7f0000cab000)=0xc)
r14 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r14, r13, 0x0)
keyctl$search(0xa, r11, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r14)
r15 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r16=>0x0}, &(0x7f0000cab000)=0xc)
r17 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r17, r16, 0x0)
r18 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r17)
r19 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r19, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r20=>0x0}, &(0x7f0000cab000)=0xc)
r21 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r21, r20, 0x0)
keyctl$search(0xa, r18, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r21)
r22 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r22, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r23=>0x0}, &(0x7f0000cab000)=0xc)
r24 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r24, r23, 0x0)
r25 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r24)
r26 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r26, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r27=>0x0}, &(0x7f0000cab000)=0xc)
r28 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r28, r27, 0x0)
keyctl$search(0xa, r25, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r28)
keyctl$KEYCTL_MOVE(0x1e, r11, r21, r25, 0x2)
ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000300)={{}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, 0xfffffffffffffffa, 0x0, 0x0, 0x20, 0x0, 0xffffffffffffffff})
17:15:07 executing program 3:
syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="7573726a71b2241ec47f1c5561"])
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="5c0f071e84369187a14a5f640fd4d7a45a9e6b69b3890c8a932d61162a7fb139a77c24daadef295f233e6c3c4dc4c8b72ba47c90957e7609a5ed4dfad9472aa63bf9752679ec749293e8c53fa6271b89386bdd0ec713401ce2391e0b", 0x5c, 0xfffffffffffffffc)
[ 368.222430] audit: type=1800 audit(1571591707.522:139): pid=11108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=16900 res=0
17:15:07 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0xfffffffffffffffe, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
write$eventfd(r3, &(0x7f00000000c0)=0x3ff, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x5, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, @multicast1]}, 0x24)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c43b460e46292", 0x2e}, {&(0x7f0000000040)="53000000c659ca80770040000300200000f0ffffff7f0000006740000000000000000000", 0x1000001b7}], 0x2)
17:15:07 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x0)
semctl$GETZCNT(0x0, 0x0, 0xf, 0x0)
mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fa, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
pipe2(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x40000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4)
ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x2, 0x1, @start={0x101, 0x1}})
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x4, 0x4)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
r6 = dup(r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
msgget(0x1, 0x0)
msgctl$IPC_STAT(0x0, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x820, 0x4)
r7 = fcntl$dupfd(r0, 0x0, r0)
write$selinux_attr(r7, &(0x7f00000000c0)='system_u:object_r:cron_spool_t:s0\x00', 0x19f)
17:15:08 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0xffffffffffffff9c, 0x8000000000000000)
mlock2(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3)
17:15:08 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_NET_NS_FD={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0xfff}, &(0x7f0000000040)=0x8)
17:15:08 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x200000, 0x208)
setsockopt$inet_buf(r0, 0x0, 0x381e7455a6bdd695, &(0x7f0000000240), 0x0)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x2002, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x1f, 0x8f, 0x6, 0x40, 0x5, 0x0, 0x8, 0x4, 0x2, 0x40, 0x3}, 0xb)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000001c0)=0x9, 0x4)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="700000001600000026bd7000fedbdf25d30a080400", @ANYRES32=r2, @ANYBLOB="00030200ff01000300000000874d3500000000000000011400010000000000000000000000ffff7f0000010800082000000000e89402000000000000000000000000000000000114000200fe8800"/88], 0x3}, 0x1, 0x0, 0x0, 0x1400c800}, 0x0)
17:15:08 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x100000006)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00\x00z\x00\x00\x00\xff\xff\xfd', &(0x7f0000000000)=ANY=[@ANYBLOB="12000000000d000000000000eaac38ee0000000000000000000000000300000000000000"]})
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_netdev_private(r2, 0x89f3, &(0x7f0000000240)="ebf16e11cf13b9a152dcb9d25a8fbd4378be38ca6018f17f058c50da668c28cf30bb86ababadefac60ed22c21782562ef56a97c85c3b82ebab7982aeb8ec6437bd99531fa4ba1d8bf0aa2797a42702427bec9d3b11321e2b8f98f394e0cf7960b6b2eb7df7a99f2af6d9861b2ecfd3938d66f8465956e4d2906c5ce5cde4c97c357f8d726bb63744a0dd5e60fd1a6b535da845a174fbb0149193a24dc1bb2f16")
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto(r3, &(0x7f00000003c0)="64cc1900a3fd8c32ea77e41d740efd063006b1328accc973ea0405d638e0a0948b8deb80b1bd395ee052f38ab8d742ada62c9aed18dabdbda478052208bc29f6d5f4474f1f11a90c1bac3785aa3099a86d0c5d3e6ca0af81e5b765720c0cc8bf8512a64c2683e7b3125886632ed9775e8c8fe1eb085fa3a1fa3f9954bdad0aacd9608166b4f8d5728cc15cfe79b8c775b303b0d20907ae0ee1cd2df1e208a6ef121571bdd153a8c557e9fecae6dcdc485e340b82ef7f8fd65d45cf559fc0de3828f5dd3a0254a87a93841b156fbea0ed2c20d0c916", 0xd5, 0x0, 0x0, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
r8 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r9=>0x0}, &(0x7f0000cab000)=0xc)
r10 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r10, r9, 0x0)
stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
r12 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r12, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r13=>0x0})
setgid(r13)
r14 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r14, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
setgid(r15)
r16 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r16, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r17=>0x0})
setgid(r17)
r18 = getegid()
setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x5}, [{0x2, 0xf, r9}, {0x2, 0x0, r11}, {0x2, 0x9, 0xffffffffffffffff}], {0x4, 0x2}, [{0x8, 0x1, r13}, {0x8, 0x1, r15}, {0x8, 0x3, r17}, {0x8, 0x1, r18}], {0x10, 0x2}, {0x20, 0x4}}, 0x5c, 0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f00000001c0)={'ipvs\x00'}, &(0x7f0000000200)=0x1e)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000300)=ANY=[@ANYBLOB="70409628bc523f64c24da5f65c5281a7367f4fe5eecac431aaba46427047f9e00f", @ANYRES32=<r19=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000019c0)={r19}, &(0x7f0000001a40)=0xc)
r20 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x1, 0x800)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r20, 0x800442d3, &(0x7f0000000380)={0x93f7, 0x7, 0x3, @random="512351ab4927", 'ip6tnl0\x00'})
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={r19, @in6={{0xa, 0x4e23, 0x5, @rand_addr="dbfee944f5b6e1d7a4e6f2b93a757397", 0x1003b}}, [0x2, 0x2, 0x100000000, 0x29b, 0x7, 0x80000001, 0xfffffffffffffffe, 0x3, 0x0, 0x3, 0x0, 0x2, 0x9, 0x0, 0x4]}, &(0x7f0000000180)=0x100)
17:15:08 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x87}, {0x16}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x1c)
17:15:10 executing program 1:
mknod(&(0x7f0000000100)='./file1\x00', 0xc000, 0x5)
r0 = fanotify_init(0x1, 0x400)
fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0xe1bf37914e370ef)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000000c0)='./file1\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb47926db966732e666174000204010002000270fff800000000ab24963ab652150eeded23", 0x25}], 0x0, 0x0)
r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="74486b001e85de3c8bfbea400a39aa3e5cedcedbfccd6d057e45587ea4150b90dfef768648de98b3c135b18084e4fd9dde08e796792d7c7641d690a154ac068606a73b917e336d6c87954193bb244a9cd6f324a0b34e1bd04e9809f740bd34c57898fcbae04921bad873eec499cd05", 0x6f, 0xfffffffffffffffc)
keyctl$read(0xb, r1, &(0x7f00000002c0)=""/5, 0x5)
17:15:10 executing program 3:
syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"])
17:15:10 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0xe, 0x102000)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:10 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x28, 0x2, 0x0)
connect$unix(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='o8\x00', @ANYRES16=r6, @ANYBLOB="01012cbd7000fddbdf250d0000000800060004000200040001000c00050008000100756470000c0006000400020004000200"], 0x3}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000a1d1)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xf0, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd8154bfb}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r7=>0x0, @local, @multicast1}, &(0x7f00000002c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x4e23, 0x9, 0x4e22, 0x4, 0xa, 0x20, 0xc0, 0x0, r7, r8}, {0x6, 0x3, 0x5, 0x4, 0x1000, 0xfff, 0x8001, 0x3ff}, {0x7ef, 0x3, 0x1, 0x1}, 0x23c, 0x6e6bb2, 0x4, 0x3, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0xff}, 0xa, @in6=@remote, 0x3501, 0x3, 0x0, 0x80, 0xa6, 0xfffffffd}}, 0xe8)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xfc)
17:15:10 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r5)
getsockopt$inet6_buf(r2, 0x29, 0x31, &(0x7f0000c86000), &(0x7f0000000080)=0xffffffee)
17:15:10 executing program 4:
syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x2a95, 0x0)
perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee, 0x1100, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3245f0a50c634cf, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000002c0)={0x8, "b13e1c20d1764d052a4289a71186ca1abfa7f39eb694f4602948f6585c3542ac42cb2f94b098e98f2bcd6128dab4a71d544e96e01e3a9a3548ee5f554c06d963346edb9d133e86fdd31c21e9aaffeb52f7cd63297b1fd0db1845e12bda3ce00f0cca0e6ac9c42a61e687c24c0553b408359c86c7bfd7a30944ac327f982b011258e85ee00f050c38e73199d07b72b225a96ab0fb5a9ea944a233e46cd4c25aaa0fe04bd9b3203f61a06c8f094563ffa0078e50248ce1acebc03c75069eb1cb20ebbe30ec063f9ebc45290dc4f8b56ebb08d32e4df04785fd385029f766a0b96db6a1b6615de63393fe97082c076a7170d2b1c06ce0627d6acae850c2b95f38b079a352f27bf6f5460078b8e597c1d3bdb5cf9e73f42eec5aea224ab44b94e18e812864faeaf770ba7471f99b07d41d573d1d4c3833fb4410ea36d710bfa66ccdb14a1927a678f873b023e82c341a43704adb37242a67b2a46d02ab7aee23cf3030a2f3dd58eece667b6e9393ee8d36649e37e83b1c73c0ef65b4df6173c1c25324fbb9afa1361dc4275f152deb03d7138a688eb9dc66e7845ce1be5647bf740b0e1dd038120ef1e3e1cf420cf8b723bef771376e433935e4f9096a10c4a969aceaac4791c41f365b274dab49bddf51b22a24c05ceaedcbf45febc927e98f410d38247d7679cee7b0d3041eaebd7821924ad31e7c5137bf87ce1ec537a981779f0a4c57bbbb5c641cfd02e1e3904f48b0be96fc9851b6bc8c4260168eea9d9d111e2777f78a9021d5eb0166e39410bf279656770263ca2fb7ac0e30d5e168f8cf4bc5665d057da939b770568e41d0fcec5d6aac0bf4ae66fb099b786cdce7f6a9bc00b83d8ed72440a9724d4ef8af71c7efbc31397930cdcb99d30502ecbcc7ddb9161ade16a1badbd7ea3c6c65b387b46234c4660c816506a2f76264bba07ecb685532116bd971464b58e3ea0a29c2fa1d49d9c6308806db01326e9a1b6bbb556f6479b29f48718e211d75f08d0fb477ad8dae5aeaad7e176b2c5ae331ef78212e9dd7e506549dc74ffd940dc91d74aee2fa7f28855919c163f443804e2a072ad8add2be84df87e414afcab0f8e6f67d3ebb1778a6798d50233da09d29b95c0da97304b7a025e50a7c89e614c63bc69477bfe0e5ae2c468332d134f9e22b19eb2f01c8e8d5148b9b980f8b9aa0cab9ba89aafe16d6a8cf9cb5ae659d8fba88e2841f3d6ac0c44dd9f03787d357fe31a4f551e247bfb73b1f2aa1e208c36aa90dcfc4da8877967c05fe951716ec2293d79c6083e79061bbe18150e2af1d889bb4e87c7735b0e7b88a3109a906d1bd4bf9b98c2462420ecc4e9f3a274a6678bc56e9aa7f3d64677141f874f35d00d04a1dc83126ccd69a0221305a3a5418ec24e163b165c1e4533c38f3d213de4012aece68ed11e2f42325d6da5eef78ee985f81a7991e3d1ff69188059c292779579418ef81177fa94b43cdd0fbf92d31f0fb592a864ddc98ddd5b49ece865e7c7a6c873169d0eea46c1a44f645b1cfa40849ffb9f5355ab396dc1a875180f17103be63be4e7d1920949c59ba5d47341c176ac307e165b9733ac5cd9e9691f5ecd76b467881b78f217d50903a06c57270f4104fd26d496dd7e08c27209185761882923f6447c73d53a74e28132e6bf97ee4f2df9d03be88653a9a7251d8df247f1a75f91f95886ce317e3c125aa7686eec86708fa72c9b33a664e76c0ed891ff9d840ac121ae3f96d32330a14fd76df19c7ae0434e2103d6e9175da0b6cc7a007a0a18615271771434959de305636cf7fbfdd16239bff7dbc656a702ebd48f9a2b1937cca80604ec525d292bb7337459235ad047c6933b6c81bd966ea60ec863de568a9e6d8e0378916f441e0f8b2b74df49b9b24094fd643413469428a537aed19b72bf9381ebab4cd57400ecad1cf1b792e9610910d02f9a779b009840e3f1a1395a87f1e590c33018be80a3f34bbaf49e415ba7d3858b40788cd19211b8cad3789870fb252f8991d64bff9558a67a2316ec2402c2f9c52de42e6389fc90bc4379f7b899b1a943035d64f20b7766edf08fdfa185d00493031f0d3f9ad7dce841f725c5adcba896a76857918a2f54c8aa2e50f71eda35b8fea3732a02c146201ad9f4b65b7caa09e2a73f72aee1ce428a35489038d5cc859fbd48be8da5d088ccab897a248fe418b89b409ab5507af725f077d264abec5b53667ca06aed03815dd537535a3360a50ca3d09c025b5057362c7cb5a4b99c58ac64fe813f4d7f2cafbc3048835ec43fa68170ec7310342134c9b5ec417763db145555cdd37f24b27b0911d172710b74d3c754aac02b24030166cbf2eccfaf1e909b629b7919db1351cd0167e8b6bddc5ce4b7e13cbf0c095f636427d440d058e7637eb117947fc6a60942d10bd455030ee38fc447fd3e6232efba65def558dcff60274e6b2ad62464b4f767bcfec22c681c12bdabf1fedc3946f45c9a34a9169f79ea60a9d190dcf1ce14957382af602dd134b610b269247f38c3d4e233f2fda399dc4cf09139cff9e9c731f8bf940df3cbdf9355f604bd0f3d3b20a6cfc39a7d9ff74f734750187b30c1a970a432bf7e9417cc87d8dea00c4e1885845e1a59bc6a5487687c5bca514e9dcf372bcdc0fe4a47f3e4ac456b1a812e69f88b2a8a964d946cc102ba6f3a7c965df24653c6384d810cf157c8581d4b40e874aded8d227a25fab9889f02698bf52980f048408de4a96226949eba5d1b7f41fce61ae1ff9388e096646ddda4c222f7b9bffc1d3e5b645b6e248637698f6a5be1dc03ff7aa9f418153beeef9b9d67ac5b6fc888e5adf0db41a6d5cac2b600af3b428a1294f4fdb4cf64ccc254c1c7ef71b9be3afceb797fc9504bc3f3dde217687d47cd445c44bea2b16eacae76f16d868b77065b189bd7c4678f3a5fc99b4d020d42972d010b7a6b22de46b434f2d8ec4f567af2d531817ec81ffa36cc27d073a66d2152f1be2a8dce08e98a00f473f22e680cf0ebdcf37936cee60f99eec69503a15d8e36f8d599b535021693fb52f9dc93e315d6e849bd4bf9d05fb25f0b09de91b73ca4edfbfa04d9262d449eab2be542ea30f316384609efc52ed641a9e32d48e4a57c65e8bfa5c13e769d5402a0b125c17360800bf0da8592a75abe647f1d9b1072942947da82e701308b60ecdcfd40d7b6cf44b443493ef0466790547c0a8e5914484969e52cba3787c41df965f91ed7074cd62a63db7e1c35b8f9ac30521295ae7b9c81143926f1dd36aefdfbcd7056b0d4209cabe113a18c58ecc062df687666725707029a8be3ef5721484bd429bab33fceb76c6a0f079da8819d0d9565f5e4ed45eb531f9501b85b619b5323169b0297b7cedcf6f288225dd5e6a7f52c1b96cd38dd94b2f6b8cfc6dbd7862901a5295dca5ecbae72344f41c4a222bd6711831d265b910d547501116bcfbf3c9e104b446175c4c8a4e56445ca22f9363f0f54858a8eb4a1c43103bca578c5b0ee372efd705a950510dbbfa4f74c8ddb4bbc1f07dd410ebb39c01f4da8a0bad2d3d35df3a12a9fa2daf44c8163d59aba8a7351ecc9fe4cd25b987dba700e73d7174307161adf70db0e7a802d7c9ec1b912ee58b0a35c2c6f40f112d70ab5aa708071379280c9ffbceaf0a4ec45c89ac0bf3ef40538302b685e24574da8bde8654e99eff66c9ad5e6beafa0e48e1c293c53d955980346cbc052d15e5d1f3baed388dfaa72ca089af06ae757466a704b93a0ff13cb5c722f0b872432a4fd4513ed56825b13ddd4d8c02eb624c8358199f52679421ab0e1792869f6b4aea523a1079b3138f1ef761c6df102096eff43ddb23ee668b9cc5161433feb318903b58387c3dae2833a8c770e7c6e27c31a1fca07377fbb07f11911be6192f7518a8d089b89826e48b28f5c8a00784bef9b2f68c90838eb2c9fcaeda4bb76782510082c977a7ecdd5743e9da8f088a3b67a25cfb25db4a709b6cbf5425e7efa8c2e472464606d9ccd2fc0f73cd1d51a5aa19d9caba10be2147f8e1ad763ba45693f9f078b0716cf588142be847ca67dc132c5782fed12b7d95c55a9bcfdfb85cb48698a45621cc2f1c85559617ece7def71486290b0cf8e987e8788e1a13f17e3f24b93ed2009ebe42e3bea9571f98b39b787c107dcada3a36fa1fe93736e74ec34af80a182cf0adf2846577f1d474c9ff1b4b8a2cfe6a2d445029ca77088b9c84be63655d48cbc5f61b18d7cda0d141f2db6bc3c479aa6ca19638e2c37da38768eb8820e5679345d2abe8033318eb952e297e17dacaaee3df7ef1d6cd554e9b1b453c44e3d4e030e25c5f9ed094100f6d9b1dc5dab371436ab252cc4d7fdf8fe4b7f36ab71f2bbe3878217b151664c3b9ae970e473ae164d77f294ca8ad58634ea446880e8327fc7af2a088e39508443a601eaa00742a7d0ad459dcac24a60edcfa6ac9f72f428c2b8dd30b8278e28f25a1a129d23cacd765de4c4aa52819578951bb8e311e8621f627e3463e2562b6dbc8d1c431c240f1424599438b9c94723f79ffd1fa1bc94104e4598bd43244302f86ddbe47ad8671e25f406aa507ba45bdba09841827a697cece002f79ec7cf14488789d754f84818d180bd04a11cb2115441a402bea2be749ef233bcd26ca27df828ada877a893e54ea3e6ea29e62d6e7693af7cbee59ccdb4045d0e6eeec3d8f59205f324a5f7cf5f871929c83ada04bc5d3990288dca5eb312339933ffb1031e05866e1b2d0aad0ca940795458b7d6c8a3750a76e1e6c8ccd48ca542d6c51164431d70c9d35f0f828cdec404a175a44bc2a9651ec5281c0f3aee9e4375f0eb139f58fa4419fddf9ebe2f8f37121a57397e7e830ac097ed375521a68f7cdc471621b769fef40cd19d8d55a82e27bf5b0cc4182359db7c9066e2ee10df279a89e96fcfea225995f065f7f286b8c8ef9b6c82a34df14dda2f737f557578ce5b15944e3149110102d80465c1b436b6bbb16fdc64a9d130ec7644bc162f0e2c5669a9254970a062561e269d85b72b4748d71d88ca20778287bc3b9613043166862f133f366f6361b9e1d040bbcd9728a70fcf3be7ea8fe0f55980ed03f336ec49f7cb6899813acf47d3b2413e7b637b764fcb9003ece75f8a255b9cdc71f80dbbaa7eaa2111b5551feeb7ea31620a2c88897538915abedcd184d57c79d81505985f561820449c330bc3412bffb68c4c743c5a5a3acafcf00d7561a66f70e5835da530ba62f221211e1fefdc1fbc8c05b1b68b7eb2afac6ebbbc0b961b8ef8b27b555ce7641f6601ac19d5f4adb06b40155a2085ff32de5b2c5edd96a01a14d1bb49b58f1fd718bec428043819b8070e46f0215d2153318320754638d9b40a5214784e7c1f80dde05500cfe8e4dff855504e099634fb3d44829453cf4ac8db7e5a4144f96d4508de90ada04240637fd5b261cfbb80c8d9ccdea6c1d3485a85663cff9749133002c7f9c6ea4de1b50fe90dae397f6b5833e943e6c5f60e10d805e97e6869488b857b44d8c94276f668257c223e2e26dff75222d3f304f8a040ce058e1b7b3bc5f0b69c310beea64212ef0a54bc9fb858c25681cee574c532b64d4f8241e0b855f7f79d0a1ea22fc3d9ad5a1658b5c4d9d417e9eae47c81628341172609a8ef8c72fb6e4e48da6a10207e56b727f65c82d49e2dbb44b492e1265c2b28f98980334ccc3abb0cfd15d73c2f38f4c824022aa7a0ac0b7d35eea934d3455d21e8c710474e54bdf29be107ebc00", 0xa943708f26830065}, 0x1006)
17:15:10 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x25800000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x4001fe)
unlinkat(r6, &(0x7f0000000080)='./file0\x00', 0x0)
ioctl$VIDIOC_TRY_ENCODER_CMD(r3, 0xc028564e, &(0x7f0000000000)={0x0, 0x3a27a7e60adb0428, [0xcb1, 0xfffffe01, 0x6, 0x3ff, 0x6, 0x9, 0x80000000, 0x10001]})
17:15:10 executing program 3:
prctl$PR_GET_SECUREBITS(0x1b)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0xa306e9f6570329dd, r0)
r3 = syz_open_dev$media(&(0x7f0000000300)='/dev/media#\x00', 0x1, 0x12a02)
write$FUSE_STATFS(r3, &(0x7f0000000340)={0x60, 0x0, 0x1, {{0x7, 0x5, 0xa, 0x6, 0xfffffffffffffffb, 0x7fff, 0x5, 0x1000}}}, 0x60)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0xfffffffb, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xf09c}, 0x1c)
write$P9_RSTATFS(r2, &(0x7f0000000240)={0x43, 0x9, 0x2, {0x3, 0x8, 0x4, 0x7, 0x1, 0x4, 0x7ff, 0x1, 0x9}}, 0x43)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x80c00, 0x0)
write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="ae00000005fffffffff6000040000000020000000000000005000000000000000500000000000000766661740000"], 0x2e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$bt_BT_DEFER_SETUP(r7, 0x112, 0x7, &(0x7f00000001c0)=0x1, &(0x7f0000000200)=0x4)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x7ff, 0xaaaab75, &(0x7f0000000040)=[{&(0x7f00000000c0)="eb3c906d6b66732e6661740f020400d602", 0x11}], 0x920000, 0x0)
17:15:10 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x20a45cdd3291eb22, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = accept4$inet(r4, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000001c0)=0x10, 0x180800)
r6 = dup2(0xffffffffffffffff, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r6, 0x810c5701, &(0x7f0000000080))
r7 = socket$inet6(0xa, 0x2, 0x0)
connect$unix(r1, &(0x7f0000000200)=@abs={0x2, 0x0, 0x4e24}, 0x6e)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr="d214c0e12eb5e6ea076cca63e0537907"}, 0x1c)
sendmmsg(r7, &(0x7f000000ac80), 0x800000000000226, 0x0)
17:15:10 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
mlock(&(0x7f0000a00000/0x600000)=nil, 0x600000)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x100000003)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10)
17:15:10 executing program 4:
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x4000, 0x0)
openat$cgroup_int(r0, &(0x7f0000000200)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0xfffffffffffffeb7, &(0x7f0000000080)={0x0}}, 0x0)
getsockname$packet(r3, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x10, 0x80, 0x1, 0xd4, 0x0, 0x7, 0x10045, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa8, 0x1, @perf_bp={&(0x7f0000000000), 0x8}, 0x8, 0x6, 0xda, 0x0, 0x3, 0x7, 0x2}, 0x0, 0x7, r2, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007240)=@newlink={0x50, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_LINKINFO={0x28, 0x12, @veth={{0xc, 0x1, 'veth\x00'}, {0x18, 0x2, @VETH_INFO_PEER={0x14}}}}]}, 0x50}}, 0x0)
17:15:10 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r6=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000019c0)={r6}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000000c0)={r6, 0x96, "793abb1c1f921a2303809c2dd1897dfb77b935bbbbb5649be1b36a818b1ce43f14a3407e29426f93f7de6550b59b0260a445098f93f2c31813895aae5ebb6a10cbe908db04f85a733f23cd4736e59e640d99291d00cd067bca3f8dfb7607db677f51940f07eda5b913c3f6bae4df72ac71ae94538a05e50c601087bee7eacee71f1865fd4de97627a623e0e5ea2bae0cdb056cf7fac4"}, &(0x7f0000000000)=0x9e)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti6'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x2}]]}}}]}, 0x38}}, 0x0)
17:15:11 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
ioctl$int_out(r1, 0x2, &(0x7f0000000080))
pread64(r0, 0x0, 0x0, 0x0)
clock_getres(0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
read$alg(0xffffffffffffffff, &(0x7f0000000180)=""/174, 0xae)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$KVM_GET_TSC_KHZ(r5, 0xaea3)
17:15:11 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
read$alg(0xffffffffffffffff, &(0x7f0000000040)=""/70, 0x46)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c)
r1 = socket$l2tp(0x18, 0x1, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket(0x28, 0x2, 0x0)
connect$unix(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='o8\x00', @ANYRES16=r6, @ANYBLOB="01012cbd7000fddbdf250d0000000800060004000200040001000c00050008000100756470000c0006000400020004000200"], 0x3}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000a1d1)
sendmsg$TIPC_NL_MON_PEER_GET(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0xf0, r6, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x90, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}]}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}, @TIPC_NLA_NET={0x14, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd8154bfb}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6b}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x80}, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={<r7=>0x0, @local, @multicast1}, &(0x7f00000002c0)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in6=@mcast1}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8)
setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, [], 0xf}, 0x4e23, 0x9, 0x4e22, 0x4, 0xa, 0x20, 0xc0, 0x0, r7, r8}, {0x6, 0x3, 0x5, 0x4, 0x1000, 0xfff, 0x8001, 0x3ff}, {0x7ef, 0x3, 0x1, 0x1}, 0x23c, 0x6e6bb2, 0x4, 0x3, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0xff}, 0xa, @in6=@remote, 0x3501, 0x3, 0x0, 0x80, 0xa6, 0xfffffffd}}, 0xe8)
connect$l2tp(r1, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4}}, 0x26)
sendmmsg(r1, &(0x7f0000005fc0), 0x800000000000059, 0xfc)
17:15:11 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = open(0x0, 0x0, 0x0)
getdents64(r3, 0x0, 0x0)
r4 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xc)
r6 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r6, r5, 0x0)
r7 = getgid()
write$P9_RGETATTR(0xffffffffffffffff, &(0x7f0000000000)={0xa0, 0x19, 0x1, {0x20, {0xcb, 0x3, 0x4}, 0x1b3, r5, r7, 0x2, 0x3, 0x4, 0x9, 0x2621c093, 0x24, 0x8, 0x136fa34b, 0x8, 0xfff, 0x80, 0x7, 0x200, 0x1, 0xfffffffffffffffe}}, 0xa0)
readv(r3, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000180)={0x0, 0x0, @pic={0x4, 0x81, 0x40, 0x4, 0xfa, 0x3, 0x40, 0x40, 0xfc, 0x2, 0xf, 0x7f, 0x5, 0x45, 0x0, 0x4}})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
open(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x4, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
getdents64(0xffffffffffffffff, 0x0, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
syz_open_dev$sndseq(0x0, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
17:15:11 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @random="cca784fb14ec", [], {@ipv6={0x86dd, {0x0, 0x6, "7415a0", 0x38, 0x3c, 0x0, @local, @local, {[@dstopts={0x0, 0x3, [], [@hao={0xc9, 0x10, @mcast1}, @calipso={0x7, 0x8}]}], @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "7439a8", 0x0, "04fb63"}}}}}}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000000)=<r5=>0x0)
ptrace$getenv(0x4201, r5, 0x1f, &(0x7f0000000040))
17:15:11 executing program 0:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x200000000011, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000000)={<r6=>0x0, @dev}, &(0x7f00000000c0)=0xc)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @local}, 0x10)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = fcntl$dupfd(r7, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
17:15:11 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'nr0\x01\x00', 0x4009})
r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400200, 0x0)
write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x1, {0x7, 0x0, 0x8001, 0x9}}, 0x20)
r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x2, 0x2)
close(r2)
socketpair$unix(0x1, 0x1000000000005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000040)='nr0\x01:\xf2%\xa3\'>\xf8]\x81$?\xfaD\x00\x00\x00\xbf\xef\xa9\xac\x03x\xf4D3A}?\a\x8b\x9c[\xdd\x06\xa4\n\xf4\x94\xa8>\xb1\xb1\xa2_&')
17:15:11 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
setrlimit(0x3, &(0x7f0000000000)={0x8, 0x4})
pread64(r0, 0x0, 0x76, 0x1000000000)
r1 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r2=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000019c0)={r2}, &(0x7f0000001a40)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={r2, 0x8}, 0x8)
17:15:11 executing program 1:
seccomp(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffffffffffc}]})
syz_open_procfs(0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x4)
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00')
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
17:15:11 executing program 0:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000001c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvfrom$unix(0xffffffffffffffff, &(0x7f00000006c0)=""/240, 0xf0, 0x2, &(0x7f00000007c0)=@file={0x1, './file0\x00'}, 0x6e)
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000080)={0x360d})
r4 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000500)={<r5=>0x0, @in={{0x2, 0x3, @broadcast}}, [0x1, 0x3, 0x20000000000000, 0x7, 0x2, 0x101, 0x6, 0x9, 0x80000000, 0x0, 0x2, 0xeacd, 0xb5a3, 0x1]}, &(0x7f0000000240)=0x100)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000280)={r5, 0x2}, 0x8)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f00000002c0), &(0x7f0000000340)=0x4)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r6, 0x1000008912, &(0x7f0000000000)="0800b5055e0bcfe87b0071")
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x18, 0x0, &(0x7f0000000400)=ANY=[@ANYPTR64=&(0x7f00000004c0)=ANY=[@ANYRES64=r0, @ANYRESDEC=0x0], @ANYPTR, @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="00e0ca14cec6bdef865e566e0cf3609de07de45b7f66a57466f292a3"]], 0x25, 0x0, &(0x7f0000000300)="c35a4fb0d2742cb4c171fa136c130f20e6cdbce2b55b48a04af7d95160696b7387e4a590a7"})
setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)='trusted.overlay.upper\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="00fb8a040dac72a7f6dfe4684e8aa87b51c26fafb2663b7514e6d8d19ddedecf19bc8fc3a086dc6a412b3c6a513488c29cd79646d58d529c53081ffdfab0aae14c000508e7adda2db380a8f765dd5806299d30502c59c2419d1247034716061d323596000000003ff60b526ac324b92a8e60f92829a8ac3b1e11c728889824928738d090784b6086594a"], 0x8a, 0x3)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x100000000, 0x0)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0xee36)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
17:15:11 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0xf3b)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x5, &(0x7f0000000000))
fcntl$lock(0xffffffffffffffff, 0x23, &(0x7f0000000040)={0x6, 0x0, 0xfffffffffffffffe, 0x5, r2})
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, 0x0)
keyctl$clear(0x7, 0x0)
request_key(0x0, 0x0, 0x0, r3)
r4 = socket$inet6(0xa, 0x1, 0x8010000000000084)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240))
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, r7, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe8)
r13 = geteuid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, <r14=>0x0}, &(0x7f0000000400)=0xc)
r15 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r15, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r16=>0x0})
setgid(r16)
getgroups(0x2, &(0x7f00000005c0)=[<r17=>0x0, r16])
r18 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r19=>0x0})
setgid(r19)
r20 = getgid()
r21 = getegid()
fsetxattr$system_posix_acl(r5, &(0x7f0000000340)='system.posix_acl_default\x00', &(0x7f0000000600)={{}, {0x1, 0x909edc5b0d7849b}, [{0x2, 0x5, r7}, {0x2, 0x4, r12}, {0x2, 0x3, r13}, {0x2, 0x4, r14}, {0x2, 0x1, 0xee00}], {0x4, 0x2}, [{0x8, 0x1, r17}, {0x8, 0x7d55789eedfddc5c, r19}, {0x8, 0xc, r20}, {0x8, 0x4, r21}], {0x10, 0x4}, {0x20, 0x4}}, 0x6c, 0x2)
r22 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x200, 0x0)
ioctl$UI_GET_VERSION(r22, 0x8004552d, &(0x7f0000000180))
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4}, 0x14)
17:15:11 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = fcntl$dupfd(r3, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0x7f, 0x4)
pread64(r0, 0x0, 0x0, 0x0)
r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2000, 0x0)
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x1, 0xa9e}, 0x8)
17:15:11 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$NBD_DISCONNECT(r3, 0xab08)
openat$md(0xffffffffffffff9c, &(0x7f0000000080)='/dev/md0\x00', 0x4000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x16, 0x4103032, r6, 0x0)
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4040, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r7, 0x28, 0x0, &(0x7f0000000000), 0x8)
17:15:11 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
syz_emit_ethernet(0x300b00, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60ba09000030880003024300600000000000ffffe0000002ff020000000000000000000000000001210090050024040060b680fa0000000000000000000000000000ffffffffffff00000000000000000000ffffac14ffbb"], 0x0)
17:15:12 executing program 4:
mknod(&(0x7f0000000100)='./file0\x00', 0x800000000000744, 0x0)
setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='security.capability\x00', &(0x7f0000000340)=@v1={0x1000000, [{0x7, 0x9}]}, 0xc, 0x2)
execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)=[&(0x7f0000000e40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\aJ\xce\x7f\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\r\x85\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001680)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'], &(0x7f0000000380)=[&(0x7f0000000c40)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000600)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001040)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000000140)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\aJ\xce\x7f\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\r\x85\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001480)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f00000003c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<\xbaC\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9dB_A\xec>k*\x13\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac', &(0x7f0000001880)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac'])
17:15:12 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fffffff, 0x400000)
17:15:12 executing program 5:
syz_mount_image$f2fs(&(0x7f0000000240)='f2fs\x00', &(0x7f0000000340)='./file0\x00', 0x2, 0x1, &(0x7f0000000200)=[{&(0x7f00000000c0)="1020f5f20100470009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000000000009381100080000000c000000100000bde34ab2030100000100000002", 0xffffffffffffff35, 0x1400}], 0x80, 0x0)
openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/validatetrans\x00', 0x1, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000280)="1bdb46998599a6ae75e920b595c4f1f906188b9718c514978e27e4703b299aa8398252a21288f35258ff08898a203101647901d0fa77544cdaf2327ab21d3fabe52d5e06da2dc96a", &(0x7f0000000180)=""/22, 0x4}, 0xa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000300)={0x7, {0x1, 0x20, 0x3, 0x3}, {0x1, 0xb53, 0x1, 0x6972}, {0x8}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080)={0x6175, 0x0, 0xc67, 0x887}, 0x10)
prctl$PR_GET_THP_DISABLE(0x2a)
r8 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = gettid()
tkill(r9, 0x1002000000013)
r10 = syz_open_procfs(r9, &(0x7f0000000380)='net/ip_mr_cache\x00')
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f00000003c0)="19d83a3ade5f90fd8c9b5a17fc3f4b44", 0x10)
getsockname$llc(r8, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
17:15:12 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_extract_tcp_res$synack(&(0x7f00000002c0), 0x1, 0x0)
r0 = gettid()
mremap(&(0x7f0000184000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000182000/0x1000)=nil)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r3, &(0x7f00000000c0)="9dcba4ced867cd4344589be9d19648d7ff55cba30fd02946b1b40acdfcd0555f088be09be8573dd774b15d1add4b8a38e14af4ce70858b14cfec8bb2dd8a63a9a53c87b2cc07034dbca5233ef8401e578b86660f164a331ce9b538783df793bfb84231767e335a20b4248248e58a4c0e968ffaa75b0a1f780536068c34b3ba17c1a43c461c5df8570636c8", &(0x7f0000000180)=""/219, 0x4}, 0x20)
process_vm_writev(r0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x35c}], 0x329, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0)
ioctl$TIOCGLCKTRMIOS(0xffffffffffffffff, 0x5456, &(0x7f0000000300)={0x0, 0x0, 0x2, 0x400, 0xe, 0x1f, 0xba, 0x1f, 0x1, 0x3, 0x3, 0x5})
write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f0000000280)={0x28, 0x2, 0x0, {0x3, 0xfffffffffffffff9, 0x1}}, 0x28)
17:15:13 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
perf_event_open$cgroup(&(0x7f0000000080)={0x3, 0x70, 0x4, 0x7f, 0x0, 0x0, 0x0, 0x200, 0x2, 0x6, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x20008, 0x2, 0x7, 0x0, 0x7fffffff, 0xffffffff, 0x2}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:13 executing program 4:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0xb681, 0x4)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
write$P9_RWALK(r0, &(0x7f0000000140)=ANY=[@ANYRESHEX], 0x12)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000100)=0x1c, 0x4)
mmap$perf(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r4, 0x28, &(0x7f0000000040)}, 0x10)
[ 373.836368] audit: type=1804 audit(1571591713.142:140): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/113/bus" dev="sda1" ino=16942 res=1
[ 373.908700] audit: type=1400 audit(1571591713.212:141): avc: denied { map } for pid=11886 comm="syz-executor.4" path="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/113/bus" dev="sda1" ino=16942 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[ 373.980254] audit: type=1804 audit(1571591713.262:142): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/113/bus" dev="sda1" ino=16942 res=1
[ 374.014027] audit: type=1804 audit(1571591713.262:143): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/113/bus" dev="sda1" ino=16942 res=1
[ 374.822977] audit: type=1400 audit(1571591714.122:144): avc: denied { map } for pid=11996 comm="syz-executor.1" path="/sys/kernel/debug/kcov" dev="debugfs" ino=14829 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[ 375.000931] IPVS: ftp: loaded support on port[0] = 21
[ 375.202604] chnl_net:caif_netlink_parms(): no params data found
[ 375.370650] bridge0: port 1(bridge_slave_0) entered blocking state
[ 375.377175] bridge0: port 1(bridge_slave_0) entered disabled state
[ 375.384337] device bridge_slave_0 entered promiscuous mode
[ 375.391778] bridge0: port 2(bridge_slave_1) entered blocking state
[ 375.398307] bridge0: port 2(bridge_slave_1) entered disabled state
[ 375.405462] device bridge_slave_1 entered promiscuous mode
[ 375.411777] device bridge_slave_1 left promiscuous mode
[ 375.417850] bridge0: port 2(bridge_slave_1) entered disabled state
[ 375.464500] device bridge_slave_0 left promiscuous mode
[ 375.470095] bridge0: port 1(bridge_slave_0) entered disabled state
[ 379.096352] device hsr_slave_1 left promiscuous mode
[ 379.138705] device hsr_slave_0 left promiscuous mode
[ 379.198677] team0 (unregistering): Port device team_slave_1 removed
[ 379.209350] team0 (unregistering): Port device team_slave_0 removed
[ 379.222306] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 379.296681] bond0 (unregistering): Released all slaves
[ 379.389513] bond0: Enslaving bond_slave_0 as an active interface with an up link
[ 379.398556] bond0: Enslaving bond_slave_1 as an active interface with an up link
[ 379.416916] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[ 379.424750] team0: Port device team_slave_0 added
[ 379.430525] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[ 379.437978] team0: Port device team_slave_1 added
[ 379.443203] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[ 379.450786] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[ 379.515830] device hsr_slave_0 entered promiscuous mode
[ 379.558894] device hsr_slave_1 entered promiscuous mode
[ 379.615331] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[ 379.625803] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[ 379.639540] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready
[ 379.723071] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[ 379.737107] 8021q: adding VLAN 0 to HW filter on device bond0
[ 379.751287] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[ 379.770500] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready
[ 379.781669] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 379.799101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 379.811420] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 379.831557] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[ 379.846735] 8021q: adding VLAN 0 to HW filter on device team0
[ 379.861585] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready
[ 379.872637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 379.890486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 379.899838] bridge0: port 1(bridge_slave_0) entered blocking state
[ 379.906254] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 379.924806] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready
[ 379.942742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 379.950769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 379.967195] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 379.980312] bridge0: port 2(bridge_slave_1) entered blocking state
[ 379.986763] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 380.003283] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready
[ 380.011888] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 380.038999] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 380.047200] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 380.062375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 380.077547] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 380.096926] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[ 380.104333] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 380.112038] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 380.128245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 380.146954] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready
[ 380.163713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 380.184970] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 380.282465] audit: type=1326 audit(1571591719.582:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12005 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000
[ 380.366659] audit: type=1400 audit(1571591719.672:146): avc: denied { associate } for pid=12005 comm="syz-executor.1" name="file0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1
[ 381.095290] audit: type=1326 audit(1571591720.402:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=12005 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c89a code=0xffff0000
17:15:20 executing program 3:
sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="14002000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000004000000"], 0x14}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xaaaac56, &(0x7f0000000100), 0x124d8c1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89080, 0xc9)
ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{}, {}]})
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_G_EXT_CTRLS(r2, 0xc0205647, &(0x7f0000000200)={0xf000000, 0x1010001, 0x4, [], &(0x7f0000000140)={0x980988, 0xfff, [], @p_u8=&(0x7f0000000100)=0x8}})
17:15:20 executing program 0:
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x23f28ab78f88b51, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0xfffffffffffffd27, 0x9}], 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000280)={0x1, 0x0, 0x1000, 0x6a, &(0x7f0000000140)="5495e1eae899ac37d0ff6581e3057507df5a5cff0a10648879d6476cebfe5d841307f4c1e5f2303e1745fcd61ffcbb27d12c7e25247b01192d115351c29a67e76393d1b5cb30a316edbe9153f0ef9a08c2a6bd746bbd1950f456b45e55315c49bf90f57998c579cc6cf0", 0x0, 0x0, 0x0})
pipe(&(0x7f00000004c0))
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
17:15:20 executing program 4:
pipe2(0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600)
r2 = getpid()
ptrace$getregset(0x4205, 0x0, 0x0, &(0x7f0000000000)={0x0})
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x29, 0x37, 0x1, {0x1, 0x1, 0x1, r2, 0xb, '/dev/hwrng\x00'}}, 0x29)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$FUSE_NOTIFY_INVAL_INODE(r5, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x1, 0xfffffffffffffff7, 0x7fffffff}}, 0x28)
pipe(&(0x7f0000000280))
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x8000, 0x1, &(0x7f0000000040)=[{&(0x7f00000002c0)="eb3c906d6b55732e666174000204010002000270f7f8ad743a8b5556d9409f26e9eeff1e8a4ea581211835ea39abd6975ada311bd8a2941c136f50e442a04a7ca3b7d665d462cdee980682ac60bec8b72d2f5fd388fea5de915ec7d5e00917fe871cbcfe6e5483278d8324a67667317f522ee08c6bacf2a762fd8da78cef595ad5155e9e214f75552f271950f679311fa65996d5e6912c31ff1e093e05000000b45c1a4cce64c29453fe1c961b73d016ed364b291667d10b5bef9edf9f2a3117bebde39677dcec608af5cc84e464cdd7b44944445f6e605b8a5f", 0xda}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
17:15:20 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r2, 0x800443d2, &(0x7f0000000000)={0x6, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}]})
r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7fff, 0x100)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$EXT4_IOC_GROUP_ADD(r4, 0x40286608, &(0x7f0000000100)={0x80000001, 0x9b, 0xa4da, 0x2, 0x468, 0x3})
ioctl$SG_SET_FORCE_PACK_ID(r2, 0x227b, &(0x7f0000000240)=0x1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
rt_sigpending(&(0x7f0000000180), 0x8)
getsockname$packet(r2, &(0x7f0000000540)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14)
setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000005c0)={@local, r7}, 0x14)
pread64(r3, 0x0, 0x0, 0x0)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r9 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r10=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f00000019c0)={r10}, &(0x7f0000001a40)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={r10, 0x10001, 0x5917, 0xbc9}, 0x10)
17:15:20 executing program 5:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00', 0x43732e5398416f1a})
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240))
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x0, 0x0})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, 0x0)
creat(0x0, 0x4a)
openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/mls\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_proto_private(0xffffffffffffffff, 0x89ec, 0x0)
getxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000800)=ANY=[@ANYBLOB="6274720000000002000005006561535e8a0ba2535fdc725f5aa2f46573077c9e3f18a71e728a63142b5c23cf075c0b0e0e59c18aed7588fc69249656926b9eaf3ef9bdd6e8cd80e849a05ee1c1daffbdbb0ae92b2321203c56855281f9d4ee07635dbd962ee60f13f5bb057ef877aa6a83ac32cd9ebb691f0071bd53fecb2597d484569cc1215555d215ce4f061874d981beb91af7aad36fa1ffdd024afc000000000000"], &(0x7f0000000280)=""/39, 0xfffffffffffffd11)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008000400000000001cec8a461cd6dd73322c5c90e748041c7809c7fae78efd05adde59e9d43319178cd87b9986138a0d2c745054a44a8b113706a5a192b861eebf9b0a9451a00966854eb412f7c04e0fba4e81ebd48bafc7d86346ef16c959cc9173006a878ad1cadf71f4b10ce729c5ecb1c9"], 0x30}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
lsetxattr$trusted_overlay_origin(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)='trusted.overlay.origin\x00', 0x0, 0x0, 0x2)
pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000300)='./file0\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
ioctl$TCGETX(r2, 0x5432, &(0x7f0000000300))
ioctl$FS_IOC_RESVSP(r2, 0x40305828, 0x0)
fstat(0xffffffffffffffff, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetl\x04\x00\x00\x00\x00\x00\x00\x00age_ir_Z\xa2\xf4es\x00', 0x275a, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$EVIOCGUNIQ(r6, 0x80404508, &(0x7f0000000c00)=""/4096)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00')
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180), 0xc, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4)
open(&(0x7f00000007c0)='./file0\x00', 0x10201, 0x0)
17:15:20 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="69324f7257ff08f6129caa2fd9b46f2083c72518069e31e7cf37dff0c2ce598681d3d76c7ef5dc86b71c8a52e71997810f683c535c94bf44d83c6cddbc64d47581e9577d8d85b937a28d1add627caee7a30412220ce554433089f3d79430df51fc412e0cd73e4b39c86a66b4799e584d3d46152146f9929f164432fab9cf655530ee0c535408000000e33fa5f842f9b5c9e2da0a65f365f6d1ad400d4e0c92a490"], 0x41)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$VIDIOC_G_FREQUENCY(r7, 0xc02c5638, &(0x7f0000000380)={0x3, 0x1, 0x4})
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={<r8=>0x0}, &(0x7f0000000100)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$dupfd(r10, 0x0, r9)
readv(r10, &(0x7f0000000340)=[{&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000280)=""/188, 0xbc}], 0x2)
r11 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/capi/capi20\x00', 0x2000, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r13, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x3c}}, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000500)={0x1, 0x0, 0x3, 0x5, {0x9, 0xb, 0x8, 0x8}})
sendmsg$IPVS_CMD_DEL_DAEMON(r11, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB='l\x00\x00\x00Vd\r\x00\x00', @ANYRES16=r13, @ANYBLOB="04002abd7000ffdbdf250a00000028000200080007000000000014000100e00000020000000000000000000000000800060005000000080006006529000008000600800000002000010014000300fe80000000000000000000000000000d080001000a000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4004002)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x2, &(0x7f0000000040), 0x4)
tkill(r8, 0x14)
17:15:20 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x8eae, 0x10400)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 381.371067] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 381.417460] audit: type=1400 audit(1571591720.722:148): avc: denied { map } for pid=12029 comm="syz-executor.1" path=2F726F6F742F73797A6B616C6C65722D746573746469723139343230333439332F73797A6B616C6C65722E6266797A55472F312F7374617409C0D2FEBCF9DF2DEAC8C177FF171248E91193513049F831550D6F7DE66CF637BDBF1311920C8A26EDA4DCC3783F9DB5116B34D31B0512A5608AAFF01E7952340CD6FD dev="sda1" ino=16964 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1
[ 381.509716] FAT-fs (loop4): Directory bread(block 59739) failed
[ 381.559652] FAT-fs (loop4): Directory bread(block 59740) failed
17:15:20 executing program 3:
clone(0xcdb0ee1f6d2b8cd2, 0x0, 0x0, 0x0, 0x0)
[ 381.602324] FAT-fs (loop4): Directory bread(block 59741) failed
[ 381.612031] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[ 381.624695] FAT-fs (loop4): Directory bread(block 59742) failed
[ 381.663533] FAT-fs (loop4): Directory bread(block 59743) failed
[ 381.693973] FAT-fs (loop4): Directory bread(block 59744) failed
17:15:21 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x20000000})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:21 executing program 1:
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4cc74502f987c2cec6504df6ead74ed8a60ab563e98b4b2a3d27a7082dbb78abd55fba3da80b856445ab100621d6234555c08dc540473786cd89e9b08e3f5972fe9ca162b123e19268c89c9dd81c796f27f537cc5a3fb54aff8eaff4f6b59c41705b96a6711d4679079d00"/137], 0x15)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$P9_RREADDIR(r6, &(0x7f0000000500)={0x68, 0x29, 0x2, {0x40, [{{0x1, 0x2, 0x4}, 0x7fff, 0x0, 0x7, './file0'}, {{0x180, 0x3, 0x3}, 0x800000000000, 0x7, 0x7, './file0'}, {{}, 0x6e7, 0x0, 0x7, './file0'}]}}, 0x68)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r3, 0x0)
r8 = getegid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
getsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8)
write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000440)={0x99, 0x7d, 0x2, {{0x0, 0x83, 0x1ff, 0x3d42, {0xd, 0x3}, 0x8800000, 0x9, 0x400, 0x81, 0x8, 'lowerdir', 0x13, 'uservmnet1self#ppp1', 0x5, 'loose', 0x30, 'mime_typekeyringposix_acl_accessppp0vmnet1cpuset'}, 0x1, '\\', r3, r8, r12}}, 0x99)
r13 = dup(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
write$FUSE_BMAP(r13, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r13, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose='loose'}]}})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file0'}}]})
[ 381.722340] syz-executor.5 (12020) used greatest stack depth: 21024 bytes left
[ 381.730871] FAT-fs (loop4): Directory bread(block 59745) failed
[ 381.746644] FAT-fs (loop4): Directory bread(block 59746) failed
[ 381.782266] FAT-fs (loop4): Directory bread(block 59747) failed
17:15:21 executing program 5:
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='fuse.', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040002,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2ccbae2990c02ae7ca9567726f75705f69643d372bfa532fa4948538aa92e3f19de2626cf60831dd764a9f4a0a345fe374cb0a4e02c2875aea77ad6fadecd79ad9c59e7b02d563e88745b8258c65c0eef815958354d8d7e0304ebb8e3440c5586428e3fcc96ffb48aea3a0036178afc69fe9bfea6ca6aacdcec900341d3febe85800c94334af8b6c1fa6599a4f3b01b73e077073f43bd81dc5adb20b3d28e58bc855e97d889d856df3b3c7eff67bd0306ef871304d3c45b3191b9121b730a48c35cb5c1302d02d018bb3bf8b726d31426718480b01042300"/230, @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
[ 381.823531] FAT-fs (loop4): Directory bread(block 59748) failed
17:15:21 executing program 3:
r0 = epoll_create1(0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x40000000, 0x3f000002})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r2=>0xffffffffffffffff})
r3 = dup2(r2, r2)
ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000240))
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
close(r1)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000000)='#\x00', 0x1, 0x0)
ioctl(r4, 0xffffffffffffffc7, &(0x7f0000000040))
r5 = fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$NBD_SET_SIZE(r3, 0xab02, 0x1)
timer_create(0x7, &(0x7f0000000080)={0x0, 0x22, 0x7, @tid=r5}, &(0x7f00000000c0)=<r6=>0x0)
ioctl$sock_rose_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xa3, @null, @rose={'rose', 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
ioctl$VIDIOC_G_AUDIO(0xffffffffffffffff, 0x80345621, &(0x7f0000000100))
timer_delete(r6)
[ 381.866601] audit: type=1400 audit(1571591721.172:149): avc: denied { block_suspend } for pid=12151 comm="syz-executor.2" capability=36 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1
[ 381.894894] overlayfs: workdir and upperdir must be separate subtrees
17:15:21 executing program 5:
syz_open_dev$sndctrl(0x0, 0x0, 0x32202)
r0 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205648, 0x0)
fsetxattr$security_selinux(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3)
syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
socket$inet6(0xa, 0x5, 0x0)
pipe(&(0x7f0000000200))
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
creat(&(0x7f0000000000)='./file0/bus\x00', 0x0)
pipe(&(0x7f00000001c0))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
pipe(&(0x7f0000000500))
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000500))
setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000040)={0x3b23, 0x0, 0x802, 0x0, 0x80, 0x10000, 0xfffffffa, 0x1})
syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write(r3, &(0x7f00000001c0), 0xfffffef3)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000240)={0x0, <r4=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0)
vmsplice(r2, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
17:15:21 executing program 4:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f00000002c0)={0x1, &(0x7f0000000340)})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0)
fsetxattr$security_capability(r0, 0x0, 0x0, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0)
getpeername$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, 0x0)
sched_setscheduler(0x0, 0x5, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000300)='./file0\x00', 0x702002, 0x48)
r2 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
write$9p(r1, &(0x7f0000000800)="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", 0x600)
sendfile(r1, r2, 0x0, 0x10000)
r3 = open(&(0x7f0000000300)='./file0\x00', 0x86842, 0x0)
syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00')
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0)
write$9p(r3, &(0x7f0000000800)="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", 0x600)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000)
17:15:21 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, @ip6erspan={{0x10, 0x1, 'ip6erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}], @gre_common_policy=[@IFLA_GRE_OKEY={0x8, 0x2}]]}}}]}, 0x44}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netdevsim0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x3c}}, 0x0)
sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48000801}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x94, r2, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x1d}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1ff}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000000)
17:15:21 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x16c, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8)
bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4)
syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x101000)
write$FUSE_NOTIFY_DELETE(0xffffffffffffffff, 0x0, 0x0)
recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1}, 0x100)
r1 = syz_open_dev$media(0x0, 0xfff, 0x400)
pipe(0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
fanotify_mark(0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={<r5=>0x0, 0x800, 0x401}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000001c0)={r5, 0x9, 0x30, 0x1, 0x7}, &(0x7f0000000200)=0x18)
[ 382.324530] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 382.365941] IPVS: Unknown mcast interface: netdevsim0
[ 382.382538] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[ 382.402633] IPVS: Unknown mcast interface: netdevsim0
17:15:21 executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
mount$fuse(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="66643d575d77f75a151dd851ef34e206c9b6af4d5aa80400000000000000001e9c6bacfa3814cba22d5bc133d5b96f34313ff27429fb5f7d48ab9ef84c57d6898d0aa4825ac6f06fffbb319208b0d5679ab1114e68ec4603c600000000000000", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESHEX=r2, @ANYRESDEC=r5, @ANYRESOCT, @ANYRESDEC=r8, @ANYPTR64, @ANYRESDEC=r0, @ANYRESDEC], @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000000,\x00'])
[ 382.432360] audit: type=1800 audit(1571591721.732:150): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=16969 res=0
[ 382.460153] overlayfs: filesystem on './file0' not supported as upperdir
17:15:21 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000003c0)={0xe0003})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000300)="66b8ad008ed00f8d0808417b2c020f3548b800000100000000000f23c00f21f835010008000f23740fc778fc0f350fd8060f30", 0x33}], 0x1, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
17:15:21 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d1feffff22002908000000000000000004000000b915452483a383bd23edd79b08cb67cf65e9f475f5080e213ac6f9ed6b4308e7dde74f263b9d0b05f609683306aa3296212623e90f41281a9e2e913623dedf43790487daa52c80fd6814bbbbb068de581b06e9b00a5c769fe765ec0d047380255ffc80aebf4eed938d5669537d8afd866781a49203a063bd9a0a63587f9b461c580b"], 0x1}, 0x1, 0xfdffffff00000000}, 0x0)
[ 382.538234] audit: type=1804 audit(1571591721.792:151): pid=12191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/115/file0" dev="sda1" ino=16969 res=1
17:15:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000240)=@null)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/checkreqprot\x00', 0x100, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000003c0)=0x6, 0x4)
r7 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x100})
pread64(r0, 0x0, 0x0, 0x0)
r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
ioctl$KVM_SET_MP_STATE(r8, 0x4004ae99, &(0x7f00000002c0)=0xe)
rt_sigaction(0x27, &(0x7f0000000100)={&(0x7f0000000080)="f2460f5ff3c4230d7a79001ec442c597907ad2bacac4c1b9f95f30c4e1017dfd4577003666db90000880418f0aa812c1969d0fcb65660f6d9d00000000c401495e9e84486a20", {0x10000}, 0x80000000, &(0x7f0000000000)="897fea2ef3430f5bcdc443a15e5b0085c4237578da00c48121e34111c4c291f7b306000000f30fa7e0f30f164e00c463f57de44e0f3807cf"}, &(0x7f00000001c0)={&(0x7f0000000140)="c4813959662ac481ad73dd00f3470f2c0766660fe430c442952b6e0464ae054e000000c4a252f5f20f542346dd09", {}, 0x0, &(0x7f0000000180)="f0ff08452c00c4815973d495c441c9d45700c422c5be950800000043ec47dfe066410fd34800c4c179fe09c423dd5edc32"}, 0x8, &(0x7f0000000200))
17:15:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
open(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000009c0)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c80, 0x0)
r1 = getpid()
keyctl$invalidate(0x15, 0x0)
sched_setscheduler(r1, 0x5, &(0x7f0000000000))
r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$get_persistent(0x16, 0x0, 0x0)
keyctl$clear(0x7, r2)
request_key(0x0, 0x0, 0x0, r2)
socket$inet6(0xa, 0x1, 0x8010000000000084)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080), 0x14)
17:15:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\r\x00', 0x35c, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x2f)
17:15:22 executing program 4:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000000c0)='./file0\x00', 0x0)
socket$bt_cmtp(0x1f, 0x3, 0x5)
fstat(r0, &(0x7f0000000380))
mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
mkdir(&(0x7f00000001c0)='./file0//ile0\x00', 0x0)
rmdir(&(0x7f0000000340)='./file0//ile0\x00')
fstat(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', 0x0, 0x4f6f6b4d, 0x0, 0x0, 0x4000, 0x0)
17:15:22 executing program 3:
syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00')
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r3, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r8, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="000000001000050700"/20, @ANYRES32=r13, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x5}}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r13, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r13, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @remote, @multicast1}, &(0x7f0000000140)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
17:15:22 executing program 1:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x1000000000001e, 0x4)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0)
r1 = open(&(0x7f000000fffa)='./bus\x00', 0x400000000141042, 0x0)
close(r1)
r2 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x105082)
r3 = memfd_create(&(0x7f0000000140)='\x00\x00\x00\x00\x8c\x00'/15, 0x0)
pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000000c0)="a8", 0x1}], 0x1, 0x81003)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
getsockopt$sock_int(r7, 0x1, 0x1d, &(0x7f0000000040), &(0x7f0000000180)=0x4)
r8 = socket$netlink(0x10, 0x3, 0x7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r12, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r12, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
sendmsg$nl_route(r8, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x100, 0x70bd29, 0x25dfdbfd, {0xa, 0x80, 0x80, 0x7f, 0x48e7670ea6223992, 0x0, 0xc8, 0x4}, [@RTA_EXPIRES={0x8}, @RTA_OIF={0x8, 0x4, r12}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2088)
r14 = socket$inet6_tcp(0xa, 0x1, 0x0)
r15 = dup2(r14, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
sendfile(r2, r3, 0x0, 0x80003)
17:15:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0xfffffffffffffdce, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x6, 0x6, 0x8}}, 0x28)
17:15:22 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000100)={{0x3321713279798342, 0x0, @identifier="cb331c0e1e5eb6f5997bbfe872fdc1aa"}})
ioctl$int_in(r1, 0x800000c004500a, &(0x7f0000000040)=0x10000000006)
perf_event_open(&(0x7f0000000980)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r1, &(0x7f00000002c0)={0x8, "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", 0xa943708f26830065}, 0x1006)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x2272, &(0x7f0000000080))
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)=0x10000)
17:15:22 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000002400000024020000020000000000000001000005200000800000000002000000deffffffffffff7f00000006040000000000c4b7a025ec7c05378da508debf3d1a"], &(0x7f00000002c0)=""/236, 0x3e, 0xec, 0x1}, 0x20)
sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0xb17)
17:15:22 executing program 5:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip_vti0\x00', 0x10)
connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @rand_addr=0x7fffffff}, 0x10)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dlm-control\x00', 0x0, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f00000001c0)={0xf000000, 0x80000009, 0x7fff, [], 0x0})
creat(0x0, 0x0)
r2 = socket(0x0, 0x0, 0x0)
sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$inet_opts(r5, 0x0, 0x12, &(0x7f00000006c0)=""/4096, &(0x7f0000000180)=0x1000)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000002c0)={0xfe8d, 0xdd003004cf7c725d, 0x2})
sendto(0xffffffffffffffff, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000", 0x11, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000300)=0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = openat(r8, &(0x7f0000000000)='./file0\x00', 0x220e00, 0x40)
setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x7, 0x4, 0x1, 0x101}]}, 0x10)
eventfd2(0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4000000, 0xed9e77889c53b7bf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f0000007fc0), 0x400000000000030, 0x0)
17:15:22 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x0)
unshare(0x6c060000)
17:15:22 executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f00000000c0)="1300000042005ff21bf9f507003916000a0000", 0x13)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$packet_buf(r5, 0x107, 0x5, &(0x7f0000000000)=""/94, &(0x7f0000000080)=0x5e)
[ 383.654354] IPVS: ftp: loaded support on port[0] = 21
17:15:23 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x100c00)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_GET_IDLUN(r6, 0x5382, &(0x7f0000000000))
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
fcntl$dupfd(r13, 0x0, r12)
fstat(r12, &(0x7f0000000380))
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0xfffffffffffffffc, 0x10000)
r14 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
ioctl$KVM_SET_BOOT_CPU_ID(r17, 0xae78, &(0x7f0000000300)=0x6)
ioctl$TCSETAW(r14, 0x5407, &(0x7f00000002c0)={0x8000, 0x27, 0x5, 0x8, 0x14, 0x8, 0x80, 0x80, 0x135f, 0x8d})
ioctl$sock_x25_SIOCADDRT(r14, 0x890b, &(0x7f00000001c0)={@remote={[], 0x0}, 0xd, 'sit0\x00'})
17:15:23 executing program 4:
io_setup(0x8, &(0x7f00000004c0)=<r0=>0x0)
userfaultfd(0x80400)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x80000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$VIDIOC_DQEVENT(r10, 0x80885659, &(0x7f0000000200))
io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x2}])
17:15:23 executing program 1:
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000300)={0x694, {{0x2, 0x4e24, @rand_addr=0x219}}, 0x1, 0x4, [{{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x290)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
fchmodat(r4, &(0x7f0000000000)='./file0\x00', 0x0)
close(r5)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0)
socket$inet(0x2, 0x3, 0x4)
bind$inet(r5, &(0x7f00000002c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10)
r6 = semget(0x2, 0x0, 0xa0)
semctl$SEM_STAT(r6, 0x5, 0x12, &(0x7f00000000c0)=""/190)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
r10 = geteuid()
setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f00000005c0)={{{@in=@broadcast, @in=@remote, 0x4e20, 0x6, 0x4e21, 0x9, 0xa, 0x40, 0x40, 0x0, 0x0, r10}, {0x7fff, 0x1, 0xbbb, 0x5, 0x1, 0xff, 0x8, 0x9}, {0x8, 0x9, 0xec2, 0x1}, 0xf6, 0x6e6bb2, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x29}, 0x4d2, 0x3c}, 0x0, @in=@remote, 0x3505, 0x2, 0x0, 0x7f, 0x5, 0x600, 0x9}}, 0xe8)
splice(r0, 0x0, r5, 0x0, 0x10005, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
write$P9_RSTAT(r13, &(0x7f0000000180)={0x5e, 0x7d, 0x2, {0x0, 0x57, 0x400, 0x8, {0xa8, 0x1, 0x8}, 0x200000, 0x3f, 0x6, 0x6587babb, 0xd, 'selinuxnodev)', 0x5, ']!]@}', 0x0, '', 0x12, 'wlan1.wlan1[}nodev'}}, 0x5e)
[ 383.963290] IPVS: ftp: loaded support on port[0] = 21
17:15:23 executing program 5:
pread64(0xffffffffffffffff, &(0x7f0000000080)=""/53, 0x35, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000002840)={"6c64125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e3d63a98fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b5365c5dc26ca097ddda7c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df10010174a3ac8694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde318ead4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34b2262d66ae793b6304a30b97077f1c131045cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6404923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f58e068af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff000000000000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb56d9b962d2fc43fa01a047526865c84f7cff36056cc4ac258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe07a69c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000000c0)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0x1ff, 0x0, [{}, {}, {}, {0x0, 0x0, 0xfc}, {0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}]}})
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x9, 0x5, 0x0, 0x16, 0x12, 0x1, "46c4ea87570eb2facd540bf972f976d330624f735f13efab59fe336df952b9fad46cf151b9abed9abb09675fdc3c3fa99075aa8896ba34f29d5b60721715c428", "7f2b57e470019303432cb486ae0d25a2f5539b8a2eea3f3f9057a0a38e44d13d3731fe783f71629c3f1a325573c43788d41ed4596651fd4dda15206cbb0c956f", "68bb362fae0b3a485c77100a2541909ac856144c62785a4ec91ef582dd680045", [0x138, 0x7]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00')
sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xb8, r8, 0x0, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x81}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xb}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1f}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x8000}, 0x8092)
r9 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r10=>0x0)
fcntl$lock(r9, 0x26, &(0x7f0000000040)={0x1, 0x0, 0x4, 0x81, r10})
17:15:23 executing program 4:
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0900000001ea698fff004ed4ecaca53ace1db77b58f35ecba7454edbada01782bb792ff2161c5a0d432c1a74d3ddfb8eef3e227380203cdd17ec75032cf6e3e5c5d8ec3b87cc38f5fe7171407869dbbd3c74f54a844d386ccaf0efddc4c069"], 0x2fe0)
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000080)={0xf, 0x1f, 0x2, 0xc58}, 0xf)
17:15:23 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = openat$cgroup_ro(r6, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x99d)
mq_timedsend(r3, &(0x7f0000000000)="f2e06616ce7073fb9f43b785", 0xc, 0x6, &(0x7f0000000080))
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$KVM_TRANSLATE(r10, 0xc018ae85, &(0x7f0000000200)={0x1, 0x3000, 0x1, 0x40, 0x3f})
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
ioctl$SCSI_IOCTL_PROBE_HOST(r13, 0x5385, &(0x7f00000000c0)={0x77, ""/119})
17:15:23 executing program 3:
r0 = socket$packet(0x11, 0x0, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req={0x80000000, 0xa537, 0x7fff, 0x80000001}, 0x10)
openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x14002, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x9, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42ab, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x82)
r3 = memfd_create(&(0x7f0000000100)='vmnet1!\x00', 0x2)
pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r1, r2, &(0x7f00000001c0), 0x20002000005)
ioctl$LOOP_CLR_FD(r2, 0x4c01)
r4 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
pwritev(r5, &(0x7f0000000140)=[{&(0x7f0000000640)="27debd5af6a680e9df03ac423134b6b9cd7a16db816d0c35b9774b88c2ebfbe2d1724e1b4d9740e45807f6f8ccaa83b66b0e22263aece78ac63dbb8168c70b7ca826e185b975301296035b26a7dc6ee13a1bcc5d4848d086a9648a9154a0c44259deba07c5fce01f54c2e54d2e37ab1fa926579259b98a972f6686ed12eb8e0975e6552b62a824c7", 0x88}], 0x1, 0x0)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r4)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x20002000005)
ioctl$LOOP_SET_FD(r2, 0x4c00, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
fallocate(r7, 0x0, 0x6, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS(0xffffffffffffffff, 0x80605414, &(0x7f00000002c0)=""/64)
r9 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r10, 0x29, 0x0, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108)
setsockopt$inet6_group_source_req(r10, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote, 0x1}}}, 0xfffffffffffffe79)
fcntl$getown(r10, 0x9)
ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/380])
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r11, 0x29, 0x2e, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @remote}}}, 0x388)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x100)
ioctl$LOOP_CHANGE_FD(r9, 0x4c06, r11)
pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000240)}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
17:15:23 executing program 0:
r0 = socket$kcm(0x2c, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x84, 0xb, 0x0, 0x0)
r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x400000)
read$usbmon(r1, &(0x7f0000000040)=""/71, 0x47)
r2 = semget(0x3, 0x3, 0x158)
semop(r2, &(0x7f00000000c0)=[{0x0, 0xfff7, 0x1800}, {0x2, 0x3, 0x1000}, {0x0, 0x7ff, 0x800}, {0x4, 0x4, 0x800}], 0x4)
17:15:23 executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x4000, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0)
ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000200)={0x1f, 0x6, 0x4, 0x80000000, {r1, r2/1000+30000}, {0x3, 0x3, 0x0, 0x0, 0x9, 0x66, "c5f5956e"}, 0x3, 0x2, @fd=r3, 0x4})
r4 = creat(&(0x7f00000003c0)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
write$UHID_INPUT(r5, &(0x7f00000015c0)={0x8, "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", 0xfffffffffffffde9}, 0x10000005c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x7f, @mcast1, 0x7}}}, &(0x7f0000000180)=0x84)
fcntl$setstatus(r4, 0x4, 0x44000)
io_setup(0x40000100000001, &(0x7f00000001c0)=<r9=>0x0)
io_submit(r9, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x804000000000000, 0x0, 0x8, 0x1, 0x0, r4, 0x0}])
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x2000000000400204)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x4)
17:15:23 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000840)='/dev/bus/usb/00#/00#\x00', 0x908, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0xa0, 0x0, 0x0, 0x0, 0x3}, 0x194, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$sock_SIOCGSKNS(r6, 0x894c, &(0x7f0000000080)=0x81)
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000140))
17:15:23 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x4607, 0x101000)
ioctl$DRM_IOCTL_AUTH_MAGIC(r1, 0x40046411, &(0x7f0000000080)=0xfffffffa)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:23 executing program 5:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x2, 0x2300)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
fcntl$addseals(r17, 0x409, 0xa)
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
r22 = fcntl$dupfd(r21, 0x0, r20)
ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200)
fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000240))
ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffff3e, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000080)={[0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x7f, 0x0, 0x800000], 0xd000})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$TIOCLINUX4(r5, 0x541c, &(0x7f0000000180))
17:15:23 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x80000)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f00000000c0)={0x26, [0x7ff, 0x1, 0x4, 0x477, 0x5e, 0x12, 0x1, 0x9, 0x5, 0x1, 0x5, 0x40, 0x7ff, 0x0, 0x6, 0x4faf, 0x8000, 0x3, 0x6, 0x1f, 0x1, 0xfffa, 0x5, 0x40, 0x0, 0x20, 0x9, 0x8, 0x1, 0x1, 0xed, 0x2, 0xfbff, 0xfff, 0x6, 0xffff, 0x0, 0x4b, 0x1, 0x25bf, 0x2, 0x0, 0x101, 0x40, 0x9, 0x2, 0x3f, 0x9], 0x8})
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1e1302, 0x0)
17:15:23 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000040)={0x0, 0x0, &(0x7f000016e000/0x3000)=nil})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0x0)
r2 = open(0x0, 0x0, 0x0)
r3 = creat(&(0x7f0000000180)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x6, &(0x7f0000000040)=0x1, 0x4)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
mknod(&(0x7f00000001c0)='./file0\x00', 0x400, 0xfff)
creat(0x0, 0x0)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10)
r4 = socket$inet(0x2, 0x80001, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x400000004e21, @multicast2}, 0x10)
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e23, @loopback}, 0x10)
connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @loopback}, 0x10)
17:15:24 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x9d, 0x1003e6, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x80003)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20ncci\x00', 0xd2b0f99d4fe68ee2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0xc0505350, &(0x7f0000000440)={{0x1f, 0x2}, {0xff, 0x34}, 0x100, 0x1, 0xfd})
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup/syz1\x00', 0x200002, 0x0)
socketpair$unix(0x1, 0x95b50949caf9e4bb, 0x0, &(0x7f0000000500))
clock_gettime(0x0, &(0x7f0000000300)={<r5=>0x0, <r6=>0x0})
write$evdev(r3, &(0x7f0000000340)=[{{r5, r6/1000+30000}, 0x12, 0x5, 0x2}, {{}, 0x11, 0x2, 0x40000007}, {{0x0, 0x7530}, 0x12, 0x8001}, {{0x0, 0x2710}, 0x4, 0x1, 0x7}, {{}, 0x0, 0x1, 0x7}, {{0x77359400}, 0x15, 0x0, 0x7fffffff}, {{0x77359400}, 0x11, 0x1f, 0x4}, {{0x0, 0x7530}, 0x11, 0x2411, 0x1}], 0xc0)
prctl$PR_GET_CHILD_SUBREAPER(0x25)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@remote, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0}}, {{@in6}, 0x0, @in6=@initdev}}, &(0x7f0000000100)=0xe8)
r8 = openat$full(0xffffffffffffff9c, &(0x7f0000004e00)='/dev/full\x00', 0x0, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000004e40)={<r9=>0x0, 0x2}, &(0x7f0000004e80)=0x8)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r8, 0x84, 0x71, &(0x7f0000004ec0)={r9, 0x3}, &(0x7f0000004f00)=0x8)
sendto$packet(r0, &(0x7f0000000040)="7f4f2bf4f28b6ace7a12edc826cd30fb91aead12e1790f2ef173f0cbc2e4a1b16a39886c8a319eca0244b746359a3a98620335b23f22cb95169548a576ab981d594424670ff09500549b9c94fea19ab35aa5ba611b210162f9d062109ad88e0746887e6a8df549c3b4675d04fbb80299ec460d0db059e2bc013bbaeb20c1c872552ff4293fff82db750a25d94e83c7c38ba5c8d6b4", 0x95, 0x40, &(0x7f00000002c0)={0x11, 0x5, r7, 0x1, 0x5e, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14)
17:15:24 executing program 1:
openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x0, 0x0)
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/btrfs-control\x00', 0x40, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000280)={'ip6tnl0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000380)={0x0, @reserved})
fcntl$dupfd(r2, 0x0, r1)
socket$kcm(0x10, 0x2, 0x0)
r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x105000, 0x0)
bind$llc(r3, &(0x7f0000000340)={0x1a, 0x4c7882fc753d3c0c, 0x7, 0x0, 0x4, 0x3, @remote}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
r6 = fcntl$getown(r4, 0x9)
perf_event_open(&(0x7f000025c000)={0x7, 0x70, 0x3, 0x1f, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, 0x1, 0x1, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x1000000000000000, 0x20, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7, @perf_config_ext={0x7fff, 0x3}, 0x0, 0x0, 0x80000000, 0x7, 0x13, 0xfffffffb, 0x964a652}, r6, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x10, 0x80000, 0x5)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10)
connect$llc(r7, &(0x7f0000000000)={0x1a, 0x304, 0x0, 0x200003, 0x7ff}, 0x10)
17:15:24 executing program 0:
r0 = socket$netlink(0x10, 0x3, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
ioctl$int_out(r2, 0x5463, &(0x7f00000000c0))
r3 = socket$inet_sctp(0x2, 0x800000000001, 0x84)
connect$inet(r3, &(0x7f0000f6fff0)={0x2, 0x4e27, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0x11000000000b)
r4 = accept(r3, 0x0, 0x0)
r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x40)
sendmsg$rds(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000c80)=""/4089, 0xff9}], 0x1}, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe00600000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000080)=0x400, 0x4)
17:15:24 executing program 5:
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x300080)
ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000140)={0x10})
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xfffffffffffffffa}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fgetxattr(r0, &(0x7f0000000200)=@random={'trusted.', 'memory.high\x00'}, &(0x7f0000000280)=""/233, 0xe9)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
userfaultfd(0x0)
ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4\x02\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00', 0x2761, 0x0)
write$cgroup_int(r1, &(0x7f0000000080)=0x90000000000000, 0x297ef)
r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_int(r2, &(0x7f0000000080)='memory.high\x00', 0x2, 0x0)
mkdir(&(0x7f00000004c0)='./file1\x00', 0x4)
socket$kcm(0x10, 0x0, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = accept$alg(r3, 0x0, 0x0)
r5 = open(0x0, 0x0, 0x0)
fcntl$F_SET_FILE_RW_HINT(r5, 0x40e, &(0x7f00000bf000))
sendfile(r4, 0xffffffffffffffff, 0x0, 0xffff)
r6 = getpgid(0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r7=>0x0})
rt_tgsigqueueinfo(r6, r7, 0x36, &(0x7f00000000c0)={0x41, 0x8e, 0x7})
socket$alg(0x26, 0x5, 0x0)
fcntl$F_SET_FILE_RW_HINT(0xffffffffffffffff, 0x40e, &(0x7f00000bf000)=0x5)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0xf0ffffff}, 0x0)
17:15:24 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="8500000005000000040000000000000095000000000000b485418803624b4bbbc0649d7156d2bcb60d799f735a354ee2de3371ac7093b6eefbd84afdb476f250a1df4d2e8a36e081b00efb133477e002baf5051cf51ff6f85cc8e364359035ad58aaea5b8374"], &(0x7f0000000180)='GPL\x00'}, 0x48)
17:15:24 executing program 5:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0x101}, 0x13)
r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x81, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r2, 0x0, 0x4, &(0x7f0000000100)='\xae-$\x00', <r4=>0xffffffffffffffff}, 0x30)
r5 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r3, 0x0, 0x1, &(0x7f00000000c0)='\x00', r4}, 0x30)
17:15:24 executing program 4:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x02roup.stap\x00', 0x2761, 0x0)
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00ffffffff"])
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0xc0c0583b, 0x20000001)
perf_event_open(&(0x7f0000000280)={0x3, 0x70, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0xfffffffffffffffd, 0x1}, 0x32683, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x0)
perf_event_open(&(0x7f0000000540)={0x0, 0x70, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x20001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2734c79b, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x6, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
quotactl(0x9, &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)="a36bb1df085bd04a03919cf6ce92fe9229f2e3eddd01c8cbcafa5f39f05ad855e23e57ed78c47fbd0f57d5110fed2946c856ed3e5f7fb2dbb5ffd1d7abf6041e3253ef79efcf49605075239180d559792970839182443ad305cf9f1a03ed")
ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000300)={{0x4000, 0x6000, 0x8, 0x4, 0x1f, 0x7, 0x1f, 0x1, 0x20, 0xf, 0x1, 0x2}, {0xd000, 0x30b000, 0xb, 0xba, 0x0, 0x9, 0xff, 0x6, 0x8, 0x5b, 0x8}, {0xf000, 0xf000, 0x0, 0x5, 0x9, 0xa, 0x5, 0x34, 0x38, 0xfe, 0x5, 0x8}, {0x2, 0x5000, 0xc, 0x1, 0xfe, 0x81, 0x1, 0x3e, 0x1, 0x20, 0x4, 0x3f}, {0xf000, 0x100000, 0xe, 0x3, 0x1, 0x40, 0x6, 0x7, 0x2, 0x1, 0x1}, {0x4000, 0x2000, 0x4, 0x81, 0x2, 0xba, 0x3f, 0xef, 0x81, 0x8, 0x1, 0x3}, {0xd000, 0xf000, 0x10, 0x3f, 0x2, 0x80, 0x1, 0x1, 0x7f, 0x9, 0x5, 0xe0}, {0x6000, 0xd000, 0xa, 0x20, 0xad, 0x3, 0x6, 0x5, 0xda, 0x1f, 0x2, 0xff}, {0x2, 0xd000}, {0x2000, 0x5000}, 0x10, 0x0, 0x2, 0x120100, 0x4, 0x2400, 0x1000, [0x1f, 0x80000001, 0x3, 0x8]})
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000080)}, 0x10)
r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x9, 0x40)
accept4$inet(r1, &(0x7f0000000140)={0x2, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x180800)
17:15:24 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x10e, 0xfffffffffffffffc)
17:15:24 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0)
r2 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80400)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000140)={r2, r3, 0x1, 0xe, &(0x7f0000000080)="9c344e30b30c6d5e3e8571824f92", 0x63, 0x7, 0x1, 0x8, 0x1000, 0x0, 0x9, 'syz0\x00'})
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
r4 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xb4, 0x400280)
ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000200))
17:15:24 executing program 5:
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00\xba@\xeb(\xa6\xa6\x00r\x03\xd0\xda\xd8>\xe0\x13\x1d\xde\xa5\xc6\x8f\x9f\xb8\xde^\x8b`\xb9\x8f\x90\xbe\xf7\v\xe3\x89\xf8\xfdt\x81u\xa6I\xc6(\xe0l\x00I\xa3\xd9\x9f\xdfL\x9cC\xdc1\xd0p\xc8\x01\xc8\xca\x11J\xac=\x85#|j\xee\xca\x82\xb8:x\xf2\xaa\xdd\xd9\xf9e#eM\x82N\xde\xc7\xcd\x05\xa6\xe1\x90\x89\xd5c\xaf\xa8`\xeaj@2S\x80s\xfa\xda}\xed\x9c\xbe\x98n\x1dr+\xf2\xd8\x9c\x8cP\xb5v\x12\x9e8\x1d\x1d\xe8V\x00t>\xf6X\x99\xe5\x87\v/\x04\x97\x17\x04\xa1\x03\x01\xc2\x16\x90\x04i\xb4\xd2\xcbO\xc6K\x86\x19\xeeL\x10\x91\'3_i\xf7qu\xb9\x8fQB\xa2]{\xbc\xecA\xa2\xeb\x17\xc4\x17Y,\xb7\xa5]f\x00>\xd2bL\xe5\xbd\xda\x9e\xaa', 0x275a, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x8e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000080)=0x5000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_GET_VCPU_EVENTS(r9, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
17:15:24 executing program 3:
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, 0x0)
r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000300), &(0x7f0000000340)=0x4)
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
connect$tipc(r0, &(0x7f0000000040)=@id, 0x10)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000019c0)={r7}, &(0x7f0000001a40)=0xc)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000380)={r7, 0x1}, 0x8)
ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000100)=0x6)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000000)={0xc, 0x8, 0xfa00, {&(0x7f0000000180)}}, 0x10)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockname(r8, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp_SCTP_MAXSEG(r8, 0x84, 0xd, 0x0, 0x0)
unshare(0x40000000)
17:15:25 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xfffffffffffffffa, 0x18242)
ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000080))
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:25 executing program 0:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)=<r3=>0x0)
tkill(r3, 0x36)
r4 = gettid()
tkill(r4, 0x1002000000013)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r5=>0x0)
ptrace$setopts(0xffffffffffffffff, r5, 0xfd8, 0x200040)
syz_open_procfs(0x0, 0x0)
tkill(r0, 0x12)
17:15:25 executing program 4:
r0 = perf_event_open(&(0x7f000025c000)={0x1, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x0, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0xcb}, 0x1)
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r2, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2)
clone(0x4007fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
17:15:25 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
read(r1, &(0x7f0000000280)=""/17, 0x11)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0)
r4 = openat$cgroup_subtree(r3, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0)
close(r4)
openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{0x0}]}}], 0x1, 0x0, 0x0)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r6, 0x0)
r8 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r7)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r11, r10, 0x0)
keyctl$search(0xa, r8, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r11)
r12 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r11)
request_key(&(0x7f0000000080)='trusted\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)='GPL\x00', r12)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_PRI(r16, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r17, @ANYBLOB="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"], 0x68}}, 0x0)
sendmsg$TIPC_CMD_ENABLE_BEARER(r15, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0xb1c1e9bf75ca023a}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="340000002f25303afcac2d383770d50c5b27b9438d604dd513f1fbb1c84ec0c791dd7e0d05e77bcba7bf249886748797cb119d65ffb4ec65c4f0234a24b87f32987a50b751ca0842a08a17704a6a296538457c31b9ea0fff46e7580cf345ccbbd53a4f50acac0088ff0c7412bb06e289401be37e21085fea030746b0af3b35fe0059d5cfe35812946ea9361555e853145f0f4652baf4ff508b993e1dcffea9e75156065dab656d164ed0b1014ef7064a21b30894d5fa90ec03ccd84da07ca5a29b7db36c05a8985b4e2eb561098adfb76657c0b6efc0c3a98c1957c26b242a719fbb4f95", @ANYRES16=r17, @ANYBLOB="00042abd7000ffdbdf250100000000000000014100000018001700000004000010007564703a73797a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0)
readv(r4, &(0x7f00000002c0), 0x18f)
[ 385.917920] IPVS: ftp: loaded support on port[0] = 21
17:15:25 executing program 4:
getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x78)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x7, 0x400880)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f00000004c0)={0x7, 0x7, 0x2d9c, 0x2000, [], [], [], 0x2, 0x9, 0x9, 0xc9, "46312e6538441b0d391c832a98eaffb2"})
r3 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0x0, 0x800, 0x0, [], 0x0})
fsetxattr$security_selinux(r3, &(0x7f0000000000)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:iptables_exec_t:s0\x00', 0x25, 0x3)
unlink(0x0)
r4 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2)
syz_open_dev$sndpcmc(0x0, 0x8, 0x2000)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0)
ioctl$DRM_IOCTL_AGP_BIND(r4, 0x40106436, &(0x7f00000002c0))
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0)
socket$rxrpc(0x21, 0x2, 0x440010004000007)
mkdir(0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
accept$inet(r5, &(0x7f0000000340)={0x2, 0x0, @initdev}, &(0x7f0000000380)=0x10)
ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="00000000100000000000de4319c12e05c89a7dc92af6f716a37351951cb4453db7b4a49cf9dec9ccc8eeb78b7c00000025a2d39397355701fa91d2e6421529c8871cb05f455cb464ee2236072ea0cc6bb0bf4dcaa624919ef94eaa0000", @ANYRES32=0x0, @ANYBLOB="4000f26643f152"], 0x3}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
unshare(0x40000000)
r6 = syz_open_dev$video4linux(&(0x7f0000000100)='/dev/v4l-subdev#\x00', 0x3, 0x0)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000003c0)=0x96)
ioctl$VIDIOC_G_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000000)={0x0, 0x0, 0x0, [], 0x0})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
17:15:25 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x44381)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
r7 = getpgrp(0xffffffffffffffff)
fcntl$setown(r4, 0x8, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000280)={0x5a31, {{0xa, 0x4e24, 0x80000001, @mcast1, 0x4}}}, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = fcntl$dupfd(r12, 0x406, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
r14 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r13, 0x89e2, &(0x7f0000000000)={<r15=>r14})
setsockopt$RXRPC_SECURITY_KEY(r15, 0x110, 0x1, &(0x7f00000000c0)='security\x00', 0x9)
ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000200))
pread64(r0, 0x0, 0x0, 0x0)
17:15:25 executing program 4:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000e5b000)={0x2, 0x0, @multicast1}, 0x10)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0x28001, 0x0)
ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000480)={0x5, 0x0, 0x1, 0xba, 0x0, 0xffff})
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_nlink(0x0, &(0x7f0000000280)='t\x00\xa4\xe3\x00', &(0x7f00000002c0)={'U-', 0x9a6a}, 0x28, 0x1)
statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x400, 0x8, &(0x7f0000000340))
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10)
r2 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x1df)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xb, 0x2c0, 0x0, 0x0, 0x0, 0x3ff, &(0x7f0000000800)=""/189, 0x41000, 0xa283dbaf97e445fb, [], r3, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x236, 0x10, 0x0, 0x68bf8a75c20bded2}, 0xffffffffffffff84)
socket$kcm(0x29, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
accept$packet(r7, &(0x7f00000005c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000600)=0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0xe, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff}, [@ldst={0x2, 0x2, 0x0, 0xd, 0x5, 0xffffffffffffffdb, 0xfffffffffffffff0}, @jmp={0x5, 0x0, 0xd, 0x9, 0xb, 0xfffffffffffffff8, 0xfffffffffffffffc}, @ldst={0x2, 0x6, 0x6, 0x7, 0xa, 0xffffffffffffffae, 0x11}, @alu={0x4, 0x1, 0x3, 0x2, 0x9, 0x14, 0x10}, @call={0x85, 0x0, 0x0, 0x6a}, @map={0x18, 0x0, 0x1, 0x0, r4}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @exit, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0xffffffff, 0x67, &(0x7f0000000540)=""/103, 0x40f00, 0x3, [], r8, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x4, 0x0, 0x8}, 0x10}, 0x70)
17:15:25 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x121c, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000080)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$EVIOCSABS3F(r4, 0x401845ff, &(0x7f0000000200)={0x9, 0x79a, 0x5, 0x80})
r5 = syz_open_procfs(r1, &(0x7f00000000c0)='net/if_inet6\x00')
socket$nl_xfrm(0x10, 0x3, 0x6)
pread64(r0, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000180)={0x0, 0xff48, 0xfa00, {0x0, &(0x7f0000000240)={<r6=>0xffffffffffffffff}, 0x2, 0xf}}, 0xf)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f00000001c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x0, {0xa, 0x4e22, 0x81, @dev={0xfe, 0x80, [], 0x18}, 0xfffffffa}, r6}}, 0x38)
[ 386.544928] IPVS: ftp: loaded support on port[0] = 21
[ 386.566924] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 386.637848] overlayfs: filesystem on './file0' not supported as upperdir
17:15:26 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x8, 0x80000)
pread64(r0, 0x0, 0x0, 0x0)
17:15:26 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000001240)=""/203, &(0x7f0000001340)=0xcb)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
17:15:26 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x28b}, 0x0)
17:15:26 executing program 5:
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0xfd7d}, 0xffffffffffffff85)
r2 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000580)=@security={'security\x00', 0xe, 0x4, 0x440, 0x128, 0x268, 0x0, 0x128, 0x0, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x3a8, 0x4, &(0x7f0000000100), {[{{@ip={@broadcast, @multicast2, 0xffffffff, 0xff, 'nr0\x00', 'nlmon0\x00', {0xff}, {}, 0x6, 0xcaf52b165e570e19, 0x8}, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0xcf86d821240254c4, 0x10, 0x0, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="e4e0b7f801fa", 0x4, 0xe, [0x34, 0x33, 0x3f, 0x29, 0x22, 0x2f, 0x35, 0x39, 0x13, 0x24, 0x25, 0x35, 0x40, 0x1d, 0x36, 0x2d], 0x2, 0x6, 0x80000001}}}, {{@ip={@remote, @remote, 0xff000000, 0xffffff00, 'ip6erspan0\x00', 'yam0\x00', {0xff}, {}, 0x8, 0x2, 0x8}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x60, 0x0, 0x0, 0x1}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x5, 0x7fffffff}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x1ff, 0x1}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@socket1={0x28, 'socket\x00', 0x1, 0x1}, @common=@socket0={0x20, 'socket\x00'}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x4, 0x9, [0x1d, 0x36, 0x9, 0x9, 0xf, 0x40, 0x21, 0x34, 0x30, 0x2d, 0x3b, 0xb, 0x1a, 0x30, 0x1e, 0x21], 0x1, 0x3a4, 0x1}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)
truncate(&(0x7f0000000180)='./bus\x00', 0x9)
ftruncate(r1, 0x208200)
fcntl$setstatus(r0, 0x4, 0x3fffe)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
[ 387.103677] IPVS: length: 203 != 8
[ 387.113815] IPVS: length: 203 != 8
17:15:26 executing program 4:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0xa925, 0x2b, 0x0, <r1=>0xffffffffffffffff})
r2 = dup(r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2180, 0x0)
recvfrom$unix(r5, &(0x7f00000000c0)=""/32, 0x20, 0xbd529138eb30b4b2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
r6 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = dup(r2)
ppoll(&(0x7f0000000400)=[{r7}], 0x1, &(0x7f0000000440)={0x0, 0x1c9c380}, 0x0, 0x0)
17:15:28 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:15:28 executing program 3:
mkdir(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
tkill(0x0, 0x9)
r0 = socket$inet6(0xa, 0x802, 0x0)
bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c)
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x1c)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000000)="1b", 0x1)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "50a09c", 0x8, 0xffffff11, 0x0, @remote, @local, {[], @udp={0x0, 0x4e20, 0xfffffffffffffe62, 0x0, [@guehdr={0x0, 0x1, 0x0, 0x4, 0x100, [0x80]}, @guehdr={0x0, 0x0, 0x3, 0x3, 0x380, [0x80]}]}}}}}}, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0x50)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, 0xffffffffffffffff, 0x0)
write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0)
rmdir(0x0)
17:15:28 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket(0x28, 0x2, 0x0)
connect$unix(r3, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='o8\x00', @ANYRES16=r4, @ANYBLOB="01012cbd7000fddbdf250d0000000800060004000200040001000c00050008000100756470000c0006000400020004000200"], 0x3}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000a1d1)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x60, r4, 0x802, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x4c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6f17}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000040)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
linkat(r7, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0)
pipe(&(0x7f00000004c0))
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = fcntl$dupfd(r8, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)
17:15:28 executing program 4:
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000002680)={0x0, 0x1, 0x6, @random="37adffb61486"}, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000400)='nbd\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="de2bb4eb", @ANYRES32=<r5=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000019c0)={r5}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={<r6=>r5, 0xff}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000180)={r6, 0x100, 0x28}, 0xc)
r7 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r9 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r9, 0x8200)
r10 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
ioctl$CAPI_GET_ERRCODE(r7, 0x80024321, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r7, 0x40042409, 0x1)
sendfile(r7, r10, 0x0, 0x400)
sendfile(r7, r8, 0x0, 0x8000fffffffe)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
17:15:28 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x111000)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:28 executing program 0:
r0 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0)
ftruncate(r0, 0x28007d)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000), 0x8)
r1 = open(&(0x7f0000000080)='./file0\x00', 0x48000, 0x20)
sendfile(r1, r1, 0x0, 0x200800100000001)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[]}}, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r11, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, r11, {0xb}, {0xc, 0xffe0}, {0x6, 0x3}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x6d943ed7348a5e63}, 0x8004)
getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14)
setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x6, 0x4)
ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502)
[ 389.101592] audit: type=1804 audit(1571591728.402:152): pid=13570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/140/file0" dev="sda1" ino=16984 res=1
17:15:28 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x2, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
17:15:28 executing program 3:
r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x28001, 0x80881)
ioctl$int_in(r0, 0x80006000005008, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x4000, 0x1})
[ 389.231934] audit: type=1804 audit(1571591728.492:153): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
17:15:28 executing program 1:
r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x70d040)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={<r1=>0x0, 0x8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x8000, 0x800, 0x8008, 0x4, 0x5, 0x852, 0x5, 0x7, r1}, &(0x7f0000000100)=0x20)
r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000180))
ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000002c0))
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0xed28e769d4c3d66, 0x0)
ioctl$KVM_ASSIGN_SET_INTX_MASK(r3, 0x4040aea4, &(0x7f0000000340)={0x7fff, 0xfffffffb, 0x0, 0xa, 0x3})
r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x8040, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000003c0)={<r5=>0x0, 0x1000, 0x18, 0x4, 0x7}, &(0x7f0000000400)=0x18)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000440)={r5, @in={{0x2, 0x4e22, @rand_addr=0x1000}}, 0x80, 0x98c4, 0x7, 0x4, 0x80000001}, &(0x7f0000000500)=0x98)
r6 = syz_open_dev$media(&(0x7f0000000540)='/dev/media#\x00', 0x7, 0x2040)
ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000000580)={0x800, 0x2, 0x40})
r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ubi_ctrl\x00', 0x111001, 0x0)
ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x4, {0x3, 0x3f, 0x5, 0xfff}})
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x34100, 0x0)
ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000006c0)={0x0, 0x1, 0x6, &(0x7f0000000680)=0x800})
r9 = getpgid(0x0)
sched_getaffinity(r9, 0x8, &(0x7f0000000700))
r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000740)='/dev/mixer\x00', 0x40, 0x0)
ioctl$DRM_IOCTL_SET_VERSION(r10, 0xc0106407, &(0x7f0000000780)={0x5, 0x2, 0xd3d, 0x2})
r11 = syz_open_dev$mouse(&(0x7f00000007c0)='/dev/input/mouse#\x00', 0x6, 0x121003)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r11, 0x0, 0x63, &(0x7f0000000800)={'IDLETIMER\x00'}, &(0x7f0000000840)=0x1e)
r12 = syz_open_dev$audion(&(0x7f0000000b40)='/dev/audio#\x00', 0x24, 0x404002)
getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4)
getxattr(&(0x7f0000000c00)='./file0\x00', &(0x7f0000000c40)=@random={'osx.', 'vboxnet1{vboxnet0@ppp0\x00'}, &(0x7f0000000c80)=""/59, 0x3b)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
r13 = openat$full(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/full\x00', 0x2000, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000dc0)=@raw={'raw\x00', 0x9, 0x3, 0x288, 0xe0, 0x0, 0x0, 0xe0, 0xe0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, &(0x7f0000000d80), {[{{@uncond, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xb}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}, {{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x2a0, 0x8, 0x0, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x4, 0xfffffff9, 0x0, 'netbios-ns\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8)
[ 389.361538] audit: type=1804 audit(1571591728.502:154): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
17:15:28 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x5, &(0x7f0000000380))
r2 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10003, 0x80011, r2, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2)
r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x5caad999, 0x200000000000000, 0x0, 0x362)
17:15:28 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/duv/usbmon#\x00', 0x1ff, 0x101000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x203, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f0000000140)={&(0x7f0000000040), &(0x7f00000000c0)=""/66, 0x42})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000))
17:15:28 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x40c2, 0x0)
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x84800, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x8000, 0x3, 0xf2}, &(0x7f0000000080)=0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @broadcast}}}, 0x84)
write$9p(r0, &(0x7f0000000800)="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", 0x600)
sendfile(r0, r1, 0x0, 0x10000)
[ 389.544729] audit: type=1804 audit(1571591728.502:155): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
[ 389.713176] audit: type=1804 audit(1571591728.582:156): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
[ 389.825504] audit: type=1804 audit(1571591728.712:157): pid=13680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
[ 389.913260] audit: type=1804 audit(1571591728.712:158): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
[ 389.940792] audit: type=1804 audit(1571591728.712:159): pid=13584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
[ 389.968202] audit: type=1804 audit(1571591728.722:160): pid=13787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/128/bus" dev="sda1" ino=16985 res=1
[ 390.007007] audit: type=1804 audit(1571591728.722:161): pid=13675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/140/file0" dev="sda1" ino=16984 res=1
[ 391.104476] Bluetooth: hci0: command 0x1003 tx timeout
[ 391.112044] Bluetooth: hci0: sending frame failed (-49)
[ 393.183601] Bluetooth: hci0: command 0x1001 tx timeout
[ 393.189704] Bluetooth: hci0: sending frame failed (-49)
[ 395.263436] Bluetooth: hci0: command 0x1009 tx timeout
17:15:38 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:15:38 executing program 4:
syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
fanotify_mark(r4, 0xc4, 0x1000, r5, &(0x7f0000000140)='./file0\x00')
17:15:38 executing program 1:
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100))
ptrace(0x10, r0)
ptrace$cont(0xffffffffffffffff, r0, 0x0, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x300, 0x0)
accept4$nfc_llcp(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x80800)
17:15:38 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x6a0920, 0x0)
write$P9_RLERRORu(r1, &(0x7f0000000080)={0x1a, 0x7, 0x2, {{0xd, '/dev/usbmon#\x00'}, 0x8}}, 0x1a)
17:15:38 executing program 3:
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000001640)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x20044800}], 0x1, 0x20000020)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2)
read$FUSE(r0, &(0x7f0000000540), 0x1000)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={<r4=>0x0, 0x6}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={r4, 0x200, 0x2, 0x6}, &(0x7f00000000c0)=0x10)
syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x1, 0x2)
17:15:38 executing program 0:
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
syz_emit_ethernet(0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaae0090002000091002c0081004300b2968cddcd0e7350f69e3ef3b68e81847689f516f405c48cd704243acf1126bc5d7f61a640f145239356d6e62948698df504509d40fecf93030df5f6c376104ee29caa01a488df5d42753c3e8e019b363b60023be33320f83e6367232f1eb53d14a850405d54d8441abcd55a2409e08447b5c13159e844b1f302acd55d2973ae8bd87cce2a220610449c1e1e5c69e1b567307cae7173f444a572d895e9309f8b46437c563d02a6ca2b808937b26b7a34eb849e4e28528030f1789a8bff71a403ef0c2f208d3f305fd8b2bc54edd43b0dac8b3761c8521c2b66dab80ba6673ce70638a6"], 0x0)
r0 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000080)={r0, 0x8, 0x1f}, &(0x7f00000000c0)={'enc=', 'pkcs1', ' hash=', {'sha1-avx\x00'}}, &(0x7f0000000140)="a0319b6388d56388", &(0x7f0000000200)="e596c554f4892a092bf99d0a581b921865dd0195965023943fa4d004d2b9a3")
r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x101000)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f00000001c0)={0x0, 0x5eb}, 0x8)
17:15:38 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x1)
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, 0x0)
syz_open_dev$midi(0x0, 0x0, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r4 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x101800)
r5 = fcntl$dupfd(r0, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
mknodat(r5, &(0x7f0000000000)='./file0\x00', 0x2, 0x8f)
[ 399.461902] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
17:15:38 executing program 0:
creat(&(0x7f0000000000)='./bus\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, 0x0)
close(r0)
socket$netlink(0x10, 0x3, 0xa)
r1 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
r2 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r2, 0x208200)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x60c0040)
sendfile(r0, r1, 0x0, 0x8000fffffffe)
17:15:38 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7f, 0x50800)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x85413)
pread64(r0, 0x0, 0x0, 0x0)
[ 399.544102] vivid-007: kernel_thread() failed
[ 399.638027] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
17:15:39 executing program 4:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
fcntl$dupfd(r0, 0x0, r2)
r3 = dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000))
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0xfffffffffffffffd)
[ 399.743154] kauditd_printk_skb: 6 callbacks suppressed
[ 399.743169] audit: type=1400 audit(1571591739.032:168): avc: denied { create } for pid=14043 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
17:15:39 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000700)={&(0x7f0000ffc000/0x4000)=nil, 0x1e7d, 0x0, 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x6})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
r7 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r7, r6, 0x0)
r8 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video35\x00', 0x2, 0x0)
ioctl$VIDIOC_S_TUNER(r8, 0x4054561e, &(0x7f0000000680)={0x800, "aaa7f75fe746ecb60506ba2ce3c73aa5746b3b3718bfca3dc68bfd2fc513517b", 0x4, 0x4, 0x1, 0x9, 0x4, 0x3, 0x4, 0x400})
getresgid(&(0x7f0000000100)=<r9=>0x0, &(0x7f0000000140), &(0x7f0000000180))
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000740)=0xe8)
lstat(&(0x7f0000000300)='\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, <r12=>0x0})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0xf047d4d64e0e1bf9, &(0x7f0000000480)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize'}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x1ff}}, {@max_read={'max_read'}}], [{@fowner_lt={'fowner<', r10}}, {@fowner_lt={'fowner<', r11}}, {@appraise_type='appraise_type=imasig'}, {@appraise='appraise'}, {@subj_role={'subj_role', 0x3d, '/dev/usbmon#\x00'}}, {@smackfshat={'smackfshat', 0x3d, '/dev/usbmon#\x00'}}, {@appraise_type='appraise_type=imasig'}, {@fowner_eq={'fowner', 0x3d, r12}}]}})
pread64(r0, 0x0, 0x0, 0x0)
[ 399.820764] audit: type=1804 audit(1571591739.122:169): pid=14045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/143/bus" dev="sda1" ino=16722 res=1
17:15:39 executing program 1:
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
utime(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x9, 0x2})
getdents(r0, &(0x7f0000000340)=""/184, 0xb8)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x800, 0xf130, 0x5})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
faccessat(r1, &(0x7f0000000640)='./file0\x00', 0x8, 0x65fa70fd4f4c67e1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/dlm-control\x00', 0x400, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x1, &(0x7f0000000100)=ANY=[@ANYRES64], &(0x7f00000005c0)='\xba\x80\x00\x00aller\x00\xb0\xf4\xfa\xb4M\xc1f\xeb\x15\xafPV\xfd\x89\xdd\xb8\xf6\xbf\xc8\xba\x1a2\x99x\x1a\x88\xae\xec\xfe#\xd0.}\xcbI\x13\x86T.\xe6\x98\x8d\x94\xed\x8b\xbc\x16\xf8\x1d\r\xc8\xc6\xe3\xda\xbf1\x84\x1d4\xd9W\x90\xd7\xdc\xdd\xcd91\xb9f', 0x5, 0xc3, &(0x7f00000001c0)=""/195, 0x41100, 0x0, [], 0x0, 0x1, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xffffffff}, 0x5}, 0x70)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
accept$inet6(r9, &(0x7f0000000500)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000540)=0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
fcntl$dupfd(r11, 0x0, r10)
r12 = fcntl$dupfd(r6, 0x605, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000002c0)=@assoc_value={<r13=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r12, 0x84, 0x18, &(0x7f0000000400)={r13, 0xe0e}, &(0x7f0000000440)=0x8)
[ 400.033227] audit: type=1804 audit(1571591739.122:170): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/143/bus" dev="sda1" ino=16722 res=1
[ 400.212877] audit: type=1400 audit(1571591739.172:171): avc: denied { write } for pid=14043 comm="syz-executor.0" path="socket:[46444]" dev="sockfs" ino=46444 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1
[ 400.484006] audit: type=1804 audit(1571591739.792:172): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/143/bus" dev="sda1" ino=16722 res=1
[ 400.521032] audit: type=1804 audit(1571591739.792:173): pid=14050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/143/bus" dev="sda1" ino=16722 res=1
[ 400.554836] audit: type=1804 audit(1571591739.792:174): pid=14072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir281025553/syzkaller.zC7BJk/143/bus" dev="sda1" ino=16722 res=1
[ 401.583416] Bluetooth: hci0: command 0x1003 tx timeout
[ 401.588856] Bluetooth: hci0: sending frame failed (-49)
[ 403.663530] Bluetooth: hci0: command 0x1001 tx timeout
[ 403.668993] Bluetooth: hci0: sending frame failed (-49)
[ 405.743573] Bluetooth: hci0: command 0x1009 tx timeout
17:15:48 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:15:48 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$kcm(0x2b, 0x3, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008108040f80ecdb4cb92e0a480e180d000000e8bdc161120009000e000100400000ff0500050012042251e8359a9f6bae93afd0be591689d4b0391e6a5cf37bc6dd4f7b4fba4b5d371102d681ef7aadd72ea1838cd55191473816a98eeedfdb71f440fdfcfaea755f77bda4f8c5efe6a55103e6d99951f8e98d9714fbe8bc9bcfbcf4607ad2788a9a20bbb4c32eacc44f48c225f9ffdb182d95edbdaa505a12623327e6ffe0a12298406fdb080927d10aba8f", 0xb8}], 0x1}, 0x8000)
socket$kcm(0x29, 0x5, 0x0)
17:15:48 executing program 4:
r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
writev(r0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[]}}, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x7}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100), 0x4)
socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x38a)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x27)
sendto$inet(r2, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0x652b, 0xc, 0x0, 0x27)
socket$nl_generic(0x10, 0x3, 0x10)
pwrite64(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='l\x00\x02\x00\x02\x00\x057\xa5\xbc\x00\x00\x00\x00\x01\x00', 0x400800, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
17:15:48 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f00000002c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000300)="585ccbc4ed83b836c1a64749b66147f9cb451c91690000000042e3d75228897501f93191b076ac446ff0022b8753a1fa748c569f435fb3bae96efb748c4ec93c2db8eae321c7ccda650bd6a6129c2ee45cc9b3198a29e5c0cfc60000ce0637cef580b4ec24c53d86571ff5ff70e48884ca000018cea71fcf8a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff33c1e8e036e5031949762d009d308bd73f477252d0000000000004000"/192, 0xc0, r0)
r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000180)={'s\x99z', 0x1}, &(0x7f00000001c0)='\x00', 0x1, 0xfffffffffffffffd)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r6 = gettid()
tkill(r6, 0x1002000000013)
timer_create(0x6, &(0x7f00000003c0)={0x0, 0xb, 0x0, @tid=r6}, &(0x7f0000000540)=<r7=>0x0)
timer_gettime(r7, &(0x7f0000000640))
keyctl$chown(0x4, r5, r4, 0x0)
r8 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r5)
r9 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r10=>0x0}, &(0x7f0000cab000)=0xc)
r11 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r11, r10, 0x0)
keyctl$search(0xa, r8, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r11)
add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000800)="9a0a3eae19b24bc5aae6064981de6293187c6bebc09c455fb55cbad07f08ce0caa53c471d22ce24c8f1b4583b54b9d9088a864009a16cff7fbec9c6bac254a79dc7c688a174572c041465fdb4775124cce9bcb1367a9bc7f33f43f3e5a882e173e81f2d68fd7b419925634946e4eb1bc57647448550a5fa22c7e40919fc1b7981a962430e0a80bc21e7d29fa7894d6f08879053c99e4d38192f66e57ecfdd91d0978a4dbefd9d19f341483a1082ce5d63bd1817a1366b611854142bebdaba8d9b3", 0xc1, r8)
syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0)
sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0)
r12 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd)
r13 = add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600)='\b', 0x1, r12)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r1, r13}, &(0x7f0000000700)=""/243, 0xf3, &(0x7f0000000400)={&(0x7f0000000580)={'sm3\x00'}})
syz_open_dev$loop(&(0x7f0000000500)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x1263, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r14 = socket$inet6(0xa, 0x4, 0x7f)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r14, 0x6, 0x1d, &(0x7f0000000940)={0x7f, 0x6, 0x7, 0x0, 0x81}, 0x14)
syz_open_dev$cec(0x0, 0x2, 0x2)
17:15:48 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
perf_event_open(&(0x7f000001d000)={0x1, 0x3e, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r2, 0x0)
r3 = memfd_create(&(0x7f0000000100)='lotrusted\x1a\x00', 0x0)
r4 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x1)
r5 = dup2(r4, r3)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f00000001c0)={0xf48b, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76)
r6 = accept$inet6(0xffffffffffffffff, 0x0, 0x0)
fsetxattr$security_smack_transmute(r6, &(0x7f0000000340)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000380)='TRUE', 0x4, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000008ec0)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008640), 0x0, &(0x7f0000008680)=""/6, 0x6}}], 0x4, 0x0, &(0x7f0000009140))
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000140)={0x4, 0x7})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x1ff, 'queue0\x00'})
socket$inet_udplite(0x2, 0x2, 0x88)
stat(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180))
r7 = socket$inet(0x2, 0x0, 0x0)
setsockopt$sock_int(r7, 0x1, 0x2f, &(0x7f0000000180), 0xf0)
ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000400)={0x3c, 0xf, 0x6, 0x15, 0x0, 0x5, 0x4, 0x29})
bind$inet(r7, 0x0, 0x0)
sendto$inet(r7, 0x0, 0x0, 0x20000802, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
17:15:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x42000)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x508400, 0x0)
bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0x0, 0x0, 0x8, 0x2, 0x3, 0x13}}, 0xa)
connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, {0x0, 0x7f, 0x5, 0x4, 0x0, 0x1}, 0x81}, 0xa)
pread64(r0, 0x0, 0x0, 0x0)
ioctl$UI_SET_SWBIT(r1, 0x4004556d, 0x1)
17:15:49 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$vhci(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="0285fdf1f90840e2cdd08f74109d7bfb8d8012073cc11e71a315631a675b70870fb398b47b34becdfc0d6f015f9ef72b632d797d9b06ea3b1d5b7bff4f73699d97190d7ab237adf85fa8ce92b9e08e68c6a7957631bbf90e5508d24e15d177442a0c77a0ae48194cedd564d3f2ceff355148d5dd9ab411deba6506d07b10d4c5dbe14e23ea6e46a6e3cb604370af3520ce99ab2b02e636110c851ed0e24d500f0c7cd00e710f2087ee299a204180ac353ee60c713caef2e1944ff5f2785dc5964fe12c0e6ccbd9a7feec411a2da930ef2d1f6174f1b0b39a58277a917a115cd00cd6839d03bc7a"], 0xe0)
17:15:49 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
r2 = syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x8, 0x4400)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000100)={0x3f2d28cb50468d05, 0x0, 0x0, 0x2, {0x7f, 0xfffffffa, 0x9e, 0xfffffff8}})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x800006, 0x0, 0x0, 0x9750}]}, 0x10)
sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = dup3(r3, r4, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000002400077b1d2188fb3646f005000000e8ffffffffffffff00", @ANYRES32=r12, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r12, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000200)={'vcan0\x00', <r14=>r12})
sendmsg$can_raw(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r14}, 0x10, &(0x7f00000002c0)={&(0x7f0000000280)=@can={{0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "5e7f5da9f32fcb33"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
r15 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(r15, 0x8010550e, &(0x7f0000000440)={0x7, &(0x7f00000003c0)="01237c490c6eb5a6cab5f9fb5d0f9abe40d159c9bef6492133e2500a78ca465c4d2ab845e2d4d6dff34a4bb735646752a84ffbd7ca230d8c977a72fc546eb344c81a50"})
openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x208002, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
r18 = fcntl$dupfd(r17, 0x0, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200)
17:15:49 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mq_notify(r2, &(0x7f0000000080)={0x0, 0x1a, 0x1, @thr={&(0x7f00000001c0)="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", &(0x7f0000000000)="15fb1f7c3d5fad4f7731cfcff95e39c37199ae32d8fa4c90d2f8f227eb3c00c170d0a38f18b7f324bf81700070ee6313b15c2af349142b3f04f155b5fb7818de704af1c27c57746119533932d2c3646f2367a41d3dcc8426d775c2beddb0a4a8345dd2ae1a0c373f43410a"}})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x18, 0x0, @mcast1}, 0x1c)
prctl$PR_GET_FP_MODE(0x2e)
17:15:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = accept(0xffffffffffffffff, &(0x7f0000001300)=@xdp, &(0x7f0000001380)=0x80)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001240)='/proc/capi/capi20\x00', 0x304800, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000001280)='/dev/urandom\x00', 0x480, 0x0)
r3 = fcntl$dupfd(r2, 0xa0f, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_GET_SPEED(r3, 0x551f)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ff747f4e32f61bd7949ca2fdd42fec3c5512cdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c", 0x58}], 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
r9 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x10001, 0xa0002)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x3)
r10 = fcntl$dupfd(r8, 0x9e807199a126a418, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
read$usbmon(r10, &(0x7f0000001440)=""/68, 0xffffffffffffffa3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0xffffffffffff7fff)
getsockopt$sock_linger(r11, 0x1, 0xd, &(0x7f0000001180), &(0x7f00000011c0)=0x8)
r16 = fcntl$dupfd(r12, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r16, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001200)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = fcntl$dupfd(r18, 0x0, r17)
ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0xffffffff)
ioctl$EVIOCGKEYCODE(r19, 0x80084504, &(0x7f0000000180)=""/4096)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r22=>0xffffffffffffffff, <r23=>0xffffffffffffffff})
r24 = fcntl$dupfd(r23, 0x0, r22)
ioctl$PERF_EVENT_IOC_ENABLE(r24, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r25=>0xffffffffffffffff, <r26=>0xffffffffffffffff})
fcntl$dupfd(r26, 0x0, r25)
[ 409.938674] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'.
17:15:49 executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0xffffffffffffffb1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x109000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x1f, 0x0, 0xfffffffffffffdb6)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c)
17:15:49 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@ldst={0x5}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80c00, 0x0)
ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000000c0)=""/49)
[ 411.743547] Bluetooth: hci0: command 0x1003 tx timeout
[ 411.750429] Bluetooth: hci0: sending frame failed (-49)
[ 413.823591] Bluetooth: hci0: command 0x1001 tx timeout
[ 413.829000] Bluetooth: hci0: sending frame failed (-49)
[ 415.903587] Bluetooth: hci0: command 0x1009 tx timeout
17:15:59 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:15:59 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = accept$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0), 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x8)
17:15:59 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x70)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sysinfo(&(0x7f0000000000)=""/50)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
r2 = dup3(r0, r1, 0x80000)
sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=@gettaction={0x1c, 0x32, 0x0, 0x70bd25, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004012}, 0x40008)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200), 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000180)={0x0, 0x7, 0x3f, "23b7901702c01e25072251d041de25dab446c593cbda511f588170b90dee6777db4fc05efe3e3a3cf1b0bfec075a5ad634f2284c957a9d99c6897840fb75af"}, 0x47)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00')
17:15:59 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x4182)
r1 = memfd_create(&(0x7f0000000240)='.^\x00', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24000058)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6(0xa, 0x100000000000001, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000019c0)={r8}, &(0x7f0000001a40)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$dupfd(r10, 0x0, r9)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={<r11=>r10})
sendmsg$inet_sctp(r11, &(0x7f0000000500)={&(0x7f0000000280)=@in={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)="56ecfe9f6489c983837f39b6615c2c39a8677f0d1aba9e66a980e07210e59b8728a0592f391f2b92b7c6b833bb51b39ee2921ab141344389375f740fcf91870596a01008386861afd26220ab8fd037739bc2b81c299a23a1ce84b1a43c52213f5d556022640a68308ae4caada7ad91109876af8a4584fe0a5f0ea3929ed1a1fe396df39c225f1377339cb58d851dad79f943f172e9e2010e493684cd76c62df0052bae3cbc9884703d245e192d699a987a5fced294fa91de2ad40a4bb4", 0xbd}, {&(0x7f0000000440)="9ec0fe34cd2275d74c5b5a10d72feadbbba8e319ba60cfc3861bbc75ca711dff3513f6fac92af8f29c1d6f1d3bcb43b3dc4eded7a06ce07b7cee98e79c5f058a17f39a01ed3bece1b97ad8b7978d6cff599213826dc8efe6f86377368e7d2b4d8606d1501d0045be81cc9e4ef9608d3850c596eadc96d61969723a9d03c6f55b5c0d60", 0x83}], 0x2, &(0x7f0000000300)=[@init={0x18, 0x84, 0x0, {0x6, 0x1f0d, 0x344, 0x2}}], 0x18, 0x2c001000}, 0x8000)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000000)={<r12=>0x0, 0x8001, 0x20, 0x104, 0x5}, &(0x7f0000000040)=0x18)
getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000080)={r8, 0x9, 0x5, 0x9, 0x200, 0xd464, 0x0, 0x4, {r12, @in6={{0xa, 0x4e23, 0xa622, @ipv4={[], [], @broadcast}, 0x60000000}}, 0x6, 0x200, 0x5, 0x2, 0x8}}, &(0x7f0000000180)=0xb0)
17:15:59 executing program 4:
bind$alg(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x1ff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0)
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000200)='./bus\x00', 0x828000, 0x0)
fchdir(r0)
socket$alg(0x26, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
uselib(0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r2=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
fcntl$setflags(r3, 0x2, 0x1)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}])
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000002800)='/dev/ashmem\x00', 0x0, 0x0)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
r5 = creat(0x0, 0x0)
fallocate(r5, 0x0, 0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x40000)
17:15:59 executing program 0:
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000540)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$FIBMAP(r2, 0x1, &(0x7f0000000040))
pipe(&(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
r7 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r8=>0x0}, &(0x7f0000cab000)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
r14 = fcntl$dupfd(r13, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r14, 0x40485404, &(0x7f00000005c0)={{0x3, 0x3, 0x7, 0x4c943ecb79171bb0, 0x7}, 0x3, 0x10000})
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r15 = accept4$inet(r11, &(0x7f0000000300)={0x2, 0x0, @empty}, &(0x7f0000000340)=0x10, 0x100800)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r15, 0x84, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
r16 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r16, r8, 0x0)
ioctl$KVM_REINJECT_CONTROL(r3, 0xae71, &(0x7f0000000500)={0x2})
mount$9p_xen(&(0x7f0000000080)='hash\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x220a002, &(0x7f0000000680)={'trans=xen,', {[{@nodevmap='nodevmap'}, {@posixacl='posixacl'}, {@cache_none='cache=none'}, {@version_L='version=9p2000.L'}, {@dfltuid={'dfltuid', 0x3d, r8}}, {@cache_none='cache=none'}, {@noextend='noextend'}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@appraise='appraise'}, {@smackfsroot={'smackfsroot', 0x3d, 'hash\x00'}}, {@subj_user={'subj_user', 0x3d, 'system[selinux\xe4lo(!cgroup\'\x00'}}, {@dont_appraise='dont_appraise'}]}})
mq_getsetattr(r3, &(0x7f0000000000)={0x9, 0xffff, 0x9, 0x10000, 0x20, 0xffffffff, 0x3113, 0x2}, &(0x7f0000000400))
write$binfmt_script(r4, &(0x7f0000000240)=ANY=[], 0xfffffe04)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, @perf_config_ext, 0x1024}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = fcntl$dupfd(r18, 0x0, r17)
ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200)
ioctl$SIOCGETNODEID(r19, 0x89e1, &(0x7f0000000580)={0xfffffffd})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r20=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r21=>0xffffffffffffffff, <r22=>0xffffffffffffffff})
r23 = fcntl$dupfd(r22, 0x0, r21)
ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r24=>0xffffffffffffffff, <r25=>0xffffffffffffffff})
fcntl$dupfd(r25, 0x0, r24)
fcntl$dupfd(r24, 0x0, r20)
ioctl$EXT4_IOC_GROUP_EXTEND(r13, 0x40086607, &(0x7f0000000240))
splice(r3, 0x0, r6, 0x0, 0x20000000003, 0x0)
[ 419.917451] audit: type=1804 audit(1571591759.222:175): pid=14325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir441577418/syzkaller.zdE0Ge/133/bus" dev="sda1" ino=16993 res=1
17:15:59 executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8b1a, &(0x7f0000000080)='wlan1\x00')
17:15:59 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/d\x00\x02\x00\x00\x00\x00\x00S\x81\xc2\xab', 0x4, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0xfffffe75, 0x4)
17:15:59 executing program 3:
r0 = socket$inet(0x2, 0x200000000003, 0x19)
sendmmsg$inet(r0, &(0x7f0000003080)=[{{&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001980)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ssrr={0x89, 0x3, 0x1f}]}}}], 0x18}}], 0x2, 0x0)
17:15:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000005b000/0x1000)=nil, 0x1000, 0x2, 0xa132, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, 0x1c)
recvmmsg(r0, &(0x7f0000003d40)=[{{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000600)=""/143, 0x8f}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/232, 0xe8}, {&(0x7f0000000100)=""/39, 0x27}, {&(0x7f0000004000)=""/162, 0xa2}], 0x6}, 0xf0000000}, {{0x0, 0x0, 0x0}}], 0x2, 0x2040, &(0x7f0000003f40)={0x0, 0x1c9c380})
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f0000000100), 0x5bd, 0x2400ffe0)
17:15:59 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:15:59 executing program 3:
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="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", 0xcfa}], 0x1}, 0x0)
[ 420.542692] audit: type=1400 audit(1571591759.802:176): avc: denied { map } for pid=14554 comm="syz-executor.4" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46706 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1
[ 422.063413] Bluetooth: hci0: command 0x1003 tx timeout
[ 422.068845] Bluetooth: hci0: sending frame failed (-49)
[ 424.143552] Bluetooth: hci0: command 0x1001 tx timeout
[ 424.148976] Bluetooth: hci0: sending frame failed (-49)
[ 426.223467] Bluetooth: hci0: command 0x1009 tx timeout
17:16:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:09 executing program 1:
creat(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f000005b000/0x1000)=nil, 0x1000, 0x2, 0xa132, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
sendmmsg(r0, &(0x7f0000000100), 0x5bd, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003d40)=[{{&(0x7f00000004c0)=@nfc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000540)=""/174, 0xae}, {0x0}, {&(0x7f00000007c0)=""/226, 0xe2}, {0x0}, {0x0}], 0x5}, 0xf0000000}, {{&(0x7f0000000bc0)=@ipx, 0x80, &(0x7f0000001200)=[{0x0}, {&(0x7f0000003f80)=""/105, 0x69}, {0x0}, {0x0}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}}], 0x3, 0x2040, &(0x7f0000003f40)={0x0, 0x1c9c380})
r1 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c)
sendmmsg(r1, &(0x7f0000000100), 0x5bd, 0x2400ffe0)
17:16:09 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:09 executing program 3:
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff)
r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0)
prctl$PR_SET_MM(0x23, 0x0, &(0x7f0000ffb000/0x3000)=nil)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0)
write$FUSE_DIRENT(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="005f6261b702d1ba0ed349a5e7173c90280512b077dc3c9b128082239376f10f66ec8be562806562bcb4877eade53580f45b06cf5fc0934f8d5415e6d0fba510c4a3b6213466fd85a65bb867d6677a8d5aac14263c5d8eb33977e428e495f7a45ff1cc96494af0a21feaa541e595d0c23a636a5ae16aa2ad817968e0a743d0c9ed7ae9aa3f08102c04c553ed14241006c276b4d84c2da05f56e099939dcca39fc8bd82cdb6ab14"], 0x1)
truncate(&(0x7f0000000240)='./file0\x00', 0x90002)
sendfile(r0, r1, 0x0, 0x7fffffff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000140)=0x8800, 0x8800000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
17:16:09 executing program 0:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205)
r5 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x133, 0x0, 0x0, 0xff7d)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f00000002c0)="650f0fa8a4000dbaa000b86340ef6465660febb600580f7885f2009a1d86d900660fc7b77b0026360fc76800baf80c66b8d4dcf98366efbafc0c66ed0f78cc0f09", 0x41}], 0x0, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x6a, 0x7a, 0x0, 0xffffff83)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
getresuid(&(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000240))
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
write$P9_RSTAT(r11, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x68)
bind$alg(r5, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(ghash-ce,kw(aes-generic))\x00'}, 0x58)
ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, &(0x7f0000000340))
ioctl$KVM_RUN(r8, 0xae80, 0x0)
17:16:09 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 430.120279] audit: type=1400 audit(1571591769.422:177): avc: denied { set_context_mgr } for pid=14676 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
17:16:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 430.160957] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 430.172410] binder: 14676:14680 ioctl 40046207 0 returned -1
17:16:09 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:09 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 430.338103] audit: type=1800 audit(1571591769.642:178): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=17003 res=0
[ 430.401299] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 430.424479] binder: 14697:14703 ioctl 40046207 0 returned -1
17:16:09 executing program 0:
perf_event_open(&(0x7f000001d000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000040), 0x1}, 0x0, 0x400000, 0x0, 0x5, 0xaf68}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
pwrite64(r2, &(0x7f0000000100)="f8594d564d2e670eaf832e483f594dd91dfc9b27d5c3a45340ad8a28d69cb7152171fdad6c63712c7014cad819fd72eeaefde8debe92ce60f9cf50c2e64a91677ab7ff779ca9056fc883372b8994fcda70be5f864ae2857c180ce4afc458e1c502ec3a9192c3f08be7c48afbfa780017abffb15e14d7b6982641bc83211a3d70fbb649c4e3eb5bcd755334ec60e7e090013552c1b9f13627705819356be7719a4e6169d360aa10d7f634994de398b88a2bd591a41f1827df8093ae5db403d0a2cb2adf81fc85b9ffb650b23fc7b9024ec04aa27bf740c0", 0xd7, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1}, 0x0)
sendmmsg(r3, &(0x7f0000000240)=[{{0x0, 0x2b9, &(0x7f0000002d40), 0xf9}}, {{0x0, 0x0, &(0x7f0000000180), 0x361, &(0x7f00000001c0)}}], 0x480, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x20, 0x0, 0x2, 0x3, 0x9, 0x9, 0xa1, 0x2}, 0xb)
17:16:09 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xe201d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x639)
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8b04, &(0x7f0000000600)='wlan1\x00\a\xd3~\xd4\xa2\xb8y\xe1\x04\xbe\x02\x00\x00\x00\x00\x00\x00\x00!\a\xff\x8d\x00\x00\xf6\xe7\xf9\x01\x06\x8c\xe2K\x04\xd9\xfd\xbd\x00\x1d})\xa0\xb1\xd2\xe4\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xff\xfd\xfd\x00\a\x00\x18\x9f \xfa\x91\x1b\x01U\xbe\x01\x01X\xbdh\xbfjOc\xcd\x15\xc1K\xab\xe9\xe3\xe8\x05\xda\xce\xed\xa5\xb8<\x9d\xd1\x19EI\x952\x12,\xec\x02:a\xad\xef,\xbc (\x02B-mF\xfa\x92\xdc\x13\x06\x1fk6=z\x8eni)\xb5i\x0f\xc7\v\x9d\x81\xb3r\xb1x\\\xdb\xcbzE\xfeO\xe7\xdf\x96\xa2\xf8EX\xe3\xbcf\x02\x98T\x1a\x1f\x16\xb9\b\xa2\xb0\a\x00vCh>\xa3\xd7\xc70\x92C5\x9d\x17\xd1\x96g\x8d\xd1\x06i\xde<\xf3\xd9\x93M/\x1eQ\xba\xe7[\xe3\x00\x00\x00\x00\x00\x00t\xeeKr\xb3\"\xa9\xef\xa2\xd8\x03_\xee=[o\xaa \x91d\xff9\xfa\r\xbe\x16%\xde\xa2o\xa9\\%\xc8\xfa\xd9t\xe5t\x99\xb9j\x16\xc4}-\xf6\xd3\x02\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\xd0\xab.\x13L8V\x1d\xa0\x02#\xb4\xea@\x1b\xd0{\x02iE\xb30\xe8\xdb[\xc8\xe5\xae\x98\xdc\xe4Tr\xb4w\xba\xa9\xfe\x0f\xdcFc\xd0\x9f\x82\x9d\xae\x9cy\xb3QOT\xdc\x86\x82Q\xe0\xab\xc1w\x03;-^(\x02=\xf39\xe9yT\xc4\xf0\xef\xe0X\b#\x9a\xcd\xe0\xf8q\x9a\xcd\xdeAF,\x04\"\x84\xa9O\x97\xf7\xfb\xa2N>\xcb\x9d\xc0\xcc\x13\x12\xcc@\x89\xf8F\x82OO\x990\xcei\xf2\xd1\x04\xde\xaa\xfa\xc0\xe9c\x81\x86\xc3j2m\xf6B\x19=h\x8fe\xc2\x13\x92?||\xbf\x10\x8f$\xdf^\xba\x04^\x13\r}\xd2n?3O\xb5\xa8\xfa\xfe\xe6\x92\xfd\x1c\xbc\x15\x81G\xbeC\xb2\x80\x87\x83\xb6\xf7wz\xcf\xa3c\xac\xe56\x8cg\x15\x9e\x96c')
gettid()
clone(0x13102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
poll(0x0, 0x0, 0x8000000000000200)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev+fuse\x00', 0x2, 0x0)
open$dir(&(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000000)=""/111)
[ 430.438455] audit: type=1800 audit(1571591769.702:179): pid=14679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed comm="syz-executor.3" name="file0" dev="sda1" ino=17003 res=0
17:16:09 executing program 5:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
17:16:09 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:09 executing program 3:
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
creat(&(0x7f0000000480)='./bus\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(0xffffffffffffffff, 0xc0a, 0xffffffffffffffff)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000001c0)={'vcan0\x00', 0x200})
r7 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in=@remote}}}, &(0x7f0000000440)=0xfffffffffffffd50)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180)={'team0\x00', r9})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0xffffffe9)
r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = fcntl$dupfd(r18, 0x0, r17)
ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200)
r20 = ioctl$KVM_CREATE_VCPU(r19, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r21=>0xffffffffffffffff, <r22=>0xffffffffffffffff})
r23 = fcntl$dupfd(r22, 0x0, r21)
ioctl$PERF_EVENT_IOC_ENABLE(r23, 0x8912, 0x400200)
getsockopt$inet_dccp_int(r23, 0x21, 0x92995ab393afc646, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000240)={0x0, 0x102000})
syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r20, &(0x7f0000000000/0x18000)=nil, 0x0, 0x73, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r20, 0xae80, 0x0)
ioctl$KVM_RUN(r20, 0xae80, 0x0)
r24 = open(&(0x7f0000000280)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002091, r24, 0x0)
17:16:09 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x82)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000580)={"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"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = dup3(r0, r1, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4040ae9e, &(0x7f0000000140)={{0xfe01000000000000}})
dup2(r3, r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
17:16:10 executing program 5:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
17:16:10 executing program 0:
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
lseek(r0, 0x800002, 0x0)
ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x0)
fallocate(r0, 0x3, 0x0, 0x8020003)
[ 430.636862] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 430.673910] binder: 14720:14724 ioctl 40046207 0 returned -1
[ 430.758079] audit: type=1804 audit(1571591770.062:180): pid=14722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir823794572/syzkaller.EDAWJl/85/bus" dev="sda1" ino=17012 res=1
17:16:10 executing program 5:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
17:16:10 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:10 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
statx(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
socket$alg(0x26, 0x5, 0x0)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
creat(0x0, 0x0)
creat(&(0x7f0000000180)='./file0\x00', 0xa3)
r2 = inotify_init()
syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000600)={0x80000000, "25324b7bc612b1b1f02e812075151a939ea6dfa345caff14bb6a92d6ae07e33d"})
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0)
add_key$user(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0x0)
syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x101, 0x8080)
inotify_add_watch(r2, &(0x7f0000000100)='./file0\x00', 0xfe)
inotify_init()
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
rmdir(&(0x7f0000000200)='./file0\x00')
17:16:10 executing program 3:
perf_event_open(&(0x7f00000004c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400c00, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000019c0)={r8}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r9=>r8, 0x88, &(0x7f0000000140)=[@in={0x2, 0x4e21, @local}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e24, 0x9, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7f}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in={0x2, 0x7, @multicast1}, @in6={0xa, 0x4e20, 0x8, @initdev={0xfe, 0x88, [], 0x1, 0x0}}]}, &(0x7f0000000280)=0x10)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000002c0)={r9, 0x59, "e9c075b1804ffadd9b906037a0894ce45c176e55935ce2a75ce21dbd2c8055559f699f689439be25b74557c8a54b1443a5cde4eb72edb7d6573e194854a71625259cf7c8fdc57d74c0446b90af13099ad2c51b23666be6d735"}, &(0x7f0000000340)=0x61)
r10 = dup2(r1, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaaaaaaaaaab31, &(0x7f0000000100)=[{&(0x7f00000000c0)="8000f1f63804000019000300e60100006c000000000000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x2c3, 0x400}], 0x1, 0x0)
17:16:10 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r8 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r9=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f00000019c0)={r9}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f0000000080)={<r10=>r9, 0x5a, "5a9702a10d78b389a5bb5f8f9c1b7c9502368bfff348a8e1cdec8a3e6010cea88346076da00b01430206185b6e475f1a00042fb5c31c50b2ff8c307d85534e86febaf0cf2a2f286d0bd4ff2eef91910748cf22aa1faf23fa111a"}, &(0x7f0000000000)=0x62)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000100)={r10, @in={{0x2, 0x4e22, @remote}}, 0x2708, 0x5}, 0x90)
pread64(r0, 0x0, 0x0, 0x0)
17:16:10 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 431.026937] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 431.077011] binder: 14849:14852 ioctl 40046207 0 returned -1
17:16:10 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:10 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001900)='/dev/vsock\x00', 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r4 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r5=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000019c0)={r5}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001940)={0xff00, 0x5, 0x2, 0x5, 0xec8, 0x40, 0x1, 0x80000000, r5}, &(0x7f0000001980)=0x20)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x74, 0x24, 0x507, 0x0, 0x0, {0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8, 0x1, 'sfq\x00'}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x1000000}}}}]}, 0x74}}, 0x0)
17:16:10 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r8=>0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000019c0)={r8}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000000)={r8}, &(0x7f0000000040)=0x8)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$KVM_NMI(r2, 0xae9a)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
[ 431.293087] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 431.326686] binder: 14864:14871 ioctl 40046207 0 returned -1
17:16:10 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:10 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:10 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r2, r1, 0x0)
ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @null, r1})
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="fb91d07d9ab7ad960159e815a8379cd82417b71ab54025a4bbe0de46df03bdebbf5483bbaf4ef33d1f7dd404495c136ef23fe87c77630ccc7b20047f405e335a2266d737eb832f2197c2eaf07e03", 0x4e, r2)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
getitimer(0x3, &(0x7f0000000080))
17:16:10 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x805}, 0x20}}, 0x0)
[ 431.531990] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 431.588791] binder: 14887:14889 ioctl 40046207 0 returned -1
17:16:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 431.814459] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 431.845112] binder: 14903:14904 ioctl 40046207 0 returned -1
17:16:11 executing program 1:
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000240)={'syz1\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1]}, 0x45c)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000ffb000/0x2000)=nil)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x1, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000010000000100000001000000004000000040000080000000000000006d5ebe5a0000ffff53ef", 0x3a, 0x401}], 0x1, 0x0)
17:16:11 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:11 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x60, 0x2000)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x6dc)
r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x14400, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r3}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r1, &(0x7f0000000140)={0x12, 0x10, 0xfa00, {&(0x7f0000000100), r3}}, 0x18)
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\x01\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\xe4B\xcf\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef\xf2P\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f\xf4\x10\xdc\x89j\xbb\xb4\r\xe6\xb7\xad\xfai\xc7@\xd7%\x8dSQ\xc6\x9c\xf7|\a\xae\x8f\xd2\xa9/\xb7)u\x9f_ac\xdf is\xbb\x93\xdc\xcfs/\xd3\xbeN\x98%\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\xb4]X\xba(\xfa\xe4\xd6\x82b\xa4\xb8~\xb0\xd9\xaf\xf0[+\"b\x9e}\x93\xf1CZ\"W\x0eB\x9bOI\xc4}[\xcc\xbf\xa2\x0f\xa8\x0f\xec\xa3\x87( \x99\xb0?4\xb9wH\xcf\xe9\x18x\xb4\x96\xbbyG\x96P\x8e\n.\x12@\xb5\xce\xfa0\x15`\xf6n\xbd\x1b\xc4b\xa6%\x82\xd3~\x18Q\xee6\x1bH?h\x14F\xca\xeejX\xed\x9fi\xb5\xbc\xb8\xca\xa1\xb1Z\xc4\xf6U\xfd:\xa7m\xd4\xd8eFr0\xa9;s\x0f\xb1Pz\x81x\xa4\xbc\xb2\xf5e\xae\xac;7Y\xf2N\xcc\xb8\xdb\xe4\x89\x8c\v\x8d\x93y\xda\x8a\xedVv\xb2\x89\xe3\x84V)HP7\xfb\xa8\xb7&\x1b\xba\x8a\xe5F\x02\xc2\x0e\xde\xa1{\xff8B3\x1a\a\xf2\x04-\x18\xe8|@\x9e\xee\x1b\xa3b#l\xf8RO\xc2\x9c\x16\x81\xbf\x8d\xb7\"\xc0\xd7\x80\x84&\xe3\x92\t3\xd7\x85\xe1\a\xefM\xbb\xf0\xf8d6\xa4\x19\x00'/444, 0x2761, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000015c0)}, 0x0)
ioctl$PPPIOCGUNIT(r4, 0x80047456, &(0x7f00000001c0))
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0xc0185879, 0x20000002)
17:16:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:11 executing program 3:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
r0 = socket(0x200040000000015, 0x805, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
r7 = fcntl$dupfd(r1, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000080)=[{0x5375, 0x9, 0x40, 0x4}, {0x5, 0xff, 0x4, 0x3}, {0x2, 0x0, 0x3f, 0x1}]}, 0x10)
getsockopt(r0, 0x114, 0x2710, &(0x7f0000000040)=""/13, &(0x7f00000000c0)=0x100ea)
setxattr$trusted_overlay_origin(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000280)='trusted.overlay.origin\x00', &(0x7f0000000340)='y\x00', 0x53, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file0'}}]})
17:16:11 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:11 executing program 2:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x10000000005, 0x84)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @random="5fa60adba055", 'hsr0\x00'}}, 0x1e)
sendmmsg(r0, &(0x7f000000d180), 0x4000000000000eb, 0x0)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = gettid()
tkill(r5, 0x1002000000013)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={<r6=>r5, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000180)='/dev/usbmon#\x00', 0xffffffffffffffff}, 0x30)
sched_getattr(r6, &(0x7f0000000200)={0x30}, 0x30, 0x0)
ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000080)={0x4, &(0x7f0000000000)=[{0x2006, 0x0, 0x5, 0x2}, {0x8, 0x5, 0x81, 0x2}, {0x6f, 0x0, 0x2, 0x1}, {0x1, 0x40, 0x2}]})
pread64(r1, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f00000000c0)=<r9=>0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00')
openat$zero(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r12, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1481021}, 0xc, &(0x7f00000006c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d883fa03", @ANYRES16=r13, @ANYBLOB="000128bd7000ffdbdf250b000000280002000400040008000100ff0f00000800020000000000040004000400040004000400040004005400090008000200ffff0000080002000400000008000200fdffffff080001000300000008000100070000000800020001000000080001000900000008000100f3060000080001008000000008000100ffff0000f400010044000400200001000a004e2100000006ff01000000000000000000000000000107000000200002000a004e2200000003ff010000000000000000000000000001070000002c0004001400010002004e21ffffffff00000000000000001400020002004e22ffffffff0000000000000000100001007564703a73797a320000000038000400200001000a004e2200001000ff010000000000000000000000000001290000001400020002004e23ac14140c000000000000000038000400200001000a004e2200000000fe8000000000000000000000000000aa400000001400020002004e24e00000020000000000000000200007000c000400c1ffffffffffffff08000200000000000800010005000000ec00040014000700080001000e00000008000200ff03000024000700080004000200000008000400020000000800010017000000080002000600000014000700080004000700000008000300040000001400010062726f6164636173742d6c696e6b00000c00070008000400ffffff7f44000700080004000900000008000100160000000800020004000000080004000010000008000300000400000800030000100000080002008100000008000300810000001c0007000800020004000000080002000000010008000300010000001c00070008000300260f0000080001000f0000000800010001000000180005000c00020008000100180000000800010069620000000004003c00070008000300010000000800020000080000080004003f00000008000400060000000800020008000000080004000000000008000200ffffffff1400010062726f6164636173742d6c696e6b00000c00010073797a31000000008c0004000c00010073797a31000000001400010062726f6164636173742d6c696e6b00001400010062726f6164636173742d6c696e6b00000c00010073797a31000000001400010062726f6164636173742d6c696e6b00000c00010073797a30000000001c0007000800030001000100080001001d00000008000400060000000c00070008000400030000001c0002000400040004000400080001000104000008000200c2b600002800040024000700080001001f0000000800020004000000080004007f0000000800030049000000"], 0x3d8}}, 0x4000)
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f0000000100)=r9)
17:16:11 executing program 1:
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f00000002c0)={0x9, 0x0, 0x6, 0x37, 0x9, 0x5d, 0x8, 0x5, 0x4, 0x2, 0x8}, 0xb)
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0xb}, 0x3bf54cf}, @in6={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, [], 0x2a}, 0x7fffffff}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}, @in6={0xa, 0x4e23, 0x2, @local, 0x1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x21}, 0xfffffffb}, @in={0x2, 0x4e20, @empty}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e24, 0xa65, @local, 0x7}], 0xcc)
prctl$PR_GET_FP_MODE(0x2e)
getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@initdev, @in=@initdev}}, {{@in6}, 0x0, @in6=@loopback}}, &(0x7f0000000280)=0xe8)
r1 = socket$inet(0x2, 0x2000000000003, 0x2)
setsockopt$inet_int(r1, 0x1f00000000000000, 0x0, &(0x7f0000000440), 0xffffffffffffffb3)
r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000640))
r3 = syz_open_dev$video(0x0, 0x0, 0xc00)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000006c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000680)={<r7=>0xffffffffffffffff}, 0x113, 0x17}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000700)={0x6, 0x118, 0xfa00, {{0x7f, 0x2, "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", 0x2b, 0x3, 0x20, 0x40, 0x8, 0x6, 0x1f}, r7}}, 0x120)
ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000140))
r8 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x0)
r9 = socket$packet(0x11, 0x0, 0x300)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000480)=""/177, &(0x7f0000000000)=0xb1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
fcntl$dupfd(r11, 0x0, r10)
r12 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm_plock\x00', 0x280001, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
ioctl$FIDEDUPERANGE(r9, 0xc0189436, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000005000000000000000400000000000000", @ANYRES32=r3, @ANYBLOB="00000000020000000800"/28, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\a\x00'/28, @ANYRES32=r12, @ANYBLOB="000000000500"/28, @ANYRES32=r13, @ANYBLOB="000045f9494200000000000000001eef8b884b0794ba410000000000"])
setsockopt$inet6_MCAST_LEAVE_GROUP(r8, 0x29, 0x2d, &(0x7f0000000080)={0x80, {{0xa, 0x4e23, 0x10001, @rand_addr="c14888d594556d5ec5196cb6159e6d3b", 0x8000}}}, 0x88)
17:16:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:11 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x82)
write$P9_RWRITE(r0, &(0x7f0000000040)={0xb, 0x77, 0x1, 0x8}, 0xb)
17:16:11 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:11 executing program 3:
r0 = mq_open(&(0x7f0000001380)='eth0\x00', 0x42, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'})
r4 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl(r4, 0xffffffffffffffa9, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x10, 0xf000}, 0xc, &(0x7f0000000200)={&(0x7f0000001980)=ANY=[]}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff})
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x334, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001c00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="aa0000"], 0x42e}}, 0x0)
recvmsg(r6, &(0x7f00000000c0)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r8=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000001a00)=""/4088, 0xff8}], 0x0, &(0x7f0000001180)=""/140, 0x8c}, 0x12002)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r9=>0xffffffffffffffff})
r10 = socket$netlink(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r11=>0x0})
lsetxattr$security_smack_entry(&(0x7f00000014c0)='./file1\x00', &(0x7f0000001500)='security.SMACK64MMAP\x00', &(0x7f0000001540)='bridge_slave_0\x00', 0xf, 0x3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff})
r13 = socket$inet6_tcp(0xa, 0x1, 0x0)
r14 = dup2(r13, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS64(r14, 0x4c05, &(0x7f00000013c0))
sendmsg$nl_route(r10, &(0x7f0000000040)={&(0x7f0000000280)={0x10, 0xf000}, 0x334, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="000003000a000200aaaaaaaaaaaa0000"], 0x42e}}, 0x0)
r15 = dup2(r10, 0xffffffffffffffff)
ppoll(&(0x7f0000000100)=[{r1, 0x200}, {r3, 0x20}, {r0, 0x200}, {r8, 0x2}, {0xffffffffffffffff, 0xc0}, {r15, 0x4}], 0x6, &(0x7f0000001240)={0x77359400}, &(0x7f0000001280)={0x1}, 0x8)
r16 = socket$netlink(0x10, 0x3, 0x0)
r17 = socket(0x11, 0x803, 0x4)
sendmsg$NBD_CMD_DISCONNECT(r17, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r16, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x54, 0x10, 0x10, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, @ip6gretap={{0x10, 0x1, 'ip6gretap\x00'}, {0x20, 0x2, [@IFLA_GRE_LOCAL={0x14, 0x6, @local}, @gre_common_policy=[@IFLA_GRE_LINK={0x4}]]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
17:16:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x7)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:11 executing program 0:
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={<r2=>0x0, 0x19, "eca39d5c78b4163b44713d2e43b3988ce44da1688f9eaa7983"}, &(0x7f00000000c0)=0x21)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e23, 0x7f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xba}}}, 0x84)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
close(r3)
write$cgroup_int(r1, &(0x7f0000000000)=0x1ffc, 0xfdf6)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score_adj\x00')
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/video0\x00', 0x2, 0x0)
splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x8100003, 0x0)
17:16:11 executing program 1:
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f00000000c0)={0xe76, 0x768d, 0x0, 0x4, 0x3})
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x23bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$NBD_SET_SOCK(r0, 0xab00, r3)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb2)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x400c000, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp\x00')
r6 = dup(r4)
sendfile(r6, r5, 0x0, 0x523)
17:16:11 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 432.485985] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
17:16:11 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x406, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00')
r3 = syz_open_pts(0xffffffffffffffff, 0x100)
write$binfmt_script(r3, &(0x7f0000000200)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, 'ns/ipc\x00'}, {0x20, 'GPL\x00'}, {0x20, '#'}, {0x20, 'ns/ipc\x00'}, {0x20, 'ppp0}lomime_typeeth1!'}, {0x20, 'vmnet0self'}], 0xa, "5f25c5b6e3117a692e8ec98914f4dada77a67ff72d15d7cd64a395cf87942186cc90df5ae51ed311154b61969392a6d9454c5fd450e4490b714e7e97254701e9"}, 0x88)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000080)={'team0\x00', <r4=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@empty, @initdev={0xfe, 0x88, [], 0x0, 0x0}, @mcast2, 0xffff0001, 0x3878, 0x5, 0x0, 0x3000000, 0x200000, r4})
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1, 0x0)
creat(0x0, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=@routing={0x33, 0x2, 0x2, 0x5, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x18)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f00000002c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000})
ioctl$TCSETXW(0xffffffffffffffff, 0x5435, 0x0)
clock_gettime(0x0, &(0x7f00000003c0)={<r5=>0x0})
nanosleep(&(0x7f0000000400)={r5}, 0x0)
17:16:11 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
sched_setattr(0x0, &(0x7f0000000180)={0x30, 0x1, 0x0, 0x0, 0x0, 0x800, 0x7, 0x5b4}, 0x0)
fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x94}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x89a1, 0x0)
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00\x00\x86\x9e\x00\a\x8a\xc0\x06\x00#', 0x2efb})
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000000)={{}, 'syz0\x00\x00\x00\x00\x00\x80\xa017\b\xec\xd6#\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00q\xab\x94%\x00\x00\xff\xff\xff\xff\xff\xff\xff\xe7\x00'})
ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0)
syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000240), 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
[ 432.592251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
17:16:11 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
17:16:11 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:12 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = dup2(r2, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r4 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r4, 0x0, 0x0, 0x0)
17:16:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:12 executing program 1:
r0 = syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0285629, &(0x7f0000000300)={0x3, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}})
syz_extract_tcp_res(&(0x7f0000000040), 0x5, 0xb3)
17:16:12 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev8usbmon#\x00', 0xfffffffffffffffb, 0x800)
clone(0x101c200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:16:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:12 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={{'fd'}, 0x2c, {'rootmode'}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x119000})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0xfefd, 0x0, 0x0, 0xfffffffffffffffc)
syz_emit_ethernet(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x7c, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000d00)=0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r9, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000000c0)={r9, 0x1, 0x6, @remote}, 0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x817}, &(0x7f0000000080)=0x10)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
17:16:12 executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0x2, 0x0, 0x0, @rand_addr="ffd722dce20f92597102784bad12b4ec"}, {0x2, 0x0, 0xfffffffffffffffd, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0xf000000, 0xfd000000]}}, r9}}, 0x48)
write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000080), r9, 0x0, 0x1, 0x4}}, 0x20)
r10 = socket(0x10, 0x803, 0x0)
r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x0, 0x0)
ioctl(r11, 0x800000000000937e, &(0x7f0000000000)="01000000000000001801")
sendmsg$NBD_CMD_DISCONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r12}, [@IFLA_LINKINFO={0x14, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0x4}}}]}, 0x34}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000050700000000fcdbdf2500000000", @ANYRES32=r12, @ANYBLOB="40000400000053e708a289f8d92cd6e8031d56a3050000140012000c000100626f6e64000000fcfc19f9a80004000200"], 0x34}}, 0x0)
17:16:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:12 executing program 0:
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = getpgrp(0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x4000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r4, 0x40505331, &(0x7f0000000100)={{0x4, 0x3}, {0x20, 0x3}, 0x1, 0x4, 0x80})
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
pipe(0x0)
perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000b40)='/group.stat\x00<#\xfbW*\x1f\x02\x94\xe6\xf3x\xb4\x1a\xd5KM\x9d\x9a\x1fc\xf8xZ\xd1\x88\xa7\xe1\xc8\x88u\xe0[\x18\xa4\xcb:\x9c\xd1-\xce\xa4@\xd8\x99\xc2,e+:G\x1bJ\x7f\xa2\xf3\xfd\xf6\xe04\xd8\x04\xe5\xf0\xdfK\x1d\xeeH;\x15v$\xc5\x9c\x01\x00\xe8\x9ej5|\x00\x00\x00\xc7\xbal&\x1e\xab\ry\xab0\xe6\f<\xed_\xee\xe6\x1b\xc9\xb0\t\x81\xac\x03\xa8s+\x8di\xb7V\xde\x15\xd3,\xb4\xeb\xcfwz\x1b\xac\xf8\xff\xbd\xe4\xa2\x84\v\x17\xf4*\x14\x83\r\xe2>*\xd4{\xdcH\x1b_\xab&\x98\x1b\xd7\x9b\xe9\xd7A\xe2\xc4\xfc\x03\xc9^\xb8\xd4Z\xee\x98', 0x2761, 0x0)
write$cgroup_int(r5, &(0x7f0000000080), 0x297ef)
17:16:12 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dlm-control\x00', 0x200000, 0x0)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_inet_SIOCDARP(r4, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e21, @multicast1}, {0x306, @remote}, 0x40, {0x2, 0x4e24, @empty}, 'nlmon0\x00'})
ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000140)=0x1)
r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0)
recvfrom$llc(r5, &(0x7f0000000080)=""/39, 0x27, 0x20, &(0x7f00000000c0)={0x1a, 0x2, 0x8, 0x76, 0x20, 0x8, @local}, 0x10)
pread64(r0, 0x0, 0x0, 0x0)
17:16:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 433.569778] autofs4:pid:15418:validate_dev_ioctl: invalid path supplied for cmd(0x0000937e)
17:16:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
17:16:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 433.749695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
17:16:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
[ 433.836529] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 433.867874] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
17:16:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
17:16:13 executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"})
ioctl$sock_ifreq(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'tunl0\x00', @ifru_flags})
17:16:13 executing program 1:
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000080), 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'vat\x00\x00\x00\x00\x00\x00\x00\xa8\x03\x00'})
pipe(&(0x7f0000000240)={<r0=>0xffffffffffffffff})
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
write(r0, &(0x7f0000000200), 0x0)
read(r0, &(0x7f0000000480)=""/250, 0xfffffffffffffdec)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00')
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
munmap(&(0x7f000001d000/0x4000)=nil, 0x4000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x3d, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9047, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
r4 = creat(&(0x7f0000000380)='./file0\x00', 0x0)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000480)={0x0, 0x0, 0x7fffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
recvmmsg(r7, &(0x7f0000006a40)=[{{&(0x7f00000003c0)=@nfc, 0x80, &(0x7f00000029c0)=[{&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/211, 0xd3}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/203, 0xcb}, {&(0x7f0000002780)=""/205, 0xcd}, {&(0x7f0000002880)=""/181, 0xb5}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000340)=""/26, 0x1a}, {&(0x7f0000002940)=""/72, 0x48}], 0x9}, 0x8}, {{&(0x7f0000002a80)=@ll={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000004140)=[{&(0x7f0000002b00)=""/209, 0xd1}, {&(0x7f0000000440)=""/40, 0x28}, {&(0x7f0000002c00)=""/103, 0x67}, {&(0x7f0000002c80)=""/4096, 0x1000}, {&(0x7f0000003c80)=""/225, 0xe1}, {&(0x7f0000003d80)=""/187, 0xbb}, {&(0x7f0000003e40)=""/232, 0xe8}, {&(0x7f0000003f40)=""/250, 0xfa}, {&(0x7f0000004040)=""/146, 0x92}, {&(0x7f0000004100)=""/8, 0x8}], 0xa, &(0x7f0000004200)=""/58, 0x3a}, 0x55}, {{&(0x7f0000004240)=@l2, 0x80, &(0x7f00000042c0)}, 0x8000}, {{&(0x7f0000004300)=@ipx, 0x80, &(0x7f0000006780)=[{&(0x7f0000004380)=""/206, 0xce}, {&(0x7f0000004480)=""/87, 0x57}, {&(0x7f0000004500)=""/203, 0xcb}, {&(0x7f0000004600)=""/254, 0xfe}, {&(0x7f0000004700)=""/82, 0x52}, {&(0x7f0000004780)=""/4096, 0x1000}, {&(0x7f0000005780)=""/4096, 0x1000}], 0x7}, 0x8}, {{0x0, 0x0, &(0x7f0000006a00)=[{&(0x7f0000006800)=""/66, 0x42}, {&(0x7f0000006880)=""/91, 0x5b}, {&(0x7f0000006900)=""/130, 0x82}, {&(0x7f00000069c0)=""/21, 0x15}], 0x4}, 0x6}], 0x5, 0x40002101, 0x0)
bind$xdp(r3, &(0x7f0000006b80)={0x2c, 0x1, r8, 0x3d, r1}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$netlink(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
socketpair(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x8924, &(0x7f0000000000)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x5)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x2a1, &(0x7f0000000240)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, r13, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0x18, 0x2, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @dev={0xfe, 0x80, [], 0x24}}]}}}]}, 0x44}}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x1ed, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x20, 0x11, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x20}}, 0x0)
17:16:13 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x5, @rand_addr="d63db728d3b00f712ffa28b3e40df296", 0x7}}}, &(0x7f0000000140)=0x84)
r3 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000380)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0x227, 0xfffffffffffffffe)
r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000100)="01", 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r3, r3}, &(0x7f0000000480)=""/250, 0xfa, &(0x7f0000000580)={&(0x7f0000000080)={'wp256-generic\x00'}})
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
getsockname$packet(r10, &(0x7f0000000300)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14)
ioctl$HCIINQUIRY(r7, 0x800448f0, &(0x7f00000005c0)={r11, 0x5, 0x1, 0x2, 0x80, 0x1f, 0xff})
r12 = socket$rds(0x15, 0x5, 0x0)
ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r12, 0xc0845658, &(0x7f0000000080)={0x0, @bt={0x0, 0xc3c6, 0x0, 0x1, 0x4, 0x0, 0x0, 0x605, 0x7fff, 0x6, 0x8, 0x20, 0x6d, 0x412, 0x18, 0x5}})
17:16:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 434.182716] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 434.224885] binder: 15468:15473 ioctl 40046207 0 returned -1
[ 434.245381] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
[ 434.329116] netlink: 'syz-executor.1': attribute type 3 has an invalid length.
17:16:13 executing program 3:
socket$inet_sctp(0x2, 0x1, 0x84)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
prctl$PR_GET_NO_NEW_PRIVS(0x27)
fcntl$getflags(0xffffffffffffffff, 0x1)
write$selinux_create(r2, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX]], 0x5)
ioctl$TIOCGICOUNT(r2, 0x545d, 0x0)
17:16:13 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
17:16:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:13 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048600000000000ff0f000000000000009500000000000000"], &(0x7f0000000140)='vS\xfdIG|\x8aL[\xf2\'\x9c\xea\xb1\xc0\xb1\x19\x91\x9d/Q\xd9\xe3T\xce\xdax;\x02%\xc5\x1c\xd5GA\xad[(\xbblZ\x01\x1dF\x92#]%sj\xd0i\xc6C\x1f&\xe2\xc5\xa5z\x7f\xe1 \xfb\xc27\x03\x84\x8e\xef\x82-\xfc$$\xaf\v\xbd\x95\x1e\x0f\xbeVI\xec\r!\f\x86\xf5\xfb[Y\x1e\xd4\xdfc\xb1\xc8\xa2\xc1/5\xffr\x1f\x80@\xb8F\xea\xde\x93\xa1\xcb6\xee\xf2\xce\x95\xf2\xfdxR\x17F\xad\xc1~\xa2\x97=O^o\"\xbb\xa8\x9746', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xf3e86829e1b86752}, 0x48)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x2ebe8df4947ff85, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4, 0x5, 0x2, 0x6}}}, ["", "", "", "", ""]}, 0x30}}, 0x40)
17:16:13 executing program 1:
r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x1d)
fchdir(r1)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='\f7'], 0x2)
r2 = getpid()
ptrace(0xffffffffffffffff, 0x0)
ptrace$getregset(0x4205, r2, 0x2, 0x0)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x29, 0x37, 0x0, {0x0, 0x1, 0x1, r2, 0xb, '/dev/hwrng\x00'}}, 0x29)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8)
r4 = getgid()
lstat(&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fstat(r6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setgid(r7)
msgctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000340)={{0x241, r3, r4, r5, r7, 0x8}, 0x1, 0x101, 0x3, 0x2, 0x1, 0x7d7, r2, r2})
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
17:16:13 executing program 2:
keyctl$join(0x1, &(0x7f0000000000)={'syz', 0x1})
syz_open_dev$usbmon(&(0x7f0000000040), 0xfffffffffffffffa, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
[ 434.430387] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:16:13 executing program 0:
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x24040, 0x0)
fcntl$getown(r0, 0x9)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc)
rt_sigprocmask(0x0, &(0x7f0000a9a000)={0xfffffffffffffffe}, 0x0, 0x8)
setrlimit(0x1, &(0x7f0000011000))
r1 = creat(&(0x7f0000000040)='./file1\x00', 0x0)
ioctl$MON_IOCQ_RING_SIZE(0xffffffffffffffff, 0x9205)
fallocate(r1, 0x10, 0x0, 0x8000)
[ 434.478783] binder: 15579:15580 ioctl 40046207 0 returned -1
17:16:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:13 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$xfs(&(0x7f00000006c0), &(0x7f0000000700)='./file1\x00', 0x6, 0x0, &(0x7f0000000080), 0x0, 0x0)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
ftruncate(r0, 0x48280)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x377140be6b5ef4c7}])
r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-control\x00', 0x400801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000400)=0x10)
write$FUSE_NOTIFY_INVAL_ENTRY(r5, &(0x7f00000002c0)={0x28, 0x3, 0x0, {0x4, 0x7, 0x0, 'nodev)#'}}, 0x28)
io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x8, r2, &(0x7f0000000080)="837d84bd6722b3e084d7e0105c81f204c0703efd6fdf8a9af1372f752fd02df1cabba86fe05707e2c144fb9f5b48f2f7f83539b6a3704cc9a87ad5dddb9d674ea04087479e68a3b20af21521d951956ca541d312c657cacba81849b8a3", 0x5d, 0x8, 0x0, 0x1, r2}, &(0x7f0000000200))
r9 = gettid()
tkill(r9, 0x1002000000013)
perf_event_open(&(0x7f0000000340)={0x0, 0x70, 0x1, 0x9, 0x2, 0x20, 0x0, 0x0, 0x100, 0x6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81, 0x2, @perf_bp={&(0x7f0000000300), 0x1}, 0xb66724e0c9e3de42, 0x10001, 0xfffffffd, 0x3, 0x100000001, 0x400, 0x854c}, r9, 0x0, r2, 0x2)
r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_tables_names\x00')
connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x8000, {0xfa, 0x4, 0x4, 0x0, 0x3, 0x3}, 0x3ff, 0x80}, 0xe)
getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e)
17:16:14 executing program 1:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x4, 0x0)
mount(&(0x7f0000000040)=ANY=[@ANYBLOB="4f90cb69f37a3924adf3ccad56f6ef641bb12f1c"], &(0x7f00000002c0)='./file0\x00', 0x0, 0x5010, 0x0)
umount2(&(0x7f0000000180)='./file0\x00', 0x4)
r0 = dup(0xffffffffffffffff)
ioctl$KVM_NMI(r0, 0xae9a)
17:16:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000000))
[ 434.717040] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 434.750080] binder: 15708:15709 ioctl 40046207 0 returned -1
17:16:14 executing program 0:
r0 = gettid()
tkill(r0, 0x1002000000013)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0)
r1 = creat(0x0, 0x0)
r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000280)={0x4, 0x405ce61210a101b6, 0x1, 0x3, '\x00', 0x9319})
fallocate(r1, 0x0, 0x0, 0x2000002)
ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000300)="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")
openat$null(0xffffffffffffff9c, 0x0, 0x10000, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
fcntl$setown(r5, 0x8, r0)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r6 = accept(r3, 0x0, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00000000000000000000030000001400010080a7ec467d96060cd9e61bd464d59430"], 0xfffffd33}}, 0x8000051)
recvmsg(r6, &(0x7f000000b680)={0x0, 0x231, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}, {&(0x7f000000b500)=""/153, 0x7fffeffb}], 0x2}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
sendmsg$TIPC_NL_BEARER_ADD(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4082081}, 0xc, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="c8030000", @ANYRES16=0x0, @ANYBLOB="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"], 0x3c8}, 0x1, 0x0, 0x0, 0x8000080}, 0x40000)
17:16:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 434.911746] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 434.930778] binder: 15743:15750 ioctl 40046207 0 returned -1
[ 436.553635] Bluetooth: hci0: command 0x1003 tx timeout
[ 436.559169] Bluetooth: hci0: sending frame failed (-49)
[ 438.623577] Bluetooth: hci0: command 0x1001 tx timeout
[ 438.629132] Bluetooth: hci0: sending frame failed (-49)
[ 440.703506] Bluetooth: hci0: command 0x1009 tx timeout
17:16:24 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
17:16:24 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x200000000011, r1, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
getpeername(r3, &(0x7f0000000140)=@caif=@dgm, &(0x7f0000000000)=0x80)
mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000280)=0x20, 0x52, 0x7)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
perf_event_open(&(0x7f0000000300)={0x5, 0x70, 0x0, 0x1, 0x8, 0x0, 0x0, 0x9, 0x1, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40, 0x3, @perf_config_ext={0x2, 0x6d0}, 0x20800, 0x0, 0xfffffffb, 0x2, 0x7, 0x4, 0x200}, 0xffffffffffffffff, 0x10, r1, 0x0)
bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r5, 0x0, 0xfea2, 0x20000802, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f00000002c0))
sendto$inet(r5, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xffffffd8)
ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f00000001c0)=""/147)
17:16:24 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
tkill(r1, 0x1002000000013)
capget(&(0x7f0000000000)={0x40013548, r1}, &(0x7f0000000080)={0xfff, 0x7, 0x3, 0x4, 0x2, 0x1000})
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f00000000c0)=0x101, 0x4)
17:16:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:24 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
syz_open_dev$vcsa(0x0, 0x97e, 0x0)
mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@remote, @initdev}, &(0x7f0000000100)=0xc)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth0\x00'})
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000040)={0x4, 0xb})
r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x204043, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaa6560d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000280)=0x1c)
r3 = open(0x0, 0x0, 0x0)
r4 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x839}, 0x8)
ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f00000002c0)={0x86})
setuid(0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x20000, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, 0x0, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240), 0x0)
r6 = semget(0x3, 0x2, 0xc10571773c8e9fe8)
semctl$SETVAL(r6, 0x0, 0x10, 0x0)
semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000380)=[0xb])
ftruncate(r4, 0x200004)
sendfile(r0, r4, 0x0, 0x80001d00c0d0)
17:16:24 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x1, 0x1}, 0xc)
sendmmsg$alg(r0, &(0x7f00000000c0)=[{0x0, 0xff00, 0x0, 0x0, &(0x7f0000002780)=[@op={0x18, 0x29}], 0x18}], 0x146, 0x0)
[ 444.846914] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 444.882559] binder: 15833:15842 ioctl 40046207 0 returned -1
[ 444.910900] Bluetooth: hci0: Frame reassembly failed (-84)
17:16:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:24 executing program 0:
socket$key(0xf, 0x3, 0x2)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
read(0xffffffffffffffff, 0x0, 0x6c00)
sysinfo(&(0x7f0000000040)=""/22)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x0)
r0 = socket$inet(0x10, 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$sock_ifreq(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00\x14\xea:\x01\x00\x00\x01', @ifru_flags=0xc})
add_key$user(0x0, &(0x7f00000000c0)={'\x00', 0x1}, &(0x7f00000004c0)="8f5f7f3e641488dc224a1d208331e99b047073ca10ee61187f5fcaa0245f2aaa7af684ec80b472e2298ad8811e43e2f6eb60ea09269429aabadd351dbd38ee860954a71c5eb8d267513392423c42efbf76650d034c35ee1ac4bbe72d", 0x5c, 0xfffffffffffffffd)
r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, &(0x7f00000047c0))
getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)={'security\x00'}, &(0x7f0000000400)=0x54)
socket$netlink(0x10, 0x3, 0x8000000004)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000))
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @local}, 0x0)
bind$packet(r2, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r2}, 0x10)
add_key(&(0x7f0000000480)='pkcs7_test\x00', 0x0, &(0x7f0000000500), 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_PKEY_ENCRYPT(0x19, 0x0, 0x0, 0x0, 0x0)
setuid(0x0)
r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
read(r3, 0x0, 0x0)
[ 445.071853] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 445.093578] binder: 15849:15850 ioctl 40046207 0 returned -1
17:16:24 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
17:16:24 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000006b0300000060060000000000000001ef", @ANYRES32=0x0, @ANYBLOB="00000000003f000008001a000400020008001b0000000000"], 0x30}}, 0x0)
17:16:24 executing program 3:
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f00000000c0)={0x0, 0x1, [{0x1, 0x1}]})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f00000001c0)={<r5=>0x0, @in6={{0xa, 0x4e22, 0xc84, @mcast1, 0x2}}, 0x0, 0x1}, &(0x7f0000000040)=0x90)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000080)={0x81, 0x81, 0xfe0333f0611eb5d2, 0x2, 0xfffffffd, 0x739e27e7, 0x2, 0x0, r5}, &(0x7f0000000100)=0x20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
pipe2(&(0x7f0000000340)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x8c000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
bind$rose(r12, &(0x7f0000000480)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40)
r13 = gettid()
tkill(r13, 0x1002000000013)
lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
ioctl$DRM_IOCTL_GET_CLIENT(r9, 0xc0286405, &(0x7f0000000440)={0x0, 0x4, r13, 0x0, r14, 0x0, 0x2, 0xa36})
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r15 = dup(r8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
r18 = fcntl$dupfd(r17, 0x0, r16)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200)
setsockopt$RDS_RECVERR(r18, 0x114, 0x5, &(0x7f00000004c0)=0x1, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r15, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000280)="baf80c66b8c478b88c66efbafc0cedddcf2e660f751f360fc7240f01ca0f749400000f01dfb867000f00d0f2ab0f01c2", 0x30}], 0x1, 0xc, &(0x7f0000000300)=[@cstype0={0x4, 0x2}, @cstype3={0x5, 0xa}], 0x2)
[ 445.402806] selinux_nlmsg_perm: 69 callbacks suppressed
[ 445.402820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=875 sclass=netlink_route_socket pig=15861 comm=syz-executor.1
[ 445.423584] usb usb9: usbfs: process 15863 (syz-executor.3) did not claim interface 0 before use
17:16:24 executing program 1:
syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1005, 0x88101)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140))
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
getpid()
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000040)=<r4=>0x0)
tkill(r4, 0x9)
r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0)
creat(0x0, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r6 = inotify_init()
syz_open_dev$radio(0x0, 0x3, 0x2)
ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f0000000600)={0x80000000, "25324b7bc612b1b1f02e812075151a939ea6dfa345caff14bb6a92d6ae07e33d"})
getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000340)={{{@in=@broadcast, @in=@dev}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, 0x0)
inotify_add_watch(r6, &(0x7f0000000100)='./file0\x00', 0xfe)
inotify_init()
ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
write$tun(r9, &(0x7f0000000680)=ANY=[@ANYBLOB="41e100f80067000380169078ac1e010100000002440801e1000000908902940600008001441420c30000000600000100fffffe0100000006860a000001e70504e83d00000000000000000000000000000000000100004e2200004e210000000400000003000000000000000000000005000000010001000100000200000000080000000600000060000000010000000100000002000000e300000101000001c2000000800000085c00000007000000007fffffff00080000000000090000004000000401009d8e01000000050000000300000761000000000000f0f0000000010000000200000002000000020000007f00000000000000c0"], 0xf8)
rmdir(&(0x7f0000000200)='./file0\x00')
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="38d54c482a0013070000000000000000e000000200000000000000000000000000000000000000000000ffffac1414bb000000004e23000000000000000000008387b0001848f0e4a612309899ebbc368205915b3623cea6f694c8640c90efbed610a85ead051f81e40f5ca1e1082730e95f198edc726088377b29b22d8cb711bade7ba4e1ed99818d34885f300a4ffbd6", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="f0000000000000000000ffffffffffff000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000001bb8ea909c6100"/240], 0x138}}, 0x0)
ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000180))
[ 445.670729] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=42 sclass=netlink_xfrm_socket pig=15871 comm=syz-executor.1
[ 446.943524] Bluetooth: hci0: command 0x1003 tx timeout
[ 446.949168] Bluetooth: hci0: sending frame failed (-49)
[ 447.204439] device bridge_slave_1 left promiscuous mode
[ 447.209970] bridge0: port 2(bridge_slave_1) entered disabled state
[ 447.264574] device bridge_slave_0 left promiscuous mode
[ 447.270210] bridge0: port 1(bridge_slave_0) entered disabled state
[ 449.023437] Bluetooth: hci0: command 0x1001 tx timeout
[ 449.028852] Bluetooth: hci0: sending frame failed (-49)
[ 450.532195] bond1 (unregistering): Released all slaves
[ 450.576905] device hsr_slave_1 left promiscuous mode
[ 450.638609] device hsr_slave_0 left promiscuous mode
[ 450.712056] bond0 (unregistering): Releasing backup interface bond_slave_1
[ 450.768565] bond0 (unregistering): Releasing backup interface bond_slave_0
[ 450.852452] bond0 (unregistering): Released all slaves
[ 451.103562] Bluetooth: hci0: command 0x1009 tx timeout
17:16:34 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x0)
17:16:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
17:16:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000040), 0x40000000, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="deb86895c36e1c0e5b71a2478563b529", 0x10)
dup3(r1, r0, 0x0)
17:16:34 executing program 0:
perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000280)='cpuset.mem_exclusive\x00\xf64[M\b\xc5L\xb0\xe3zLBh\x1a\xe9\f=\x80\b\x8e\xef\x91\xad\xe2\xc3\x12k\xbb\x88\xecau\x90\xc1\xfb+\x1c\xbe\xab\x1d\xdd\xeaw=\xf7\xed\xca9\xd6\xeb\x92\x99w>\xd3$\xcf#`\xc9\x00\x9b\x9a}\xcfX\xe7\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0)
r2 = openat$cgroup_int(r0, &(0x7f00000000c0)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
sendfile(r1, r2, 0x0, 0x8000000000202)
17:16:34 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$setsig(r0, 0xa, 0x24)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
lseek(r9, 0x0, 0x2)
getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000180)={{{@in=@loopback, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
getsockopt$ax25_int(r13, 0x101, 0xc, &(0x7f00000000c0), &(0x7f0000000300)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000002c0)={'team0\x00', r10})
fcntl$dupfd(r4, 0x0, r3)
dup(r4)
r14 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r15=>0x0}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r14, 0x84, 0xa, &(0x7f0000000340)={0x6, 0xe44, 0x10004, 0x6e2, 0x323, 0x1, 0x4, 0x8, r15}, &(0x7f0000000100)=0xfffffffffffffe11)
17:16:34 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000240)={0xe, 0x9, 0x7f, 0x5, 0x31, "8738116a5dc48402bee28eaa365fb2c5d7dad84b3f8028ae89277210756d8f79751a15f34a5db1ad725b60104944d243bb"}, 0x3d)
r3 = socket$unix(0x1, 0x2, 0x0)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x101080, 0x0)
ioctl$VIDIOC_QUERYCTRL(r6, 0xc0445624, &(0x7f0000000400)={0x8000, 0x4, "2d537822833ae4ed0026ed38def77a9c3280200ef8ec0816545045d27cd0e347", 0x3, 0x5, 0x6, 0x0, 0x8})
fcntl$dupfd(r5, 0x0, r4)
connect(r4, &(0x7f0000000280)=@ax25={{0x3, @null}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @bcast]}, 0x80)
writev(r3, &(0x7f0000001380)=[{&(0x7f0000001100)="d2", 0x1}], 0x1)
recvmmsg(r3, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0)
r7 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2)
write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="2b6d202d6d656d6f727d20b2dbd3809705b8fb0ec3f64fa476e78e3027f8ede21fe644ce5c389ee91e9df63592e41a21f0778a9997d2007470b294c01ba0d2592a8d47faf8cf1915a52fa5f8cc3a38482a7665ecc3b6f4ab0fe95856e2008f698f66bff1a6017a034bd74826ffe901285e59761b47c0afa5edc3bd67829c1a2ed11dadc14331eea426627fe7eed5f864e1b422d8fcda9008570bf4e7310dd145c9089b1599746edd1110deb59e0aa029acea8b3ac513f86ce068949a4ece9cd79d1034f4b8e1379ff34cf8a4e7f519d2490c6e96378bc7f0188ba281e20a644b3dbc1c5fb136"], 0x10)
17:16:34 executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
[ 455.159710] Bluetooth: hci0: Frame reassembly failed (-84)
17:16:34 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
17:16:34 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000040), 0x40000000, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="deb86895c36e1c0e5b71a2478563b529", 0x10)
dup3(r1, r0, 0x0)
17:16:34 executing program 4:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:34 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x3d9, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x1)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write$input_event(r7, &(0x7f0000000080)={{0x0, 0x2710}, 0x1f, 0xffff, 0x7ff80000}, 0x18)
fcntl$dupfd(r4, 0x0, r3)
r8 = dup(r4)
write$P9_RUNLINKAT(r8, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x2, r2}]]}}}]}, 0x38}}, 0x0)
17:16:34 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000080)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80000000})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$isdn_base(0x22, 0x3, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
[ 457.183403] Bluetooth: hci0: command 0x1003 tx timeout
[ 457.188858] Bluetooth: hci0: sending frame failed (-49)
[ 459.263468] Bluetooth: hci0: command 0x1001 tx timeout
[ 459.268879] Bluetooth: hci0: sending frame failed (-49)
[ 461.343473] Bluetooth: hci0: command 0x1009 tx timeout
17:16:44 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000040), 0x40000000, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="deb86895c36e1c0e5b71a2478563b529", 0x10)
dup3(r1, r0, 0x0)
17:16:44 executing program 0:
syz_mount_image$reiserfs(&(0x7f0000000200)='reiserfs\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={[{@usrjquota_file='usrjquota=syz'}]})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000000)={{0x11, @empty, 0x4e24, 0x0, 'lc\x00', 0x2, 0x240000, 0x64}, {@broadcast, 0x4e20, 0x2000, 0x4, 0x20, 0x2}}, 0x44)
17:16:44 executing program 4:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:44 executing program 3:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)={0x1, [0x66]})
ioctl$TIOCNXCL(r3, 0x540d)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xe0042, 0x0)
ioctl$IMGETCOUNT(r4, 0x80044943, &(0x7f0000000100))
17:16:44 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@rc, &(0x7f0000000100)=0x80, 0x80000)
r5 = fcntl$dupfd(r4, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$EVIOCGBITSW(r5, 0x80404525, &(0x7f0000000000)=""/1)
17:16:44 executing program 5 (fault-call:2 fault-nth:0):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:44 executing program 4:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:44 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x1800, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x199, 0x600000000000000)
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x7, 0x0, 0x9, 0x2}, 0x10}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x81)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000380)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c)
sendmmsg(r1, &(0x7f0000007e00), 0x400000000000058, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00')
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, r5, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3ff}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x40040)
17:16:44 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000040), 0x40000000, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="deb86895c36e1c0e5b71a2478563b529", 0x10)
dup3(r1, r0, 0x0)
[ 465.404733] FAULT_INJECTION: forcing a failure.
[ 465.404733] name failslab, interval 1, probability 0, space 0, times 0
17:16:44 executing program 3:
pipe2(0x0, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x420800, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0)
fchdir(r0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="0c37711a00000000"], 0x200600)
r2 = getpid()
ptrace(0x4206, r2)
ptrace$getregset(0x4205, r2, 0x2, &(0x7f0000000000)={0x0})
write$P9_RGETLOCK(r1, &(0x7f0000000080)={0x29, 0x37, 0x1, {0x0, 0x1, 0x1, r2, 0xb, '/dev/hwrng\x00'}}, 0x29)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
pipe(0x0)
pipe(&(0x7f0000000280))
socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0)
umount2(&(0x7f0000000540)='./file0\x00', 0x0)
[ 465.474097] CPU: 0 PID: 16145 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 465.481081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 465.490458] Call Trace:
[ 465.493061] dump_stack+0x172/0x1f0
[ 465.496718] should_fail.cold+0xa/0x1b
[ 465.500643] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 465.505764] ? lock_downgrade+0x880/0x880
[ 465.509940] __should_failslab+0x121/0x190
[ 465.514188] should_failslab+0x9/0x14
[ 465.518006] kmem_cache_alloc_trace+0x2cc/0x760
[ 465.522698] hci_alloc_dev+0x43/0x1d00
[ 465.526614] hci_uart_tty_ioctl+0x2d7/0xaf0
[ 465.530952] tty_ioctl+0x8b5/0x1510
[ 465.534594] ? hci_uart_init_work+0x140/0x140
[ 465.539104] ? tty_vhangup+0x30/0x30
[ 465.542828] ? mark_held_locks+0x100/0x100
[ 465.547088] ? __fget+0x340/0x540
[ 465.550557] ? __might_sleep+0x95/0x190
[ 465.554544] ? tty_vhangup+0x30/0x30
[ 465.558272] do_vfs_ioctl+0xd5f/0x1380
[ 465.562172] ? selinux_file_ioctl+0x46f/0x5e0
[ 465.566678] ? selinux_file_ioctl+0x125/0x5e0
[ 465.571187] ? ioctl_preallocate+0x210/0x210
[ 465.575605] ? selinux_file_mprotect+0x620/0x620
[ 465.580385] ? iterate_fd+0x360/0x360
[ 465.584197] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 465.589765] ? fput+0x128/0x1a0
[ 465.593070] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 465.598621] ? security_file_ioctl+0x8d/0xc0
[ 465.603048] ksys_ioctl+0xab/0xd0
[ 465.606654] __x64_sys_ioctl+0x73/0xb0
[ 465.610661] do_syscall_64+0xfd/0x620
[ 465.614480] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 465.619674] RIP: 0033:0x459a59
[ 465.622874] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 465.641787] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 465.649666] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 465.656938] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
[ 465.657024] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
17:16:45 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
pread64(r0, 0x0, 0x3d3, 0x0)
syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x8, 0x80000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x73, @broadcast, 0x4e20, 0x1, 'ovf\x00', 0x4, 0x5, 0xb}, 0x2c)
[ 465.657036] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 465.678929] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
17:16:45 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
fcntl$getownex(r2, 0x10, &(0x7f0000000000)={0x0, <r4=>0x0})
wait4(r4, &(0x7f0000000040), 0x40000000, &(0x7f0000000080))
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000180)="deb86895c36e1c0e5b71a2478563b529", 0x10)
[ 465.791770] IPVS: set_ctl: invalid protocol: 115 255.255.255.255:20000
[ 465.805432] Bluetooth: Can't allocate HCI device
[ 465.896939] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 465.925034] binder: 16297:16332 ioctl 40046207 0 returned -1
17:16:45 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, &(0x7f0000000340)={0x0, "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"})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
accept(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000000)=0x80)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x6000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x124, r5, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK={0x34, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_BEARER={0x7c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, [], 0x18}, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @empty, 0x81}}}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xcc8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xefb}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4080}, 0x404405c)
pread64(r0, 0x0, 0x0, 0x0)
17:16:45 executing program 5 (fault-call:2 fault-nth:1):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:45 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, <r3=>0x0})
wait4(r3, &(0x7f0000000040), 0x40000000, &(0x7f0000000080))
17:16:45 executing program 3:
mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000040)=""/35)
recvmmsg(0xffffffffffffffff, &(0x7f000000bc00)=[{{0x0, 0x344, 0x0}}, {{0x0, 0x0, &(0x7f000000ba80)=[{0x0}, {&(0x7f000000b8c0)=""/100, 0x64}], 0x2}}], 0x2, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x0, @ipv4={[], [], @local}}, 0x1c)
sendmmsg(r0, &(0x7f0000000100), 0x5bd, 0x2400ffe0)
[ 466.182037] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 466.193498] binder: 16396:16400 ioctl 40046207 0 returned -1
[ 466.201184] FAULT_INJECTION: forcing a failure.
[ 466.201184] name failslab, interval 1, probability 0, space 0, times 0
[ 466.230196] CPU: 1 PID: 16402 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 466.237185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 466.246554] Call Trace:
[ 466.249164] dump_stack+0x172/0x1f0
[ 466.252827] should_fail.cold+0xa/0x1b
[ 466.256743] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 466.261864] ? lock_downgrade+0x880/0x880
[ 466.266038] __should_failslab+0x121/0x190
[ 466.270286] should_failslab+0x9/0x14
[ 466.274107] kmem_cache_alloc_trace+0x2cc/0x760
[ 466.278790] ? pm_runtime_init+0x347/0x400
[ 466.283045] ? device_initialize+0x1a1/0x440
[ 466.287474] bcsp_open+0x46/0x3b0
[ 466.290947] hci_uart_tty_ioctl+0x704/0xaf0
[ 466.295292] tty_ioctl+0x8b5/0x1510
[ 466.298937] ? hci_uart_init_work+0x140/0x140
[ 466.303450] ? tty_vhangup+0x30/0x30
[ 466.307177] ? mark_held_locks+0x100/0x100
[ 466.311438] ? __fget+0x340/0x540
[ 466.314914] ? __might_sleep+0x95/0x190
[ 466.318907] ? tty_vhangup+0x30/0x30
[ 466.322638] do_vfs_ioctl+0xd5f/0x1380
[ 466.326542] ? selinux_file_ioctl+0x46f/0x5e0
[ 466.331048] ? selinux_file_ioctl+0x125/0x5e0
[ 466.335564] ? ioctl_preallocate+0x210/0x210
[ 466.339988] ? selinux_file_mprotect+0x620/0x620
[ 466.344771] ? iterate_fd+0x360/0x360
[ 466.348588] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 466.354138] ? fput+0x128/0x1a0
[ 466.357436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 466.362988] ? security_file_ioctl+0x8d/0xc0
[ 466.367416] ksys_ioctl+0xab/0xd0
[ 466.370888] __x64_sys_ioctl+0x73/0xb0
[ 466.374788] do_syscall_64+0xfd/0x620
[ 466.378632] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 466.383825] RIP: 0033:0x459a59
[ 466.387027] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 466.405941] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 466.413676] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 466.420962] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
17:16:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
fcntl$getownex(r1, 0x10, &(0x7f0000000000))
[ 466.428247] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 466.435530] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 466.442803] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
17:16:45 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:45 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
17:16:45 executing program 3:
perf_event_open(&(0x7f0000000000)={0x1000000000000001, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1201c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xffffffffffffffff, 0x11, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0x10b, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x0, 0x0, 0xfffffffffffffed7)
r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x17d, 0x500080)
ioctl$TIOCCONS(r2, 0x541d)
17:16:45 executing program 5 (fault-call:2 fault-nth:2):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:45 executing program 0:
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
fcntl$setsig(r0, 0xa, 0x2a)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
syz_mount_image$iso9660(&(0x7f00000002c0)='iso9660\x00', &(0x7f0000000300)='./file0\x00', 0x20, 0x0, 0x0, 0x1262ab0f86215575, &(0x7f0000000040)=ANY=[@ANYRESHEX=r2, @ANYPTR64, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX=r0, @ANYRES64, @ANYPTR])
[ 466.662420] FAULT_INJECTION: forcing a failure.
[ 466.662420] name failslab, interval 1, probability 0, space 0, times 0
[ 466.674260] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 466.708712] CPU: 1 PID: 16443 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 466.711927] binder: 16438:16444 ioctl 40046207 0 returned -1
[ 466.715705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 466.715714] Call Trace:
[ 466.715741] dump_stack+0x172/0x1f0
[ 466.715773] should_fail.cold+0xa/0x1b
[ 466.715793] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 466.715811] ? lock_downgrade+0x880/0x880
[ 466.715835] __should_failslab+0x121/0x190
[ 466.731022] should_failslab+0x9/0x14
[ 466.737219] kmem_cache_alloc_trace+0x2cc/0x760
[ 466.737233] ? pm_runtime_init+0x347/0x400
[ 466.737252] ? device_initialize+0x1a1/0x440
[ 466.771802] bcsp_open+0x46/0x3b0
[ 466.775283] hci_uart_tty_ioctl+0x704/0xaf0
[ 466.779642] tty_ioctl+0x8b5/0x1510
[ 466.783294] ? hci_uart_init_work+0x140/0x140
[ 466.787811] ? tty_vhangup+0x30/0x30
[ 466.791538] ? mark_held_locks+0x100/0x100
[ 466.795791] ? __fget+0x340/0x540
[ 466.795815] ? __might_sleep+0x95/0x190
[ 466.795832] ? tty_vhangup+0x30/0x30
17:16:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
[ 466.795850] do_vfs_ioctl+0xd5f/0x1380
[ 466.810896] ? selinux_file_ioctl+0x46f/0x5e0
[ 466.815419] ? selinux_file_ioctl+0x125/0x5e0
[ 466.819955] ? ioctl_preallocate+0x210/0x210
[ 466.824389] ? selinux_file_mprotect+0x620/0x620
[ 466.829184] ? iterate_fd+0x360/0x360
[ 466.833008] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 466.838566] ? fput+0x128/0x1a0
[ 466.841871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 466.847419] ? security_file_ioctl+0x8d/0xc0
[ 466.851823] ksys_ioctl+0xab/0xd0
[ 466.855274] __x64_sys_ioctl+0x73/0xb0
[ 466.859197] do_syscall_64+0xfd/0x620
[ 466.862994] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 466.868172] RIP: 0033:0x459a59
[ 466.871350] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 466.890293] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 466.897994] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 466.905389] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
[ 466.912649] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 466.919909] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 466.927181] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
17:16:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
17:16:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:46 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x5, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000006110500000000000050000000000000095000000000042e9"], &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48)
17:16:46 executing program 5 (fault-call:2 fault-nth:3):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbm\xefn#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40040}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, 0x0, 0x5, 0x0, {0x14, 0x19, {0x4, 0xc97, 0x1c, 0x78}}}}, 0x30}}, 0x44048040)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$VIDIOC_G_MODULATOR(r1, 0xc0445636, &(0x7f00000001c0)={0xffffff02, "e5d87f6d586ed8f99db9960b54bfff4edabaca2054df4c5908f4721439bb30ba", 0x0, 0x0, 0x401, 0x1, 0x2})
r4 = fcntl$dupfd(r3, 0x0, r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000240)=0x1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCGISO7816(r4, 0x80285442, &(0x7f0000000180))
17:16:46 executing program 0:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400004, 0x0)
ioctl$UI_SET_PHYS(r5, 0x4008556c, &(0x7f00000000c0)='syz0\x00')
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="1000000000000000280012000c0001007665746800000000180002000000000000000000318c23a7fd1830b614814b1f27e10623878d79fc87e584e3cac5abfb8afba6c13c73bcfdb629835f9d6747d6a0910223adaf1a054d8f635190a8fc372ba9121d0f447cc1eea4f3769479bfdabd40fe5cdac8e45a", @ANYRES32=0x0, @ANYBLOB="00000000000011babb1f0000004fbf5065c97a70b34faae2c2a99259da846f0ba1e18701ed01d0f193430271ba6cb72a364ccb5a7b802d700cec58cd4ad98b8c23bcad589de2453d2e0943168dc53d627e6140400307e06b"], 0x48}}, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [], @dev}}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x7)
inotify_init1(0x180000)
write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0)
[ 467.078123] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 467.104706] FAULT_INJECTION: forcing a failure.
[ 467.104706] name failslab, interval 1, probability 0, space 0, times 0
[ 467.112439] binder: 16556:16564 ioctl 40046207 0 returned -1
17:16:46 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:16:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 467.149306] CPU: 1 PID: 16565 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 467.156310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 467.165677] Call Trace:
[ 467.168290] dump_stack+0x172/0x1f0
[ 467.171951] should_fail.cold+0xa/0x1b
[ 467.175866] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 467.180993] ? lock_downgrade+0x880/0x880
[ 467.185199] __should_failslab+0x121/0x190
[ 467.189450] should_failslab+0x9/0x14
[ 467.193262] kmem_cache_alloc_trace+0x2cc/0x760
[ 467.197946] ? __alloc_workqueue_key+0x139/0xee0
[ 467.202725] __alloc_workqueue_key+0x18e/0xee0
[ 467.207339] ? workqueue_sysfs_register+0x3e0/0x3e0
[ 467.212367] ? scnprintf+0x140/0x140
[ 467.216090] ? __lock_is_held+0xb6/0x140
[ 467.220180] hci_register_dev+0x1c6/0x880
[ 467.223755] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 467.224353] hci_uart_tty_ioctl+0x761/0xaf0
[ 467.224375] tty_ioctl+0x8b5/0x1510
[ 467.224393] ? hci_uart_init_work+0x140/0x140
[ 467.231916] binder: 16572:16573 ioctl 40046207 0 returned -1
[ 467.234857] ? tty_vhangup+0x30/0x30
[ 467.234872] ? mark_held_locks+0x100/0x100
[ 467.234900] ? __fget+0x340/0x540
[ 467.234923] ? __might_sleep+0x95/0x190
[ 467.264305] ? tty_vhangup+0x30/0x30
[ 467.268053] do_vfs_ioctl+0xd5f/0x1380
[ 467.271959] ? selinux_file_ioctl+0x46f/0x5e0
[ 467.276471] ? selinux_file_ioctl+0x125/0x5e0
[ 467.280988] ? ioctl_preallocate+0x210/0x210
[ 467.285514] ? selinux_file_mprotect+0x620/0x620
[ 467.290310] ? iterate_fd+0x360/0x360
[ 467.294134] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 467.294871] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 467.299685] ? fput+0x128/0x1a0
[ 467.299710] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 467.299724] ? security_file_ioctl+0x8d/0xc0
[ 467.299744] ksys_ioctl+0xab/0xd0
[ 467.311595] __x64_sys_ioctl+0x73/0xb0
[ 467.311616] do_syscall_64+0xfd/0x620
[ 467.311637] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 467.321566] RIP: 0033:0x459a59
[ 467.321583] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 467.321591] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 467.328955] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 467.328964] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
[ 467.328973] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 467.328983] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 467.328991] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
[ 467.407195] Bluetooth: Can't register HCI device
[ 467.439914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
17:16:46 executing program 3:
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd60d8652b00140600fe8000000000000000000000000000bbfe80000000000000000010000000009400000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0)
17:16:46 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:16:46 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x2)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:46 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:46 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VT_GETSTATE(r3, 0x5603, &(0x7f0000000400)={0x7, 0x9})
r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000440)="2fa77502dcff52d7cc0180fb88e9147427889fa7b2e164858d92ec1c52212adf7809e834ffd17d", 0x27)
execveat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)=[&(0x7f00000000c0)='ppp0wlan0\x00', &(0x7f0000000100)='md5sum\x00', &(0x7f0000000140)='/dev/usbmon#\x00', &(0x7f0000000180)=')wlan1vmnet1eth0,\x00', &(0x7f00000001c0)='@\x00', &(0x7f0000000200)='/dev/usbmon#\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='/dev/usbmon#\x00', &(0x7f00000002c0)='/dev/usbmon#\x00', &(0x7f0000000300)='/dev/usbmon#\x00', &(0x7f0000000340)='}\\mime_typelo)\x00', &(0x7f0000000380)='/dev/usbmon#\x00'], 0x100)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:16:46 executing program 5 (fault-call:2 fault-nth:4):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 467.591594] kcapi: driver "" not loaded.
[ 467.595858] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 467.616619] kcapi: driver "" not loaded.
[ 467.619056] binder: 16589:16592 ioctl 40046207 0 returned -1
17:16:46 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8002, 0x0)
write$P9_RSTATu(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0xf2)
[ 467.639748] FAULT_INJECTION: forcing a failure.
[ 467.639748] name failslab, interval 1, probability 0, space 0, times 0
[ 467.666831] CPU: 0 PID: 16599 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 467.673835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 467.673843] Call Trace:
[ 467.673873] dump_stack+0x172/0x1f0
[ 467.673899] should_fail.cold+0xa/0x1b
[ 467.673974] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 467.698596] ? lock_downgrade+0x880/0x880
[ 467.702774] __should_failslab+0x121/0x190
[ 467.707023] should_failslab+0x9/0x14
[ 467.707042] kmem_cache_alloc_trace+0x2cc/0x760
[ 467.707064] ? __alloc_workqueue_key+0x139/0xee0
[ 467.720282] __alloc_workqueue_key+0x18e/0xee0
[ 467.724883] ? workqueue_sysfs_register+0x3e0/0x3e0
[ 467.724899] ? scnprintf+0x140/0x140
[ 467.724915] ? __lock_is_held+0xb6/0x140
[ 467.724943] hci_register_dev+0x1c6/0x880
17:16:46 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x2)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 467.724965] hci_uart_tty_ioctl+0x761/0xaf0
[ 467.724985] tty_ioctl+0x8b5/0x1510
[ 467.725002] ? hci_uart_init_work+0x140/0x140
[ 467.733723] ? tty_vhangup+0x30/0x30
[ 467.733739] ? mark_held_locks+0x100/0x100
[ 467.733769] ? __fget+0x340/0x540
[ 467.733793] ? __might_sleep+0x95/0x190
[ 467.733808] ? tty_vhangup+0x30/0x30
[ 467.733824] do_vfs_ioctl+0xd5f/0x1380
[ 467.733843] ? selinux_file_ioctl+0x46f/0x5e0
[ 467.781873] ? selinux_file_ioctl+0x125/0x5e0
[ 467.786392] ? ioctl_preallocate+0x210/0x210
[ 467.790817] ? selinux_file_mprotect+0x620/0x620
[ 467.795616] ? iterate_fd+0x360/0x360
[ 467.799437] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 467.804993] ? fput+0x128/0x1a0
[ 467.808301] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 467.813855] ? security_file_ioctl+0x8d/0xc0
[ 467.818281] ksys_ioctl+0xab/0xd0
[ 467.821782] __x64_sys_ioctl+0x73/0xb0
[ 467.825680] do_syscall_64+0xfd/0x620
[ 467.825704] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 467.825717] RIP: 0033:0x459a59
[ 467.825729] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 467.825737] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 467.825751] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 467.825760] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
[ 467.825767] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
17:16:47 executing program 3:
r0 = getpid()
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6(0xa, 0x0, 0x0)
r3 = gettid()
tkill(r3, 0x2d)
sched_setscheduler(r0, 0x5, &(0x7f0000000380))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000080)="f2a6bad004b00fee0f090f3036f30f1a970000660f3806581e0f08bad004b0beeef30f2af8baa100b000ee", 0x2b}], 0x1, 0x0, 0x0, 0xfffffec6)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4ce]})
write(0xffffffffffffffff, &(0x7f0000000000)="34fd98aa1d", 0x5)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r9, 0xc0bc5310, &(0x7f0000000400))
r10 = gettid()
tkill(r10, 0x1002000000013)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$IMGETDEVINFO(r13, 0x80044944, &(0x7f0000000180)={0x8})
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x3a, 0x2, 0x5, 0x1f, 0x0, 0x8, 0x1, 0xf, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xdac, 0x5, @perf_bp={&(0x7f0000000040), 0x1d}, 0x4, 0xddfd, 0x4, 0x7, 0x7fff80, 0x20080, 0x4}, r10, 0x5, r13, 0x1)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
17:16:47 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:16:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 467.825775] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 467.825783] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
[ 467.904600] kcapi: driver "" not loaded.
17:16:47 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x2)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:47 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:16:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 467.993540] Bluetooth: Can't register HCI device
17:16:47 executing program 5 (fault-call:2 fault-nth:5):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 468.099565] kcapi: driver "" not loaded.
17:16:47 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_PROFILE(0xffffffffffffffff, 0xc0404309, &(0x7f0000000000)=0x2)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 468.256365] kcapi: driver "" not loaded.
17:16:47 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_SUBDEV_G_CROP(r2, 0xc038563b, &(0x7f0000000080)={0x3, 0x0, {0x5, 0x5, 0x8001, 0x40}})
r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
write$UHID_DESTROY(r6, &(0x7f0000000000), 0x4)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r3, 0x0, 0x0, 0x0)
17:16:47 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:16:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:47 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 468.460096] FAULT_INJECTION: forcing a failure.
[ 468.460096] name failslab, interval 1, probability 0, space 0, times 0
[ 468.508878] kcapi: driver "" not loaded.
[ 468.533997] CPU: 1 PID: 16734 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 468.540980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 468.550353] Call Trace:
[ 468.552971] dump_stack+0x172/0x1f0
[ 468.556627] should_fail.cold+0xa/0x1b
[ 468.560567] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 468.565691] ? lock_downgrade+0x880/0x880
[ 468.569863] __should_failslab+0x121/0x190
[ 468.574110] should_failslab+0x9/0x14
[ 468.577923] kmem_cache_alloc_trace+0x2cc/0x760
[ 468.582605] ? apply_wqattrs_prepare+0xfb/0xa30
[ 468.587293] apply_wqattrs_prepare+0x13b/0xa30
[ 468.591907] apply_workqueue_attrs_locked+0xcf/0x120
[ 468.597025] apply_workqueue_attrs+0x31/0x50
[ 468.601477] __alloc_workqueue_key+0x8b8/0xee0
[ 468.606069] ? workqueue_sysfs_register+0x3e0/0x3e0
[ 468.606101] hci_register_dev+0x1c6/0x880
[ 468.606126] hci_uart_tty_ioctl+0x761/0xaf0
[ 468.619578] tty_ioctl+0x8b5/0x1510
[ 468.623220] ? hci_uart_init_work+0x140/0x140
[ 468.627742] ? tty_vhangup+0x30/0x30
[ 468.631470] ? mark_held_locks+0x100/0x100
[ 468.635730] ? __fget+0x340/0x540
[ 468.639204] ? __might_sleep+0x95/0x190
[ 468.643198] ? tty_vhangup+0x30/0x30
[ 468.646938] do_vfs_ioctl+0xd5f/0x1380
[ 468.650839] ? selinux_file_ioctl+0x46f/0x5e0
[ 468.655364] ? selinux_file_ioctl+0x125/0x5e0
[ 468.659870] ? ioctl_preallocate+0x210/0x210
[ 468.664288] ? selinux_file_mprotect+0x620/0x620
[ 468.669075] ? iterate_fd+0x360/0x360
[ 468.672883] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 468.678430] ? fput+0x128/0x1a0
[ 468.681730] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 468.688326] ? security_file_ioctl+0x8d/0xc0
[ 468.692748] ksys_ioctl+0xab/0xd0
[ 468.696215] __x64_sys_ioctl+0x73/0xb0
[ 468.700114] do_syscall_64+0xfd/0x620
[ 468.703929] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 468.709124] RIP: 0033:0x459a59
[ 468.712426] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 468.731340] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 468.739065] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 468.746353] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
[ 468.753637] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 468.760922] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 468.768288] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
[ 468.818677] Bluetooth: Can't register HCI device
17:16:50 executing program 3:
getresgid(0x0, 0x0, 0x0)
getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0)
getpid()
syz_open_procfs(0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0)
r0 = add_key(&(0x7f0000000040)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, r0)
keyctl$instantiate_iov(0x14, r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000200)="2bd49b425766dd054013782fb737574532bb808c58d2322e0a451c593b00a9f1bafced3cac56e9427067ef7d2e208bb14c79f1ad8b12b92cb085d1e77d35ec4e10e36f02d2395220309f58dc168aabfb55e83966f5be390934761493ffce4e41610a90e0dc565cb03453ec3a4928d98fa29a5504b2a06602b19c61754dacb9524e5e271c4efd126cfd7ad15dca541de9e871f8d7b29090f19f78bbb22ae0443590fae95f3375b48f0501707c32104bfdb27190b5ffc2cd6d2ed69b5108e45ca05409dcd7f1123403", 0xc8}], 0x2, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc))
r2 = syz_open_pts(r1, 0x1)
fcntl$setstatus(r2, 0x4, 0x102800)
openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x8000, 0x0)
write(r2, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3)
dup3(r2, r1, 0x0)
17:16:50 executing program 0:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:50 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:16:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$inet(r3, &(0x7f0000000100)="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", 0xfb, 0x8000800, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10)
fanotify_init(0x2, 0x8000)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
17:16:50 executing program 5 (fault-call:2 fault-nth:6):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:50 executing program 0:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 471.016114] FAULT_INJECTION: forcing a failure.
[ 471.016114] name failslab, interval 1, probability 0, space 0, times 0
17:16:50 executing program 1:
socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
[ 471.086537] CPU: 0 PID: 16756 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 471.093516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 471.093525] Call Trace:
[ 471.093551] dump_stack+0x172/0x1f0
[ 471.093574] should_fail.cold+0xa/0x1b
[ 471.093595] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 471.093614] ? lock_downgrade+0x880/0x880
[ 471.093640] __should_failslab+0x121/0x190
[ 471.093656] should_failslab+0x9/0x14
[ 471.093672] kmem_cache_alloc_trace+0x2cc/0x760
[ 471.093695] ? apply_wqattrs_prepare+0xfb/0xa30
[ 471.093715] apply_wqattrs_prepare+0x13b/0xa30
[ 471.113234] apply_workqueue_attrs_locked+0xcf/0x120
[ 471.149619] apply_workqueue_attrs+0x31/0x50
[ 471.154050] __alloc_workqueue_key+0x8b8/0xee0
[ 471.158656] ? workqueue_sysfs_register+0x3e0/0x3e0
[ 471.163715] hci_register_dev+0x1c6/0x880
[ 471.167906] hci_uart_tty_ioctl+0x761/0xaf0
[ 471.172247] tty_ioctl+0x8b5/0x1510
[ 471.175884] ? hci_uart_init_work+0x140/0x140
[ 471.180389] ? tty_vhangup+0x30/0x30
17:16:50 executing program 0:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 471.184108] ? mark_held_locks+0x100/0x100
[ 471.188367] ? __fget+0x340/0x540
[ 471.191842] ? __might_sleep+0x95/0x190
[ 471.195832] ? tty_vhangup+0x30/0x30
[ 471.199558] do_vfs_ioctl+0xd5f/0x1380
[ 471.203457] ? selinux_file_ioctl+0x46f/0x5e0
[ 471.207968] ? selinux_file_ioctl+0x125/0x5e0
[ 471.212476] ? ioctl_preallocate+0x210/0x210
[ 471.216896] ? selinux_file_mprotect+0x620/0x620
[ 471.221677] ? iterate_fd+0x360/0x360
[ 471.225495] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20
[ 471.232104] ? fput+0x128/0x1a0
[ 471.235394] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20
[ 471.235410] ? security_file_ioctl+0x8d/0xc0
[ 471.235430] ksys_ioctl+0xab/0xd0
[ 471.235449] __x64_sys_ioctl+0x73/0xb0
[ 471.252834] do_syscall_64+0xfd/0x620
[ 471.256653] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 471.261860] RIP: 0033:0x459a59
[ 471.265067] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
17:16:50 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:50 executing program 3:
17:16:50 executing program 2:
r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200000, 0x0)
setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000100)=@gcm_256={{0x304}, "91113ce886bf86fe", "2f145ffd7b45f8b305215a0e271313ef97a96fecacf7eed902a3f728aef66dcc", "7b1e5f7e", "4e472617511fe2aa"}, 0x38)
r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/d}n\xdf5sbMon#\x00', 0x0, 0x851080)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$RTC_WKALM_RD(r4, 0x80287010, &(0x7f0000000180))
pread64(r1, 0x0, 0x0, 0x0)
r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x48000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
set_robust_list(&(0x7f0000001340)={&(0x7f0000001300)={&(0x7f00000012c0)}, 0x80000000}, 0x18)
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
openat$null(0xffffffffffffff9c, &(0x7f0000001280)='/dev/null\x00', 0x10000, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f00000011c0)={r4, 0xffffffffffffffff, 0x4, 0x1000, &(0x7f00000001c0)="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", 0x0, 0xfc, 0xfffb, 0x100, 0x0, 0x1, 0xe, 'syz1\x00'})
ioctl$TIOCGRS485(r5, 0x542e, &(0x7f0000000080))
[ 471.283982] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 471.291705] RAX: ffffffffffffffda RBX: 00007fb8d0686c90 RCX: 0000000000459a59
[ 471.298983] RDX: 0000000000000001 RSI: 00000000400455c8 RDI: 0000000000000003
[ 471.306268] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 471.313547] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 471.320824] R13: 00000000004c27a1 R14: 00000000004d62d8 R15: 0000000000000004
17:16:50 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:50 executing program 3:
17:16:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000200))
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:50 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
[ 471.473658] Bluetooth: Can't register HCI device
17:16:50 executing program 5 (fault-call:2 fault-nth:7):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r1=>0x0, 0x3}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000100)={r1, 0x2}, 0x8)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000000))
17:16:50 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, 0x0)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:50 executing program 3:
17:16:51 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
17:16:51 executing program 3:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0xfc, 0x400)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
17:16:51 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, 0x0)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
sendto$rxrpc(r3, &(0x7f0000000080)="ec722880512b2b6d176d5e4e5ce625cce8d6b08f3b5ca73cc4b289d0ee88329165301934922dce032b69dc675e7b036a521f9fced65bad7e4c6b703624451ed0ebca50b91e46ce693bb403505e7c045216486015d65b8550dd389798e16418c9604843e41f653b94f1221fe86462b6848b260ffaad5c0c7830a1c54575d2352ee1c4dde5f92094cb1d3ac0384fcf28757855b1c1ea", 0x95, 0x10001, 0x0, 0x0)
17:16:51 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
17:16:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:51 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:51 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x0)
r1 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x85nG\x13g\xa6\x05', 0x0)
pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0xfcc9}], 0x1, 0x81805)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1)
17:16:51 executing program 1:
syz_emit_ethernet(0xfffffffffffffdfe, &(0x7f0000000000)={@local, @local, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x224, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote={0xac, 0x14, 0x223}}, @icmp=@timestamp_reply={0xe, 0x3}}}}}, &(0x7f0000000100)={0x0, 0x3, [0x0, 0x140, 0xd77]})
17:16:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, 0x0)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:51 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x7, 0x0, 0x2}]}, &(0x7f0000003ff6)='G\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x241}, 0x48)
17:16:51 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:16:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/suw/satus\x00\x00\x01\x00', 0x0, 0x0)
17:16:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f00000000c0))
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:16:51 executing program 1:
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x11, 0x2, 0x300)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
17:16:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0)
17:16:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x7)
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:51 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200)='/dev/net/tun\xff', 0x94703978130c3a99, 0x0)
write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x6d356)
17:16:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0)
[ 472.383416] protocol 88fb is buggy, dev hsr_slave_0
17:16:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x200)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={<r1=>0x0}, &(0x7f0000000080)=0xc)
sched_rr_get_interval(r1, &(0x7f00000000c0))
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x400)
write$P9_RCREATE(r2, &(0x7f0000000140)={0x18, 0x73, 0x2, {{0x0, 0x2, 0x6}, 0x1}}, 0x18)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$PPPOEIOCDFWD(r5, 0xb101, 0x0)
17:16:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x7)
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:16:51 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {0x2, 0x4}]}]}}, &(0x7f0000000440)=""/242, 0x36, 0xf2, 0x1}, 0x20)
17:16:51 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\xaa;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddp2\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&l?\x87\x17H\x1f.\xdbA\x1b\xafz\xe3\xdc};*\xec\xfe\xfa\xfb/\x18g\x80y\xfe\x89', 0x26e1, 0x0)
close(r0)
close(r1)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000040))
recvmsg(r1, &(0x7f00000042c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004240)=""/72, 0x48}, 0x2000)
write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0xfffffc61)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x1d, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/110, 0x2000012e}], 0x1, 0x0, 0xd01}, 0x3f00)
17:16:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0)
17:16:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0x7)
setreuid(0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 474.463641] Bluetooth: hci0: command 0x1003 tx timeout
[ 474.469059] Bluetooth: hci0: sending frame failed (-49)
[ 476.543537] Bluetooth: hci0: command 0x1001 tx timeout
[ 476.548994] Bluetooth: hci0: sending frame failed (-49)
[ 478.623624] Bluetooth: hci0: command 0x1009 tx timeout
17:17:01 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, &(0x7f0000000440)=""/242, 0x36, 0xf2, 0x1}, 0x20)
17:17:01 executing program 5:
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x1)
17:17:01 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f00000001c0)})
17:17:01 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:17:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x3)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000140)="0800b5055e0bcfe87b0071")
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80042, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, 0x0, 0x0)
17:17:01 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
prctl$PR_GET_DUMPABLE(0x3)
keyctl$chown(0x4, r4, r3, 0x0)
r5 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r4)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, r7, 0x0)
keyctl$search(0xa, r5, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r8)
r9 = openat$cgroup_ro(r1, &(0x7f0000000140)='cpuacct.usage_sys\x00', 0x0, 0x0)
ioctl$KDENABIO(r9, 0x4b36)
r10 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r5)
keyctl$revoke(0x3, r10)
ioctl$RTC_WIE_ON(r1, 0x700f)
r11 = socket(0x9, 0x80000, 0x1)
ioctl$PPPOEIOCSFWD(r11, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x4, @random="537a9b04a9c1", 'bond_slave_1\x00'}})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
[ 482.529368] audit: type=1400 audit(1571591821.832:181): avc: denied { map } for pid=17406 comm="sh" path="/bin/dash" dev="sda1" ino=1473 scontext=system_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
17:17:01 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f00000001c0)})
17:17:01 executing program 3:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xd87})
[ 482.633236] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:17:02 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0))
17:17:02 executing program 1:
close(0xffffffffffffffff)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x80001, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x0, 0x0, 0x0)
[ 482.690492] binder: 17408:17417 ioctl 40046207 0 returned -1
17:17:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:17:02 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f00000001c0)})
17:17:02 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x2)
dup3(r1, r0, 0x0)
write(r0, 0x0, 0x0)
17:17:02 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x16, 0x0, 0x0)
[ 482.935485] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 482.956003] binder: 17443:17448 ioctl 40046207 0 returned -1
17:17:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r1, 0x0, r1)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:17:02 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, 0x0})
17:17:02 executing program 3:
r0 = socket$kcm(0x2b, 0x8000000000001, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
llistxattr(0x0, 0x0, 0x0)
17:17:02 executing program 1:
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x400, 0x0)
17:17:02 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000280)="baf80c66b88687d08c66efbafc0cb8bd00ef0f320f624e10bad104ec26660ff85f50361b0f20c06635020000800f01c9b800088ec00fae470b", 0x2ed}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000480))
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
keyctl$join(0x1, 0x0)
ioctl$VIDIOC_ENUMAUDOUT(0xffffffffffffffff, 0xc0345642, &(0x7f0000000140)={0x6, "0e29d39ddd9697e41140efa0bc3cccd3479cf062a939ded295989777332bd419"})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, &(0x7f00000000c0)={0x0, 0x10000})
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2302ac00, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1a0, r9, 0x304, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xc00}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x360c}]}, @TIPC_NLA_BEARER={0x54, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_NODE={0x48, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x14f56f3f}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x40}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xd4a}]}, @TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3fa2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1f}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffffff, @local, 0x80000000}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x800, @mcast2}}}}]}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x240008a0}, 0x20040001)
r10 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r10, 0x4010ae67, &(0x7f0000000000)={0xf000, 0x8000})
pread64(r3, 0x0, 0x0, 0x0)
17:17:02 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x7, &(0x7f0000000080)={0x0, 0x9})
socket$nl_generic(0x10, 0x3, 0x10)
[ 483.531100] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 483.553463] binder: 17558:17565 ioctl 40046207 0 returned -1
[ 484.863566] Bluetooth: hci0: command 0x1003 tx timeout
[ 484.868971] Bluetooth: hci0: sending frame failed (-49)
[ 486.953715] Bluetooth: hci0: command 0x1001 tx timeout
[ 486.959140] Bluetooth: hci0: sending frame failed (-49)
[ 489.023543] Bluetooth: hci0: command 0x1009 tx timeout
17:17:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='\x02\x00\x00\x00\x00\b\x10\x00', 0x3180, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="100000070000eccffa452f66696c6530"], 0x10)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:17:12 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, 0x0})
17:17:12 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext, 0x108, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1)
ioctl$BLKRESETZONE(0xffffffffffffffff, 0x40101283, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc))
r1 = syz_open_pts(r0, 0x1)
fcntl$setstatus(r1, 0x4, 0x102800)
write(r1, &(0x7f0000000000)="d5", 0xfffffedf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3)
dup3(r1, r0, 0x0)
17:17:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:17:12 executing program 1:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000001500)="0800b5055e0bcfe87b0071")
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_OFF(r1, 0x7002)
17:17:12 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
fsetxattr$trusted_overlay_opaque(0xffffffffffffffff, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2)
pread64(r0, 0x0, 0x0, 0x0)
[ 493.478532] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 493.496894] binder: 17682:17686 ioctl 40046207 0 returned -1
17:17:12 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xf7c, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setrlimit(0x7, &(0x7f0000000080))
timerfd_create(0x0, 0x800)
17:17:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
17:17:12 executing program 1 (fault-call:1 fault-nth:0):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:12 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, 0x0})
17:17:12 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffa)
ioctl$KDADDIO(r0, 0x4b34, 0x200)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
fchdir(r1)
openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x80000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
[ 493.642594] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 493.654067] FAULT_INJECTION: forcing a failure.
[ 493.654067] name failslab, interval 1, probability 0, space 0, times 0
[ 493.660542] binder: 17700:17701 ioctl 40046207 0 returned -1
17:17:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 493.713451] CPU: 0 PID: 17706 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 493.720443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 493.729808] Call Trace:
[ 493.732414] dump_stack+0x172/0x1f0
[ 493.736066] should_fail.cold+0xa/0x1b
[ 493.739986] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 493.745118] ? lock_downgrade+0x880/0x880
[ 493.749300] __should_failslab+0x121/0x190
[ 493.753643] should_failslab+0x9/0x14
[ 493.757465] kmem_cache_alloc_trace+0x2cc/0x760
[ 493.762158] aead_bind+0x4f/0x170
[ 493.765633] alg_bind+0x25a/0x570
[ 493.766833] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 493.769100] ? security_socket_bind+0x8d/0xc0
[ 493.769122] __sys_bind+0x239/0x290
[ 493.769136] ? __ia32_sys_socketpair+0xf0/0xf0
[ 493.769164] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 493.775452] binder: 17713:17714 ioctl 40046207 0 returned -1
[ 493.779790] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 493.779806] ? do_syscall_64+0x26/0x620
[ 493.779822] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
17:17:13 executing program 3:
socket(0x200000000010, 0x2, 0x0)
mkdir(&(0x7f0000000b00)='./file0\x00', 0x0)
lgetxattr(0x0, 0x0, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$DRM_IOCTL_IRQ_BUSID(0xffffffffffffffff, 0xc0106403, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x3f})
recvfrom$x25(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000700)='rpc_pipefs\x00', 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x2)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540)='TIPCv2\x00')
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x2)
mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f00000002c0)='nfs\x00\xef\xf1a\x17\x12\x9e\xd0Y\x8a\xa8\xd4', 0x700, &(0x7f0000000000))
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000200))
17:17:13 executing program 4:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
[ 493.779838] ? do_syscall_64+0x26/0x620
[ 493.807284] __x64_sys_bind+0x73/0xb0
[ 493.816635] do_syscall_64+0xfd/0x620
[ 493.816657] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 493.816669] RIP: 0033:0x459a59
[ 493.816683] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 493.816696] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246
[ 493.851556] ORIG_RAX: 0000000000000031
17:17:13 executing program 0 (fault-call:1 fault-nth:0):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:13 executing program 3:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x400)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000040)={0x5804, 0x338000})
r1 = socket$inet6(0xa, 0x8000000000001, 0x8010000000000084)
sendmmsg$inet6(r1, &(0x7f0000005940)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @local, 0xfff}, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000340)="18", 0x1}], 0x1}}], 0x1, 0x4004040)
[ 493.851567] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
[ 493.851576] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 493.851585] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 493.851595] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 493.851603] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
[ 493.926033] kcapi: driver "" not loaded.
17:17:13 executing program 1 (fault-call:1 fault-nth:1):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
[ 494.016912] FAULT_INJECTION: forcing a failure.
[ 494.016912] name failslab, interval 1, probability 0, space 0, times 0
[ 494.053583] CPU: 0 PID: 17730 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 494.060572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 494.069940] Call Trace:
[ 494.072556] dump_stack+0x172/0x1f0
[ 494.076219] should_fail.cold+0xa/0x1b
[ 494.080150] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 494.085276] ? lock_downgrade+0x880/0x880
[ 494.089437] __should_failslab+0x121/0x190
[ 494.093679] should_failslab+0x9/0x14
[ 494.097495] __kmalloc+0x2e2/0x750
[ 494.101081] ? __crypto_alg_lookup+0x2fa/0x370
[ 494.105686] ? crypto_create_tfm+0x82/0x300
[ 494.110026] crypto_create_tfm+0x82/0x300
[ 494.114188] ? crypto_alg_mod_lookup+0xff/0x550
[ 494.118867] crypto_alloc_tfm+0x104/0x2e0
[ 494.123029] ? kmem_cache_alloc_trace+0x348/0x760
[ 494.127930] crypto_alloc_aead+0x2d/0x40
[ 494.131994] aead_bind+0x6e/0x170
[ 494.135535] alg_bind+0x25a/0x570
[ 494.138976] ? security_socket_bind+0x8d/0xc0
[ 494.143514] __sys_bind+0x239/0x290
[ 494.147141] ? __ia32_sys_socketpair+0xf0/0xf0
[ 494.151722] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 494.156463] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 494.161207] ? do_syscall_64+0x26/0x620
[ 494.165167] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 494.170516] ? do_syscall_64+0x26/0x620
[ 494.174520] __x64_sys_bind+0x73/0xb0
[ 494.178310] do_syscall_64+0xfd/0x620
[ 494.182106] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 494.187279] RIP: 0033:0x459a59
[ 494.190467] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 494.209375] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 494.217075] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
[ 494.224336] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 494.231592] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 494.238849] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 494.246103] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
17:17:13 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x4000)
ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x3399d)
clone(0x8000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:17:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:13 executing program 4:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
17:17:13 executing program 3:
write(0xffffffffffffffff, &(0x7f0000000100)="fc0000001d00071bab0925003a00070007ab080004", 0x15)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'v\x87t\x05\x00\x00d\x00\x00\x00\x00\xf0\xff\xff\xff\x00'})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8, 0x511402)
r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x28100)
getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x9, 0x4}, &(0x7f0000000240)=0xc)
17:17:13 executing program 1 (fault-call:1 fault-nth:2):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
[ 494.328706] kcapi: driver "" not loaded.
[ 494.332615] FAULT_INJECTION: forcing a failure.
[ 494.332615] name failslab, interval 1, probability 0, space 0, times 0
[ 494.378930] CPU: 0 PID: 17842 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 494.385923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 494.395291] Call Trace:
[ 494.397900] dump_stack+0x172/0x1f0
[ 494.401557] should_fail.cold+0xa/0x1b
[ 494.405475] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 494.410596] ? lock_downgrade+0x880/0x880
[ 494.414769] __should_failslab+0x121/0x190
[ 494.419015] should_failslab+0x9/0x14
[ 494.419034] __kmalloc+0x2e2/0x750
[ 494.419052] ? lock_downgrade+0x880/0x880
[ 494.426376] ? crypto_spawn_alg.isra.0+0x1b/0xb0
[ 494.426394] ? crypto_create_tfm+0x82/0x300
[ 494.426413] crypto_create_tfm+0x82/0x300
[ 494.426423] ? up_read+0x1a/0x110
[ 494.426442] crypto_spawn_tfm2+0x61/0xc0
[ 494.451292] crypto_authenc_esn_init_tfm+0x44/0x350
[ 494.456315] ? crypto_authenc_esn_exit_tfm+0x80/0x80
[ 494.461415] crypto_aead_init_tfm+0x143/0x1a0
[ 494.465945] crypto_create_tfm+0xe0/0x300
[ 494.470083] ? crypto_alg_mod_lookup+0xff/0x550
[ 494.474743] crypto_alloc_tfm+0x104/0x2e0
[ 494.478883] ? kmem_cache_alloc_trace+0x348/0x760
[ 494.483717] crypto_alloc_aead+0x2d/0x40
[ 494.487766] aead_bind+0x6e/0x170
[ 494.491209] alg_bind+0x25a/0x570
[ 494.494652] ? security_socket_bind+0x8d/0xc0
[ 494.499179] __sys_bind+0x239/0x290
[ 494.502807] ? __ia32_sys_socketpair+0xf0/0xf0
[ 494.507406] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 494.512160] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 494.516919] ? do_syscall_64+0x26/0x620
[ 494.520886] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 494.526322] ? do_syscall_64+0x26/0x620
[ 494.530286] __x64_sys_bind+0x73/0xb0
[ 494.534074] do_syscall_64+0xfd/0x620
[ 494.537865] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 494.543038] RIP: 0033:0x459a59
[ 494.546229] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 494.565133] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 494.572842] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
[ 494.580128] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 494.587387] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 494.594642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 494.601911] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
[ 495.743407] Bluetooth: hci0: command 0x1003 tx timeout
[ 495.749184] Bluetooth: hci0: sending frame failed (-49)
[ 497.823436] Bluetooth: hci0: command 0x1001 tx timeout
[ 497.828858] Bluetooth: hci0: sending frame failed (-49)
[ 499.903427] Bluetooth: hci0: command 0x1009 tx timeout
17:17:23 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x2, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:23 executing program 4:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r3=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
17:17:23 executing program 1 (fault-call:1 fault-nth:3):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:23 executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00'})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r4, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="c8000000249cfacbb55b98588c3f5f67814bdc41", @ANYRES32=r4, @ANYBLOB="000000000700ffffa423000008000e000500000008000100746266001c00020008000600040000000800060031000000080007007e0e00000c000100686673630000000008000200ff00000008000e000000000008000100686866003c000200080006000700000008000400e80400000800060001000000080003000500000008000700010001000800060002000000080001000000000008000e0009000000080005008101000008000d00ff070000"], 0xc8}}, 0x0)
socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6000003, 0x8010, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00004, 0x4, 0x0, 0x0, 0x10000000002)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r7, 0x28, &(0x7f0000000000)={0x0, <r8=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r8, 0x5, 0x10}, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$KVM_KVMCLOCK_CTRL(r11, 0xaead)
17:17:23 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = dup(r2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r7, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'bcsh0\x00', <r9=>r7})
setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000001840)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r9}, 0x14)
17:17:23 executing program 5:
r0 = gettid()
tkill(r0, 0x1002000000013)
migrate_pages(r0, 0x800, &(0x7f00000011c0)=0x7, &(0x7f0000001200)=0x100)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
setsockopt$inet6_MRT6_DEL_MFC(r7, 0x29, 0xcd, &(0x7f00000010c0)={{0xa, 0x4e21, 0x300000, @empty, 0x3}, {0xa, 0x4e24, 0x4, @mcast2, 0x401}, 0x4, [0xfe6, 0x10001, 0xffffff80, 0xfffff6cd, 0x9, 0x8000, 0x5, 0x800]}, 0x5c)
ioctl$TUNGETFILTER(r4, 0x801054db, &(0x7f00000000c0)=""/4096)
ioctl$KDADDIO(r1, 0x400455c8, 0x1)
write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
fcntl$dupfd(r9, 0x0, r8)
ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000001140))
r10 = getpgid(0xffffffffffffffff)
sched_setaffinity(r10, 0x8, &(0x7f0000001180)=0xde)
[ 504.346197] FAULT_INJECTION: forcing a failure.
[ 504.346197] name failslab, interval 1, probability 0, space 0, times 0
[ 504.404652] CPU: 1 PID: 17956 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 504.411668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 504.421029] Call Trace:
[ 504.421058] dump_stack+0x172/0x1f0
[ 504.421082] should_fail.cold+0xa/0x1b
[ 504.421103] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 504.436292] ? lock_downgrade+0x880/0x880
[ 504.436319] __should_failslab+0x121/0x190
[ 504.436337] should_failslab+0x9/0x14
[ 504.436354] __kmalloc+0x2e2/0x750
[ 504.436375] ? crypto_create_tfm+0x82/0x300
[ 504.444740] crypto_create_tfm+0x82/0x300
[ 504.444759] crypto_init_shash_ops_async+0x5b/0x410
[ 504.444777] crypto_ahash_init_tfm+0x363/0x440
[ 504.464621] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39972 sclass=netlink_route_socket pig=17958 comm=syz-executor.3
[ 504.465544] crypto_create_tfm+0xe0/0x300
[ 504.465572] ? up_read+0x1a/0x110
[ 504.471232] mmap: syz-executor.3 (17958) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
17:17:23 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x4b47, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 504.482662] crypto_spawn_tfm2+0x61/0xc0
[ 504.482683] crypto_authenc_esn_init_tfm+0x44/0x350
[ 504.482695] ? crypto_authenc_esn_exit_tfm+0x80/0x80
[ 504.482713] crypto_aead_init_tfm+0x143/0x1a0
[ 504.482730] crypto_create_tfm+0xe0/0x300
[ 504.482747] ? crypto_alg_mod_lookup+0xff/0x550
[ 504.501954] crypto_alloc_tfm+0x104/0x2e0
[ 504.501972] ? kmem_cache_alloc_trace+0x348/0x760
[ 504.501990] crypto_alloc_aead+0x2d/0x40
[ 504.511059] aead_bind+0x6e/0x170
[ 504.511080] alg_bind+0x25a/0x570
[ 504.511095] ? security_socket_bind+0x8d/0xc0
17:17:23 executing program 4 (fault-call:7 fault-nth:0):
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 504.511113] __sys_bind+0x239/0x290
[ 504.557619] ? __ia32_sys_socketpair+0xf0/0xf0
[ 504.562239] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 504.567025] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 504.571799] ? do_syscall_64+0x26/0x620
[ 504.575795] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 504.581174] ? do_syscall_64+0x26/0x620
[ 504.585168] __x64_sys_bind+0x73/0xb0
[ 504.588986] do_syscall_64+0xfd/0x620
[ 504.592806] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 504.598039] RIP: 0033:0x459a59
17:17:23 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x4b49, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:23 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
[ 504.601241] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 504.620145] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 504.620161] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
[ 504.620169] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 504.620176] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 504.620188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 504.656957] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
17:17:24 executing program 1 (fault-call:1 fault-nth:4):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:24 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000080))
pread64(r0, 0x0, 0x0, 0x0)
openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = syz_open_pts(r6, 0x60102)
ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000000)={0x100, 0x9, 0x800, 0x1f})
17:17:24 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x541b, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 504.727790] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 504.735540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39972 sclass=netlink_route_socket pig=17971 comm=syz-executor.3
[ 504.755051] binder: 18052:18055 ioctl 40046207 0 returned -1
17:17:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x2, 0x0)
[ 504.853032] FAULT_INJECTION: forcing a failure.
[ 504.853032] name failslab, interval 1, probability 0, space 0, times 0
[ 504.883916] CPU: 1 PID: 18092 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 504.890905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 504.900269] Call Trace:
17:17:24 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @local, 0x10000}, 0xfffffffffffffeab)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r6, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="840000002c00010700"/20, @ANYRES32=r6, @ANYBLOB="00000000000000000880000008000100753332005800c4001400050000000000661b28fd5b000000000000000000000000400006003c000100"/108], 0x84}}, 0x0)
17:17:24 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x10, 0x0)
[ 504.902874] dump_stack+0x172/0x1f0
[ 504.906523] should_fail.cold+0xa/0x1b
[ 504.910432] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 504.915555] ? lock_downgrade+0x880/0x880
[ 504.919846] __should_failslab+0x121/0x190
[ 504.924093] should_failslab+0x9/0x14
[ 504.927913] __kmalloc+0x2e2/0x750
[ 504.931468] ? lock_downgrade+0x880/0x880
[ 504.935632] ? crypto_spawn_alg.isra.0+0x1b/0xb0
[ 504.940407] ? crypto_create_tfm+0x82/0x300
[ 504.944753] crypto_create_tfm+0x82/0x300
[ 504.948905] ? up_read+0x1a/0x110
[ 504.952372] crypto_spawn_tfm2+0x61/0xc0
[ 504.956451] crypto_authenc_esn_init_tfm+0x74/0x350
[ 504.961472] ? crypto_authenc_esn_exit_tfm+0x80/0x80
[ 504.961496] crypto_aead_init_tfm+0x143/0x1a0
[ 504.961515] crypto_create_tfm+0xe0/0x300
[ 504.961531] ? crypto_alg_mod_lookup+0xff/0x550
[ 504.979930] crypto_alloc_tfm+0x104/0x2e0
[ 504.979948] ? kmem_cache_alloc_trace+0x348/0x760
[ 504.979967] crypto_alloc_aead+0x2d/0x40
[ 504.993024] aead_bind+0x6e/0x170
[ 504.993044] alg_bind+0x25a/0x570
17:17:24 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x5421, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 504.993063] ? security_socket_bind+0x8d/0xc0
[ 504.999964] __sys_bind+0x239/0x290
[ 504.999983] ? __ia32_sys_socketpair+0xf0/0xf0
[ 505.000028] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 505.008127] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 505.008144] ? do_syscall_64+0x26/0x620
[ 505.008160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 505.008174] ? do_syscall_64+0x26/0x620
[ 505.008192] __x64_sys_bind+0x73/0xb0
[ 505.017611] do_syscall_64+0xfd/0x620
[ 505.017630] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 505.017642] RIP: 0033:0x459a59
[ 505.017658] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 505.017666] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 505.017682] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
[ 505.017694] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 505.026409] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 505.026419] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 505.026429] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
[ 505.072262] binder: 18100:18126 ioctl 10 0 returned -22
17:17:26 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x80000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
mknod$loop(&(0x7f0000000040)='./file0\x00', 0x40, 0x1)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:17:26 executing program 1 (fault-call:1 fault-nth:5):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:26 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x5450, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:26 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f0000000180)={0x117, &(0x7f00000001c0)="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"/279})
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:17:26 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x4b47, 0x0)
17:17:26 executing program 3:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x40027d)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, @erspan={{0xc, 0x1, 'erspan\x00'}, {0x10, 0x2, [@gre_common_policy=[@IFLA_GRE_IKEY={0x8, 0x5}], @gre_common_policy=[@IFLA_GRE_COLLECT_METADATA={0x4}]]}}}]}, 0x40}}, 0x0)
[ 507.441672] FAULT_INJECTION: forcing a failure.
[ 507.441672] name failslab, interval 1, probability 0, space 0, times 0
[ 507.462292] binder: 18219:18221 ioctl 4b47 0 returned -22
[ 507.473396] CPU: 0 PID: 18224 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 507.480369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 507.490255] Call Trace:
[ 507.492861] dump_stack+0x172/0x1f0
[ 507.496507] should_fail.cold+0xa/0x1b
[ 507.500416] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 507.505540] ? lock_downgrade+0x880/0x880
[ 507.509715] __should_failslab+0x121/0x190
[ 507.513960] should_failslab+0x9/0x14
[ 507.517770] __kmalloc+0x2e2/0x750
[ 507.517798] ? __crypto_alg_lookup+0x2fa/0x370
[ 507.517816] ? crypto_create_tfm+0x82/0x300
[ 507.526134] crypto_create_tfm+0x82/0x300
[ 507.526149] ? crypto_alg_mod_lookup+0xff/0x550
[ 507.526167] crypto_alloc_tfm+0x104/0x2e0
[ 507.526182] ? crypto_skcipher_init_tfm+0x51d/0x8d0
[ 507.526207] crypto_alloc_skcipher+0x2d/0x40
[ 507.534663] crypto_get_default_null_skcipher+0x61/0x90
[ 507.534681] crypto_authenc_esn_init_tfm+0x9d/0x350
[ 507.534694] ? crypto_authenc_esn_exit_tfm+0x80/0x80
[ 507.534714] crypto_aead_init_tfm+0x143/0x1a0
[ 507.534732] crypto_create_tfm+0xe0/0x300
[ 507.543534] ? crypto_alg_mod_lookup+0xff/0x550
[ 507.543555] crypto_alloc_tfm+0x104/0x2e0
[ 507.543572] ? kmem_cache_alloc_trace+0x348/0x760
[ 507.543593] crypto_alloc_aead+0x2d/0x40
[ 507.543608] aead_bind+0x6e/0x170
[ 507.553016] alg_bind+0x25a/0x570
[ 507.563566] ? security_socket_bind+0x8d/0xc0
[ 507.563589] __sys_bind+0x239/0x290
[ 507.563605] ? __ia32_sys_socketpair+0xf0/0xf0
[ 507.563637] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 507.563653] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 507.573229] ? do_syscall_64+0x26/0x620
[ 507.573246] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 507.573261] ? do_syscall_64+0x26/0x620
[ 507.573280] __x64_sys_bind+0x73/0xb0
17:17:26 executing program 3:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r0, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x24)
sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000001001000001000000770000f200000000a6ff17b96b1f2f873722b41a1100008f2cd6c862e13f10a5f31a26f4233e3ba1ff40e062a43f88b1baf272a416e63e58afdf284732bd1e1970000000009f3100000000858003ffffffffffffffff3e26b5ca26b5434dbd533925db8b54b33da7b9c7aefca1f9c49c6400000000000000000000000061e2448f23a7e40000004000d5a0a5c33d3cc0b2eeedde5233ac82d4f7de00c26cb542f13b5bc18adcfb59dfb5edff90d0a500a043ffc0fafa7af4fea59c878c765f6a084b83a0c37596366d369187f444"], 0x18}}], 0x1, 0x4048000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000280)=<r4=>0x0)
ptrace$getregs(0xe, r4, 0x0, &(0x7f00000002c0)=""/220)
recvmmsg(r0, &(0x7f00000071c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0x10000000d)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x4000, 0x0)
bind$inet(r5, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10)
[ 507.573297] do_syscall_64+0xfd/0x620
[ 507.624262] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 507.624278] RIP: 0033:0x459a59
[ 507.633613] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 507.633621] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 507.633637] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
17:17:27 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x5451, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:27 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2000, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
17:17:27 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x4b49, 0x0)
[ 507.633645] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 507.633657] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 507.701994] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 507.709253] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
17:17:27 executing program 1 (fault-call:1 fault-nth:6):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:27 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x5452, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 507.815849] binder: 18339:18349 ioctl 4b49 0 returned -22
[ 507.873884] FAULT_INJECTION: forcing a failure.
[ 507.873884] name failslab, interval 1, probability 0, space 0, times 0
[ 507.886727] CPU: 1 PID: 18412 Comm: syz-executor.1 Not tainted 4.19.80 #0
[ 507.893679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 507.903046] Call Trace:
[ 507.905658] dump_stack+0x172/0x1f0
[ 507.909309] should_fail.cold+0xa/0x1b
[ 507.913222] ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 507.918347] ? lock_downgrade+0x880/0x880
[ 507.922525] __should_failslab+0x121/0x190
[ 507.926778] should_failslab+0x9/0x14
[ 507.930594] __kmalloc+0x2e2/0x750
[ 507.934161] ? __crypto_alloc_tfm+0xd1/0x530
[ 507.934181] __crypto_alloc_tfm+0xd1/0x530
[ 507.934202] crypto_skcipher_init_tfm+0x584/0x8d0
[ 507.934220] crypto_create_tfm+0xe0/0x300
[ 507.934232] ? crypto_alg_mod_lookup+0xff/0x550
[ 507.934250] crypto_alloc_tfm+0x104/0x2e0
[ 507.934263] ? crypto_skcipher_init_tfm+0x51d/0x8d0
[ 507.934284] crypto_alloc_skcipher+0x2d/0x40
[ 507.934300] crypto_get_default_null_skcipher+0x61/0x90
[ 507.934321] crypto_authenc_esn_init_tfm+0x9d/0x350
[ 507.942965] ? crypto_authenc_esn_exit_tfm+0x80/0x80
[ 507.942985] crypto_aead_init_tfm+0x143/0x1a0
[ 507.943003] crypto_create_tfm+0xe0/0x300
[ 507.951976] ? crypto_alg_mod_lookup+0xff/0x550
[ 507.960786] crypto_alloc_tfm+0x104/0x2e0
[ 507.970197] ? kmem_cache_alloc_trace+0x348/0x760
[ 507.970218] crypto_alloc_aead+0x2d/0x40
[ 507.970234] aead_bind+0x6e/0x170
[ 508.015520] alg_bind+0x25a/0x570
[ 508.018993] ? security_socket_bind+0x8d/0xc0
[ 508.023506] __sys_bind+0x239/0x290
[ 508.027147] ? __ia32_sys_socketpair+0xf0/0xf0
[ 508.031759] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 508.036558] ? trace_hardirqs_on_thunk+0x1a/0x1c
[ 508.041327] ? do_syscall_64+0x26/0x620
[ 508.045315] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 508.050688] ? do_syscall_64+0x26/0x620
[ 508.054789] __x64_sys_bind+0x73/0xb0
[ 508.058608] do_syscall_64+0xfd/0x620
[ 508.062438] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 508.067636] RIP: 0033:0x459a59
[ 508.070839] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 508.089747] RSP: 002b:00007f1d982d2c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000031
[ 508.097474] RAX: ffffffffffffffda RBX: 00007f1d982d2c90 RCX: 0000000000459a59
[ 508.104756] RDX: 0000000000000058 RSI: 0000000020000480 RDI: 0000000000000003
[ 508.112038] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 508.119323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1d982d36d4
[ 508.126604] R13: 00000000004bfb99 R14: 00000000004d1be0 R15: 0000000000000004
[ 509.503594] Bluetooth: hci0: command 0x1003 tx timeout
[ 509.508997] Bluetooth: hci0: sending frame failed (-49)
[ 511.583601] Bluetooth: hci0: command 0x1001 tx timeout
[ 511.589154] Bluetooth: hci0: sending frame failed (-49)
[ 513.663559] Bluetooth: hci0: command 0x1009 tx timeout
17:17:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:17:37 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x541b, 0x0)
17:17:37 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/du\x11\x97\xb3\x9dbmon#\x00', 0x400000000, 0x814800)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
userfaultfd(0x0)
17:17:37 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x5460, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:37 executing program 1 (fault-call:1 fault-nth:7):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:37 executing program 3:
r0 = syz_open_dev$evdev(0x0, 0x0, 0x2)
write$evdev(r0, &(0x7f0000057fa0)=[{}], 0x18)
r1 = memfd_create(&(0x7f0000000080)='\x00\x00\x06\x00\x00\x00\x00\x00\x00\x00', 0x0)
socket$inet6(0xa, 0x1, 0x3f)
write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='#!'], 0x2)
socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESOCT=r4], 0x17)
clone(0x2102201ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r5 = syz_open_procfs(0x0, &(0x7f0000001500)='fd\x00')
r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2220, 0x0)
ioctl$BLKPBSZGET(r6, 0x127b, &(0x7f0000000140))
fchdir(r5)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000180))
17:17:37 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x40049409, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:37 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
[ 517.794923] binder: 18457:18458 ioctl 541b 0 returned -22
17:17:37 executing program 3:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x40402, 0x0)
ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}})
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)
r1 = gettid()
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x0, 0x8}, 0x0, 0x80000000, 0x2, 0x0, 0x0, 0x1000}, r1, 0x4, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x22, 0x7}}, &(0x7f0000014ff5)='syzka\x00\x00\x00\x05\x00\xf3', 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x0, 0x44, 0x0, &(0x7f0000000200)="e460cdfbef24080000000a9386dd6a00000000072feb3014cd3ec8a755c1e1380081ffad000000e8d5000000010000001400000500242f09880bd320d98a61a90057c9bf", 0x0, 0x401}, 0x28)
17:17:37 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x600, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000000c0))
17:17:37 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5421, 0x0)
17:17:37 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x40086602, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:37 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000))
r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2)
getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x44)
17:17:37 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r5, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=0x9d0b, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x6, 0x1}, 0x0, 0x0, &(0x7f0000000200)={0x2, 0xb, 0x9, 0x8}, &(0x7f0000000240)=0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x5}}, 0x10)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='maps\x00')
getsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0xfffffd62)
17:17:37 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5450, 0x0)
17:17:37 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x40087602, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:37 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5451, 0x0)
17:17:37 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000100))
r4 = dup(r0)
r5 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
listen(r8, 0x0)
r9 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
dup3(r4, r5, 0x0)
r10 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40000)
ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5387, &(0x7f00000000c0))
17:17:37 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
ioctl$KVM_SET_BOOT_CPU_ID(0xffffffffffffffff, 0xae78, &(0x7f0000000000)=0x1)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:37 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x400c4301, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:37 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5452, 0x0)
[ 518.332125] audit: type=1400 audit(1571591857.632:182): avc: denied { name_bind } for pid=18717 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
[ 518.421541] audit: type=1400 audit(1571591857.682:183): avc: denied { node_bind } for pid=18717 comm="syz-executor.3" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1
[ 518.455571] audit: type=1400 audit(1571591857.702:184): avc: denied { name_connect } for pid=18717 comm="syz-executor.3" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1
[ 520.223421] Bluetooth: hci0: command 0x1003 tx timeout
[ 520.228949] Bluetooth: hci0: sending frame failed (-49)
[ 522.303511] Bluetooth: hci0: command 0x1001 tx timeout
[ 522.309063] Bluetooth: hci0: sending frame failed (-49)
[ 524.383608] Bluetooth: hci0: command 0x1009 tx timeout
17:17:47 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0xfffffffffffffffe)
sendmsg$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x27, 0x0, 0x1, 0x0, 0x81, 0x55, "8e84a54ff11a7cfdf40bb468ab903ffc805b2197cb732e6fed3c6e710c8b71e4b0d0d33797afe4f4bb0b98eebea83e84d1dcd787b98c57e2271a78582c5066", 0x3a}, 0x60, &(0x7f0000000140), 0x0, 0x0, 0x0, 0xd08b615d0925d212}, 0x8046)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x2a245c7d, 0x7fffffff, 0x5, 0x80000000, 0xe, 0x7, 0x3, 0x1, 0x4e, 0x0, 0x7, 0x40})
17:17:47 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000000))
fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
sendfile(r2, r7, 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x7)
pread64(r0, 0x0, 0x0, 0x0)
r11 = socket$xdp(0x2c, 0x3, 0x0)
fcntl$setflags(r11, 0x2, 0x1)
17:17:47 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x1e)
17:17:47 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x5460, 0x0)
17:17:47 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x4020940d, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:47 executing program 3:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, @perf_bp={&(0x7f00000000c0), 0x2}, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = gettid()
ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f00000002c0)={0x0, 0x0, 0x1, 0x0, [], [{0x9, 0x0, 0x7ff, 0x4, 0x6, 0x9}, {0x8000, 0x2, 0x20, 0x2, 0x401, 0x8}], [[]]})
tkill(r5, 0x1002000000013)
r6 = gettid()
tkill(r6, 0x1002000000013)
write$cgroup_pid(r4, &(0x7f0000000280)=r6, 0x3)
r7 = socket$netlink(0x10, 0x3, 0x0)
eventfd(0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000540)={0x8e, 0x2, 0x0, 0xd4, &(0x7f00000004c0)=[{}, {}]})
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000000010000000040000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001800120008000100736974000c00020008000140", @ANYRES32=0x0], 0x38}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
ioctl$KVM_DEASSIGN_PCI_DEVICE(r10, 0x4040ae72, &(0x7f0000000080)={0x1, 0x0, 0xf581, 0x7, 0x8})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
17:17:48 executing program 3:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
fchdir(r3)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="0800b5055e0bcfe87b0071")
r4 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4}, 0x1c)
sendmmsg$inet(r4, &(0x7f0000000380)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002640)=[{&(0x7f00000000c0)="a2", 0x1}], 0x1}}], 0x1, 0x0)
17:17:48 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80024321, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:48 executing program 1:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
exit_group(0xb202)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
write$UHID_CREATE(r5, &(0x7f00000001c0)={0x0, 'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000140)=""/94, 0x5e, 0x2c, 0xffff, 0x1, 0x1, 0x11bc}, 0x120)
r6 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x4, 0x2, 0x1, r6})
ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x4508)
syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x800000000000000, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000080))
socket$alg(0x26, 0x5, 0x0)
17:17:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046203, 0x0)
17:17:48 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x605222, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$binfmt_elf64(r2, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x7, 0x4, 0x3, 0x9, 0x2, 0x3, 0x3, 0x244, 0x40, 0x9e, 0x100, 0x9, 0x38, 0x2, 0x2, 0xd7f}, [{0x0, 0x7, 0x3f, 0x4, 0x9, 0x80, 0xc7a, 0x2}], "707f8de252b865998e695f5279a4c8bc198a8c7980495e0d81f5524549b3e1a3b648e299a9f2af5627e7faea71582c9b5501ea1c38e1c37e2bbb94a9541de55391ff479d3f0a053a5ac566abf1cb9f0cc083b66be348ca7161314094f44332cb8f1a8f692e4923ea5726c52fba94811a889ce6499572d01781cd1e5d12acfb4675b903bad5712b3781ad9c96072e8d38634c143cfb53cd20dbee461872900f", [[], []]}, 0x317)
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r0)
ioctl$VFIO_GET_API_VERSION(r1, 0x3b64)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:17:48 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80024322, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:48 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x406, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000340)="ddcfe35c6a76e87c777a2edbf6105e8b", 0x10)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$VIDIOC_G_TUNER(r6, 0xc054561d, &(0x7f0000000200)={0x5, "9779672a4880ae57213ad8cb09174a6a53a4ebee61753bc353102001b71097db", 0x1, 0x20, 0x6fe, 0x9, 0x10, 0x4, 0x5, 0x8})
futex(&(0x7f0000000280)=0x1, 0x1, 0x2, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300)=0x1, 0x1)
ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000000)={0x6b8, "f44f47b227db9855628d8c585aec275896f74fea8e39e1f31a85f6589d344441", 0x5, 0x200, 0x8000, 0x8, 0x4, 0x3, 0x3, 0x9})
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r7, 0x400, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4002)
17:17:48 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x3, 0x4)
pread64(r0, 0x0, 0x0, 0x0)
r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x208000, 0x0)
ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000080)=0x20)
[ 528.911868] binder: 18834:18841 ioctl 40046203 0 returned -22
17:17:48 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044323, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:48 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046205, 0x0)
17:17:48 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x5, &(0x7f0000000040)=[{0x3, 0x4, 0x1, 0x5}, {0xf59, 0xfb, 0x9, 0x7f}, {0xbdd, 0x6, 0x1f, 0xfffffffa}, {0x0, 0x9, 0xf9, 0x14b3a8c5}, {0x2, 0x20, 0x9, 0x4}]})
r3 = socket$alg(0x26, 0x5, 0x0)
ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x90, 0x2})
bind$alg(r3, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x58)
17:17:48 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044324, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 529.130746] binder: 18882:18895 ioctl 40046205 0 returned -22
17:17:49 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x1e)
17:17:49 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00')
r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x600040, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
r12 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xf8, 0xa39c37ef544ccbf7)
r13 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40204}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x44, 0x7, [{0x8, 0x1, r2}, {0x8, 0x1, r5}, {0x8, 0x1, r8}, {0x8, 0x1, r11}, {0x8}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r16}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1000}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x1)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:17:49 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
17:17:49 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044325, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 531.023466] Bluetooth: hci0: command 0x1003 tx timeout
[ 531.028868] Bluetooth: hci0: sending frame failed (-49)
[ 533.103460] Bluetooth: hci0: command 0x1001 tx timeout
[ 533.108882] Bluetooth: hci0: sending frame failed (-49)
[ 535.183486] Bluetooth: hci0: command 0x1009 tx timeout
17:17:58 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000000c0)={"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"})
17:17:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046206, 0x0)
17:17:58 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044326, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:58 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00'})
r6 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x2000, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r6, 0xc0506617, &(0x7f0000000240)=ANY=[@ANYBLOB="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"])
r7 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
write$cgroup_type(r7, &(0x7f0000000040)='threaded\x00', 0x9)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, {0x5, 0x3f, 0x1, 0x91, 0x1e, 0x3}, 0xffe1, 0x8}, 0xe)
r8 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x10000, 0x0)
setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f0000000180)={0x8, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
openat$cgroup_int(r11, &(0x7f0000000380)='cpu.weight.nice\x00', 0x2, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
17:17:58 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x1e)
17:17:58 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x2000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x5c3402, 0x0)
r4 = socket$kcm(0x29, 0x1000000000002, 0x0)
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r4, 0x89e1, &(0x7f0000000240)={r5})
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x13c5)
r6 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000000280)={"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"})
ioctl$FIONREAD(r6, 0x541b, &(0x7f0000000000))
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
17:17:58 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
bind$alg(r4, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x1e)
[ 539.567258] binder: 19121:19123 ioctl 40046206 0 returned -22
17:17:58 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046208, 0x0)
17:17:58 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80044327, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:17:59 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
17:17:59 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30)
17:17:59 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046244, 0x0)
[ 539.837807] binder: 19144:19146 ioctl 40046244 0 returned -22
[ 541.663679] Bluetooth: hci0: command 0x1003 tx timeout
[ 541.669109] Bluetooth: hci0: sending frame failed (-49)
[ 543.743459] Bluetooth: hci0: command 0x1001 tx timeout
[ 543.748890] Bluetooth: hci0: sending frame failed (-49)
[ 545.823553] Bluetooth: hci0: command 0x1009 tx timeout
17:18:09 executing program 5:
socket$isdn_base(0x22, 0x3, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:18:09 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80086601, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = dup3(r0, 0xffffffffffffffff, 0x80000)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000500)={{0x6, 0x6, 0x56c7, 0x4, 'syz0\x00', 0x10000}, 0x0, [0x7, 0x2, 0x1, 0xfff, 0x80000000, 0x1, 0x3, 0x3f, 0x2, 0x1, 0x6, 0x2, 0xffffffff, 0x4, 0x20, 0xfffffffffffffc00, 0xfffffffffffffffb, 0x2, 0x849, 0xa000000000, 0x0, 0x1, 0x0, 0x1f, 0x3c, 0x8, 0x0, 0x401, 0x7, 0x8, 0x4, 0x4, 0x2, 0x0, 0xffffffffffff76ac, 0x10001, 0x9, 0x9, 0x100000000, 0x9, 0x0, 0x100000000, 0x8000, 0x3b93, 0x102, 0x3, 0x167, 0x7fff, 0x7, 0x8000, 0x5, 0xffff, 0x6, 0x7f, 0x4, 0x1, 0x8, 0xffffffff, 0x0, 0xb9, 0x1, 0x7, 0xff, 0x7, 0x273c, 0x1c, 0x0, 0x80000001, 0x2, 0x5ed1, 0x1, 0x1, 0x6, 0x0, 0x10000, 0x0, 0xffffffff00000000, 0x58, 0xf7fe, 0x6, 0x0, 0x2, 0x80000000, 0x0, 0x2, 0x1, 0xd6f, 0x9, 0x4, 0x2a0c, 0x5, 0x4453, 0x4, 0x200, 0xba, 0x9, 0x101, 0x100000001, 0xfffffffffffffff8, 0x3, 0x1000, 0x20000000, 0x5, 0x0, 0x1f, 0x4, 0x6f, 0x0, 0x1, 0x7, 0x400, 0x1f, 0x2, 0x3, 0x1, 0x4, 0x9, 0x0, 0x1f, 0x0, 0x2, 0x8, 0x3, 0x1ff, 0x800, 0x9, 0x89, 0x8], {0x0, 0x989680}})
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:18:09 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
17:18:09 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40049409, 0x0)
17:18:09 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000100)=""/124)
fsetxattr$security_capability(r1, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x3, 0x8}, {0x4, 0x8}]}, 0x14, 0x1)
ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000080)={0x8, 0x7, 0x4, 0x0, {0x0, 0x7530}, {0x1, 0x0, 0x7f, 0x0, 0x0, 0x4, "84ab10a9"}, 0x81, 0x2, @offset=0x7fff, 0x4})
pread64(r0, 0x0, 0x0, 0x0)
syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0xffffffffffffff00, 0x484000)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000001c0)=0x7, 0x4)
17:18:09 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40086602, 0x0)
17:18:09 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x1, 0xb, 0x1, "be3deff84275663817f267322a9b8aeaf8d85e67a5dd9aed103a5baa37297bff", 0x30395056})
syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2000000000000000, 0xa00)
17:18:09 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x80087601, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:09 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
17:18:09 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={<r2=>0x0, 0x2c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8001, @loopback, 0x9}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e22, @multicast1}}, [0xec58, 0x19c61077, 0x81, 0x5, 0x0, 0x3, 0x6, 0x72e, 0x2, 0x3, 0x1, 0x80, 0x7ff, 0x1, 0x3]}, &(0x7f00000001c0)=0x100)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:18:09 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x9c90042631761306)
write$P9_RRENAME(r1, &(0x7f0000000180)={0x7, 0x15, 0x1}, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x1000)
r6 = fcntl$dupfd(r5, 0x0, 0xffffffffffffffff)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0xbc18, 'syz1\x00', 0x7})
recvfrom$x25(r6, &(0x7f00000002c0), 0x0, 0x40, &(0x7f0000000300)={0x9, @null=' \x00'}, 0x12)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
write$P9_RXATTRWALK(r4, &(0x7f0000000140)={0xf, 0x1f, 0x1}, 0xf)
getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000080)=""/176, &(0x7f0000000000)=0xb0)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000240), &(0x7f0000000280)=0x4)
[ 549.971162] binder: 19355:19360 ioctl 40086602 0 returned -22
[ 551.913402] Bluetooth: hci0: command 0x1003 tx timeout
[ 551.918895] Bluetooth: hci0: sending frame failed (-49)
[ 553.983490] Bluetooth: hci0: command 0x1001 tx timeout
[ 553.988931] Bluetooth: hci0: sending frame failed (-49)
[ 556.063485] Bluetooth: hci0: command 0x1009 tx timeout
17:18:19 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x0, 0x8, 0x3, 0x800, 0xe, 0x59, 0x3f, 0xf4, 0x1b01c0, 0x8001, 0x200, 0x6})
17:18:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40087602, 0x0)
17:18:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044306, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:19 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
r1 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x193df361d69af609)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:18:19 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='\x00\x00\x02\x00', 0x40000004004c, 0x206080)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4)
pread64(r0, 0x0, 0x0, 0x0)
17:18:19 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
syz_open_dev$sndtimer(0x0, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:19 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socket$inet6_tcp(0xa, 0x1, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
ioctl$TIOCMIWAIT(r8, 0x545c, 0x0)
r9 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
fsetxattr$security_smack_transmute(r9, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612)
[ 560.070582] binder: 19495:19507 ioctl 40087602 0 returned -22
17:18:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0044308, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
ioctl$sock_ax25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]})
17:18:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x4020940d, 0x0)
17:18:19 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
[ 562.143382] Bluetooth: hci0: command 0x1003 tx timeout
[ 562.148815] Bluetooth: hci0: sending frame failed (-49)
[ 564.223459] Bluetooth: hci0: command 0x1001 tx timeout
[ 564.229081] Bluetooth: hci0: sending frame failed (-49)
[ 566.303441] Bluetooth: hci0: command 0x1009 tx timeout
17:18:29 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={<r4=>r0})
getsockopt$ax25_int(r4, 0x101, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1000000003)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r3, 0xc0305616, &(0x7f0000000180)={0x0, {0x6, 0xffffffcd}})
17:18:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x80086601, 0x0)
17:18:29 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0045878, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:29 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000000))
17:18:29 executing program 3:
socket$alg(0x26, 0x5, 0x0)
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:29 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@short={0xb, @dev, @bcast}, &(0x7f0000000080)=0x1c, 0x1800)
connect$rose(r1, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default]}, 0x40)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x10080, 0x0)
ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x25)
pread64(r0, 0x0, 0x0, 0x0)
17:18:29 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0045878, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:29 executing program 3:
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
[ 570.294331] binder: 19636:19644 ioctl 80086601 0 returned -22
17:18:29 executing program 5:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x400000, 0x0)
ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f0000000100)={0x4, 0x6, {0x54, 0x5, 0x6, {0x3, 0x9}, {0x20, 0x6}, @period={0x58, 0xbbb, 0x800, 0x4, 0xfffe, {0x7, 0x7, 0xfff, 0x6}, 0x5, &(0x7f00000000c0)=[0x6a06, 0x6, 0x6, 0x75c, 0x3]}}, {0x54, 0x81, 0x0, {0xfe01, 0x9}, {0x8, 0x9}, @const={0x6, {0x0, 0x9}}}})
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x1)
17:18:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x80087601, 0x0)
17:18:29 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104307, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:29 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0xb38dc9033fe15a0f)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$netlink(0x10, 0x3, 0x9)
fsetxattr$security_ima(r0, &(0x7f00000003c0)='security.ima\x00', &(0x7f0000000400)=@sha1={0x1, "5dbd7bc8f549a0bd5a98ba20e9ca1d0d7ad87224"}, 0x15, 0x3)
r5 = socket(0x28, 0x2, 0x0)
connect$unix(r5, 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00')
sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='o8\x00', @ANYRES16=r6, @ANYBLOB="01012cbd7000fddbdf250d0000000800060004000200040001000c00050008000100756470000c0006000400020004000200"], 0x3}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000a1d1)
sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4012000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x1f8, r6, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0000000}]}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'ipddp0\x00'}}]}, @TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x68, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x91ca}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x68, 0x7, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3f}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x24}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x383c}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x10}, 0x8048)
ioctl$KVM_GET_REG_LIST(r3, 0xc008aeb0, &(0x7f0000000000)={0x4, [0x5, 0x20, 0x1, 0x9]})
17:18:29 executing program 3:
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:29 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104309, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 570.563206] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pig=19668 comm=syz-executor.1
[ 570.584811] binder: 19669:19672 ioctl 80087601 0 returned -22
17:18:29 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0045878, 0x0)
[ 570.637511] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=43 sclass=netlink_audit_socket pig=19668 comm=syz-executor.1
17:18:30 executing program 3:
socket$alg(0x26, 0x5, 0x0)
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:30 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc010430a, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:30 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x240000000000002, 0x5adb3f2cfb3e5e64)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000080)=""/127, &(0x7f0000000000)=0x7f)
17:18:30 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0045878, 0x0)
17:18:30 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
fcntl$dupfd(r7, 0x0, r6)
r8 = syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x1, 0x2)
r9 = fcntl$dupfd(r8, 0x2f09118878fc34c5, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x2, 0x2)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x403)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
r16 = fcntl$dupfd(r15, 0x0, r14)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r16, 0x8912, 0x7ffffffc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r17=>0xffffffffffffffff, <r18=>0xffffffffffffffff})
r19 = fcntl$dupfd(r18, 0x0, r17)
ioctl$PERF_EVENT_IOC_ENABLE(r19, 0x8912, 0x400200)
ioctl$sock_inet_SIOCDELRT(r19, 0x890c, &(0x7f00000000c0)={0x0, {0x2, 0x4a1e, @broadcast}, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xf316fe7b0af26303, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080)='\xff\xcd\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x10001, 0xfffffeffffffffff, 0x7})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
r22 = fcntl$dupfd(r21, 0x0, r20)
ioctl$PERF_EVENT_IOC_ENABLE(r22, 0x8912, 0x400200)
bind$alg(r22, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
[ 572.543495] Bluetooth: hci0: command 0x1003 tx timeout
[ 572.548957] Bluetooth: hci0: sending frame failed (-49)
[ 574.623504] Bluetooth: hci0: command 0x1001 tx timeout
[ 574.628915] Bluetooth: hci0: sending frame failed (-49)
[ 576.703453] Bluetooth: hci0: command 0x1009 tx timeout
17:18:40 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f00000000c0)={0x8, 0x10, &(0x7f0000000180)="38c8c0c24beefc4123bba7ccd59aeb0e77e30b1355792e20c604315bce6a384a823c843a725d69f1df8147c204866c08b7eb0923c2f2a321949919d4cd61c3295a35046a8c0f11f859cda15b0bd6109a3ad22a3146251210f3a0304fa1f8dcd7fc91f4509f4b40e0410861917c2aa952e0843e277884406d8fd77bfc4885c6c665e1ec0e653163974d16ff743c0edbeadfb4779fe16144a2", {0x1000, 0x6, 0x34424752, 0x1, 0x2, 0x9, 0x1, 0x1}})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000040))
17:18:40 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)
pread64(r0, 0x0, 0x0, 0x0)
17:18:40 executing program 3:
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:40 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104325, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:40 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0046209, 0x0)
17:18:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
clock_gettime(0x0, &(0x7f0000000040)={<r4=>0x0, <r5=>0x0})
sendmsg$can_bcm(r3, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000100)={&(0x7f0000000080)={0x3, 0x40, 0x2, {0x77359400}, {r4, r5/1000+10000}, {0x3, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1, 0x1}, 0x2d, 0x1, 0x0, 0x0, "427d57d277f8399e3af628c3136d46166c484da8824c5b692260e439b6016eb0fe866ffea4a89e150703872a81ac231aba563fda252d83ae53b397e4edbf3f5f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20010881}, 0x20000000)
r6 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x6, 0xc00)
setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f00000001c0)={0x7}, 0x1)
[ 581.154793] binder: 19907:19911 ioctl c0046209 0 returned -22
17:18:40 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc010432c, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:40 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'netdevsim0\x00', {0x2, 0x4e23, @broadcast}})
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:18:40 executing program 3:
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:40 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc018620b, 0x0)
17:18:40 executing program 3:
socket$alg(0x26, 0x5, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:40 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104360, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 581.328470] binder: 19928:19930 ioctl c018620b 0 returned -14
[ 583.263494] Bluetooth: hci0: command 0x1003 tx timeout
[ 583.269004] Bluetooth: hci0: sending frame failed (-49)
[ 585.343527] Bluetooth: hci0: command 0x1001 tx timeout
[ 585.348945] Bluetooth: hci0: sending frame failed (-49)
[ 587.423502] Bluetooth: hci0: command 0x1009 tx timeout
17:18:50 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0xfa)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KDDELIO(r3, 0x4b35, 0x7)
17:18:50 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104363, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0189436, 0x0)
17:18:50 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000180)={<r12=>r11})
bind$x25(r12, &(0x7f00000001c0)={0x9, @remote={[], 0x1}}, 0x12)
fcntl$dupfd(r5, 0x0, r4)
r13 = timerfd_create(0x2, 0x81000)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={<r14=>0x0}, &(0x7f00000002c0)=0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0xff, 0x5, 0x81, 0x5, 0x0, 0x2, 0x42000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x3, @perf_config_ext={0x7, 0x401}, 0x441, 0x5000000000, 0x2, 0x5, 0xad, 0xb15, 0xdac8}, r14, 0x0, r17, 0x0)
r18 = dup3(r13, r4, 0x80000)
ioctl$USBDEVFS_GETDRIVER(r18, 0x41045508, &(0x7f0000000000)={0x38000000, "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"})
17:18:50 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:50 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x0)
r1 = getegid()
r2 = getgid()
r3 = getegid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x141000, 0x8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
r7 = accept4$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x1c, 0x80400)
fstat(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setgid(r8)
setgroups(0x6, &(0x7f0000000000)=[r1, r2, r3, 0x0, 0xffffffffffffffff, r8])
17:18:50 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0189436, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:50 executing program 3:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:50 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc020660b, 0x0)
17:18:50 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x23)
17:18:50 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x182680, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x12)
read(r0, &(0x7f0000000100)=""/255, 0xff)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000000), &(0x7f00000000c0)=0xffffffffffffff72)
17:18:50 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc020660b, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:18:50 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:18:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0xc0306201, 0x0)
17:18:51 executing program 3:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:51 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4000, 0x0)
ioctl$VT_DISALLOCATE(r1, 0x5608)
syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x8000, 0xfffffffffffffffd)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x4, 0x24, [0x6, 0x1000, 0xfffff37f, 0x8, 0x8, 0x229, 0x6e3, 0x3ff, 0x8000]})
bind$alg(r0, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-aes-ce\x00'}, 0x41)
17:18:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0404309, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 591.782638] binder: 20188:20190 ioctl c0306201 0 returned -14
17:18:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x2)
17:18:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x2, &(0x7f00000001c0)})
17:18:51 executing program 3:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:51 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x5, 0x4, 0x20, 0x5}, {0x1, 0x9, 0x0, 0x2c}, {0x33fd, 0x90, 0x8, 0x8}]}, 0x10)
17:18:51 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
pread64(r2, 0x0, 0x0, 0x0)
[ 591.988729] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 592.013732] binder: 20311:20312 ioctl 40046207 2 returned -1
17:18:51 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x3)
17:18:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x3, &(0x7f00000001c0)})
17:18:51 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:51 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
write$cgroup_int(r9, &(0x7f0000000040)=0x5, 0xfffffffffffffef4)
17:18:51 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = fcntl$dupfd(r3, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$TIOCSCTTY(r4, 0x540e, 0x63)
17:18:51 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
[ 592.558602] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:18:51 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x5, &(0x7f00000001c0)})
[ 592.602752] binder: 20434:20435 ioctl 40046207 3 returned -1
17:18:51 executing program 1:
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$alg(r2, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:18:51 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0xd0, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0x5, 0x2, 0x2c}, @fda={0x66646185, 0x0, 0x0, 0x21}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}, @exit_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000100)=""/85, 0x55, 0x2, 0x17}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}, 0x1040}, @register_looper, @increfs={0x40046304, 0x2}, @enter_looper, @decrefs={0x40046307, 0x2}, @increfs_done={0x40106308, 0x2}, @increfs={0x40046304, 0x3}], 0x2c, 0x0, &(0x7f0000000340)="01302279c734ec3bd0005f07d907ec7f7e9d251a738e1cd9db4f5ebb59749298e4540364f64b1e82f17c5a08"})
r7 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r7, 0x0, 0x0, 0x0)
17:18:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x4)
17:18:52 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:52 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x6, &(0x7f00000001c0)})
17:18:52 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x110081)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x8, 0x8, 0x7fff, 0xdf, 0x425, 0xff})
pread64(r0, 0x0, 0x0, 0x0)
ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000100))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000140)={0x1}, 0x4)
17:18:52 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f0000000440)={<r2=>0x0, <r3=>0x0})
recvmmsg(r1, &(0x7f0000000580)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/74, 0x4a}, {&(0x7f0000000100)=""/35, 0x23}, {&(0x7f0000000140)=""/117, 0x75}, {&(0x7f00000001c0)=""/178, 0xb2}], 0x4, &(0x7f00000002c0)=""/133, 0x85}, 0x4}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)=""/11, 0xb}, {&(0x7f00000003c0)=""/23, 0x17}], 0x2, &(0x7f0000000500)=""/93, 0x5d}, 0x100}], 0x2, 0x0, &(0x7f0000000600)={r2, r3+30000000})
[ 592.800159] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 592.834338] binder: 20459:20462 ioctl 40046207 4 returned -1
17:18:52 executing program 3:
syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:18:52 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x5)
[ 593.007591] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 593.030604] binder: 20516:20534 ioctl 40046207 5 returned -1
[ 594.703520] Bluetooth: hci0: command 0x1003 tx timeout
[ 594.709302] Bluetooth: hci0: sending frame failed (-49)
[ 596.783588] Bluetooth: hci0: command 0x1001 tx timeout
[ 596.789013] Bluetooth: hci0: sending frame failed (-49)
[ 598.863498] Bluetooth: hci0: command 0x1009 tx timeout
17:19:02 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:02 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x8, &(0x7f00000001c0)})
17:19:02 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r0, 0x0, 0x0, 0x2)
17:19:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x6)
17:19:02 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000180)={0xc, 0x8}, 0x10)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:19:02 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x200841, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)={&(0x7f0000000240)='./file0\x00', 0x0, 0x18}, 0x10)
r6 = socket$inet6_sctp(0xa, 0x10000000005, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [<r7=>0x0]}, &(0x7f000095dffc)=0x8)
r8 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0)
mq_timedsend(r8, &(0x7f0000000200)="6e66aa4bdbe2916895ce0145fed88ad5552d72ace659974d0feb9bdc57b4bdb37e85788f9a517b7970a1f5402621288f90d56af4f5ff4c46", 0x38, 0xfffffffffffffff9, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000019c0)={r7}, &(0x7f0000001a40)=0xc)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000000c0)={<r9=>r7, 0x6}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r9, 0xffffffff}, &(0x7f0000000180)=0x8)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:19:02 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 602.909282] kcapi: manufacturer command 8 unknown.
[ 602.920087] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 602.943788] binder: 20592:20593 ioctl 40046207 6 returned -1
17:19:02 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x7)
17:19:02 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x12, &(0x7f00000001c0)})
[ 603.058034] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 603.089240] binder: 20608:20610 ioctl 40046207 7 returned -1
17:19:02 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$dupfd(r10, 0x0, r9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
fcntl$dupfd(r12, 0x0, r11)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
r17 = fcntl$dupfd(r16, 0x0, r15)
ioctl$PERF_EVENT_IOC_ENABLE(r17, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r22=>0xffffffffffffffff, <r23=>0xffffffffffffffff})
fcntl$dupfd(r23, 0x0, r22)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r24=>0xffffffffffffffff, <r25=>0xffffffffffffffff})
r26 = fcntl$dupfd(r25, 0x0, r24)
ioctl$PERF_EVENT_IOC_ENABLE(r26, 0x8912, 0x400200)
write$P9_RLERRORu(r4, &(0x7f00000003c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[@ANYRESHEX=r5, @ANYRES64=r1, @ANYPTR64], @ANYPTR64=&(0x7f00000000c0)=ANY=[@ANYRES16=r8, @ANYRESOCT=r10, @ANYRESHEX], @ANYRESOCT=0x0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES16=r11, @ANYRESOCT=r18, @ANYRESOCT=r5, @ANYRESOCT, @ANYRESDEC, @ANYRES64=r13], @ANYRESOCT=r17, @ANYRES64=0x0, @ANYRESOCT=r10, @ANYRES16=r17, @ANYPTR64=&(0x7f0000000100)=ANY=[], @ANYPTR64=&(0x7f0000000200)=ANY=[@ANYRES32=r21, @ANYRES32=r0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYBLOB="f6c3ab41b264ebff7ede8a007849f3606273c735a08846dea044681df9c6e3bcd7e0db34283e6055a559540ef139c713f2704e662264bd21b871f6dc7bc65d3e03aa82fa42c9c77db43d666eb53e072f1125febf41469053410b588b44b8a6ffd2219c542693e470223f974f3a020aaddc8661aaaf51912ae22b3fe37ba211040f20b537dd0dc80515f9280dbc6d1f277c9ff5f37bd18cd8ee180c5867ea0f64a5dc85", @ANYPTR, @ANYRES32=r10, @ANYRES64=r23, @ANYRESHEX=r26], @ANYRESDEC, @ANYRES64=0x0, @ANYRESHEX], @ANYRES16=0x0], 0x31)
17:19:02 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:02 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0xa)
[ 603.149990] kcapi: manufacturer command 18 unknown.
17:19:02 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x2c, &(0x7f00000001c0)})
[ 603.241723] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 603.266184] binder: 20625:20626 ioctl 40046207 a returned -1
[ 603.328881] kcapi: manufacturer command 44 unknown.
17:19:03 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:03 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x101000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000040)={r5})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
setsockopt$inet_tcp_int(r4, 0x6, 0x11, &(0x7f0000000100)=0x9, 0x4)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000000000000fcffffff020000000000000000000000000000000000800000000000008100000000000000000000000300000000000000000000000100000006000000000000000000000000000000000000000000000000000000ff010000000000018000000000000000000059c0ca958c9cc5d2c2e4f6800000090000000400"/153])
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:19:03 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x10)
[ 603.795887] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 603.802204] binder: 20737:20738 ioctl 40046207 10 returned -1
[ 605.023431] Bluetooth: hci0: command 0x1003 tx timeout
[ 605.028973] Bluetooth: hci0: sending frame failed (-49)
[ 607.103504] Bluetooth: hci0: command 0x1001 tx timeout
[ 607.109052] Bluetooth: hci0: sending frame failed (-49)
[ 609.183401] Bluetooth: hci0: command 0x1009 tx timeout
17:19:12 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:12 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0x5})
17:19:12 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
setsockopt(r0, 0x7, 0x3f, &(0x7f0000000000)="6c5eabc91748539f290f6e01c3e529bd19e0f35c45197288183f1933ccab160fd22f9a2e12cb3a2f8d1d41a87343b76aeb636154bb5ba5a953c72a06d6a3e2c34436e5b5", 0x44)
17:19:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x48)
17:19:12 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x1)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r3, 0xc018620c, &(0x7f0000000000))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x102201, 0x0)
ioctl$DRM_IOCTL_GEM_OPEN(r6, 0xc010640b, &(0x7f00000000c0)={0x0, <r8=>0x0, 0x9})
r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4, 0x0)
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000180)={r8, 0x80000, r9})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r6)
pread64(r0, 0x0, 0x0, 0x0)
17:19:12 executing program 1:
r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x20000)
ioctl$USBDEVFS_RESETEP(r0, 0x80045503, &(0x7f0000000040)={0x2})
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r3, 0xc08c5334, &(0x7f0000000240)={0x1, 0xa93, 0x5, 'queue0\x00', 0x1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
fcntl$dupfd(r8, 0x0, r7)
r9 = dup(r3)
syz_init_net_socket$llc(0x1a, 0x3, 0x0)
bind$alg(r9, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0xffffffffffffff90)
[ 613.167804] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 613.197768] binder: 20749:20751 ioctl 40046207 48 returned -1
17:19:12 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x4500, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:12 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x0, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x4c)
17:19:12 executing program 2:
socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
futimesat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={{0x0, 0x7530}, {0x0, 0x7530}})
r3 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x13f, 0xa}}, 0x20)
clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
pread64(r3, 0x0, 0x0, 0x0)
17:19:12 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000140)={0x80000000, 0x102, "b5ea0ba6e8b96022026cb913f5d225f5ff3bd4a13a355445d44e6f08384594cd", 0x2, 0xffff, 0x2, 0x7, 0x6, 0x200, 0x2d, 0xf7, [0x10000, 0x0, 0x7, 0x1ff]})
17:19:12 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
r6 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xff, 0x200)
bind$rds(r6, 0xffffffffffffffff, 0x0)
getsockname$unix(r5, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0xff06)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
[ 613.421725] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:19:12 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
[ 613.468620] binder: 20869:20870 ioctl 40046207 4c returned -1
17:19:12 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x60)
[ 613.567995] kcapi: driver "" not loaded.
[ 613.590628] kcapi: driver "" not loaded.
17:19:12 executing program 1:
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
bind$alg(r2, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha1\x00'}, 0x58)
17:19:12 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
17:19:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8})
[ 613.668271] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 613.691690] binder: 20889:20890 ioctl 40046207 60 returned -1
17:19:13 executing program 1:
r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0x3, 0x286042)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000001c0)={0xff1c, 0x800f66, 0xfffffbff, "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"})
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800000, 0x0)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00')
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40124008}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x412, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4101, 0x0, {0x18, 0x17, {0x8, 0x2, @l2={'eth', 0x3a, 'veth1\x00'}}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x61ef86facde38a58)
bind$alg(r1, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:19:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x68)
17:19:13 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}})
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0)
[ 613.826357] kcapi: driver "" not loaded.
[ 613.873057] kcapi: driver "" not loaded.
[ 613.882114] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 613.906230] binder: 20905:20906 ioctl 40046207 68 returned -1
17:19:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000580))
r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/checkreqprot\x00', 0x8000, 0x0)
r3 = syz_open_dev$swradio(&(0x7f00000005c0)='/dev/swradio#\x00', 0x1, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c0001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\a'], 0x48}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000054c0)=ANY=[@ANYBLOB="740000002400070500"/20, @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000080001007366710048000229c6090032d0ed64f3c3545aaf6e000085a4e4ebb5ef6700"/96], 0x74}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=@newtfilter={0x84, 0x2c, 0x701, 0x0, 0x0, {0x0, r7, {}, {}, {0x8008}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x58, 0x2, [@TCA_U32_SEL={0x14}, @TCA_U32_POLICE={0x40, 0x6, @TCA_POLICE_TBF={0x3c}}]}}]}, 0x84}}, 0x0)
bind$packet(r3, &(0x7f0000000600)={0x11, 0x10, r7, 0x1, 0x7, 0x6, @local}, 0x14)
setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000480)=0x3ff, 0xfffffdb2)
sendmsg(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="b241fbe85877bc0126bc602ac919a5d910a63c041ca43b4e05b297894a68339862e01701e142f3bf00f4409496bfe6dc79c39311c66696f257394fc8f67bf108de9f230a561ef03868bf8f49d42fc38b5007f8bd83c11cf38f03d3a5c3585764060673f38c7165a6104527cde8b23de2e2d47b79bcf8d1956d9d41dcc00164bb4fa89f10ebb6aa11fd17efac1caf7e473320110ed885093f31af6a6ef59833ca21fc7d96a1c64e3fcf0cecc4977fe1f84bbf4119ec86194e4be66b95025c84864fef17d6288757d741aed293bf712f7083eeeb7279307242761c81a9e98850c4c41457abd04144b4e6f5d24f127b", 0xee}, {&(0x7f0000000240)="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", 0xfd}, {&(0x7f0000000000)="ba37ff0219e39176ff4d4abbe1d4f3bfd4ff84b2c274cf86cde1330334830f97f18caccffa2c70623a45586f10f0ef9bed19972d65b1dabbcdf154e840b5067e1af98775c7ef9be750d0abd95454401f6d215e3fcbc85b6110b360c211222416614f1f56e5f0eb7c0d8532462f479c2a02fdcfcff7d1fe4aac216f0a98ef16d12c5877ff320c7d5e3633c3029332f94ac39e3cf5315fb00b8474e84b6fa876d96a712789f1284d90a41ea4", 0xab}, {&(0x7f0000000340)="c34cfed860752aeeb5a66a82670e72d052dc37e5f73e5b40b6e68fd5cb151c3d038da45a6518b5c905da93e0f0702271cae13c4258cb0bd3593f6945e9aa7433281e7e8576a7486c7c96ebaeef7db2e8b2441c587dc82a2415859206", 0x5c}, {&(0x7f00000003c0)="87c3922951d8c65059b29e63c4e5c99cda20b301eeec0bcc10c0b5f262e38f87bbd2feafc8b53426d26e1e34ce04c99e8174dd876092c7a0a827f63c77dbdd39047a1bd6c6c9c9b97bd591b99fe3263fac5293042078a8edb6cd1ac83665a1ba8be8a87c85d3c9e8", 0x68}], 0x5}, 0x40040)
[ 614.031729] kcapi: driver "" not loaded.
[ 614.085711] kcapi: driver "O��붪�� �~G3 ?1�jn��3" not loaded.
17:19:13 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800b5055e0bcfe87b0071")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_subtree(r1, &(0x7f0000000600)=ANY=[@ANYPTR64], 0xfe9d)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xcf})
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0xae15, 0xd8a})
write$cgroup_pid(r2, &(0x7f0000000000), 0xfffffea6)
17:19:13 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$nl_crypto(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14140e284}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=@getstat={0xe0, 0x15, 0x8, 0x70bd27, 0x25dfdbff, {{'sha384-arm64\x00'}, [], [], 0x3400, 0x2800}, ["", "", ""]}, 0xe0}}, 0x1)
getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:19:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x6c)
17:19:13 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
17:19:13 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff})
r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x2, 0x0)
accept$netrom(r2, &(0x7f00000002c0)={{0x3, @rose}, [@null, @default, @bcast, @null, @default, @bcast, @rose, @netrom]}, &(0x7f0000000080)=0x96)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = fcntl$dupfd(r5, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r9, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$EVIOCGABS3F(r6, 0x8018457f, &(0x7f0000003140)=""/4082)
[ 614.408906] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 614.433452] binder: 21026:21027 ioctl 40046207 6c returned -1
17:19:13 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
[ 614.498500] kcapi: driver "" not loaded.
[ 614.534870] kcapi: driver "" not loaded.
17:19:13 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x74)
17:19:13 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xd63, 0x111201)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000080)={0x2, 0x3, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x4, 0x480, 0x148, 0x148, 0x148, 0x148, 0x290, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x110, 0x148, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x305, 0x1, 0x1, [0x20, 0xff, 0x7, 0x0, 0x5, 0x40, 0x1, 0x4, 0x3, 0x88d, 0x4, 0xfffb, 0x6, 0x5, 0x2000, 0x9], 0xb}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x80, 0xff}, {0x7, 0x76, 0x81}, {0x401, 0x3, 0x1}, 0xa75, 0xffff}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x10001, 0x2, 0x2, 0x0, 0x3}}, @common=@unspec=@cpu={0x28, 'cpu\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x1d, 0xa, 0x7, 0x81, 0x4, 0x10, 0x508}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
17:19:14 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_ENUM_DV_TIMINGS(r0, 0xc0945662, &(0x7f0000000040))
17:19:14 executing program 3:
r0 = syz_open_dev$sndtimer(&(0x7f0000000280)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}})
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
17:19:14 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x30000)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 614.709473] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 614.763672] binder: 21142:21143 ioctl 40046207 74 returned -1
[ 614.770109] kcapi: driver "" not loaded.
17:19:14 executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
restart_syscall()
17:19:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x7a)
17:19:14 executing program 0:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000680)={@my=0x0})
rt_sigsuspend(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:14 executing program 3:
r0 = socket$inet(0x2, 0x200000000003, 0x19)
sendmmsg$inet(r0, &(0x7f0000003080)=[{{&(0x7f0000000180)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000001980)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x2, 0x0)
[ 614.962249] kcapi: driver "" not loaded.
[ 614.966519] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 614.966534] binder: 21164:21165 ioctl 40046207 7a returned -1
17:19:14 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f00000000c0)="080035055e0bcfe87b0071")
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000007c0)={'vcan0\x00', <r3=>0x0})
recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
connect(r1, &(0x7f0000000740)=@ll={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x80)
sendmsg$can_bcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="01000000000000000000000000000001", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a0440a32e9cd1c148b82ac1eb72d3a35b5d54cf7bcd5bb3e0805c1392b3b27a1852e79d6f5166c01c6975d2d482effebbe5b171bf9aa2ab8f09b177286f1fe78019411575d248f7dbdc4bd8c6c3695b61c7b1504c2a5b56c4b866efd2bd4b55e1ad9bb043bf2189922b89fe0a8709c9d062d427985096e9da156f5f663b22c7ef449848328e7bc6dd84c272b138a668fc6143154b577bc52d8cca27300000c592c25cc0a162bc22f83bdc80a7ad20b9327cbcf2614e767c20329e1a7bbf7c315dc344f06929715ae50fb661b887be1029d27069571b64f4938af10cde470"], 0x48}}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0300"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="000000000100000000895b58bd00"/24], 0x48}}, 0x0)
[ 615.024606] kcapi: driver "" not loaded.
17:19:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x300)
[ 615.095895] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 615.148980] binder: 21268:21273 ioctl 40046207 300 returned -1
17:19:14 executing program 2:
syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x2, 0x2)
17:19:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$dupfd(r2, 0x0, r1)
r3 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r4=>0x0}, &(0x7f0000cab000)=0xc)
r5 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r5, r4, 0x0)
fsetxattr$security_capability(r2, &(0x7f0000000100)='security.capability\x00', &(0x7f0000000180)=@v3={0x3000000, [{0x8001, 0x1}, {0xca, 0x9}], r4}, 0x18, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00'}, 0x10)
r8 = fcntl$dupfd(r6, 0x406, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r9 = socket$bt_rfcomm(0x1f, 0xea6927190306f79d, 0x3)
r10 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
r11 = fcntl$dupfd(r1, 0x406, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200)
fsetxattr$security_ima(r11, &(0x7f0000000080)='security.ima\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="0400fe09000000b77208bab7d475db2c"], 0x10, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000240)={'syz0', "f0fc94ea2acc360b75"}, 0xd)
setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4)
ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x100)
accept$alg(r8, 0x0, 0x0)
17:19:14 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x500)
17:19:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
[ 615.304294] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 615.363476] binder: 21288:21289 ioctl 40046207 500 returned -1
17:19:14 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
write$P9_RWSTAT(r8, &(0x7f00000004c0)={0x7, 0x7f, 0x1}, 0x7)
getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000440), &(0x7f0000000480)=0x8)
signalfd4(r3, &(0x7f0000000000)={0x5}, 0x8, 0xc0800)
r9 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r10=>0xffffffffffffffff}, 0xdd79473d4bfe637}}, 0x20)
write$RDMA_USER_CM_CMD_CONNECT(r9, &(0x7f0000000180)={0x6, 0x118, 0xfa00, {{0x7f, 0x8, "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", 0x46, 0x8, 0x5a, 0xff, 0x1, 0x7f, 0xe, 0x1}, r10}}, 0x120)
write$P9_RREADLINK(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x10)
r11 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r11, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:14 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
17:19:14 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x600)
[ 615.472038] kcapi: driver "����Ӌ��f��Y+���4��W�71�ωkz" not loaded.
17:19:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCLINUX4(r3, 0x541c, &(0x7f00000000c0))
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="83000000530f00006c95f97176224aaa73d66e7fef45a546860294edea90a2345a28e367f464130c814922296aef82d827e6d976d3d341562d5051ca044d6483328dbcf5396c7ccd37ab7e6a01b4aca32c0157617cee34f119da181c8ee321964100a0dd5244f6a4b83adbefead875dc9a27c744b0006a10696420a1c451de910b0c06"], 0x200)
17:19:14 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:14 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
17:19:14 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
[ 615.618830] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:19:15 executing program 3:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 615.675241] binder: 21309:21313 ioctl 40046207 600 returned -1
17:19:15 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000040)={0x9, &(0x7f0000000000)="3a09bd15fb24c59b0d0e5a37cc766f460320b79d01328871b1"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
ioctl$CAPI_MANUFACTURER_CMD(r5, 0xc0104320, &(0x7f0000000100)={0x7, &(0x7f0000000180)="670e093cdc06692df205d36973a2b6cdc9bce5f082a7b816def49c4d06c335c95d36005506b3d082eace6b89568cc7cf067372c787156cf090148343b52e257e3ac560f0ca8d42828780"})
17:19:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x700)
17:19:15 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:19:15 executing program 1:
socket$alg(0x26, 0x5, 0x0)
17:19:15 executing program 3:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 615.876800] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 615.883190] binder: 21331:21332 ioctl 40046207 700 returned -1
17:19:15 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:19:15 executing program 3:
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0xa00)
17:19:15 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff})
r4 = accept4$alg(r2, 0x0, 0x0, 0x0)
r5 = fcntl$dupfd(r4, 0x406, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000300)={0xa152, 0x2, 0x2}, 0xc)
write$RDMA_USER_CM_CMD_ACCEPT(r5, &(0x7f0000000180)={0x8, 0x120, 0xfa00, {0x0, {0xae, 0x10000, "35026ab505aa60c9434de3ac9eb9dc7e5a083ce6363c492f237fe6b37f4823cd68c5041848a30d0d059753305b7aa9437b257187ab440f39f50fded9c4c02deed73cda84af78d404167713dd5b0e8e13c9f23a3b91109ff19988be0ede9470717d2bb59231ad6e3c2ced43388ef5267187df6b232f608e810a7eed219e2589a518d59d91b4d22aea9c3a27bf53a4c39a11215df6af095c92cefe42bf9dee6970161d3fbdf880110c891c73878bafa780f1663b21cdac61a3db6cac616d8d2dd4aaab8843919cee9c65a9f22b004d31eb03cff16a6dfe82d661bd4bc0d4f0a7899798058e8ad7184a7dc7905a7fd53e73a54e5a09cc87698e3ca046a97d0491b1", 0xf1, 0x6, 0x0, 0x1f, 0x1, 0x5, 0x20}}}, 0x128)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0xffffffffffffff91, 0xfa00, {0x0, &(0x7f0000000000), 0x2, 0x4}}, 0x20)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0xffffffffffffff7f)
17:19:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$SIOCAX25NOUID(r3, 0x89e3, &(0x7f0000000000)=0x1)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r4 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4)
[ 616.122545] kcapi: driver "" not loaded.
17:19:15 executing program 2:
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
[ 616.172196] kcapi: driver "�S0[z�C{%q��D9�����-��<ڄ�x�" not loaded.
[ 616.199346] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:19:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000100)={0xf000, 0x10000})
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x10000, 0x0)
write$P9_RRENAME(r4, &(0x7f0000000040)={0x7, 0x15, 0x2}, 0x7)
17:19:15 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:15 executing program 2:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
[ 616.235025] binder: 21351:21356 ioctl 40046207 a00 returned -1
17:19:15 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f0000000000)={0x6, 0x0, 0x4, 0x236320c5f331ad5a})
17:19:15 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x2000)
17:19:15 executing program 1:
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$dupfd(r3, 0x0, r2)
r4 = accept(r2, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80)
ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, &(0x7f00000000c0)={0x8, 0x81})
r5 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
bind$alg(r5, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x3e3)
[ 616.419623] kcapi: driver "" not loaded.
[ 616.445005] kcapi: driver "" not loaded.
17:19:15 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:15 executing program 2:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
[ 616.476794] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 616.526695] binder: 21381:21382 ioctl 40046207 2000 returned -1
17:19:15 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
fcntl$dupfd(r3, 0x0, r0)
getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f0000000140)=""/230, &(0x7f0000000000)=0xe6)
r7 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8)
ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:15 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000000)={0x1})
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
socket$inet6_udplite(0xa, 0x2, 0x88)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000340)=0x158)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
r15 = fcntl$dupfd(r14, 0x0, r13)
ioctl$PERF_EVENT_IOC_ENABLE(r15, 0x8912, 0x400200)
ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, &(0x7f00000000c0)={0x4, r15})
fcntl$dupfd(r12, 0x0, r11)
accept4(r11, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x80, 0x800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bcsf0\x00', r10})
17:19:15 executing program 2:
r0 = syz_open_dev$usbmon(0x0, 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
17:19:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x3f00)
17:19:16 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 616.685005] kcapi: driver "" not loaded.
17:19:16 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
17:19:16 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:16 executing program 3:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 616.797337] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 616.822396] binder: 21408:21409 ioctl 40046207 3f00 returned -1
17:19:16 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
fcntl$setflags(r0, 0x2, 0x0)
17:19:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x4800)
[ 616.931428] kcapi: driver "" not loaded.
17:19:16 executing program 1:
socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="5f223a3052371a82eb2c4ea171b86994b22618aa01039a6659655b71d5605f75b8b79e08056f8bcb1b958b71ba9995143ee32838eb87404e7b98490c355a2cf3d716fcfe83247e8ab933b7075ba9e270c8e5436e1bf3ef4151e064fe679ec346dceb222d3f514b5125eb1a29b283399880f55946e0dccb624f7d5b94f483e544e27a06ced0c583a5f7a6e4e0f16b3cc7dc808ca6c585d993d29b3fd44e86c2a4ebfcd54d950cb128ad71e2ab42e7302bc3ce9fc7ccb8b36d5ab3bd624c67de7eac0ef6d6421eba2b7ec22a1187eac26c4f5ea32231e8f0990fce26680ac72751ce9a8c44a9ea8fba429b3bad5df398b9fd218e80", 0xf4)
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x8836148b)
17:19:16 executing program 3:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:16 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='0\x00\x00\x00\x02\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)=ANY=[@ANYBLOB="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"])
ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x3, "166c3596abf10f51df3f81345fb7904dad1b99b1ef16ec9c42423fa8335db1ab", 0x1, 0xfffffff8, 0x0, 0x3200e0, 0x2})
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 617.072602] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 617.104312] binder: 21430:21432 ioctl 40046207 4800 returned -1
17:19:16 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x4c00)
17:19:16 executing program 1:
bind$alg(0xffffffffffffffff, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r0, 0x4, 0x46802)
io_setup(0x100000000000c333, &(0x7f0000000180)=<r1=>0x0)
ftruncate(r0, 0x48280)
io_submit(r1, 0x1ae, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)="d8f8baa20866350140842348311567b07cc97ad4eb385686f3f165a5e74db43c81db82a5bd8155361b7e12385fdd41d525143e6942b45aa1445db0baa5e30331c216eea2ff3c68e33a74e58f8545bcdf369533419f958786e79bd1ffd117f8b83d18bf44d6b463291de60d8de52567e88b4289c9d959f4c6935241e3e113f30c6c570898d0a215", 0x87}])
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video1\x00', 0x2, 0x0)
io_getevents(r1, 0x4, 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)={0x77359400})
17:19:16 executing program 3:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:16 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0104320, &(0x7f0000000100)={0x4, &(0x7f00000001c0)})
[ 617.305923] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 617.343547] binder: 21449:21451 ioctl 40046207 4c00 returned -1
17:19:17 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
17:19:17 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$CAPI_GET_MANUFACTURER(r3, 0xc0044306, &(0x7f0000000000)=0x5)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
ioctl$CAPI_GET_PROFILE(r6, 0xc0404309, 0xfffffffffffffffd)
17:19:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0)
17:19:17 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x6000)
17:19:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, <r4=>0x0}, &(0x7f0000000040)=0xc)
setgid(r4)
bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = fcntl$dupfd(r6, 0x0, r5)
ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = fcntl$dupfd(r9, 0x0, r8)
ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
sendmsg$can_bcm(r13, &(0x7f0000000640)={&(0x7f0000000540), 0x10, &(0x7f0000000600)={&(0x7f0000000580)={0x4, 0x400, 0x2, {0x0, 0x2710}, {}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x4, 0x2, 0x0, 0x0, "51b03e90191ac409"}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x40001)
getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000440), &(0x7f0000000500)=0x4)
recvmsg$kcm(r10, &(0x7f0000000380)={&(0x7f0000000080)=@xdp={0x2c, 0x0, <r14=>0x0}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000240)=""/199, 0xc7}], 0x2, &(0x7f0000000340)=""/49, 0x31}, 0x40002001)
ioctl$sock_inet6_SIOCDELRT(r7, 0x890c, &(0x7f00000003c0)={@local, @empty, @remote, 0x0, 0x2, 0x6, 0x100, 0x4, 0x10000, r14})
[ 617.758107] kcapi: driver "" not loaded.
17:19:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0)
[ 617.798330] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 617.813672] kcapi: driver "" not loaded.
[ 617.833602] binder: 21465:21466 ioctl 40046207 6000 returned -1
17:19:17 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socket$bt_cmtp(0x1f, 0x3, 0x5)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
r3 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r3, r2, 0x0)
request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r3)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r3, ':chain\x00'})
17:19:17 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x6800)
17:19:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
openat$userio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/userio\x00', 0x200000, 0x0)
r6 = fcntl$dupfd(r5, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x100, @loopback, 0x2}, 0x1c)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000000)={<r7=>0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x8, 0x20, 0x6, 0x1f, 0x5}, &(0x7f00000000c0)=0x98)
getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000100)={r7, 0x6, 0x4, 0x6}, &(0x7f0000000140)=0x10)
ioctl$BLKRESETZONE(r6, 0x40101283, &(0x7f00000001c0)={0x7fff, 0x3})
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
[ 618.002451] kcapi: driver "" not loaded.
17:19:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, 0x0)
[ 618.028301] kcapi: driver "" not loaded.
[ 618.081718] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
17:19:17 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000000)=""/238)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
fdatasync(0xffffffffffffffff)
[ 618.134622] binder: 21488:21489 ioctl 40046207 6800 returned -1
17:19:17 executing program 0:
r0 = socket$inet(0x2, 0x2, 0xe0)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x2}, &(0x7f0000000080)=0x8)
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x200, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)="53e0c03bc27a8a455aad810fd3b794e195ab39830a2ea3bcabc735659a2b0c6d91e8c6c8fdc8fe35f0ae7e578b102e7df203bdcba2a6ed1eebdb76ba20fd3bb3ec8fa8bb89a749cd9416954e7a00f30eca0be636b392557cb47529790bb76a9fb5597658fead14558956873dc6909c4feab2bbab5a"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = fcntl$dupfd(r3, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$CAPI_REGISTER(r4, 0x400c4301, &(0x7f0000000000)={0xfeffffff, 0x0, 0x2bf0})
[ 618.295136] kcapi: driver "S��;�z�EZ��ӷ�ᕫ9�
[ 618.295136] .����5e�+ " not loaded.
[ 618.384908] kcapi: driver "S��;�z�EZ��ӷ�ᕫ9�
[ 618.384908] .����5e�+ " not loaded.
17:19:17 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0)
pread64(r0, 0x0, 0x0, 0x0)
17:19:17 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f00000001c0)})
17:19:17 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x6c00)
17:19:17 executing program 1:
socket$alg(0x26, 0x5, 0x0)
r0 = socket(0x2, 0xa, 0x3f)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
r2 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r2, r1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
fcntl$dupfd(r4, 0x0, r3)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r3, 0x3d)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000014c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/5044, @ANYRES32=r1], 0x13b8}, 0x1, 0x0, 0x0, 0x4001}, 0x40000)
socket$nl_xfrm(0x10, 0x3, 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140))
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
bind$alg(0xffffffffffffffff, &(0x7f0000001540)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58)
17:19:17 executing program 0:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
write$capi20_data(r2, &(0x7f0000000140)={{0x10, 0x2, 0x87, 0x83, 0x3, 0x2}, 0xb8, "f9c35adb5954ebc79659c5b931e75c218827e447185910cf9e9e31e7ecd99494ea3819de09d5cac3691b62bed9a71760db96c75d728bbcf3071826c389d69414c88413a5f22e9f690a9d8b83c9a95aa7ac2651e59cd39a2524c9f1cb99c085af25e09143830aeef2210e99fcbeeed9436f2659de06f8586589a8e66a8f400be9a06304b489d5d3e83639d990c0d90a8fa80768df8dcbfb564c487a827e5fd123f2155c41a6f08a4c2dcaf5887cef1e647a7f4d6207cd2d49"}, 0xca)
r3 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0)
getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x2)
ioctl$CAPI_MANUFACTURER_CMD(r3, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f00000001c0)})
[ 618.694193] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 618.705493] kcapi: driver "�Co&Y��Xe���j�@ �c�����69ِ�" not loaded.
[ 618.719476] binder: 21514:21518 ioctl 40046207 6c00 returned -1
[ 618.734772] kcapi: driver "�Co&Y��Xe���j�@ �c�����69ِ�" not loaded.
17:19:18 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x7400)
17:19:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x116)
17:19:18 executing program 0:
openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff})
syz_open_dev$media(&(0x7f00000004c0)='/dev/media#\x00', 0x4, 0x90080)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000500)='cgroup.subtree_control\x00', 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
socket$can_bcm(0x1d, 0x2, 0x2)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$dupfd(r6, 0x0, r5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = fcntl$dupfd(r8, 0x0, r7)
ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200)
fcntl$dupfd(r9, 0x0, r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = fcntl$dupfd(r11, 0x0, r10)
ioctl$PERF_EVENT_IOC_ENABLE(r12, 0x8912, 0x400200)
r13 = fcntl$dupfd(r3, 0x0, r12)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
ioctl$VIDIOC_G_INPUT(r13, 0x80045626, &(0x7f0000000340))
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000480)={{0x64a7300738d09475, 0x0, 0xb6, 0x2, 0x800}})
r14 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x0, 0x0)
ioctl$KVM_SIGNAL_MSI(r14, 0x4020aea5, &(0x7f0000000300)={0x3000, 0x0, 0x9, 0x7f, 0x3ed})
openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x10000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r15 = socket(0x10, 0x803, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x60000, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
r16 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r16, &(0x7f0000000100)={0xa, 0x4e20}, 0x1c)
setsockopt$sock_int(r16, 0x1, 0xf, &(0x7f0000000000)=0x5, 0x4)
r17 = socket$tipc(0x1e, 0x2, 0x0)
r18 = dup(r17)
ioctl$PERF_EVENT_IOC_ENABLE(r18, 0x8912, 0x400200)
17:19:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair(0x8, 0x4, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
r3 = open(&(0x7f00000000c0)='./file0\x00', 0x2001, 0x10)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x101000, 0x0)
r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x100000, 0x0)
sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x108000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000229bd7000fcdbdf25050000000c00060002000000000000000c00020000020000000000001c00070008000100", @ANYRES32=r3, @ANYBLOB="08fb31224b2b5e250173fcb9d8ccf2d9a156f1f207000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100000000000c00020007000000000000000c0002000900000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x20040081}, 0x4)
17:19:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0x0, &(0x7f00000001c0)})
[ 618.928312] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 618.953081] binder: 21532:21535 ioctl 40046207 7400 returned -1
17:19:18 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x7a00)
[ 619.094849] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 619.117594] binder: 21547:21549 ioctl 40046207 7a00 returned -1
17:19:18 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:19:18 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x101080, 0x0)
ioctl$CAPI_GET_PROFILE(r1, 0xc0404309, &(0x7f0000000040)=0x7d0f)
ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000080)=0x1)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/194)
17:19:18 executing program 1:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x13, 0x7, 0x7, 0x1e, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_address={0x3, 0x17, 0x6c, 0x0, 0x0, @in={0x2, 0x4e24, @remote}}, @sadb_key={0x19, 0x8, 0x5f0, 0x0, "330574f408e9ddb66310f8a3661935369439f410bdb76f5f00e43b3e91bdca824ec97975a2c58e6fe8571f543bf958e8f0951287ccf447b1eb247ace26aded26751a55c7c52299ad25dc05c6aba1337c0bbe2f040a24243180180958099c7740e165a07fcfdbe4194370ce797c133f2d83013c0bc32e43fc3756fc57267bf03d07a183a6932063474fe4cb2a18e748e561da5a45ce097a9b109fa8f1070edab49e94ee49351f903149b63c7e61d607e8581c5a7e5f814cede5dedcc5c405"}]}, 0xf0}}, 0x44002)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
17:19:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, 0x0})
17:19:18 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x8000a0)
17:19:18 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
fcntl$dupfd(r5, 0x0, r4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/mls\x00', 0x0, 0x0)
write$P9_RLERROR(r9, &(0x7f00000005c0)={0x13, 0x7, 0x2, {0xa, '/dev/ptmx\x00'}}, 0x13)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
r10 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0xa0, 0x0, &(0x7f0000000440)=[@register_looper, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/103, 0x67, 0x1, 0x20}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/191, 0xbf, 0x0, 0x1d}, @fda={0x66646185, 0x9, 0x1, 0x2d}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fda={0x66646185, 0x2, 0x2, 0x17}, @ptr={0x70742a85, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x3e}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000400)={0x0, 0x20, 0x48}}, 0x8c0}, @free_buffer={0x40086303, r10}], 0x77, 0x0, &(0x7f0000000500)="1b1c966c8785f8a85108ad6d9d417ce70fa6eb94f847956100d0be2c7265bfd1e16302dc0f30ee75a2e3e39ef014a70d228b00ee7556db0ef61967a4e5306d0bc5a339e213b7c60d87eca93e92c9a56d2dfad8f24a40466f5e5a450cb99d5b92b96f4fa0a8364c39626a7ba2ae99c9a0c9ef0dc3c830ac"})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
r13 = fcntl$dupfd(r12, 0x0, r11)
ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r13, 0x84, 0x1a, &(0x7f0000000600)={<r14=>0x0, 0xc5, "db959a25df11f5508f0e807f1058ae7112d1eaea0481c3aa9f43ec09ed32b7d41239d9d703b24c02865356f73cdd33db0a61ce36beac3bebc66f6499913c71dfbb722ae0a8484d7fbf26362fd893949bdbe1805bf413a67b3b53b1fecfb85edd2dfc1705bfd657118de931e3c588a7a785d17fecb035fa7cfeb445394a8c0cd237595e32e7ce3c9e34b7ac14bc7d138545a688e48f3a8459ee507f6a1665bfbdf4681e0ac9e14df1662feb3f4e8d8a0d4020d7c3e70c99380349b72d9545f13f3985bf8492"}, &(0x7f0000000700)=0xcd)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000740)={r14, 0x6, 0x1, [0x5]}, &(0x7f0000000780)=0xa)
r15 = gettid()
tkill(r15, 0x1002000000013)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r16=>0x0)
rt_tgsigqueueinfo(r15, r16, 0x13, &(0x7f00000000c0)={0x26, 0xeee, 0x2})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
17:19:18 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$nfc_llcp(r3, 0x118, 0x2, &(0x7f0000000000)=""/30, 0x1e)
[ 619.555975] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 619.565590] kcapi: driver "" not loaded.
[ 619.571944] audit: type=1400 audit(1571591958.872:185): avc: denied { map } for pid=21557 comm="syz-executor.5" path="socket:[54890]" dev="sockfs" ino=54890 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1
[ 619.577060] binder: 21560:21562 ioctl 40046207 8000a0 returned -1
17:19:18 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, 0x0})
[ 619.638747] kcapi: driver "" not loaded.
17:19:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='\x00\x00\x00\x00S\x00', 0x400, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
ftruncate(0xffffffffffffffff, 0x1)
17:19:19 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:19:19 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0xffffff)
17:19:19 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha256,ctr(des3_ede))\x00'}, 0x58)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000000)=[0x52])
17:19:19 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, 0x0})
17:19:19 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fcntl$dupfd(r2, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000000), 0x4)
17:19:19 executing program 2:
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x0)
17:19:19 executing program 3 (fault-call:1 fault-nth:0):
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:19 executing program 2 (fault-call:1 fault-nth:0):
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
[ 619.913267] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 619.952267] binder: 21592:21594 ioctl 40046207 ffffff returned -1
[ 619.955803] kcapi: driver "" not loaded.
[ 620.030444] kcapi: driver "" not loaded.
17:19:21 executing program 1:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00')
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431)
r5 = fcntl$dupfd(r4, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = fcntl$dupfd(r7, 0x0, r6)
ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = fcntl$dupfd(r10, 0x0, r9)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r12=>0xffffffffffffffff})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
fcntl$dupfd(r14, 0x0, r13)
r15 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x400000, 0x0)
fcntl$dupfd(r11, 0x203, r15)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={<r16=>0xffffffffffffffff, <r17=>0xffffffffffffffff})
fcntl$dupfd(r17, 0x0, r16)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r18=>0xffffffffffffffff, <r19=>0xffffffffffffffff})
fcntl$dupfd(r19, 0x0, r18)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r20=>0xffffffffffffffff, <r21=>0xffffffffffffffff})
fcntl$dupfd(r21, 0x0, r20)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYRES64, @ANYRESHEX=r8, @ANYRES16=r2, @ANYRESHEX=0x0, @ANYRES64=r10, @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRES64=r5], @ANYPTR64, @ANYRESDEC=r10, @ANYRESHEX=r12, @ANYPTR=&(0x7f0000000040)=ANY=[]], 0x6}, 0x1, 0x0, 0x0, 0x1000}, 0x90)
r22 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r22, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(morus1280-avx2)\x00'}, 0xfffffffffffffd0c)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r23=>0xffffffffffffffff, <r24=>0xffffffffffffffff})
r25 = fcntl$dupfd(r24, 0x0, r23)
ioctl$PERF_EVENT_IOC_ENABLE(r25, 0x8912, 0x400200)
ioctl$RTC_SET_TIME(r25, 0x4024700a, &(0x7f0000000040)={0x1, 0x2f, 0x3, 0xe, 0x8, 0x6, 0x4, 0x97})
17:19:21 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x1000000)
17:19:21 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
17:19:21 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff8)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
r4 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r4, r3, 0x0)
r5 = request_key(&(0x7f0000000300)='cifs.idmap\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)='\x00', r4)
r6 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r7=>0x0}, &(0x7f0000cab000)=0xc)
r8 = add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$chown(0x4, r8, r7, 0x0)
keyctl$search(0xa, r5, &(0x7f0000000580)='keyring\x00', &(0x7f00000005c0)={'syz', 0x3}, r8)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
fcntl$dupfd(r10, 0x0, r9)
accept4(r9, &(0x7f0000000240)=@nfc_llcp, &(0x7f00000002c0)=0x80, 0x80000)
add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r5)
add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="80ea1ae6fe79c4a5fc687990778b46501e8fe795c8c09b46c107c5", 0x1b, r1)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
17:19:21 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x0)
17:19:21 executing program 5:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x40082, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x1)
r1 = gettid()
tkill(r1, 0x1002000000013)
ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x100000000)
waitid(0x1, r1, 0x0, 0x1, &(0x7f00000000c0))
17:19:21 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x7ffffffff000, 0x0)
17:19:21 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x2, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 622.591834] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 622.616254] kcapi: driver "keyring" not loaded.
[ 622.627550] binder: 21615:21616 ioctl 40046207 1000000 returned -1
17:19:22 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x67b6, &(0x7f0000000040)=0x4)
r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000140)='/\xffroc/capi\xff\xc2api\r\x89#\x00ci\x00', 0x9e9003, 0x0)
r2 = accept(r1, &(0x7f0000000240)=@rc, &(0x7f00000002c0)=0x80)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r2, 0xc080661a, &(0x7f0000000300)={{0x2, 0x0, @descriptor="1f52199f52ba30c0"}})
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@empty, 0x1eb, 0x0, 0x3, 0xf, 0x6, 0x5}, &(0x7f00000001c0)=0x20)
creat(&(0x7f0000000080)='./file0\x00', 0x17)
ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2)
ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000200)={0x4, 0x10001, 0xfffffffa, 0xccfa, 0x3, 0x81})
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f0000000200)})
17:19:22 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x2000000)
17:19:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0xf0ffffff7f0000, 0x0)
[ 622.826894] kcapi: driver "" not loaded.
17:19:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0x7ffffffff000)
17:19:22 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x4b47, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 622.901302] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 622.914052] Bluetooth: Error in BCSP hdr checksum
17:19:22 executing program 0:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x2103, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0xc0104320, &(0x7f0000000100)={0xb, &(0x7f00000001c0)})
[ 622.950358] binder: 21643:21644 ioctl 40046207 2000000 returned -1
17:19:22 executing program 2:
r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x800)
pread64(r0, 0x0, 0x0, 0xf0ffffff7f0000)
17:19:22 executing program 4:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r4=>0x0}, &(0x7f0000000200)=0x7)
setreuid(0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x3000000)
17:19:22 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x4b49, &(0x7f0000000100)={0xa, &(0x7f00000001c0)})
[ 623.083551] kcapi: driver "" not loaded.
[ 623.136673] binder: BINDER_SET_CONTEXT_MGR bad uid 16777215 != 0
[ 623.168552] binder: 21663:21664 ioctl 40046207 3000000 returned -1
[ 623.173705] Bluetooth: Error in BCSP hdr checksum
[ 623.423596] Bluetooth: Error in BCSP hdr checksum
[ 623.685431] Bluetooth: Error in BCSP hdr checksum
[ 623.943605] Bluetooth: Error in BCSP hdr checksum
[ 624.209484] Bluetooth: Error in BCSP hdr checksum
[ 624.463675] Bluetooth: Error in BCSP hdr checksum
[ 624.713470] Bluetooth: hci0: command 0x1003 tx timeout
[ 624.724859] Bluetooth: Error in BCSP hdr checksum
[ 624.989497] Bluetooth: Error in BCSP hdr checksum
[ 625.243732] Bluetooth: Error in BCSP hdr checksum
[ 625.503769] Bluetooth: Error in BCSP hdr checksum
[ 626.783441] Bluetooth: hci0: command 0x1001 tx timeout
[ 626.788959] Bluetooth: hci0: sending frame failed (-49)
[ 628.863456] Bluetooth: hci0: command 0x1009 tx timeout
[ 632.945080] ==================================================================
[ 632.952802] BUG: KASAN: use-after-free in kfree_skb+0x38/0x390
[ 632.958771] Read of size 4 at addr ffff888098b4cd64 by task syz-executor.5/21625
[ 632.969812]
[ 632.971727] CPU: 0 PID: 21625 Comm: syz-executor.5 Not tainted 4.19.80 #0
[ 632.978669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 632.988333] Call Trace:
[ 632.990920] dump_stack+0x172/0x1f0
[ 632.994545] ? kfree_skb+0x38/0x390
[ 632.998175] print_address_description.cold+0x7c/0x20d
[ 633.003448] ? kfree_skb+0x38/0x390
[ 633.007059] kasan_report.cold+0x8c/0x2ba
[ 633.011209] check_memory_region+0x123/0x190
[ 633.015625] kasan_check_read+0x11/0x20
[ 633.019611] kfree_skb+0x38/0x390
[ 633.023052] bcsp_close+0xc7/0x130
[ 633.026596] hci_uart_tty_close+0x1ea/0x250
[ 633.030989] ? hci_uart_close+0x50/0x50
[ 633.035139] tty_ldisc_close.isra.0+0xaf/0xe0
[ 633.039631] tty_ldisc_kill+0x4b/0xc0
[ 633.043676] tty_ldisc_release+0xc6/0x280
[ 633.050155] tty_release_struct+0x1b/0x50
[ 633.054307] tty_release+0xbcb/0xe90
[ 633.058042] ? put_tty_driver+0x20/0x20
[ 633.062041] __fput+0x2dd/0x8b0
[ 633.065329] ____fput+0x16/0x20
[ 633.068612] task_work_run+0x145/0x1c0
[ 633.072491] do_exit+0x994/0x2fa0
[ 633.075950] ? get_signal+0x384/0x1fc0
[ 633.079939] ? mm_update_next_owner+0x660/0x660
[ 633.084601] ? _raw_spin_unlock_irq+0x28/0x90
[ 633.089080] ? get_signal+0x384/0x1fc0
[ 633.092952] ? _raw_spin_unlock_irq+0x28/0x90
[ 633.100047] do_group_exit+0x135/0x370
[ 633.103937] get_signal+0x3ec/0x1fc0
[ 633.108377] ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[ 633.113494] do_signal+0x95/0x1960
[ 633.117057] ? lock_downgrade+0x880/0x880
[ 633.121211] ? setup_sigcontext+0x7d0/0x7d0
[ 633.125521] ? do_send_specific+0x156/0x250
[ 633.129842] ? exit_to_usermode_loop+0x43/0x2c0
[ 633.134506] ? do_syscall_64+0x53d/0x620
[ 633.138831] ? exit_to_usermode_loop+0x43/0x2c0
[ 633.143506] ? lockdep_hardirqs_on+0x415/0x5d0
[ 633.148083] ? trace_hardirqs_on+0x67/0x220
[ 633.152408] exit_to_usermode_loop+0x244/0x2c0
[ 633.157107] do_syscall_64+0x53d/0x620
[ 633.162850] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 633.170227] RIP: 0033:0x459a59
[ 633.174112] Code: 70 c0 00 48 83 fb 10 7c 6e 49 c7 c4 00 00 00 00 48 89 f7 48 83 fb 20 0f 87 c8 00 00 00 48 8d 44 1e f0 eb 17 f3 0f 6f 0f 66 0f <74> c8 66 0f d7 d1 f3 0f b8 d2 49 01 d4 48 83 c7 10 48 39 c7 76 e4
[ 633.193024] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8
[ 633.200717] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a59
[ 633.207971] RDX: 0000000000000000 RSI: 0001002000000013 RDI: 000000000000023c
[ 633.215317] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 633.222579] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 633.229860] R13: 00000000004c94f7 R14: 00000000004e0cd0 R15: 00000000ffffffff
[ 633.237143]
[ 633.238772] Allocated by task 2344:
[ 633.242398] save_stack+0x45/0xd0
[ 633.245849] kasan_kmalloc+0xce/0xf0
[ 633.249544] kasan_slab_alloc+0xf/0x20
[ 633.253438] kmem_cache_alloc_node+0x144/0x710
[ 633.258020] __alloc_skb+0xd5/0x5f0
[ 633.261637] bcsp_recv+0x8c7/0x13a0
[ 633.265249] hci_uart_tty_receive+0x225/0x530
[ 633.269736] tty_ldisc_receive_buf+0x15f/0x1c0
[ 633.274313] tty_port_default_receive_buf+0x7d/0xb0
[ 633.279328] flush_to_ldisc+0x222/0x390
[ 633.283316] process_one_work+0x989/0x1750
[ 633.287543] worker_thread+0x98/0xe40
[ 633.291327] kthread+0x354/0x420
[ 633.294688] ret_from_fork+0x24/0x30
[ 633.298393]
[ 633.300011] Freed by task 2344:
[ 633.303273] save_stack+0x45/0xd0
[ 633.306707] __kasan_slab_free+0x102/0x150
[ 633.310921] kasan_slab_free+0xe/0x10
[ 633.314708] kmem_cache_free+0x86/0x260
[ 633.318685] kfree_skbmem+0xcb/0x150
[ 633.322388] kfree_skb+0xf0/0x390
[ 633.325823] bcsp_recv+0x2d8/0x13a0
[ 633.329445] hci_uart_tty_receive+0x225/0x530
[ 633.333932] tty_ldisc_receive_buf+0x15f/0x1c0
[ 633.338515] tty_port_default_receive_buf+0x7d/0xb0
[ 633.343528] flush_to_ldisc+0x222/0x390
[ 633.347486] process_one_work+0x989/0x1750
[ 633.351701] worker_thread+0x98/0xe40
[ 633.355982] kthread+0x354/0x420
[ 633.361687] ret_from_fork+0x24/0x30
[ 633.365376]
[ 633.367000] The buggy address belongs to the object at ffff888098b4cc80
[ 633.367000] which belongs to the cache skbuff_head_cache of size 232
[ 633.380162] The buggy address is located 228 bytes inside of
[ 633.380162] 232-byte region [ffff888098b4cc80, ffff888098b4cd68)
[ 633.392018] The buggy address belongs to the page:
[ 633.396941] page:ffffea000262d300 count:1 mapcount:0 mapping:ffff8880aa347ac0 index:0xffff888098b4c8c0
[ 633.406382] flags: 0x1fffc0000000100(slab)
[ 633.410615] raw: 01fffc0000000100 ffffea000259d008 ffffea0002530148 ffff8880aa347ac0
[ 633.418494] raw: ffff888098b4c8c0 ffff888098b4c000 0000000100000008 0000000000000000
[ 633.426362] page dumped because: kasan: bad access detected
[ 633.432048]
[ 633.433659] Memory state around the buggy address:
[ 633.438585] ffff888098b4cc00: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[ 633.445933] ffff888098b4cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 633.453272] >ffff888098b4cd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[ 633.460611] ^
[ 633.467098] ffff888098b4cd80: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb
[ 633.474447] ffff888098b4ce00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 633.481795] ==================================================================
[ 633.489145] Disabling lock debugging due to kernel taint
[ 633.494902] Kernel panic - not syncing: panic_on_warn set ...
[ 633.494902]
[ 633.502291] CPU: 1 PID: 21625 Comm: syz-executor.5 Tainted: G B 4.19.80 #0
[ 633.510596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 633.519930] Call Trace:
[ 633.522525] dump_stack+0x172/0x1f0
[ 633.526137] ? kfree_skb+0x38/0x390
[ 633.529743] panic+0x26a/0x50e
[ 633.532953] ? __warn_printk+0xf3/0xf3
[ 633.536823] ? kfree_skb+0x38/0x390
[ 633.540433] ? preempt_schedule+0x4b/0x60
[ 633.544571] ? ___preempt_schedule+0x16/0x18
[ 633.549077] ? trace_hardirqs_on+0x5e/0x220
[ 633.553381] ? kfree_skb+0x38/0x390
[ 633.557088] kasan_end_report+0x47/0x4f
[ 633.561041] kasan_report.cold+0xa9/0x2ba
[ 633.565168] check_memory_region+0x123/0x190
[ 633.569585] kasan_check_read+0x11/0x20
[ 633.573541] kfree_skb+0x38/0x390
[ 633.576975] bcsp_close+0xc7/0x130
[ 633.580498] hci_uart_tty_close+0x1ea/0x250
[ 633.584811] ? hci_uart_close+0x50/0x50
[ 633.588767] tty_ldisc_close.isra.0+0xaf/0xe0
[ 633.593243] tty_ldisc_kill+0x4b/0xc0
[ 633.597025] tty_ldisc_release+0xc6/0x280
[ 633.601157] tty_release_struct+0x1b/0x50
[ 633.605286] tty_release+0xbcb/0xe90
[ 633.608986] ? put_tty_driver+0x20/0x20
[ 633.612941] __fput+0x2dd/0x8b0
[ 633.616205] ____fput+0x16/0x20
[ 633.619465] task_work_run+0x145/0x1c0
[ 633.623340] do_exit+0x994/0x2fa0
[ 633.626775] ? get_signal+0x384/0x1fc0
[ 633.630644] ? mm_update_next_owner+0x660/0x660
[ 633.635297] ? _raw_spin_unlock_irq+0x28/0x90
[ 633.639770] ? get_signal+0x384/0x1fc0
[ 633.643637] ? _raw_spin_unlock_irq+0x28/0x90
[ 633.648116] do_group_exit+0x135/0x370
[ 633.651982] get_signal+0x3ec/0x1fc0
[ 633.655688] ? _raw_spin_unlock_irqrestore+0x6b/0xe0
[ 633.660779] do_signal+0x95/0x1960
[ 633.664301] ? lock_downgrade+0x880/0x880
[ 633.668432] ? setup_sigcontext+0x7d0/0x7d0
[ 633.672749] ? do_send_specific+0x156/0x250
[ 633.677058] ? exit_to_usermode_loop+0x43/0x2c0
[ 633.681704] ? do_syscall_64+0x53d/0x620
[ 633.685744] ? exit_to_usermode_loop+0x43/0x2c0
[ 633.690394] ? lockdep_hardirqs_on+0x415/0x5d0
[ 633.694957] ? trace_hardirqs_on+0x67/0x220
[ 633.699262] exit_to_usermode_loop+0x244/0x2c0
[ 633.703830] do_syscall_64+0x53d/0x620
[ 633.707706] entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 633.712876] RIP: 0033:0x459a59
[ 633.716060] Code: Bad RIP value.
[ 633.719406] RSP: 002b:00007fb8d0686c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8
[ 633.727105] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 0000000000459a59
[ 633.734446] RDX: 0000000000000000 RSI: 0001002000000013 RDI: 000000000000023c
[ 633.741708] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000
[ 633.748966] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb8d06876d4
[ 633.756221] R13: 00000000004c94f7 R14: 00000000004e0cd0 R15: 00000000ffffffff
[ 633.765069] Kernel Offset: disabled
[ 633.768729] Rebooting in 86400 seconds..