00012001000010069703665727370106f03c1dfc72783616e0000000c00021b43848a7136c9927dffba770491864a092db8aefd4d"], 0x1}}, 0x0) getsockname(r0, &(0x7f0000000100)=@can={0x1d, 0x0}, &(0x7f0000000180)=0x80) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800002}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@ipv6_getaddr={0x6c, 0x16, 0x720, 0x70bd2b, 0x25dfdbfe, {0xa, 0x5f, 0x0, 0xc8, r2}, [@IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_ADDRESS={0x14, 0x1, @rand_addr="8e8bf3a2a169b3d6b5e766de7d79b23a"}, @IFA_FLAGS={0x8, 0x8, 0x2}, @IFA_FLAGS={0x8, 0x8, 0x20}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) [ 488.554147][T29743] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[29743] 14:28:57 executing program 1: socket$bt_rfcomm(0x1f, 0x3, 0x3) clock_getres(0xfffffffffffffff2, 0x0) 14:28:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000541b, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:28:57 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 488.634117][ T25] audit: type=1326 audit(1552228137.482:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29751 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:28:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b080003003000000081c89d1c6a33baee223bec36c9756fe52206bc47f4263c00fe3e2aebc82cdbc718445edb9cae9f499a288cda2bd45cde5be1ef23a53d8f68f611821ac032950ee9050c8b34c338eba47aa28a195bc7d4c57667b1eeaea3c6c44ca2b9fb5bd2d17f128b72d7f2a6530e0e9dba06e0b4d9a69eafe5e8b8db70fb4f647e9d8d21316a2f87de50b677a60814aac378f47abe4dd610e10c0f46f7ef0c7951b09980c1f963a5bc24d5f8b4be79314c310e1b01f5976951c560d5bb910ffbe6e4"], 0x1}}, 0x0) 14:28:57 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) io_setup(0x1, &(0x7f0000000100)=0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x9, @rand_addr="cb7e1a9986222a23281f9fe608e00e0b", 0x8}}, [0x3c, 0x7, 0x81, 0xffff, 0x2, 0x6, 0x2, 0x5, 0x8001, 0x7, 0x1, 0xcc, 0x9, 0x1, 0x400]}, &(0x7f00000003c0)=0x100) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000480)=@assoc_id=r3, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000640)={r0, &(0x7f00000004c0)="63ba930a24c049ace656ee5cc927408727e2d876a566225d99c3e1a2ffb8794fc93e4da76207dc89b232b8c6ff7e678b4cf798d74d5db6bf6e0dd76ab9723f31b2004656d5b9326f14758bb14fa2b2cfede6dd13bea5eb05b3344440", &(0x7f0000000540)=""/207}, 0x18) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={r3, 0x5}, &(0x7f0000000440)=0x8) io_pgetevents(r2, 0x5cd, 0x7, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x100}, 0x8}) [ 488.773140][T29770] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[29770] [ 489.420849][ T25] audit: type=1326 audit(1552228138.272:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29751 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:28:58 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x200000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:28:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[]}}, 0x0) 14:28:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000005421, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:28:58 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x6, {{0xa, 0x4e22, 0x1, @ipv4={[], [], @multicast2}, 0x1}}}, 0x84) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:28:58 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:28:58 executing program 1: clock_getres(0x7, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$CAPI_GET_PROFILE(r0, 0xc0404309, &(0x7f0000000040)=0x7) [ 489.535131][T29792] input: syz1 as /devices/virtual/input/input137 [ 489.548817][T29794] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[29794] 14:28:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x400000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r1, &(0x7f0000000040)="a22126f361c3bff36dbb9a5b9407e670b03abceed6b8", &(0x7f0000000080)=""/108}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r1, @ANYBLOB="c9afaa6c09aaa974693a89f0a73278939f8bfd0ecf3ef3426755870bd25f8fc441e7b564f84825724f80d62aa7f871b5bee01f4113d82fb597764a1791bfe1e9d17315c0e5d4c0db42d8b56b8c519f8c66ce32e3425f8f3295a18130ed98710086de5b10aad35d10a0c4ad8b29d51268e486c2337a3e71210511edcb5e28be242cde66cc74952f8bafb6e107e77598261c85f20c2ee8d9ee651ed083a7aca2db3a195ddc556387d4f811861342dc5fac37c70d3b0eef49a9a8311e13d1", @ANYBLOB="fd35709a46652222cd54326da6e4a09fd8a8455f0724e35e653fe6c9faab82b229a37318bb519ededb07bd253218b9945dca170b804b2a078d4c81888152b5a3ffe956f650fbe443548f2cb145633e0a1ba44b580c5345d20044655d4d858d5983c3313a9e373505c58116b9a0e04995d0cd1b799de3eca014d99932f17cbde81c6fcfcee5d99c7b585172a5ea", @ANYBLOB="75434b086638e3ce79fdde951f66f73e3b4cb6ebbfb35bdf97133e0f521f03a187652e128751db72bb633ca106e723e979c692d279712d7d9b57c2864c202121cae8023bc42854a9bcfce7ef22e86b30906d4a53e1e979e8e94b023c3cfa35335e4d64e17f08e571719a5e3bc45b7270decd2783ed2ffe80e001398242249a880071163ecb4b6eeb911ac7e7f8ef5eb04146e3fa84bb00d285c259684a24e68b1deea68aabb73aa262b40bf5d72b44ddea13e1b92ca73e8bca4d40ef431bad4aaae65906300de9bbfb0ffc992d03918f7bd366e955ac9e0871eaf70630e6ef4c65dd177ee6aa46c70324e037f06ca1f742a89378"]], 0x1}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000300)={r3, r4, r5}, 0xc) 14:28:58 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = socket(0x0, 0xffffffffffffffff, 0x0) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00') syz_genetlink_get_family_id$SEG6(&(0x7f0000000140)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2004010}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0xc00, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x8, 0x6, 0x9}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x5}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfff, 0x2, 0x4f4]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x400c014) modify_ldt$write(0x1, &(0x7f0000000180)={0x80000000, 0x0, 0x2400, 0x1, 0x7, 0x57c, 0x5, 0x100000000, 0xfffffffffffffff8, 0x2}, 0x10) [ 489.595639][ T25] audit: type=1326 audit(1552228138.452:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29802 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:28:58 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 489.643475][T29807] input: syz1 as /devices/virtual/input/input138 14:28:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000005450, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:28:58 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000007c0)=0xfffffffffffff000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000a30000000000200012001000190069700800030030000000"], 0x1}}, 0x0) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000000)) fcntl$notify(r0, 0x402, 0x11) 14:28:58 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3fffffffc0000, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c00)={0x0, @initdev, @multicast1}, &(0x7f0000001c40)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001c80)={r2, @multicast1, @rand_addr=0x5}, 0xc) r3 = request_key(&(0x7f0000000100)='rxrpc_s\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='/dev/midi#\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r3) [ 489.793449][T29819] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[29819] [ 490.244273][ C1] net_ratelimit: 18 callbacks suppressed [ 490.244279][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.255728][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 490.397396][ T25] audit: type=1326 audit(1552228139.252:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29802 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:28:59 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x300000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:28:59 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000040)) 14:28:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000040)=0x1) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:28:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b08000300300000258711d6c35600"], 0x1}}, 0x0) 14:28:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000005452, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:28:59 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 490.484359][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 490.490176][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:28:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) [ 490.524817][T29945] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[29945] [ 490.535928][T29940] input: syz1 as /devices/virtual/input/input139 14:28:59 executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000000)='selinux\x00', 0xffffffffffffffff}, 0x30) timer_create(0x7, &(0x7f0000000080)={0x0, 0x26, 0x0, @tid=r0}, &(0x7f00000000c0)) clock_getres(0xfffffffffffffff2, 0x0) [ 490.563110][ T25] audit: type=1326 audit(1552228139.412:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29952 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:28:59 executing program 1: clock_getres(0x3, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000040)=0xfffffffffffffff7) [ 490.644302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 490.650286][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:28:59 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000ffff00002000120010616e0000000c00021b0800030030000000bba8f8e2ad916f5f3a0b55f17d5afb74fabc5fb8bb434bd8bff1b877b412a3b6670a474dd8048cc47f605760b9509967ed7f47247f16678a59b684227f36dfe70f20f4537d955f0787db3700b11eb4af11400e4fb322c77ace0fd84f822240cce6609047d4e972c12c6e34bf3d1d89737914efddeb5b545419b8cd2113b068a202b329a494198a624398c8c2a6e9808734fb5d4592b1f49382fb4a1f5f6f095b4b04d3a4fdcd12248ba943a7b649cc7b3d1fa7f631e8f66ba3368612a91c9559"], 0x1}}, 0x200000000) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x4000) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000040)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace(0x10, r1) socketpair(0x1000002, 0xd, 0x5, &(0x7f0000000280)={0xffffffffffffffff}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dlm-control\x00', 0x0, 0x0) r3 = openat(r0, &(0x7f0000000340)='./file0\x00', 0x1fffd, 0xff) r4 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x12002, 0x0) munmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000) r5 = socket$caif_seqpacket(0x25, 0x5, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0x7fff, 0x1, 0x3, 0x0, 0x0, [{r3, 0x0, 0x5299}, {r4, 0x0, 0x3f}, {r5, 0x0, 0x8000000100000000}]}) 14:28:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2000, 0x0) lseek(r0, 0x3b, 0x3) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000000c0)=0x820, 0x4) ioctl$UI_GET_SYSNAME(r2, 0x8040552c, &(0x7f0000000100)) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:28:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000005460, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 490.854490][T30081] input: syz1 as /devices/virtual/input/input141 [ 490.977437][T30087] input: syz1 as /devices/virtual/input/input142 [ 491.284305][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 491.284341][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 491.290114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 491.301603][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 491.322064][ T25] audit: type=1326 audit(1552228140.172:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=29952 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:00 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x400000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:00 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000580)='/dev/null\x00', 0x2000, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000005c0)={0x3, 0x8c, "3cfc9480de6c6aa040cc5c9c7eddfbb0df730cdc2622b20af0c5defa0af00255d3346d48b3c75e7feb3ffc50792692997d642a6a4ad4943b8455fdbc3567beab3ccf5e432713d18511dcc038d12c2b22c665d80fe02ee96ff36f168120ee12d449d9074a297b3fd4779d60304afb04e9dcbeab4cfb95ee3a0b0c32d438a7589ad21639293d253a2e21fd56bb"}) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x101200, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000500)=ANY=[@ANYRES32=0x0, @ANYBLOB="390000009de36d60182fdb742cac3c4a76fa058a7dc042ca2d4855a10a5c234f1d241b9a638a86a8fb38fdc67d0da6bb5ca0d62f9f815404c85710097534b4dc047fa9fd6eb915ff"], &(0x7f0000000240)=0x41) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r2, 0x1, 0x30}, &(0x7f00000002c0)=0xc) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x400, 0x0) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000040)) getpid() ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f0000000200)={0x142, 0x7fffffff, 0x4}) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f00000001c0)={0x9, 0x1, 0x8}) timer_create(0x5, &(0x7f0000000480)={0x0, 0xa, 0x1, @thr={&(0x7f0000000380)="3dd6760fa70337d602e4ed00bfd0c53f412361040bed431422d381c08db668b28e74bc329985f4d6e1294d69", &(0x7f00000003c0)="191336e61dd5b1bc7c24fbb37455d4bf31313bf73280ce453d88c3f79c710b5171645830ef429384b6daeb8f1ce45885c29b23d39ee6a0e430b799b2eb13f02ee06aebf8882116892348b04d65ca2a96cccb3ffdd8b631fa595d18c3c96dad4787ca0a33e0a9829a560cb859261d4c39ab3393b8cf1427d92cfad5b723b0004d666e51ec4a7772ef3a64c74dc8831de264dd639e657b4aaa3f06f0b5d58d5a443f74047eaa52147e993bb064a975620a5d1510aa8ba17911bc59f395"}}, &(0x7f00000004c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000300)={0x7, 0x2, {0x3, 0x3, 0xffffffff, 0x0, 0x7fff}}) 14:29:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f00000011c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x0, 0x5, &(0x7f0000000080)=@raw=[@ldst={0x3, 0x2, 0x3, 0xa, 0xf, 0xfffffffffffffff4, 0xfffffffffffffffc}, @exit, @alu={0x7, 0x8, 0xf, 0x2, 0xa, 0x8, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x34}, @alu={0x4, 0x9, 0xc, 0xe, 0xec940c6653fb6255, 0x1, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x80000001, 0x1000, &(0x7f00000001c0)=""/4096, 0x41000, 0x1, [], r1, 0x1}, 0x48) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) 14:29:00 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008901, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 491.426755][T30100] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30100] [ 491.444744][T30098] input: syz1 as /devices/virtual/input/input143 [ 491.466921][ T25] audit: type=1326 audit(1552228140.322:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30111 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:00 executing program 1: clock_getres(0x5, 0x0) 14:29:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) fallocate(r0, 0x40, 0xf98, 0x3) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) [ 491.526463][T30113] input: syz1 as /devices/virtual/input/input144 14:29:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008904, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:00 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 14:29:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000020001000010069703665727370616e0000000c00021b080003003000000000002bf7b6b304c466233d13ae6646bacb395b245e1f6a42f595d96971a7db3656850e08d9da05bfb974184c4e49f4ca8f9678fbf34180782971e5b478a178f3434bde1f086a22aab728cbc3822c795b"], 0x1}}, 0x0) r1 = getpgrp(0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x3f, 0x200) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r3, r0}) 14:29:00 executing program 1: clock_getres(0xfffffffffffffff6, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) getresgid(&(0x7f0000000180)=0x0, &(0x7f00000001c0), &(0x7f0000000200)) chown(&(0x7f0000000000)='./file0\x00', r0, r1) 14:29:01 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x500000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) ioctl$KIOCSOUND(r1, 0x4b2f, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:01 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x204002, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000040)=0x3, 0x4) 14:29:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008905, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:01 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x46801) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000100)=0x4) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r1 = add_key(&(0x7f0000000140)='rxrpc\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000001c0)="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", 0x1000, 0xfffffffffffffffd) r2 = add_key(&(0x7f00000011c0)='logon\x00', &(0x7f0000001200)={'syz', 0x0}, &(0x7f0000001240)="976ac53ec5d87b79bf42edb707868ba575c5d1353bfa4fffc41316f731caeef86fbb3647176318c4bf2fda198b5cf433b74734cd4cad25c12083f16c33219d449197984345a571", 0x47, 0xfffffffffffffff8) keyctl$unlink(0x9, r1, r2) [ 492.359827][T30257] input: syz1 as /devices/virtual/input/input145 [ 492.385510][T30253] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30253] 14:29:01 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}, @in6={0xa, 0x4e21, 0x8000, @local, 0x1}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e23, 0x156, @dev={0xfe, 0x80, [], 0x1f}}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x3f, @dev={0xfe, 0x80, [], 0x22}, 0x81}], 0x94) 14:29:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000200012001000010400000000000000616e0000000c00021b080003003000000035a97a64a2eebae8c5e392e0ee9bf8b8a1887926fa08a8e3487fcd0a9fc5cdfe2113a31414a7e401059a3f6d892991d432815ec6ee63cf74eb7d6ede0160d768b399005b99fedd8a98482054b5f96e25e659eec3f4158d788f64a35308ac0b4ce0ed5935f7f5e2b10df30d445702739a0ff147e5e5f87da7078bbbbc0396965d033902d19508a8a52a8e762d4747d23703d48d8dd2ae69497a2a991d"], 0x1}}, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=@getnetconf={0x14, 0x52, 0x0, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0xfffffffffffffc60}, 0x1, 0x0, 0x0, 0x8bfc}, 0x4000040) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x2b1}) [ 492.418953][T30264] input: syz1 as /devices/virtual/input/input146 14:29:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008906, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB="28b27f6c4d4f7101e29f76dcf2e89904ca83ae7bf8dfddcee7cbd8cc02e8c7043a7ae230f0aeb90f4b273bae495f590ac0de7d40d5c0a1588118a9a8f0e2ebf1ed87bb42d836f9fce1c26f38040825d04682cc91bfcf48155f9f9827f283dad59fb3fa0ede5e4dfdf590a69e6b53ed688c6a91ef9c6340cf3e116af2d1cefd1e"], @ANYBLOB="81b88d48e1d94b6cc28d7ab19a55cc52069090289b54145208e840787986f3e47d566af8296bd533fec1b8d59aece4ce04d23176a06bd8e93b2a", @ANYRES32=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYPTR], 0x9}, 0x1, 0x0, 0x0, 0x3f}, 0xfffffffffffffffd) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) write$P9_RCLUNK(r1, &(0x7f0000000140)={0x7, 0x79, 0x1}, 0x7) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x7, {0x3}}, 0x18) socket$inet6(0xa, 0x4000000000000007, 0x6c5b) 14:29:01 executing program 1: syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x3fffc000000000, 0x141601) clock_getres(0xfffffffffffffff2, 0x0) 14:29:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000280)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000040)={0x1, 0x0, @start}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x84}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x5, 0x2000, 0x100000001, 0x0, 0xffffffffffffffff, 0x0, [0x5f]}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040), 0x0}, 0x18) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 492.799001][T30391] input: syz1 as /devices/virtual/input/input147 [ 492.849537][T30397] input: syz1 as /devices/virtual/input/input148 [ 493.239835][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 493.239849][ T25] audit: type=1326 audit(1552228142.092:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30267 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:02 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x600000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008907, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:02 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:02 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 14:29:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$xdp(r1, &(0x7f0000001240)={&(0x7f0000000140)={0x2c, 0x0, r2, 0x3d}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0x1000}], 0x1}, 0x800) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) 14:29:02 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x60) clock_getres(0xfffffffffffffff2, 0x0) [ 493.398048][T30409] input: syz1 as /devices/virtual/input/input149 [ 493.447922][ T25] audit: type=1326 audit(1552228142.302:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 493.448123][T30407] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30407] 14:29:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00ff020000000000000000"], 0x1}}, 0x0) 14:29:02 executing program 1: clock_getres(0x0, 0x0) [ 493.510585][T30420] input: syz1 as /devices/virtual/input/input150 14:29:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000890b, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x0, 0x0) bind$isdn_base(r1, &(0x7f0000000040)={0x22, 0x1ff, 0x100000001, 0x42, 0xffffffffffffffa6}, 0x6) 14:29:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x200000, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00000000c0)={0x6, 0x10, 0x1, 0xffffffffffffff9c}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:02 executing program 1: clock_getres(0xffffffffffffffef, 0x0) [ 493.713016][T30479] input: syz1 as /devices/virtual/input/input151 [ 493.743212][T30499] input: syz1 as /devices/virtual/input/input152 [ 494.228531][ T25] audit: type=1326 audit(1552228143.082:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30415 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:03 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x700000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000890c, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:03 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x800, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e24, @empty}, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)='team0\x00', 0x92f, 0x9, 0x2}) clock_getres(0xfffffffffffffff2, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x2200) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 14:29:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) r2 = accept4(r0, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80, 0x100800) connect$can_bcm(r2, &(0x7f00000001c0), 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r1, 0x0, 0x10}, 0xc) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000040000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) 14:29:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:03 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 494.321990][T30559] input: syz1 as /devices/virtual/input/input153 [ 494.348772][T30561] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30561] 14:29:03 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x6000, 0x0) getsockopt$inet_dccp_int(r0, 0x21, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x4) 14:29:03 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x7fff, 0x420000) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000100)={0x8001}) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmsg$kcm(r0, &(0x7f0000000980)={&(0x7f0000000840)=@hci={0x1f, 0x0}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1, &(0x7f0000000900)=""/106, 0x6a}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000009c0)={r2, @rand_addr=0xff, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r3 = getpgrp(0xffffffffffffffff) process_vm_writev(r3, &(0x7f0000000440)=[{&(0x7f0000000340)=""/12, 0xc}, {&(0x7f0000000380)=""/84, 0x54}, {&(0x7f0000000400)=""/41, 0x29}], 0x3, &(0x7f0000000580)=[{&(0x7f0000000480)=""/241, 0xf1}], 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000600)={@loopback, @initdev, 0x0}, &(0x7f0000000640)=0xc) sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x500000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)=@ipv6_getroute={0x128, 0x1a, 0x600, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x4, 0x0, 0x6, 0xff, 0x4, 0x1000}, [@RTA_GATEWAY={0x14, 0x5, @local}, @RTA_PREF={0x8, 0x14, 0x9}, @RTA_MARK={0x8, 0x10, 0xfff}, @RTA_PRIORITY={0x8, 0x6, 0xffffffff}, @RTA_GATEWAY={0x14, 0x5, @ipv4={[], [], @remote}}, @RTA_ENCAP_TYPE={0x8, 0x15, 0x3}, @RTA_OIF={0x8, 0x4, r4}, @RTA_METRICS={0xbc, 0x8, "8c8c5f23bce5a75191f7258b6699a4eabb40608db41b92e63f6f2fba7cbe43b916a584a6a9e78640942eb2ba312268e8e62317daa1fb9304af06197ba657a2618d390608b84402c58883eb4c6aa937b726da376d92e60d56a527c47d80ac370868067a1be379556c8865b8e94e4919aba54c738f91641a84c20b2612b479470db4e76284f9d2e112cf9e351e72c4570a6dbc743de4cbda927c340e397a3157739900e3e57300faa2ff7a0d51ad5d5985e8caa1261cdc9f"}]}, 0x128}, 0x1, 0x0, 0x0, 0x4840}, 0x4880) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) r5 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffff, 0x10080) syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0x0, 0x2) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x2, @link='broadcast-link\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000040)=0x5, 0x4) [ 494.379592][T30571] input: syz1 as /devices/virtual/input/input154 [ 494.401997][ T25] audit: type=1326 audit(1552228143.252:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008910, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:03 executing program 1: clock_getres(0x2, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x8, 0x40200) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000140)={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x6}, 0x2, {0x2, 0x4e23, @loopback}, 'veth0\x00'}) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x6, 0x294000) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x2, [0x0, 0x0]}, &(0x7f0000000080)=0xc) 14:29:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0xffffffffffffff19, &(0x7f0000001300)={&(0x7f00000000c0)=ANY=[], 0x1}}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x20000) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) 14:29:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @multicast1}}, 0x100, 0x7, 0x8000, 0x400, 0x3ff}, &(0x7f0000000040)=0x98) write$ppp(r1, &(0x7f00000002c0)="3b80f1e578d5d0d3905a4231360e10d0a24867bc73cfe88816a3661c0be3", 0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000180)={r2, 0x81}, &(0x7f0000000240)=0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000280)=0x143) [ 494.791895][T30701] input: syz1 as /devices/virtual/input/input155 [ 494.818738][T30705] input: syz1 as /devices/virtual/input/input156 [ 495.193870][ T25] audit: type=1326 audit(1552228144.042:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30572 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:04 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0xa00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:04 executing program 1: r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @multicast2}, &(0x7f0000000180)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_bridge\x00', r1}) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7d99, 0x408000) ioctl$RTC_PLL_SET(r2, 0x401c7012, &(0x7f0000000040)={0x6, 0x2, 0x3, 0x1, 0x8001, 0x81, 0x100000000}) clock_getres(0xfffffffffffffff2, 0x0) 14:29:04 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) finit_module(r0, &(0x7f0000000040)='ppp1md5sumwlan0\'\x00', 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8e00, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00'}, &(0x7f00000001c0)=0x54) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'yam0\x00', {0x2, 0x4e23, @local}}) getsockname(r1, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000180)=0x80) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x4) 14:29:04 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008911, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) signalfd(r0, &(0x7f0000000040)={0x9}, 0x8) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getcwd(&(0x7f00000000c0)=""/113, 0x71) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 495.315209][T30721] input: syz1 as /devices/virtual/input/input157 [ 495.332281][T30720] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30720] 14:29:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) 14:29:04 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) clock_getres(0xfffffffffffffff2, 0x0) alarm(0x4) [ 495.353360][ T25] audit: type=1326 audit(1552228144.202:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008912, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) [ 495.444325][ C0] net_ratelimit: 18 callbacks suppressed [ 495.444333][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 495.444363][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 495.450033][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 495.467363][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 495.473136][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:04 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x3c9541, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0x3, 0x8000}) clock_getres(0x7, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x205) unshare(0x8000800) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0x3, 0xfffffffffffffffc}) 14:29:04 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 495.525048][T30729] input: syz1 as /devices/virtual/input/input158 [ 495.631086][T30755] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30755] [ 496.147284][ T25] audit: type=1326 audit(1552228145.002:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30727 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:05 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x1000000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008913, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:05 executing program 1: clock_getres(0x9, 0x0) 14:29:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) signalfd4(r0, &(0x7f0000000040)={0x10001}, 0x8, 0x800) r1 = fcntl$getown(r0, 0x9) ioprio_get$pid(0x2, r1) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x10000, 0x0) ioctl$KIOCSOUND(r2, 0x4b2f, 0x9) 14:29:05 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x0, 0x2) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000100)=0x3e, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00', &(0x7f00000002c0)='/dev/input/event#\x00', 0x12, 0x3) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000140)={[{0xfad5, 0xea, 0x5327, 0x400, 0x10001, 0xfffffffffffffff9, 0x9fa, 0x401, 0x4, 0x8001, 0x7f, 0x9, 0x400}, {0x4647, 0x6, 0x1000, 0x7, 0x9, 0x8, 0xffffffffffff8000, 0x7, 0x4, 0x9, 0x9, 0x3, 0x7fff}, {0x800, 0x100000000, 0x6, 0x2, 0x3, 0x100000000, 0x4, 0x8, 0xebd8, 0xcb, 0xfffffffffffffffb, 0x80000000, 0x401}], 0x5}) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7ff, 0x18080) [ 496.246028][T30772] input: syz1 as /devices/virtual/input/input159 [ 496.276067][T30771] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30771] 14:29:05 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="eeff000f1200102eb485713df74f9b77885834007003003000008000000000330bd894f7525dce3b657cbc8b45398fc8c3006a5a7281a2cdea3cbbd84786b6ba7f25e402afa69f943b672cdc2830bbcf636b3bfd2dea45babf2d6aaa26f151c33efb0c132200b7ea5452748fca8bed5a437f3eee5fbf0cef3464c0117388fe703259db45a79f1ac99caa38d6ee18507b6325b5c9ffccb242abe288d32ed918f9cd5b0847bc9f0aa675bc06f9bef5"], 0x1}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)) fremovexattr(r0, &(0x7f0000000080)=@random={'btrfs.', '\x00'}) 14:29:05 executing program 1: clock_getres(0xd, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x1, 0x0) getcwd(&(0x7f0000000000)=""/184, 0xb8) [ 496.297314][ T25] audit: type=1326 audit(1552228145.152:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008914, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 496.352592][T30780] input: syz1 as /devices/virtual/input/input160 14:29:05 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, 0x0, &(0x7f0000001000)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 496.429541][T30797] device eql entered promiscuous mode 14:29:05 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000002900)='/dev/adsp#\x00', 0xd776, 0x400201) write$nbd(r0, &(0x7f0000002940)={0x67446698, 0x0, 0x1, 0x0, 0x4, "51d43275a028815c39e2916c875009395d9f2e292e8a6da4909dd9fb7cd435b7fb5b55bb48cb4922"}, 0x38) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32, @ANYPTR64, @ANYRESOCT=r1, @ANYRES32=r1, @ANYRESHEX], @ANYRES64=0x0, @ANYRESDEC=0x0, @ANYRESOCT=r1]], 0x1}}, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200200, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000002b40)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0)={0x3, 0x200, 0x4, 0x226, r3}, 0x10) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000480)=0xe8) getresuid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000002980)) stat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000d40)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000000e40)=0xe8) r9 = getpgid(0xffffffffffffffff) r10 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000011c0)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000012c0)=0xe8) getgroups(0x3, &(0x7f0000002840)=[0xee01, 0xffffffffffffffff, 0xee00]) sendmsg$netlink(r1, &(0x7f00000028c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc, &(0x7f0000001180)=[{&(0x7f00000002c0)={0xb4, 0x3b, 0x200, 0x70bd28, 0x25dfdbfc, "", [@typed={0x4, 0x4f}, @typed={0xc, 0x84, @u64=0xffffffffffffffff}, @generic="a6a268364566d95c85f6529c2c7672a576436da25410664956a9fcf393920b45223d4b39477bf5f8bd98d6426058fd0f3e7e8ffef8aff53c2776ecea04df478d036bc66fbc7cd1232321cb28e53cc94058169b5b30f68a6e5bd15f45b95d2a5f33e99d03a7a92f2f0fda493139707d19647b08597896351aef6a0978b949ead235e291f7ea5dba7fe6b9", @typed={0x8, 0x95, @uid=r4}]}, 0xb4}, {&(0x7f0000000580)={0x400, 0x20, 0x400, 0x70bd27, 0x25dfdbfe, "", [@typed={0x14, 0x76, @ipv6=@mcast1}, @generic="b772cb75c189beeef795a0df6718ff853dd12d0c037ea3d356c0dd302587d0daa996b848b0a3fca0f86e7c82483eecc43a0599db4561274f99721b9e0264c077f48c2b53f812c4366a2b36afc04cde27c43cd8e84eb92c2dfeecc7381215f0f53d375bbfa5cec1d2e9b62424a426b48dfb427e5e86e854f83dbd69a2d5e78eebb4e7f618024744edc019e44b475c107d644a66d49b894d474b001b416a136dcb03b921ff04ca7afd85483c7d9847808a3e6ee6026f4a", @typed={0x8, 0x58, @fd=r1}, @nested={0x2c8, 0x4e, [@generic="d3f8a08cd23ffbeaf56fbf0d477511500fe6a258e2e2c8a6bd7f03190f79dac769e31dc63618a08f68bd928ccda07958af1efe1b6b8fca744d673325494c1f6ac752f5a73b52919d899a785615d2c0f8bc0bb316cb97b4d2e9675607aef8d8796c3efa7f66e72246ff93c42348288ca21a5979e2e4043bc2dd6f3d3e43bfd147de3af3cfd52bb9b2246d7a92ef921d13a183338e32d3d36213a9c21ea3c27f1426575838a63501eb4a77282a74345417", @typed={0xc, 0x58, @u64=0x100000001}, @typed={0x8, 0x8d, @uid=r5}, @typed={0x10, 0x12, @str='/dev/zero\x00'}, @typed={0x8, 0x67, @u32=0x4}, @generic="87eb841ed33c44c88e08f4884b14cacf073fd29f2186c89b80530090caef03d2e36c216f2c5bb60c42fc8f5b83aac23ea8eaa2b3155737b432040b70160b2202bb68c3b897b76455620057de5e1d8304cc052495ea4d3e4ec05d5766b2917e30945703a8b59bc43c9b555961c10306ead0d5f40c1d15ad68d7c8a11fc02dbb881276712a1e39d7f7419653be61067743188afe95acbe4597b477a11b021a7257ab1d99de55619b3652773669699f4ec84950eed0ee108156d8fe8c42e5a5adbd7240dc578ce9b9357753e2e82c57e5cbe0c5f69541c59f", @typed={0x8, 0x44, @uid=r6}, @generic="a6b2d723977bb6f9a11a57f0fc05faf07b5af068582ae3db994bfc4ecd65a705190fc170be15d73906ca544610d3f6b5a12f60112b17bc37ea875b6325cd9b4b90e6306de5513825284e5bbbd6bcf914a3c0285b862975e122fc59a7feffab325bf856e710ed52fa1d18b96ade24dcaf2c5c019fb5a0fec421bd8d3938b6cd1673fa068f81a33ea501987d8ce258d55c7ad07ce1b23ab812d3532e4ef73f8534ab8ece34e1c1956f468ac9a26c8ffd87e4ab5296addfdcf33de811d7353e12197218ed325067294df521f9", @generic="de8c7118982742b68ee94f54f8a49dd89251662ecd3a5f8d9a553970eef5f755c31f277017b613beffe96516f159fffbd459e8c8eed353ab0b28a6d1"]}, @nested={0x8, 0x49, [@typed={0x4, 0x1d}]}, @generic="7f76b133ba896229e01c20e34ce38ac6ee5fcb71855b8ff7effb801bbb20ed08dd7f7ad7c8ab60d575f28786eaa168bc2ea1baf7bd737b9fe3de812fe067f39eb1668042", @typed={0x8, 0xf, @u32=0x8001}]}, 0x400}, {&(0x7f0000000980)={0x2c, 0x25, 0x0, 0x70bd2c, 0x25dfdbff, "", [@generic="b7", @nested={0x18, 0x37, [@typed={0x8, 0x42, @u32=0x4}, @typed={0xc, 0x8, @u64=0x401}]}]}, 0x2c}, {&(0x7f00000009c0)={0x284, 0x27, 0x200, 0x70bd27, 0x25dfdbfb, "", [@typed={0x14, 0x17, @ipv6=@mcast2}, @typed={0x14, 0x4a, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x10}}}, @nested={0x104, 0x55, [@typed={0x8, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x27}}, @typed={0x4, 0x32}, @generic="8ec11eb49e2857688962c8c8ac01855bce3d1d73bfda7dc3054d3b31ae6a8be4f50c3724a8", @generic="5059767060f790d2961aca43bbf47cb5bd2e38c2c40037e49b5c11146378a5ddcefd8ad1d04bc99442198e7c38afd1fccc756012658df3aace13f18ba7f21b69884e57230857209cbe2aa7a54d7edb2984d77e37e4b23b35c83ab95d727a7c828657192e98964e40370fcbc3b20760fe350c9395b5a178ef9f9745e014be4f7e729ab9a60765be9b969784cfb66f8801a317bfb280c925c7f91177664640ec7bbd18710d59b6a2b54996ff2d4bb50ff272a3e04e5698a24540fe4358b4d4bf89d2f9cf783660101e059295b981e3"]}, @generic="89ef628d70011b397f8182920f56a43582d2395f5475360ede1617593c00e9b9f09195020c8f20b107ae0b69b62f40e22dbd53e8c1298bce5a23287da761332839226444b4a29bfa3ceb91912d9acdb6a678ad19fbbe0af2cea4616d3fbe2200eaec19164fc27bc7fda3f1a518ccf1e01958ebd954ecbf1b546e808396ed9c85436e452ce6d69b7387d6087bc37062af6f79e7f31354f62c85ae35fc5558fdb167be0dcd4afdce83b6f9ac2e07cebb508602637388378416d6f8", @generic="92fba63691e4afe7ecfebbe081dddd44a8cf99a98e8c9d7d6c3832fbc81c26cfb2a0d4c4568032240c9083b3a1088e9eb8c08eb17271d8f33d1c7267a8238356972de677617f97d23286e5470fcc8bb66f88a8667937e416c411fa2238de173871f444c6fad5a25b8b38e20ddbd3e7c67bf83c38114875b2dd47d94019163bf402446508cd7183", @nested={0x4, 0x4b}]}, 0x284}, {&(0x7f0000001380)={0x14b0, 0x22, 0x400, 0x70bd29, 0x25dfdbfe, "", [@generic="a84885c8b2991b9bab90b9e57162cb22dcd13f1c4b06556539e2cb537816e6e1653ef6fcb4cf3dbcb86cb53dca91fcf8782d91e8313de72af7f0523e9a11ada23327fa3c388e5897de3fe81233315c00049b30b09968f0673305980761a01944f11a49fe59993cd083ab296286cf5bb86d2ca717e1723ed9b23573ec583b97a25138f7eef3ef16816543a04f76530fef9dedcc2147281250e3dcb3b747bde2d3d50ac89f1e68e4556ec91d6a16c53b13b712a06818fa010adebd2272897e1f04b32f0db5", @nested={0x44, 0x5f, [@typed={0x8, 0x9, @fd=r1}, @typed={0x38, 0x31, @binary="8103d29448d811cd2f86b4b2320201fafe20b4ff50dbab7d07100302fb0b2d59913ee0e0f8302ae229dc7f8aae6138165eb4a6aa"}]}, @typed={0x8, 0x56, @fd=r1}, @generic="c87ff1073cee7bf6be47158d771961f883df57b3a9a1cf5bbf96c52fd40a954b39a535eabef7a007516bc43312e7554ede1b12a63c8b03d94a28f1e5b4899b72bddd264e590687e43606e0765eb8448680126cf632ff6b0292cb1b1d9b20ffd48593d0dfbb21215591f0a0029fb6fbc1391350e8fa9afca55bdeaaed74ce85bbb149d5fab2acdf704575cf7c415a84ce50d15429aa9f47f30ae4e251bc2ef5b6776d4211b8eb8eaf4dd1a488f46436067897d594886feacac540b7469f0d8e5f5c1f346a84ee411d248328654d9eb418d6041a2e1f209abb3c243bdb697b31e33778104bfde45c1e4874f63fd1272f33996c18db3e06b610a2fa82ea9a4a5fd46783f1969db17e2bce1b3fc8c7cc6ef35e9bfe297e41c04a4406bf1f2a0b5c5f2d240c533728947ab295414c87b395010d5bf101fc423a2accf9b34afcc48170ea8aabcc8badeecefb27fa3101ff90f1d8f6bff2a2d21d6ec69c45d77212878143387f2234fd9067fa0bf9ac05cd5ee6ff7d83221e5533cef7c5179b3fd7455458175339fa2dcc58a56079db9e0d377522e44f6d01144cf8b4368f197a9bf4c19fd37c7d8c306ea3ac771189699da134902aa3b6fd112725529f099c77e7534d88dddb75e3ffc3fab9632e8368e735a0b03ffbe822ccac24f0f98df0046c07986d44ce389936e6d6cff437db43827633ed163633bd86637b22fca404f5a57bbb78aa42e7be792d3e075ae81e0722b241ec5fa037b3377f69264df17dfd48d04087a7740ff7aec875fc7609c119292b105e7effb8d03e38977cada16ea618f276e2068b1ce4251eb9b57a5beb615b79271ba6e743347b8807c95fe5f92e71335871c9fefce11dc8dcb5db29bcf0d30b0b619bec29c3045850febf3acdb69a18978b3468421abe5c853abcf82a82952624706bbe90c4fe06178097452d643a80f4534932a97489f883ff95adeed1bf2174d30bcaaf7cf732016fc795acaa687127c760095ed81f66b915f3a2a95272a88c61d8c6d50fdfa51fd86350a252eda2e6ea8539ae94013cf199bf75ce4a893a5769c26e78d7e12af0bab246f4093938eda13028ef1f4c36b14cc78498682babf3534d3fca57a943f37fbea1882b95810e6121ca2526f554a3ed4eb23e1bb160a645a2d5932f9269049a3751733c4b0c63896fc9fd9c2c5c810c73ed7296d64c8ce3fae1c9229a36c1b43864f635c130e1aa0c3c85f5b2a756230827adc69d6592f46ff37c3ea1670de375fb53c74c3238306dee2351587f0be53f0bc2814c9c26f27d36648454e9287fee06f5ee030510ae1b37493eb3cc023e7ac9472df42c58ea123bd57c92f7bf1f446c1f01594064ad532effac0d5e2c0c68749a7a084e71a44b8327b30ced5d7e2d8ee18197c701a4b411c102db384a7f513eefaf8962c4ca39f33bc2e1f9f12829d8f06a3f4ad92be63ffaa84684d668cb3caf91aa6ec81844e62600467289505663fb7fbc7833d12ec322ca1aa3fc56ad42096f6135314e5d09ecf1d319449d7b3fb7aa2349ceeb13da6ec9166838f9d11395f5b27ef97abfa28784ffa77f7db078e2181191c43625e2a04250d93e1b9c566b18e8021d414a44f0bc741ccea4148624f696ddec39697feb2a06176484ed36147cf35d91b73026bf628af0fcb986aeb1da73c27e2c7e9a1a8aa20e9ea3dada6751682a20b7965f6bc5c6ba96622474f7b9614d9d21e90e1cf2446eac9a49015cf30c65a1ff997cf103055d5ceb47362a3593a0daa50d8d9de61091271977571076a7bb376c6245d6bf09f2b8e2c57fa3292f7db50dfde367c4bb65f986d517aaaf8bb31ee5f595bcf2db48f39efd78e61803d1352921a2be456600887cf2ffb66e2849d90c9704d2026f3a7b60a75094f6114820b7870b9eed2ec5b203134a8a41e47bb390598bb250f30622ea3fc51ccf2da01f29a2aec1d3bbb1f4460248e10dc305e51275ef3949864358fcbd2582009af6633e0b706be61018091c5752a2d6563c238e0efcae7d940bb19cd66073608856e600802dc2ebbf0bfc6fa6f945882700a5790e48bcb5c063c2d607d110288149d42df41c551e6c1ddd9f89d13a951ef3410d14664cbe5a525122959cc8a92545950feebdcd498210439cf709b777d1b99358dc7111f1cf391016206d46147cb86a53a3ac84898c0c3033ab0dad97558868c849d25ff9bb7a853df3f51804f0f0607113f442c95108555c1297f2ee66747680ac4956ca32c47eb60bd3814d362aee8e1e5807ae3abab9cd9f96ff1e59d61359aac3ce80e720eddcdc03b4c98cbea69ad05434f8d4ca6eed26ef57c73df6b86410c8af084544014aa9fec89d86f6d614d598ba54ec839a063ec694e436cb44c147f8623eff55b5845c0ffdc51f252737697dc6c5e5cc0583af6c5526df82d0a5a207b2c2933e89ade88811561aeb36cb5bae8b0c8efe7f5f2d73eaf82b9e8b1f72e5d8ca3a3bc2f125aec7d0720b2caa8cff9153d6bfd73f59aa19bc06b6fcc636ad1f58397ec9ca4ba9e42b3a4fe511f2f7fbb3ff6ddcebf087beae3f9d6f00b30f714b44226e54a7a3c60ee4f3a952d766c5a4686815ce3e4fe8246991f0f9ee05f74727aef49c923dcc858e411a830d4930675c5adef60d1c4929096e9650d4f41810a1f39c7f4c42c02f9c0fe4113d11878ae5e0a6c2f387b33f7caaa49c2f8d461041c8686c660d075a99731fda06ce0d1608cec1f34a5f6df1e65f036d18a79b298e68e34156d3bda52c5783cccce6e69003b259c8cee650e241d3b681c21bcebacb07b74449cc3b83c6ffac735464da6d7487858cf5c996d55cfffeacbb94f71150e7fb3c84af7484ef8fdd9690ddcbe9e244571944c7841e0d969a3ba73b7c255e875bae9fcc0aa212ecb77cf3f899df6336ee70c390310b2be0c8f359afacbc17c244e4bc00b040f813ca641c082dde6922c1f826e238e5022600beb8242520f7ba8aab6a07f90e69ffa1deb6bc4f7a586a4aeca54ab49e3e2199f6f51f3bffa06c70fe635430c6e174c23afc587ea41dd127488cf9da15b704d72de39c0b42046a1e99b70c8ba32fdd1cb8907256981996247b0358fc6ecf0ff4cc245d9940da8784cdc7cbada41bd4ee21c61f56d6e4483582d856f2167b40b12d8f9b66cdb0f08e35cc83afdca0e76d87d5f714a2853af5de34a09379797f63bc3b046c20b275d22f8abe661ccc3214d34575e9e394eaed3a021994ab503450258ff21ccb3e98c9b328418da44435cd03b96e0062f2630b0b1af4f3ea24e3925983a6bb2c1dede3d6f8d5e74bf762ab24a1e4bc3bbb96217158a7f9dcdf83333d49f5d267192b14e6a6eeb3abf12ed18cbd4a77fbdfcef9e45584c3ffc465c5d78cd61489f8213496958a76eeee24338cedf1d23a6d7d58618622036f63517575496ea3c3c68b26cfec5308be086156af93a94073ab1a385de9a031f43520d70abd88b97e460d32b7b8d0de8bafe993021554c4f59ab97d92e911f4b712b225c216de30f7ca80c781c598868e256051ee3f16254cae57b382bc80c22c8745849d141c08556beda65bec3bfb2cec995a6a8b481a75ef74691c8ef8af4d7ccfa02d7be09f774b782c440ebfbfc002d3001d0b75831f7d9761989a7923ce78fab6901e8729cc69aaa854d75678bae9d157e7be5e1330b4a279d9a08fab434bf50f66b898f60c22b6d3a621cc2be86bbc1ac31b14dfb4ac714558ad2b0cc0418b6a79c73a6fd6833b7c99b06026d6ec7ce2b8d025b578bfe791f826c795a1cfb7178c3c99aeeafdb26215613762fc832eb5927d764c0de587834db124390ae5081f0fd3b8c9372e36c5a365e2ae9af3d7fe8ec60c0311e991fad8016d6f1dac49df8921505365620bb8e1e61ad7d62cd5ec221b95834ec9f1c9537b9fae3e93fd8d358a4a592ab7cdf16b8f4823f20aa3fd140f6bb421eb9068aab4e8a9ca3ce0657ec72589f5fd734130e83c9cca226bf0674dd1b783bf81fa049a00d63b01b30090b8724334100ccd2e1b4956c4b6e5818c87332aae075f89dcf46acff1394c8d92eb2b7fc6a587d1049707ac77755fc854dba27c8af710f1d6bfb5777b1cbce1aab537df1d4d75256e9a3ad051f60f8f24e7c89c623a8e46978da34a4bba7fd5665f8c52d365a3bd8ace0d128d047adbb871f8d569811e24babc5b134180b76bff874fde6538f96d2a3b64d02a38b695dd594ab4a906281a1a2828e17300b9ae8b65db96fb331e278f62775b5d41e0d6cd7af48bc1e2bb6c3e03ea8a3a27a14a3690be5849d9efc0b5a7835db69fe9ac21decbbe0544ef2ada0cc03c5812e1aeba9dc9e9fb2f1e47217b937359b3d0e27bd28b1a23ae7b052a41ddf4af7c482d06457ec881048602bf9c218efc9b52a13fa7debef28bc48f8aaede76dd093a8396a99088959baebb7518f097bc8b94b619db06a06e3a0ea460fc46542946168d43357b19c8022355ff967e767a4f1dd9ec1f39575db5ae0dbfe7be09494bad9faeab1094060ce3e21ded055d341c116693c572bc0776de7c5e197a515e8213e094516705f82054c54586e7437ffe9a7b861367048ad67e521b56482512b6a32f5c17c92137e582c1cb7b4effceefe3727fb11a5356e2c4174d56f8192b14596d126728de887344d0ce7666e60e68dd33c7adddcc3ed05d3c72dae08d43bfbff97fdaa803ed3b09938fbdba5a3030117075c7a0dbd28c29f7498eeab120a3935903cc26f07d2e665cec4519b32084696a489bc8cc9172cdda7e5e4a5f21f928872c8a010875bf7d301ed2d1d18080064f93015db174260458705dc1bad49df1127d3e64fc9ee27b3f8c9d99117794377dda15edfed949fd27f0ff6cb9772d50ad925f636d676a82dc29083d82bf2fcd3927e1d6bf9b6695bfd788bdf79780aaa352bf4538628e48e21365c6f1c6be4b68bc36cdf2fc08112a85fbfe63603bdf4431bef3845100fbeced5627991c2145c71725b42b5bc52b1a4e6ec69ab94dc549d10c03eeb8f9a04fe55b69861ea5ef11de0a3c925fa798fe8c2989a766c5d4dcbb178b4304383e8878d7aa0bc6f9549c52ca8e5209155524bbb89f2d5be9df9dd5505d9c0ef0b3b95ac1e947f2007960d4f757e8d3389ba560d6cf53dac1cf9ffb07f412a68133838101bc01ff0ba64a66f749064d65ea573cde0f2ae3622fc1ec5cea59e1926d25d303d01b6ea47f6ce5095888ab19e7a6806992498ebfc13ec358de6e025f4cbdc4118e6854cacf8f54711d55f92cfa0c8b077f1b8cf9b264e2b76a6c5b4a210bd8c7207a832b37c37f585fb4727032a9df5abaef38dd4b8f9e374f95f51f5d11c1037278b27d15cc646a15513a000ebbd4ab5f70e5c9c1f47328b9bb383ea8490754ccfab7cbb3590e43c80b649776fe6960acc80831868363461034b2b46cde85746c08a501415bf0221c161a838b5adfc0fdbcc16929b1b41cecc6378cd620a00ab76d1c3e5b5e4eefa3b47fd307010f52db155b4b6d8bc7fcd6e05c1809691bc6bcddbcb8f5974cd9d332e304bea55d628fffc0be0426240efb364257f87a15f639405af5d2a4898d37bde50a89b7b3bdb4f1be01fe83380cfad6b71176d3eb991db2cdf72a09da8c246fe1cf3aca1c0e71af627d51fb1a55799214765c19df5cd8ff9c934945654069de925fa291689a82f417743eb501e354fe96eeafbf46786b3183705a25a48b3628def3474d102dbdeaa5022ba82bc7d77dbcbcdd37c4122e1f9fb303e9d549e75522cefe80d2c54c647a626e0618547c2b9aad798a642f517386549a43", @typed={0x8, 0x8, @u32}, @generic="19e4a76d17166f78b0075919de073141d66947488b62a6248f66a571bae2882d6a52de5cad2022ed5c79d9f9ba4b5d4c96048f3587f4169692a56d23a39194b1aed81cd86a218c367c076d55f9155b57f1b361044b977bb433b424952a3993a7f4e72a45ad98c3e3799d05a7f13762d37b90", @nested={0x314, 0x23, [@generic="2511ce9ecaf11453bcccd91070bb09c7b8f3635bc6f8ffce98f7ee87bc61cb5436a24f994a700085769539b5f09997e024be5a6bff177e953028d8c1faf144ae1d7e82f938882ab00b5f9f9612b474927f19491dd0a9b6c9683f432dbb195217e6a13fb6429f43d9d748f23fd090b126ee5f7808ef9bcc5659e41e1e8a50d1e4387b09c62e2c9bd5a0f54cfc8b4b5a52abdc2f36e16e25", @typed={0x14, 0x33, @str='@nodev\\%proc}\x00'}, @generic="2b41cfc193a63841e9f4d29c0affae1324e4ec85d3caef365bf57b6cf779c42fbf23c71073dd79989121b81bbfea2141d48698e197989ba919b599d33654b261f35fc329cf517051e518bcd39c6798aab06a34e4fee40181ceb0bab01e5bd8d12fc02fecc7ee999d1df179e38f312ee2b2346fddc3d90d7f55fab839344a2a73f2981b1930b83123118d5180ca468b8ff11b4e88a9a2f2da08c3f5cd1ad04ff98f0670add593dc324606cfa9c51842c94e62987c260a1e48a242d54271cae75644ce6727d2b4769edd4b8c9dd1504fa2faaaf788c3b132a52174e9e6cdb236a28e", @generic="72b4acf29e4c5d9556532f17f2e689d1ed51e5474e86b47e73c6c0dbbfab7553ebed5ef7ef6dae82bb9f7cc836c58489f2ccb27605c8e6ac20e3cdf2996b5706697b38064dcb6e2c735193a336f0649d79bb2605fb37464882645cdc235cb3033475f449c93ba2f64c0f4d6dac51ac592e5f87f845fcae4e780a8a3c3b", @typed={0x8, 0x30, @u32=0x8}, @generic="e68b18219f28f3e53599a6ac97b3c6591c45db64c4ed1fba1818dd31d739f21cab546b96a925864075c964fc3cb83e002c89405f57486de4ef5b7fc1a62b410a0357be63103059d431159fc7974cd4a495a2983accc0558e4928b96b7c26bb80ed25f325823eb48e1c727cb476934a40e6a9c8750bbde9bbd0d280488564c5eb1721f51bc6908556a967b49dd8840e486a09cc2a11a394858a285dfd71b296518de599d4cbf3dcfac446c692a0da2acc991afdff92b8fadf11db69dcf81c6e184ceb1634369f5ca72c1e0f933ceb90764332", @generic="9e3cad39a7e6c0a5e2c1994b5ef3233791b8e86de8c7f0ff8ef178ae7c123fff66a071ed1798b94e261eaf2028"]}]}, 0x14b0}, {&(0x7f0000000e80)={0x134, 0x17, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x14, 0x48, @ipv6=@mcast1}, @nested={0x78, 0x8, [@typed={0x8, 0x53, @uid=r7}, @typed={0x8, 0x4f, @uid=r8}, @typed={0x60, 0x15, @binary="35327218fe97f17ec59f9b19d45e55f187cecaaea2c2cc5c79107ab51b4d5cab0286f3352fec37c8606acec75809db20f40d6c884192ba4650e398e2f07c247791a3c1b0c55e1c53fac1378f2fbefc8e4f6989e8e291faf389b465"}, @generic="825ccc"]}, @typed={0x6c, 0xd, @binary="bd8044c0b1df119689a8551b6b83907b56273e3205040bb2dca63ad3c4b99c1b19b71a782f336ae7b39fe3d04b3b2f4420f160594b1548251ebcbc4c3738caf49517f792b85be8f2a8607413a83923d3f7473728c7ac9a7012bc670780150aed119d3385442a"}, @nested={0xc, 0x3, [@typed={0x8, 0x55, @pid=r9}]}, @nested={0x20, 0x5d, [@typed={0x14, 0x5e, @ipv6=@local}, @typed={0x8, 0x9, @fd=r1}]}]}, 0x134}, {&(0x7f0000000fc0)={0x1a8, 0x36, 0x700, 0x70bd25, 0x25dfdbff, "", [@nested={0x124, 0x46, [@typed={0x60, 0x83, @binary="2c2d3163ce3f07af7e9a802fefd443479b541ad51d836b2f196e393b62a8268ceaf4b46d8c29f61626b39970b390eb970c1db74b66de957dd2ed914eee1bad0c5dba47f0423b3298bd0692ee81a3afbcd50b3366a330ac65d3c6"}, @generic="f2638727bfba6324f42779b384d35764a20cdc1a8c8de175ebb6f0eda1da15483b03a7c7154ca6c34968c7133be2ffd300c1cf3c299c32c6fd75f2d7ac19268b5f5a9041e53d4690976f53fd6ec896f3c7d1ef48d65aff00f42766a4e16b0409b07bb8c3c18d40b380bf8802c0cf4e082c80cd0461276cb133dcd9e284c17730599ba3c4c2cbaa94f0353c89ca803c9fd92a396ff61198e77ea0502df3354737c16e808e8f30f1004037f7440b02eb1d200a005c4f698d9800b21fad16"]}, @typed={0xc, 0x27, @u64=0x2}, @nested={0x68, 0x2f, [@generic="5f6f131c2b4513ea61d11e5eb2ef16f8d73f734a1dbf64a7d79ed2b490fcdadfbe81e5fce25d1b23e5e843da3eeb9407c2b60cb9954865c1826971584af32a4217302877478d990e06458afc9342d80c", @typed={0x14, 0x63, @ipv6=@mcast2}]}]}, 0x1a8}], 0x7, &(0x7f0000002880)=[@cred={0x18, 0x1, 0x2, r10, r11, r12}], 0x18, 0x4004}, 0x1) 14:29:05 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') [ 496.484277][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 496.490125][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 496.521740][T30802] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30802] [ 496.724326][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 496.730227][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 496.884302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 497.097686][ T25] audit: type=1326 audit(1552228145.952:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30782 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:06 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x3f00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x800, 0x0) 14:29:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}, {0x20, '/dev/input/event#\x00'}, {0x20, '\r-!selinuxGPL'}, {0x20, '!'}, {0x20, '/dev/input/event#\x00'}], 0xa, "b7ae6462c83cf93cdc183b26d38b174e2c961ebb271cdeb9f9fd90e576451ab6ba06062b6ff56bf3349d44bec61605c0ae16bb6178a19c4bc2182ac3de99"}, 0x80) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000140)="e513572294e34d7ce78c2870f75be275", 0xfffffffffffffeef) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:06 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:06 executing program 1: timer_create(0x6, &(0x7f0000000000)={0x0, 0x1c, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000040)=0x0) timer_delete(r0) clock_getres(0x40000005, 0x0) 14:29:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008915, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:06 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x200, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x4, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x3ab, 0x8, 0xbd, 0x20000000000000, 0x0}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0x3f}, 0x8) clock_getres(0x200007, 0x0) [ 497.214935][T30830] input: syz1 as /devices/virtual/input/input161 [ 497.245307][T30831] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30831] [ 497.256951][ T25] audit: type=1326 audit(1552228146.102:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30836 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='mem\x04\x00\x00\x00\x00\x00\x00\x00ts\x00', 0x0, 0x0) connect$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x4, 0x4, 0x8, 0x4, 0x1f, 0x73ae}, 0x8}, 0xa) [ 497.323313][T30838] input: syz1 as /devices/virtual/input/input162 14:29:06 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x101a00, 0x0) ioctl$sock_netdev_private(r0, 0x89f7, &(0x7f0000000040)="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") clock_getres(0x3, 0x0) 14:29:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008917, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:06 executing program 1: clock_getres(0x3, 0x0) clock_getres(0x7, &(0x7f0000000040)) 14:29:06 executing program 0: openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) 14:29:06 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x4000000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:06 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0xa6}, 0x4) clock_getres(0xffff7fff7ffffff0, 0x0) ioctl$KDDELIO(r0, 0x4b35, 0x4) read(r0, &(0x7f0000000280)=""/246, 0xf6) write$binfmt_aout(r0, &(0x7f0000000080)={{0x10f, 0x80, 0x6, 0x2d2, 0x1ed, 0x40, 0x218, 0xf6b}, "96240f47e36ba6f176e973212a3fc7ff34cfb7dd4a40ce8202b428739eb607ef23e91a188e37afbf69d3daae704ccea5bb6c3fc3d16c1a5c4313823bdb392b2f0a447e56f0357c65d20d175a7e8878e1043110ef24d2015a9b3df65107d2552c223025144d868910c9fe495394c66a90e0bdebdbcc5f5b7f33e37e992c8b9d89ddba8033ed0461b4564b07bfd2c869c8f2730a1513d9235a8d5ce416213266ff19f0d9717a13890f2d23843f688b6ba2bd46f55ea3c8083881f322beec44e3471d946ebbf78f2fd04d24a5904c0e9637e66f43a5005df2b3e76eef36", [[]]}, 0x1fc) 14:29:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008919, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:06 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000100)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r0, 0x40044581, 0x0) fcntl$setflags(r0, 0x2, 0x0) rt_sigprocmask(0x1, &(0x7f0000000040)={0xa}, &(0x7f00000000c0), 0x8) r1 = socket(0xa, 0x4, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000200)=0x14) connect$packet(r1, &(0x7f0000000240)={0x11, 0x1b, r2, 0x1, 0x9, 0x6, @random="3d6d41e6331e"}, 0x14) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000180)=0x1) 14:29:06 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x301, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000200000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) 14:29:07 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f00000001c0)='/dev/usbmon#\x00', 0xff54, 0x40) ioctl$LOOP_CLR_FD(r0, 0x4c01) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) execveat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=[&(0x7f0000000080)='\x00'], &(0x7f0000000140)=[&(0x7f0000000100)='vmnet0@proc\x00'], 0x1100) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000240)={&(0x7f0000000180)=[0x4, 0x24, 0x401, 0x80000000, 0x4], 0x5, 0x2, 0x5, 0x2, 0x20, 0x7fffffff, {0x6, 0x8000, 0x1, 0x100000000, 0x9, 0xffffffffffffff77, 0x9, 0xe10, 0x9, 0xfffffffffffff800, 0x100000001, 0x5, 0x1, 0x9, "6a78e54a1ada2da3bdbceaf0adf315318a0837e02cea33db2719fa3e6b9c72af"}}) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000200)={0x5, "866ff5bc2e8ce0770003ce43fc95c3ec4c800c501d93e266a70e3a225147005c", 0x2, 0x1}) sendmsg$nl_route(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="160000000800000020e5120010040100697536890c7370616e0000000c00021b08000300300000000aff6ebcf62d289065c3eebe279df1c6a69ac13f2370e07390a0eba26967ebd37b47a451ec8ca6f524090fe3fa4a52b91a23824bf33442608b060e30b3fa62933edaaf7bcff1633a945d44bc2f76f7e9e7f1"], 0x1}}, 0x0) [ 498.190322][T30980] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[30980] 14:29:07 executing program 1: clock_getres(0xfffffffffffffff2, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000100)=""/30) timer_create(0x1, &(0x7f0000000080)={0x0, 0x32, 0x4, @thr={&(0x7f0000000040)="6b631269f0940932cdf332923455ef9ae28eda7d29dd2ced41dea5607d48af750c7613d3e9", &(0x7f0000000140)="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"}}, &(0x7f00000000c0)=0x0) timer_gettime(r1, &(0x7f0000001140)) 14:29:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000891b, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 498.272696][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 498.272709][ T25] audit: type=1326 audit(1552228147.092:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30993 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:07 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000040)=0xb6) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:07 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) getgid() ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000002000120010ba09b76c3c81dd619219f649168dec2b00695d3665727370616eef00000000000000"], 0x1}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f00000000c0)={0x0, {0x1000200000}}) [ 498.451066][T31021] input: syz1 as /devices/virtual/input/input163 [ 498.459400][T31019] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31019] [ 498.501454][T31028] input: syz1 as /devices/virtual/input/input164 [ 499.025703][ T25] audit: type=1326 audit(1552228147.882:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=30993 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:07 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x4800000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:07 executing program 1: clock_getres(0x7, 0x0) 14:29:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000891d, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:07 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x900) recvmsg$kcm(r0, &(0x7f0000000300)={&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @reserved}, 0x80, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/212, 0xd4}, {&(0x7f0000000100)=""/21, 0x15}], 0x2, &(0x7f00000002c0)=""/30, 0x1e}, 0x40000000) acct(&(0x7f0000000000)='./file0\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) 14:29:07 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x40046602, &(0x7f0000000040)=0x266d467a5fdd714) [ 499.135141][T31038] input: syz1 as /devices/virtual/input/input165 [ 499.154760][T31049] input: syz1 as /devices/virtual/input/input166 [ 499.170825][T31042] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31042] 14:29:08 executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8000, 0x480) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x28f523ba, 0x101, 0x1, 0x1, 0xb269, 0x1800000, 0x100000001, 0xa8b2, 0x3, 0x400, 0x6, 0x4, 0x4, 0x4, 0x9, 0x10}}) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 14:29:08 executing program 1: clock_getres(0x201, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x7f) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x7, 0x77e3, 0x401}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000500)) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x7, 0x8000, 0x6, 0x692}, 0x3b, [0x3, 0x3f, 0x2, 0x1f, 0x81, 0x4, 0x401, 0xffffffffffffffe0, 0xffff, 0x2, 0xcbe, 0x9, 0x7fff, 0x8, 0x99, 0x401, 0x8, 0xb6, 0x1, 0x3, 0x4, 0x5, 0x800, 0x0, 0x1, 0x7, 0x6, 0x7, 0x8, 0x10001, 0xffffffff, 0x81, 0x100, 0xff, 0x7, 0x0, 0x5466, 0x8, 0xfea, 0x3ff, 0x0, 0x9, 0x7, 0x7ff, 0x1f, 0x4, 0x7, 0x0, 0x7, 0x0, 0x6, 0x3, 0x8, 0x654b, 0x0, 0xffffffff80000000, 0x401, 0xb0, 0x1, 0xa33, 0x8, 0x2, 0x4, 0x7], [0x6, 0xba, 0x81, 0x100, 0x5c24, 0x9, 0x8, 0x81, 0x5, 0x3, 0x1, 0x0, 0x4dbf4bef, 0x7fffffff, 0x2, 0x5, 0x0, 0x8, 0x575f000, 0x4, 0x7, 0x0, 0x7, 0x6, 0x2, 0x7fff, 0x1, 0x7ff, 0x1ff, 0x0, 0xffffffff, 0x7, 0xfffffffffffff47c, 0x0, 0x3ff, 0x3, 0x9, 0xd0, 0x2, 0x9, 0x8, 0x9, 0xad1, 0x3ff, 0x463, 0x9406, 0x6500, 0x3, 0x1, 0x8, 0x1, 0x8ac0, 0xce7, 0x7ff, 0x1ff, 0x100, 0x600, 0x6, 0x2, 0x0, 0x7, 0xd14, 0x2, 0x3ff], [0x9, 0x7, 0x7, 0x2, 0x9, 0x92, 0x1ff, 0x5, 0x100000000, 0x8, 0x20, 0x4c2, 0x6, 0x4, 0x400, 0x1, 0xfffffffffffff149, 0xfffffffffffffffa, 0x7c160a36, 0x5, 0x8000, 0xfffffffffffffffb, 0x3, 0xffffffffffffff52, 0x5, 0x3, 0xf39d, 0xaf5, 0x350, 0x1000, 0x4, 0xfffffffffffffba8, 0x4, 0x6fea, 0x600, 0x3, 0x730a, 0x3, 0x8001, 0x9, 0x3, 0x1ff, 0x9, 0xb0, 0x7, 0x80000000, 0x9, 0xf382, 0x5, 0x6, 0x7, 0x20, 0x4, 0x80000000, 0xfffffffffffffff7, 0x401, 0x5, 0x10001, 0x4, 0xfffffffffffffffe, 0x2, 0x0, 0x6, 0x4], [0xa6, 0x8, 0x239, 0x2, 0x4, 0xec06, 0x3, 0x6, 0x63, 0xb4a6, 0x5, 0x1, 0xffffffff, 0x2, 0x6, 0x5, 0x7fffffff, 0x100000000, 0x5, 0x0, 0x4, 0x82, 0x8, 0x3ff, 0x6, 0xffff, 0x0, 0x3, 0x1, 0x60, 0x1000, 0x2, 0x0, 0x5, 0x0, 0xfffffffffffffffc, 0xb1, 0xd, 0x0, 0x2, 0x9, 0x5, 0x4, 0x4, 0x5, 0xff, 0x200, 0x3a2, 0x5, 0x8daa, 0x3, 0x4, 0x5, 0x7fff, 0xffffffffffffffff, 0x10000, 0x5, 0x80000000, 0x1, 0x0, 0x7f, 0xffffffffffffd6de, 0x1, 0x71]}, 0x45c) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0xf) [ 499.178681][ T25] audit: type=1326 audit(1552228148.022:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31053 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000891e, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000020009200c000000000703665727302616e0000000c00021b0800030030000000f58d670e53c278a6eb9d69f2b44fc9a7b4ca22f270878a0ae7b9eacad8a51eb193e9bd179e7c1eca624c441eae093dfd6821eebc3f9d7571432cf2f8d0a23ce440667727f0baf273d9d866cb6cbef60e7c95f2919aa1d5370c54ae2f9e5b39a05ced401c2f37fedad16443a1dc5ee41ac3ea4083bab3d2f755fe6dde8ca6dfaa8b0fc2f50f11fe56506ec634bc784d23226585982e33a087e6a7d598a12f9952ab3f897278"], 0x1}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000003540)={'vcan0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000003c00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000003c40)=0x14) sendmmsg(r0, &(0x7f0000005480)=[{{&(0x7f0000000140)=@nl=@kern={0x10, 0x0, 0x0, 0x80402080}, 0x80, &(0x7f00000012c0)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f0000001380)="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", 0x1000}, {&(0x7f00000011c0)="9f4358016244ef598f9de3a75899e0d7ed47f0bb152fbd17fc06d4c5a111f12752c7da5c3e8d662d318c172c28967cf47279469753f17e0586de581593bbe6d0da8f8c25f09852bcd96871014a840a8bb5e2267b750ebde5208f1130b47c7fb069eccf31e00d7df455a24e46f0cc59b5ab4e32b31fc99f9278c8ab3b21c7930f1366f40f91d9109a3ff066532ee856dddd63a8f1906cb7c175340d10b4671fed4f000c28ad475b042199b22356d4e6ed74bbc345c7fd31db1e2542f5ecf4bd29d8ca6f448b97c5858c65e8bb7bc8", 0xce}], 0x3, &(0x7f0000005500)=ANY=[@ANYBLOB="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"], 0x1194}, 0xec8d}, {{&(0x7f0000003580)=@xdp={0x2c, 0x4, r2, 0x9}, 0x80, &(0x7f0000003a40)=[{&(0x7f0000003600)="9b0356c3f4f4ec9ac0a19cdfd2fccf10b04e71a17066983fe275e91f14141a7aba9e1fc638bf42ea3299151a0584d3b9ad846838e8fa4c8a2a577ef558e0327994f7b56b76f59ed1302193cd129f2a670e4bb18775f1b9361ccc7a2d078815d04dc92fb327a527723a23188f76b635898d123689deda1eadcaa0f19253e4d36d215dd81e3479db040dc63fd250d07f9784f958797df2", 0x96}, {&(0x7f00000036c0)="20272cd9f9dc00331326ca94e8fe513106cc450197de00a3d970ff506243", 0x1e}, {&(0x7f0000003700)="5b0437b63cfe5b7010e667a259d76441980cf58fd0cc0f62554ae521a3be4ef48c6f40dd30b262a10547bae106e831dd30906f33d8367de32d585d82fdbebfc0a9a38ed461a460e4cbed933e947d7b1c179242e4afa8", 0x56}, {&(0x7f0000003780)="b6dcb5f25e89a7f5c291eca1fe1d38814cc5b3af99dc14dab83b2a75f819e84edfecde3c8f6bbf1083902d86ef285f1a650b8ab8af44d6c7f0977fb3a9584120d7e5091cd88cba3cb24ca7", 0x4b}, {&(0x7f0000003800)="bf3622ec02d9cb53f1a01334b4637c21d517c1574faff667ba6bb016a335136b2af147f2b3586c42ccf9ae16d721eeeb179f8d43356ac648fbfbf9099e68aa875409ed216c59214f65ba287830038edc9a371cea381f58354f6d4c6d07437d1894489b41a6cdd4ac4ec68c02b980a3c3fcda59d780eebdeffabf913dae7926695646f5614feb8d7e2ad4d49962216a6e1f8445891ac77ccaff97fb8176054a07007fd0585e0518e1f3d0fb712ca4099c667f4d98d17b2a", 0xb7}, {&(0x7f00000038c0)="ec2a276a420fcb42965a58d024d5fedbe6d2ca0cc7e9d764778740d226c34c43a352b63c12c619f65dd869dd78ad32392111ad740d23e96705914fee4025a93a22c31a154facaf05", 0x48}, {&(0x7f0000003940)="a4dc7a28990eae1cb7a47a2861a6898541bb403d11b5274f2e1e1b409b4f81993ae18f7cd47035ea5ce297d362d9423e3e83c3c0c1528f4850b5e6a0831582e2069ae7dbc90d98340577f639db7edfdaa375eeca93c2b08e0151570c4d5ec111ab5a7b4edee402a391d0904f1d2776605497759ee11970d626a1019c1a0ed2b384fc832fcc0f62bc45fe1fc1cfc4e73a0009aea657aecd7662547e95e9182e876cf883974499935f76a8237700d0339b22356e3df707b2ad2a007aad4ce7f0f1a9df6bd6af3e7bfbf379a4641628b7fe16", 0xd1}], 0x7}, 0x5}, {{&(0x7f0000003c80)=@hci={0x1f, r3, 0x1}, 0x80, &(0x7f0000004ec0)=[{&(0x7f0000003d00)="ded0053fefb6b1d4514edfa147f1e3b2a1d7dc8f3c6c1341760170cf8334c9fac13251eefc55062467dfae99da2b68ececf5215dcfeb5a7777a38c9549ed35077ee56eeb8eed34a839200bf3039bef5e29db74f3ba75c4cab1e4ed0991095346f49a7cee3b713d6fcdbe500a0ca52966a471b5d2d95d8ec0399ae2052c5f56bdf6071704ac4274fc672b5fe26914bd47041caf0d62fcc7f7f00b35d7d9dac1111212c9fc6ea9b7c9be523b142b93ae7473e7929f58fc1a433ac37c35bbee323c326c31dbe597d3e54ec174e6347944", 0xcf}, {&(0x7f0000003e00)="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", 0x1000}, {&(0x7f0000004e00)="513a14d55272825a95f39f330e38a2662dee97d043b1c57ebbe91fe31e1efc3263c7318e521416d420eb2a707fa27165286a3a2a83c08b4c1db03e95c43edaf6add4313c6b7c7cfc395d7af4ac413fd02c9a9c7b7f764abd1a93d3cb36efb35e72b502d640f526ec02a4c9df766c64a0b44517e57e551d4942b4136854f5", 0x7e}, {&(0x7f0000004e80)="e8c5ca39c006dd73e5840b3bb55b15f6f2cab702e54d1a0f8ebf929dc43bab1b58df66d8d007fb9004924dc8a899c939879b4b", 0x33}], 0x4, &(0x7f0000004f00)=[{0x34, 0x10f, 0x6, "971db18da912293e4115abce9f5da12493d1a5ac0525856491a38aee317aebc786452658bd"}, {0xe0, 0x12f, 0x7fffffff, "4ee65c59132f85db3bbd5537168d383b205e25c6b8e175746cabe13df141d607812759a095c3590dcc94b9df41e43ed73437623839ce07e099925a328a85bf77007876c6ae12555d12e49fab2dea4007c556c3ab80480a93c3d1349ab7dec8c557dd6b8153a03ae186216470efb048c638f70a175d192e25f229a076626e6a47fa6c35d936793b5678cbada6f04cce73619ea4635fe957dee14221d6297f00700889fd9098be2260231b8af1a5c9b4ab8e62cd293b84839126533641c8ffe65932531f8e18af9249682fb1a458697f8bb75a"}, {0x10c, 0x10c, 0x3, "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"}, {0x7c, 0x19f, 0x36c0000000000000, "c181c0606e7094a2d6508c313c533e5d958a9d4efe68c2bf147a7264588facd18057cb31c9f9b8d8bbdc2f5d58982f0891acf46f18b2f99886c278e59261c66316eb0856aa0bf06fd98678d577b6d9ea1eadb06ff8930e426d52b7e15e4e0da9ede9e095b1e28a7ac15165305cb877"}, {0x104, 0x88, 0xf4, "648071a68ce1199ae4cb92673207af1597c8e341ba851196a63d1303d3fc89fc348c608c623a129113f73c3be525465642784af04203a9ea8ac7d105f0485f5e231aa8835e42e74ab3b1accea3d6e7ae356b1a6bd2183904d04a0cb916715e3086bab0b6bfc6497a8a1d4715d420e79f8de5a136e55533d4690e36d3c8123b26057cc8e81360e42e221fccc59281f93389b7cff681216d521a7f82ce93b02cc7f555e5e8e2a12bbec621d28f8f16f65543724bb1c2fff00e6f7ac31261e8895f3598dce3508aea0ff9f47c084a8e979541140a1b9f3ce8c0fe63f45a1688f82575b104468dd2eaa86f6d1660c723dc00a34bfe2b3b"}, {0x28, 0x0, 0x2, "17a3fe1afe2945c8d4c6da731b12ed194bb55d8805bf11a94a12a4"}, {0x38, 0x0, 0x200, "d5790406a372c51049cef68e936fa74812491ab49aad97002e3c0912b328a2f26b80d632fcc7708f92af97"}, {0x84, 0x102, 0x411, "079c7b7c6ebb6ea47823c929b3bec6517488336306523be9b36618a073afe569d901f8d7db2a06282d680a32e84f12ec9a937a076c8d8114b40db2944dd05dffd178a60085862f3209c4049e1724f20ed2c95347362fe5dcb52744ce30d7b604c8d5b8406d8c325d34afbd328509ecca0aa1e1feb958aa4a"}, {0xdc, 0x115, 0x7f, "64c78da28b60bea9206dd389fdecd88456b10443a4235c87f66dd6d81fdb9e4e65fcdbabfcbb6e77a7e30acddabdf8460156b32e32d675c935f22614ab73dcc49aefe9cb22279453684fd8189f7492f3347fa1e815f426b5759b05d453b621ad70f2bdb5f10032fb494b8f227af08e6f4210e1197f4416bdec93df540b73a4fbd30834120d92cd539dfa0eab0f4c9114379faf5ffd3560d0f1d2c9257112309892b2c84cee78a9b46aec204efe484e1a5374f66a3012f5bdaf2117dde3f3d82b87350573f7f4fd48fe7c2ba2a760"}], 0x560}, 0xffff}], 0x3, 0x90) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x40, 0x0) ioctl$TIOCEXCL(r4, 0x540c) 14:29:08 executing program 1: openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x400) 14:29:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x60d, 0x280000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000140)=ANY=[@ANYBLOB='\t\x00&\x00\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x10001, 0x4, 0x7}, 'syz1\x00', 0xc}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 499.567986][T31181] input: syz1 as /devices/virtual/input/input167 [ 499.608304][T31184] input: syz1 as /devices/virtual/input/input168 [ 499.973901][ T25] audit: type=1326 audit(1552228148.822:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31053 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:08 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x4c00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000020a5383dd9db768534bd0fc3f8b2d828a3001200100001006970fc85a7f01c3f515000000c094b935eff021b0800030030000000e7e4d0e223a9c8fc65ee1631e1c1b0ae9dabeccadef26af66cb6631c2ddedd3a03b81de66ebdb2fa71a342091ed8a50b88080be793b65daaefa1989a07a438c62ebbff9d96238bfbcdf72fb7c4f96f1df9cc9d764c0c5e4d913d91948c8a413a26e2540af13107a6cc6e57280284d9c746bb58a4721fc62aa9b889ab98fe47ca85d8023b0342b7e313f367a0c4073afbda95082d436102ec4f8a085b0243f66662eb0744f28420b0aa8c"], 0x1}}, 0x0) 14:29:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000891f, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:08 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$can_raw(r0, &(0x7f0000000040), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000140)) clock_getres(0xfffffffffffffff1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@remote, 0x0}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', r1}) sysfs$3(0x3) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='F\xde\x00\x00\xf8\xff\xff\xff\xff\xff\xff\xff\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) r5 = add_key(&(0x7f00000003c0)='.dead\x00', &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r5) utimensat(r2, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380)={{r3, r4/1000+10000}}, 0x100) timerfd_settime(r2, 0x1, &(0x7f0000000280)={{0x77359400}}, &(0x7f00000002c0)) 14:29:08 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f00000000c0)={0x9, 0x2, 0x6}) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 500.082191][T31198] input: syz1 as /devices/virtual/input/input169 [ 500.122254][T31199] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31199] 14:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[]}, 0x1, 0x0, 0x0, 0xffffffffffffffff}, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000140)=0x2) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) 14:29:09 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x4202, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) clock_getres(0xfffffffffffffff2, 0x0) 14:29:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008920, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 500.171657][T31198] input: syz1 as /devices/virtual/input/input171 [ 500.179935][ T25] audit: type=1326 audit(1552228149.042:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e21, @remote}}) 14:29:09 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)) getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000140)=0xc) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) r1 = getpgid(0x0) getpgid(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x218400, 0x0) add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x9, 0x2, 0x8000}, 0x55, 0x5, 0x8}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') set_tid_address(0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x4e24, 0x0, @mcast1}, 0x0, [0x8]}, 0x5c) socket$inet6(0xa, 0x803, 0x0) ioctl(0xffffffffffffffff, 0x1000008911, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'i\x00\x00\x00\x00\xec\x00\x00\x00\x00\x1b\x00', @ifru_flags}) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7, 0x4204) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000003c0)={@mcast2}, &(0x7f00000001c0)=0x14) 14:29:09 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 500.465625][T31237] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31237] [ 500.592869][T31233] IPVS: ftp: loaded support on port[0] = 21 [ 500.644274][ C1] net_ratelimit: 19 callbacks suppressed [ 500.644283][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 500.655762][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 500.778344][T31240] IPVS: ftp: loaded support on port[0] = 21 [ 500.884697][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 500.890670][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 500.953025][ T25] audit: type=1326 audit(1552228149.802:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31204 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:09 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x6800000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:09 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PPPIOCDISCONN(r2, 0x7439) 14:29:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008921, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560284470080ffe0060e000000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @loopback, 0x5e2}, 0x1c) 14:29:09 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 501.046907][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.052970][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 501.105363][T31248] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31248] [ 501.150293][T31257] input: syz1 as /devices/virtual/input/input173 14:29:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008922, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 501.192238][ T25] audit: type=1326 audit(1552228150.042:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31299 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 501.338466][T31369] eql: mtu greater than device maximum 14:29:10 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008924, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:10 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x3, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 501.491699][T31374] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31374] 14:29:10 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 501.684304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 501.684335][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 501.690086][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 501.800655][T31381] input: syz1 as /devices/virtual/input/input175 [ 501.819017][T31385] input: syz1 as /devices/virtual/input/input176 [ 501.834206][T31384] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31384] [ 501.972744][ T25] audit: type=1326 audit(1552228150.822:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31299 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:11 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)) getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000140)=0xc) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) r1 = getpgid(0x0) getpgid(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x218400, 0x0) add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x9, 0x2, 0x8000}, 0x55, 0x5, 0x8}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') set_tid_address(0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x4e24, 0x0, @mcast1}, 0x0, [0x8]}, 0x5c) socket$inet6(0xa, 0x803, 0x0) ioctl(0xffffffffffffffff, 0x1000008911, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'i\x00\x00\x00\x00\xec\x00\x00\x00\x00\x1b\x00', @ifru_flags}) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7, 0x4204) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000003c0)={@mcast2}, &(0x7f00000001c0)=0x14) 14:29:11 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x5e4, 0x400101) write$P9_RREAD(r0, &(0x7f0000000240)={0x100b, 0x75, 0x2, {0x1000, "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"}}, 0x100b) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r2 = request_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='@[keyring&cpusetvboxnet0\x00', 0xfffffffffffffff9) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000180)=0x3) keyctl$revoke(0x3, r2) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) ioctl$KDSETLED(r1, 0x4b32, 0x9) 14:29:11 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:11 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x2000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000580)=0x1, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@random={'btrfs.', '/dev/dsp\x00'}, &(0x7f0000000300)=""/109, 0x6d) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dlm_plock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000003c0)={0x0, 0xaf, "3906af54f516f32f1ba29a00d81746893fc089d126817b5dd14e5c5f05f6161fdbecf6cae68ce2447b7b02c65ebe47e550cfcb8abecc950edb5396f9e1cb7d3373500240be607f1cd27108765bb82c3e4f50c450536d31eb0c4ed8a5867a9075fdd7ec7b627041ec7a06138b50927355b853966a887b6468757dbcf39babb5f40696a2a2750c8f9ca0dcab3cf121d19049f72d53905f3b343b305c005e5332da763fcd7071c6067f1907882683e28b"}, &(0x7f0000000480)=0xb7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000004c0)={r3, 0xffffffff, 0x24ff}, &(0x7f0000000500)=0x8) sendmsg$nl_route(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000ca141511b7c5efecdbc804760000290012001000010006703665727370616e002000"], 0x1}}, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8080, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000001c0)={@caif=@rfm={0x25, 0xe1, "f0b9a97b6a5218879303f9641ba9957e"}, {&(0x7f0000000040)=""/212, 0xd4}, &(0x7f0000000140), 0x37}, 0x9c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000600)=0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r1, &(0x7f0000000640)={r2, r2, 0x7db0}) 14:29:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008927, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:11 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x6c00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 502.219505][ T25] audit: type=1326 audit(1552228151.072:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 502.234418][T31403] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31403] 14:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001e00)={0x0, 0x1a6, &(0x7f00000012c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x1}}, 0x1) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) r2 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000005c0)=0x0, &(0x7f0000000600), &(0x7f0000000640)) r5 = gettid() lstat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000740)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000780)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000880)=0xe8) r10 = getgid() r11 = getpgrp(0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000a80)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000b80)=0xe8) r13 = getgid() fcntl$getownex(r1, 0x10, &(0x7f0000001e40)={0x0, 0x0}) r15 = geteuid() lstat(&(0x7f0000001300)='./file0\x00', &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001800)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000001900)=0xe8) r19 = getegid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001940)=0x0) fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0, 0x0}, &(0x7f0000001a40)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000001a80)={0x0, 0x0}) getresuid(&(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)=0x0) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000001d40)=[{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000100)="ea388d550add2d0763325b74caca1bc1ffef4d4318e51afe8dac30e40925afaab35f5a15592a57520789155a4b05d073583b28f6d152484cb12e0ccd2986eede5db7bcea3d9e6c0b990eb88143bbdf107ae91455ac4fe023896e9e736b132141aca33074fdae1f14bc123bed16ddeed3", 0x70}, {&(0x7f00000001c0)="98895eb3cfcca47953e5c4febdd197a9e03ae0ef7a602dc84e133e60b9e150a4b74e5bb195e074ab5de4eb5213c2fa7ea80ccb9349210366ab98d5a2b7bf17e49e9be29aee74f89f6f44280204d198d06988404db9474959f1d64d567d702d2f0a2568982ba22c73c1a6d00854c4259a9f60d87d5853cdd1e1d2a7e4b4dde094f8040beb7187838f1f2f2476b0eea9770f3442f244d4d35959bc63106f8e1bafa8cdf8fd9d17d7eabfd3c8ecafd6af2853f26cdb31f2", 0xb6}, {&(0x7f0000000280)="7f09fec6f13c9e1b9e2b50d9cd655a64b6aa0bc68a781715ed9c38d52ff5a987d0efe4ad2543078cb6c85c38a0a7ea0b183c9caa8eae5c6457ec0e40a2a541107ce16fd96eebf281384e018c45a81f89c5bc646963f17f8d8505c12310b81f7f6770149031274ffd77a5686bdec8a2450a06d90b6fd5573b59f1d0bd247c14880821dc73e4534476d65f5cf384553f96089934f5e99a8d246c0b5461f5f312a6f76bace5903dfb87dca68275442a0e34e3b5161611ba972474225e4621f710d42c13b789b67c78bcb73fa769386b63ad1e6dbd", 0xd3}, {&(0x7f0000000380)="b9a278d9caa7fbd998a0f50ca6d9a8c24f7aee818de47f85c64f92e994f383d54ea99c0d2dd965cbbcc3e95e6fc6cc95f861a16b46a94a21f0262cfd1cca45d88ae51623d70c6476068db5ff599bc6fb9a35f74ac90969572ca9238460cfe6", 0x5f}, {&(0x7f0000000400)="6ae3d0c06bfc1bb4d533fe9c9adbf2754a", 0x11}, {&(0x7f0000000440)="ecd38a4a352b8b2239c9004cab90a109165b026b8e962fbca58ce850dfce5172511d864806564e7248ee128d9be3b0017a974ae600ea1754f4832b038b3a155a2cc3f07f9b2962881615c74124f5731906c0435574f66cb0779f3317821fdb20056e47f76bf5297e7c391e3567cc20e3a20c782272436ff766b572e57f25b73fbbcc54f4c07f277984352584884a88c86c9e16fc82c0257d7e00fe55", 0x9c}], 0x6, &(0x7f00000008c0)=[@rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0xc}, @rights={0x14, 0x1, 0x1, [r0, r0]}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r8, r9, r10}], 0xc0, 0x40}, {&(0x7f0000000980)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000a00)="74b54f7b", 0x4}], 0x1, &(0x7f0000000bc0)=[@rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r11, r12, r13}], 0x34, 0x1}, {&(0x7f0000000c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001240)=[{&(0x7f0000000c80)="decdbdf1cbd750e3dcbbd0545d159df30bcdc8abfbe4e43d0d1dab351e95b7b60e170c246a61d875be32b140404875dca0b66d00087e3eb17fff3d0d5a52b2fe78bfb8d75496717b59c815adba76", 0x4e}, {&(0x7f0000000d00)="b06324ec98e088fd05daca22308b78cd59647c4a68bba98f3928938a425805580994b8f95006ce0f23a21243d2a12677c4393ff8733840e5b25319a54dec88af6a4424d05028cfefff49dbd30670fd3855eabdfbc24f08cde574ff75b86f3522b5cef29a21b7210d", 0x68}, {&(0x7f0000000d80)="c7db98baea284d61e5ab26b8874dc5197996213a2f81f5c632f6dc35678b8ab80998ec2d3d9a74564290312e9814c390d89f4195055d8b480d876eb694085e6df406b6f1ce49b75ad2798bd1b297f62b526d40a04361f9c17c06ecaa0f9fab50f08778260921950acff158fd43cd6100aa1502672eae4a24a7893cf97a2c79a8ab3572f359dad4a268d59f21548c785f7f9dc2aa642e319d56794eb037261c0a6d399dc4", 0xa4}, {&(0x7f0000000e40)="e8ac3621a8f49c1cd64ce25508f7cd58b9005d30f9482981055c8253d177d2356c73368cdbfde89a40ae2b39a6472ba4ad522cab0946bd3fb7ac98002074179f9d5df015c2470b020ca9e5b86ba8122679affc56ae98c17aaab1a168b67a60c19d6a84b055fdd0897eb1fbcf87a58084b36c4c2c0d50dd09b4963c79f587f3b0daa8579ab98e1c32930c3d8b698d157f13cd3ffaa09c0ad47da672fcfbcac1ff6135252bf01f90adb6a5df0a2aa61ec47fb0ca96dc7a173b5a4ef002e6a494497cb21581a4aa7e7318b1fb8b499a13b8959af47311be", 0xd6}, {&(0x7f0000000f40)="128375d30a25dc0341ebcc27d1a01b290f2bbccd992511697d380e9ecd99defb88cceca078221ffd75a65d2b6b077b7a200a2ca991c849d2cc91742fc6a0d23b6c0399641f04f2c21ad9d2ee2bfa6ac24ed25ef387e4d33eeab1e70cda3af5f492612ab265ff02f844c3", 0x6a}, {&(0x7f0000000fc0)="5c6bfa2df71468d1d83b8b363e7813c821d5243c355e86c40d8e70e16aa6e5e7c05405ec09a7c1c00f18baee7053bf78a0e2cc515221474bdec07c26a58d11c0a3f7af0282c4285fcb17812bd02789b8d7f8059a7d3bc3be77d37ad51c47c88511094a3615a71fb099b39982ec4639c9b43475913e99f553f480a92bd7831d2a4030b4f06f2b3167995a7b738e4ae93034367db19e28c8e40e69fb26cc230c2682f9ef0a53197b31956ee98bb0a26130300d0f2fc51d8a165180e3e30909c036c4c43068c96d300271e49c0361506dca17", 0xd1}, {&(0x7f00000010c0)="98", 0x1}, {&(0x7f0000001100)="26d318c3248eb7fc28a07c506f6bc7136a289a4c56d34d1ba5a316f8c0c6b7ce5b873b1489d23b9853997592550c8fe0969d58729373df2bed66d833cbbc1506a7c0e8c257e76dafe4f82207923e55531dc78fce1264ef0f69c6b1873fdb1f94f67b8cf07a4b50a713e091f88bf86972ef8c12a9d1aed4cf005aa44702a33940fe69757141926e95bbe3a2ea53e8e4d6e5f082772bcbe08900bbbbeb9fcc227f71361e1e334244095232e67061c53e75d7a7ecf658e5d3fb33f4c6f06a65b225187302d30d47d90662c843", 0xcb}, {&(0x7f0000001200)="b6de6321373a20", 0x7}], 0x9, &(0x7f0000001400)=[@cred={0x18, 0x1, 0x2, r14, r15, r16}], 0x18}, {&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000017c0)=[{&(0x7f00000014c0)="96b18406faeb3e2f08678ce2ca4983bc6d0d37364d201393b2ffc64275ecef6e6985197ea5ed37cfb341b48d5fdddfc505732228a0d5764e22417ff584b2009312fecfbedfe6a76886e35f744edd4f798d793686ae0d811f6526a0f75d5946dfe269a10190e97a2b1584e63362036734663dd886268a9d0773f3233d5e6974e8d0d652d77f303afa889b5c6b74117b8aa0b4ea545b906be020d848d9adf16455d2ed1d11b2a1dd06a8c493618c31982c258f71f2bbe4ec1f843892a8111d3654cd91846aa576f2e2f749b593c47e3d999ed3fa9700b1fe6863c0f600c62db1ddf65382e8f2d1214535b50925ff7c", 0xee}, {&(0x7f00000015c0)="9054f06976265478f1882f44b82984fc08309710c408260f824c9c17aa1fc76125fc6d372f22bce0a79055c6d9b37ee33931445dd01a039d061941730b5bd8f919287aafd6fb46ff795f3ea4b15dc3a90e7ce25e6599a7b7ecaeaff8f5969c97744f3d89f63e13691f14963f75b1683db208ed83d6aefd70d4", 0x79}, {&(0x7f0000001640)="c882e02b383cef1d368d", 0xa}, {&(0x7f0000001680)="4a9e02be8ba249ef10141f79241299c9ffb21ef507cd5a634931036d97132e535771721cd2634cf79b570340898de8b3169e2dcab8f324e4510c201c688f8ee8a0b2f583ad241d9fdac19acec57d180f31fc1b01a949fe9f3f5839a6d1962afaecefd3c3e8b20bdf66692dbc95a153b6a8dbd6ab1d3455211e6271f38ddc31d4812ca571b30fe8acd398fabca90cc5d9b7c6a51c60157b55ed049243b9ce1779e8fec22f1e229b6f6dd6739af765771dae46332afaeab803a6f15b58d0bb65a354fc7ea402ffe7b0baea6c8dbdae35396a23e77f82", 0xd5}, {&(0x7f0000001780)="f401bacf83adc9229cbf7444e42d4e1b7b4a28c826477af602dfdfc3311e7674e856", 0x22}], 0x5, &(0x7f0000001c40)=[@cred={0x18, 0x1, 0x2, r17, r18, r19}, @rights={0x34, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r20, r21, r22}, @cred={0x18, 0x1, 0x2, r23, r24, r25}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}], 0xfc, 0x80}], 0x4, 0x4000000) 14:29:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008929, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:11 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x420000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, r3, 0x708, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x104}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7fff}, @NBD_ATTR_SOCKETS={0x1c, 0x7, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r1}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xf4c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x20}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) 14:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x10000, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) [ 502.514148][T31534] input: syz1 as /devices/virtual/input/input179 14:29:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4080aea2, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000200012001000010069703665727370616e0000000c00021b0800030030000000"], 0x1}}, 0x0) 14:29:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008930, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 502.616872][T31540] input: syz1 as /devices/virtual/input/input180 [ 502.621154][T31420] IPVS: ftp: loaded support on port[0] = 21 [ 503.012437][ T25] audit: type=1326 audit(1552228151.862:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31406 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:12 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)) getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000140)=0xc) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) r1 = getpgid(0x0) getpgid(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x218400, 0x0) add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x9, 0x2, 0x8000}, 0x55, 0x5, 0x8}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') set_tid_address(0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x4e24, 0x0, @mcast1}, 0x0, [0x8]}, 0x5c) socket$inet6(0xa, 0x803, 0x0) ioctl(0xffffffffffffffff, 0x1000008911, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'i\x00\x00\x00\x00\xec\x00\x00\x00\x00\x1b\x00', @ifru_flags}) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7, 0x4204) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000003c0)={@mcast2}, &(0x7f00000001c0)=0x14) 14:29:12 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:12 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$xdp(r1, &(0x7f0000001240)={&(0x7f0000000140)={0x2c, 0x0, r2, 0x3d}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)="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", 0x1000}], 0x1}, 0x800) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) 14:29:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008931, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:12 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x7400000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 503.586411][ T25] audit: type=1326 audit(1552228152.442:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31566 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 503.621719][T31563] input: syz1 as /devices/virtual/input/input181 [ 503.630428][T31571] input: syz1 as /devices/virtual/input/input182 [ 503.636021][T31569] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31569] 14:29:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008932, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 503.741813][T31571] input: syz1 as /devices/virtual/input/input183 14:29:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r0, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x5, 0x1, 0x1}, 0x14}}, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x603, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 14:29:12 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x800000000004, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:12 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x800000000003e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/wireless\x00hh\x80\xbd\x13\x87\x11\x14\xda\b\x00\x00\x00\x00\x00\x00\x006,%\xb1\x96 \xdb\xc3\xe0\xf4s\x15L\x97l\x95\xd1\xef\x00\x80I\x8d\xe6\f\xa2\xe3\xd3{\x86\x02\b\xc9x\xf8b\x1aS$%\x1fj,\xc3Q\'j\x9b\x7f\xcc\xdc\xa4a\xb5\xcf\x83\x9b\xcc~\xef\xbd\xe6\xff&.\xa2\x99\x1f\xf6\xc6\xcdP\x9c(\xff\xc3j\xdc\x86D0\v\x1bI\xa8\xd1\xdc-\x96\xb8\x1b\xfaj\xc6\x11\xc4t\x85h\x88\x9a5:\x95\xca\x1aB\xfa\xfbQ\x19.') r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x88000) ppoll(&(0x7f0000000040)=[{r0}, {r0, 0x1402}, {r0, 0x2000}, {r2}, {r1, 0x200}], 0x5, &(0x7f0000000080), &(0x7f00000000c0), 0x8) preadv(r1, &(0x7f0000000480), 0x10000000000001e3, 0x100000) 14:29:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008933, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 503.988326][T31695] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31695] [ 504.031102][T31700] input: syz1 as /devices/virtual/input/input184 [ 504.083090][T31726] input: syz1 as /devices/virtual/input/input185 [ 504.121387][T31581] IPVS: ftp: loaded support on port[0] = 21 [ 504.392661][ T25] audit: type=1326 audit(1552228153.242:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31566 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:13 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)) getpid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000140)=0xc) gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) r1 = getpgid(0x0) getpgid(r1) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(0x0, 0x0, &(0x7f0000000080)) openat$pfkey(0xffffffffffffff9c, 0x0, 0x10800, 0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0) getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) r2 = openat$full(0xffffffffffffff9c, 0x0, 0x218400, 0x0) add_key$keyring(&(0x7f0000001600)='keyring\x00', &(0x7f0000001640)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0405405, &(0x7f0000000240)={{0xffffffffffffffff, 0x2, 0x9, 0x2, 0x8000}, 0x55, 0x5, 0x8}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') set_tid_address(0x0) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xd1, &(0x7f0000000000)={{0xa, 0x0, 0x0, @mcast1}, {0xa, 0x4e24, 0x0, @mcast1}, 0x0, [0x8]}, 0x5c) socket$inet6(0xa, 0x803, 0x0) ioctl(0xffffffffffffffff, 0x1000008911, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'i\x00\x00\x00\x00\xec\x00\x00\x00\x00\x1b\x00', @ifru_flags}) syz_open_dev$loop(&(0x7f0000000400)='/dev/loop#\x00', 0x7, 0x4204) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f00000003c0)={@mcast2}, &(0x7f00000001c0)=0x14) 14:29:13 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(0x0, 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008935, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:13 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000800)="480000001500197f09004b0101048c590188ffffcf5d3474bc9240e10520613057fff7e07900e0413ff26bb452cf9e8a62bf5b3b8c3cfe5f0028213ee20600d4ff5bffff00c7e5ed", 0x48}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000000)='trusted.overlay.opaque\x00', &(0x7f0000000040)='y\x00', 0x2, 0x1) 14:29:13 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:13 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x7a00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 504.945120][T31827] input: syz1 as /devices/virtual/input/input186 [ 504.962389][ T25] audit: type=1326 audit(1552228153.812:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31824 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 504.988851][T31821] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31821] 14:29:13 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uhid\x00', 0x2, 0x0) pipe2(&(0x7f0000000240), 0x80800) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2041, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0x10, &(0x7f0000000280)='@\'eth0/vboxnet0\x00'}, 0x30) fcntl$lock(r0, 0x6, &(0x7f0000000300)={0x2, 0x3, 0x7, 0x1, r2}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffffffffff7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000000c0)={r3, 0x7f, "53ed6cdf881e41762b920b63bb77791b395c4364f43d76549ec98e256ecde758f8394c1b50ab04bcdf7065b2d49c5bff332a1c135611cf49f42191195d125d9d5e8c4f58cedaf29b6fc52c7e572763d59bdf0a9fa70f57850fca3c267fd483a64c477f910d0c181481e387b5a7b4bf20fc4c71b0fb249d517ef2b37dfa18ff"}, &(0x7f0000000180)=0x87) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000200)=0x9000000) write$P9_RREMOVE(r1, 0x0, 0x0) [ 505.022621][T31834] input: syz1 as /devices/virtual/input/input187 14:29:13 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(0x0, 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008937, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:14 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r2 = dup3(r0, r1, 0x80000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_vs_stats\x00') r4 = dup(r0) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r4, 0x110, 0x5, &(0x7f0000000040)=[0x4, 0x3], 0x2) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x2800, 0x4) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000100), 0x0, r4, 0x8}) dup3(r0, r1, 0x0) 14:29:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000300)) r3 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x80000001, 0x7, 0x2, 0x7fff], 0x4, 0x32161d3d, 0x14, 0x20, 0x1f32, 0x4b5, {0x6, 0x2, 0x0, 0x3, 0xffffffff, 0x1, 0x8, 0x5, 0x0, 0x0, 0x6c, 0x4, 0x3, 0x6, "7fbdbaf2b9c2aa52de1db0a22aa64313af5b63bc92a3c63768acba6d5c0b9cf6"}}) ioctl$VIDIOC_G_DV_TIMINGS(r3, 0xc0845658, &(0x7f0000000240)={0x0, @bt={0xba, 0x1, 0x0, 0x0, 0x7, 0x18, 0x6, 0x240000000, 0x1, 0x9, 0x6, 0x0, 0x8001, 0x1, 0x0, 0xa}}) [ 505.223048][T31849] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31849] [ 505.260109][T31837] IPVS: ftp: loaded support on port[0] = 21 14:29:14 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffff9c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000fa8000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, 0x0, 0x0) [ 505.328160][T31860] input: syz1 as /devices/virtual/input/input188 [ 505.385989][T31862] input: syz1 as /devices/virtual/input/input189 [ 505.731607][ T25] audit: type=1326 audit(1552228154.582:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31824 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 505.844305][ C0] net_ratelimit: 20 callbacks suppressed [ 505.844313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 505.855767][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 505.856795][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.857502][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 505.858864][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 505.859319][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:14 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x600, 0xff010000}, @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev, @empty=0xac141400, @random="eb5de09d9520", @dev}}}}, 0x0) 14:29:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008940, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:14 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(0x0, 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:14 executing program 0: r0 = open(&(0x7f0000000080)='./file0\x00', 0x80ff, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = syz_open_dev$dmmidi(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/\x00\x00\x00\x00') close(r2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e20, @multicast2}}, [0xd, 0xa2, 0xffff, 0x7, 0x5, 0x7fff, 0x5, 0x100, 0x101, 0xff, 0x1f812773, 0xffff, 0x15, 0x9, 0x5]}, &(0x7f0000000000)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={r3, 0xfff}, &(0x7f0000000100)=0x8) fstat(r2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x608401) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/3\x00') preadv(r4, &(0x7f0000000480), 0x10000000000002a1, 0x0) 14:29:14 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10c00, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000040)) r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x4, 0x20000) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:14 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0xfeffffff00000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 506.052685][T31885] input: syz1 as /devices/virtual/input/input190 [ 506.066576][ T25] audit: type=1326 audit(1552228154.922:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 506.069197][T31884] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31884] 14:29:15 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x40000000000009) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000100)=0x0) ptrace$peek(0x1, r0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000480)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000500)={0x0, {0x0, 0x0, 0x0, 0x1ff, 0x6}}) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@hci, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x201, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r2}) bind(r2, &(0x7f0000000540)=@l2={0x1f, 0x0, {0x0, 0x3}, 0x0, 0x8000}, 0x80) getitimer(0x400000000000003, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000340)='lp\x00', 0x3) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000400), &(0x7f0000000440)=0x4) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x12) sendto$inet6(r3, &(0x7f0000000280), 0x0, 0x20000004, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000340), 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f0000040000)) tkill(r4, 0x401104000000016) [ 506.157208][T31898] input: syz1 as /devices/virtual/input/input191 14:29:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008941, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:15 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) getpeername(0xffffffffffffff9c, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000040)=0x80) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) 14:29:15 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x4000, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0xfff, 0x0, 0x3d, &(0x7f0000ff7000/0x9000)=nil}) writev(r0, &(0x7f0000000040), 0xa5) 14:29:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008942, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 506.496232][T31914] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31914] [ 506.518660][T31918] input: syz1 as /devices/virtual/input/input192 14:29:15 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f0000000080)=[{{}, 0x1, 0x53, 0x200000000000002}], 0x18) write$evdev(r0, &(0x7f0000000040), 0x6c) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000040)=""/44) 14:29:15 executing program 1: r0 = getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x711400, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x14200, 0x0) linkat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1000) r3 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='\xc7\xea\xe9\xad\"\xebZ') capset(&(0x7f0000000580)={0x19980330}, &(0x7f0000000100)) setns(r3, 0x0) 14:29:15 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008943, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000100)={0x6, 0xff, 0x1000}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4d1, 0x400800) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r3 = getpgid(0xffffffffffffffff) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r4, 0x5, &(0x7f0000001640)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, r2, &(0x7f0000000280)="26a0040f1fc94d5cac9b23b646f30d22bf06ac75a556ef1bd739e5906aaa96e9922f3ed3568f177c3ad637c7281818285e7669403e95843cfaaa8b9c963b2b6dfbfce07214962d4674b7e617a307974457e2af981967300ce37de9670ca7b66ce433c08219d244095b69ec2c41928f7168ea0938aa29074de2840b30b56d407bbe57d897305fffc84be85600cef3bc0742a04cbe9ea3513a8600dbd47f4496ca51cc77a60257e588697db964bc", 0xad, 0x6, 0x0, 0x1, r2}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, r0, &(0x7f0000000380)="f72060c613f68a56aaa127f7982239b27ac3a4deeba2a7ecb9d5bc6cc08cc320fe310bcd346ec9df85e5c30795456c460f92c83342d88f0298b81ba426519d78b7b7e9fd5badb4ae962837ea53b40513db6a55166f089d5f01ddb74ea04b9903cb339ca2230e70ce513fe9ab30612c0ea21612d83b1843247e24", 0x7a, 0x9, 0x0, 0x1, r2}, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x3, 0x20, r1, &(0x7f0000000440)="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", 0x1000, 0x5, 0x0, 0x0, r2}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x6, 0x5, r2, &(0x7f0000001480)="161280e779af22301202d4ca0edf50fd4cc31a8257363fc85d973da1e34b3912be8e8d6067b55358b89c166073000cc7458d4907b8c031cb39085930f7ad3d19cba9325a88faa037cd6c3a540ba8904fc7df5d71e3e37dac4f498994cb11d09e4d61fec97a63be104ca13cd7ff18d140b3af89479b50a98b56267f175752075106d705a136cec5e573164bd2e9fd7f58b2df7a1dacd0d40133825266bf5ff7fd51a77e63a3c80e4c3e57b372fbcf68cc9b249bca4c4f", 0xb6, 0x20, 0x0, 0x3, r2}, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x7, 0x200, r1, &(0x7f0000001580)="071c4f2122f747d1a5007f45d7e437abc2652480ed349cee309557bc5568c2317dea97ada610396da874492cf0dea9fa49c00bf981b47d5e8b3bacb6a09dd0bd55b70fe75268cb1ae8a1571cb0afc219f5ba5331a99c6e2fb26d22c0937470ef1d660500727ccce69b1a8ba2223539", 0x6f, 0x6, 0x0, 0x1, r2}]) ptrace$getsig(0x4202, r3, 0x7fff, &(0x7f0000000140)) [ 506.745561][T31940] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31940] [ 506.801467][T31946] input: syz1 as /devices/virtual/input/input194 [ 506.839732][ T25] audit: type=1326 audit(1552228155.692:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31888 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 506.863138][T31946] input: syz1 as /devices/virtual/input/input195 [ 506.884317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 506.890154][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:15 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0xffffff7f00000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:15 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x80005, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000bba000)={0x0, 0x0, 0x0, 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={0x18, 0x1, 0x1, [r2]}], 0x18}, 0x0) close(r2) close(r1) close(r0) r4 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3f, 0x1) ioctl$UI_SET_MSCBIT(r4, 0x40045568, 0x8) syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x2, 0x400000) 14:29:15 executing program 0: r0 = memfd_create(0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB=':dev/nbd0\x00'], &(0x7f0000000480)='./file0/../file0\x00', &(0x7f0000000640)='anon_inodefs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e7200000"], 0x1, 0x0) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) fadvise64(r1, 0x20, 0x8, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0xc0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000380)={0x7, 0x0, 0x300f, 0x2, 0x800, 0x4000000000000, 0x7}) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x28010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={r3}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/5) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000003c0)={0x4, 0x40, 0x6, 0x8, 0x276, 0x60000000}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) uselib(&(0x7f0000000280)='./control/file0\x00') 14:29:15 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 506.983464][T31962] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31962] 14:29:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008946, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 507.020525][ T25] audit: type=1326 audit(1552228155.852:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31969 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:16 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 507.124313][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 507.130178][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:16 executing program 1: r0 = socket$inet(0x2, 0x100000000805, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x3c, 0x60000) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f00000000c0)={0x1, 0x6}) listen(r0, 0xa0) r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r2, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000200)={0xe5a}) fdatasync(0xffffffffffffffff) r5 = fcntl$getown(r4, 0x9) perf_event_open(&(0x7f0000000240)={0x7, 0x70, 0x7, 0x8, 0x8, 0x1f, 0x0, 0x401, 0x80050, 0x9, 0x4a0, 0x7, 0x3, 0x80, 0x7, 0x7f000000000000, 0x4c, 0x9, 0x81, 0x25c, 0x8, 0xffff, 0x3, 0x0, 0xfc6, 0x4, 0x3, 0x5b, 0x7, 0x829, 0x2f, 0x7, 0x400, 0x5, 0x5, 0xff, 0x8, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x3, 0x2}, 0x10004, 0xc000000000000000, 0x4, 0xb, 0x7, 0x401}, r5, 0xf, r3, 0x3) ioctl$VT_SETMODE(r3, 0x5602, &(0x7f0000000000)={0x100, 0x5acf, 0x5, 0x4, 0x1}) sendfile(r4, r4, 0x0, 0xfffffffffffffffe) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000180)={@multicast2, @empty}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r3, 0x80046402, &(0x7f0000000140)=0x5) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000100)={0x0, 0x7fffc}) [ 507.232957][T31982] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31982] 14:29:16 executing program 0: r0 = memfd_create(0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000700)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x1c, 0x0, @ib={0x1b, 0x3f, 0x0, {"6d3a03a22ad13804238c25806cdd75ac"}}}}, 0xa0) fchmodat(0xffffffffffffffff, 0x0, 0x2) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000080)='./control\x00', 0x0) mount(&(0x7f0000000340)=ANY=[@ANYBLOB=':dev/nbd0\x00'], &(0x7f0000000480)='./file0/../file0\x00', &(0x7f0000000640)='anon_inodefs\x00', 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./control\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000e7200000"], 0x1, 0x0) mkdir(&(0x7f0000000040)='./control/file0\x00', 0x0) rmdir(&(0x7f0000000180)='./control/file0\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffff9c, 0x0, 0x0}, 0x10) clone(0x802102001fec, 0x0, 0xfffffffffffffffe, &(0x7f0000000300), 0xffffffffffffffff) fadvise64(r1, 0x20, 0x8, 0x3) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0xc0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r2, 0xc040564a, &(0x7f0000000380)={0x7, 0x0, 0x300f, 0x2, 0x800, 0x4000000000000, 0x7}) r3 = mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x28010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000200)={r3}) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000240)=""/5) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f00000003c0)={0x4, 0x40, 0x6, 0x8, 0x276, 0x60000000}) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) uselib(&(0x7f0000000280)='./control/file0\x00') 14:29:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008947, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:16 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7f, 0x181102) ioctl$VIDIOC_DQEVENT(r2, 0x80785659, &(0x7f0000000240)={0x0, @ctrl}) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000000c0)={0xe, @raw_data="5e5c871bfd999947984f44baadc2e87e705d95105e25daddce3682ad99b1d94385ba2aa990b650f49768c068f57f35eea50a0ea570ffd144c0fcf253465d9aff2e33de87e09dda63a1fc2e385be5774c460c0c07e0bc491de3c82fe0b4d69ac58cdf9514eec67f6e9fae7a8fd188e5a8625d7bb352332978f687e42dbe383424436e462ee61fe08e225bba8c5fd8ecc9ec507a20c9f113f731fe566ba486656de5ff562afa1d8304979f020c49aec6bb5db6fa0b68fffb210a04263de3dec0115f6755ac2db267d3"}) 14:29:16 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008948, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 507.431153][T32000] input: syz1 as /devices/virtual/input/input196 [ 507.465783][T31999] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[31999] [ 507.495607][T32004] input: syz1 as /devices/virtual/input/input197 [ 507.801170][ T25] audit: type=1326 audit(1552228156.652:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=31969 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:16 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0xffffffff00000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008949, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:16 executing program 5: prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x1d) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x10000, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x1f, 0x2400000000, 0x0, 0x7f}, 0x38, [0xcf8, 0x3, 0x9, 0x722ae0aa, 0x8, 0x7, 0x0, 0x2, 0x2, 0x8, 0x1, 0x80000001, 0x96d, 0xfffffffffffffff7, 0xff, 0x80000001, 0x6, 0x86c9, 0x4, 0x5, 0x2, 0x1ff, 0xfffffffeffffffff, 0x6, 0x1000, 0x8, 0x2ebc, 0xbda, 0x8000, 0x2, 0x0, 0x1, 0x101, 0x7cd, 0x0, 0x20, 0x3, 0x2, 0x5, 0x9, 0x100, 0x8, 0x9, 0x2, 0x6, 0x800, 0x5, 0x3a6e, 0x7, 0x2, 0x0, 0x9, 0x10000, 0x8, 0x6, 0x6, 0x35f3, 0x7, 0x10000, 0x800, 0x80000000, 0x9, 0x5b2, 0x6], [0x6, 0x2, 0x3, 0x6, 0x6, 0x8, 0x3, 0x7f, 0x9, 0x7fffffff, 0x2, 0xa259, 0x7, 0x2, 0xfffffffffffffffa, 0x81, 0x9, 0x2, 0x4, 0x5, 0x7, 0x7, 0x8, 0x4, 0x2, 0x80, 0x6, 0x3f, 0x2, 0x4, 0x0, 0x9, 0x1, 0x0, 0x1000, 0x9, 0x4, 0x5, 0xffffffff, 0x1000, 0x4, 0x9, 0x101, 0x4, 0x2, 0xfff, 0x10001, 0x1000, 0xffff, 0x2, 0x7d, 0x7fff80000000, 0x3c84e2c0, 0xe7, 0x8, 0x20, 0x100, 0x6, 0x7, 0x5, 0xaf3e, 0x3, 0x8, 0x4], [0x81, 0x26, 0x20, 0x6, 0x56bf, 0x3, 0x60, 0x1, 0x9, 0x8000, 0x9, 0x1f, 0x24000000000000, 0x81, 0x8189, 0x7, 0x81, 0x4, 0x3, 0x8, 0xfff, 0x8, 0x8001, 0x5, 0x40, 0x40, 0xffffffff, 0x6, 0x2, 0x5, 0x4, 0x2, 0x1, 0x7, 0x20, 0x9, 0x0, 0x6, 0x726, 0xe6, 0x4, 0x5a9a, 0x65a, 0x8, 0x3036, 0x4, 0x4, 0x0, 0x1f, 0x9, 0x1, 0x6, 0x0, 0x81, 0xffff, 0x2, 0x3, 0x100000000000, 0x0, 0x3ff, 0x7f, 0x1, 0xbb4, 0x7ff], [0x1, 0x1000, 0xf4e, 0x6, 0x8, 0x3, 0x8da, 0x20, 0xffffffff, 0x200, 0x5, 0x0, 0x8, 0x40, 0x2, 0x100000000, 0xda12db7, 0x8, 0x1f1, 0x3, 0xfffffffffffffffd, 0x0, 0x4, 0x3f, 0x8000, 0x9, 0x9b, 0x1, 0x7ff, 0x94, 0x0, 0x72, 0x101, 0x8001, 0x4, 0x4, 0x10001, 0x7, 0x6, 0x4, 0x6, 0x3, 0x8, 0x9, 0x20, 0x7, 0x8000, 0x6, 0xb3, 0xffff, 0x7, 0xfffffffeffffffff, 0xa76c, 0x4, 0x3f, 0x6f3, 0x0, 0x9, 0x9, 0x7fffffff, 0x3, 0x0, 0x40, 0x3]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x23, 0x2000) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x806, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10001}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) 14:29:16 executing program 0: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20\x00', 0x0, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000100)={0x0, 0xbd, 0x6, 0x7fff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@dev}}, &(0x7f0000000280)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000002c0)={r1, @broadcast, @loopback}, 0xc) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x4, 0x0) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f0000000140)={0xe38e, 'syz1\x00'}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000040)={@broadcast, @multicast2}, &(0x7f0000000080)=0xc) r3 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="20000000280005000000000000000000030000000c0003f0ffffff0000000000"], 0x20}}, 0x0) 14:29:16 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:16 executing program 0: sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000289000)={&(0x7f0000cf1ff4), 0xc, &(0x7f0000703000)={&(0x7f000023f000)=ANY=[@ANYBLOB="84000000000000000000000ffc380c2dbfc75e89e106ba4206274d760dfe0597260617e101000006000000001cb4e2bf50b96bbb9427ecd8337f6d63cc87e2c2d7f271f069c29c4d91b00ffff0be48b748d3050bc1700612dbc3080c91125fa158cf0d70309f7f19007c82628ac49881284c09d732940142ab1cf90b11e0"], 0x82}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f000023f000)=0xa, 0x20b) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={r2, @broadcast, @loopback}, 0xc) [ 508.030346][ T25] audit: type=1326 audit(1552228156.882:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32133 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:17 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_int(r2, 0x21, 0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, &(0x7f0000000a00)={0x0, 0x0, [], @bt={0xffffffff, 0x2, 0x0, 0x1ff, 0x6, 0x3419, 0x4}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r1, 0x0, 0xb, &(0x7f0000000280)='/dev/loop0\x00', 0xffffffffffffffff}, 0x30) fcntl$getownex(r1, 0x10, &(0x7f0000000680)) r4 = getpgid(r3) r5 = getpgid(r4) capget(&(0x7f0000000780)={0x19980330, r5}, 0x0) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0xdf87, 0x8, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0xffffffff, 0x3ff, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x0, 0x3, 0x1800000000000, 0x3a53, 0x687923fb, 0x0, 0x7, 0x8, 0xf6, 0x9, 0x1ff, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x2300, 0x1000000000, 0x0, 0x4, 0x0, 0x8}, 0x0, 0xd, r2, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) prctl$PR_GET_CHILD_SUBREAPER(0x25) stat(&(0x7f00000004c0)='./file0\x00', 0x0) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='fuseblk\x00', 0x4000, &(0x7f0000000c80)=ANY=[@ANYBLOB="2c626c6b73697a653d3078303030303030303030303030313630302c626c6b73697a653d3078303030303030303030303030316530302c6d61785f726d61643d3078303030303030303030303030303033342c616c6c6f776c6f746865722c6d61785f726561643d3078303030303030303030303030343833662c6d61785f726561643d3078303030303030303030303030303030372c626c6b73697a653d30783030a8583030303030303030313030302c626c6b73697a653d3078303030303030303030303030303230302c616c6c6f775f6f746865722c66756e633d5fd6447fae3479a70d3ce91b7c88328175983a25ee232698bcb4dab27de50dd59144a569d87fb62834aa55d46d5b680eedf44719b0f60ca624cc51ccf821b5881445eb93261e0debb7757b5f7f9f034bf926fcd2f5d546b040ba051c05910e46ba6d25c409fb2259f47e43cba7a96f251a82dec8e1c6c7cab91d5a6924dd996a694130b218c26b61c02d78d79f846f184af40543d21255d7b398a0"]) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x200000000, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$unix(r2, &(0x7f00000006c0)=[{&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000580)="004c5347e6988d8169cfe2d632a5c07939c596d0311abc2aa8efeb5fc6f5e975c2fa3219b8bdab8c6ff10cdd8ac1fcdcc4ffd03912770f6df4c8130bd6deb6248128aeea75b6c3302abeaf603fba066135aa2479d61c14", 0x57}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x4000) mount(&(0x7f0000000240)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f0000000740)='nfs\x00', 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000e80)=@req={0x20, &(0x7f0000000e40)={'nr0\x00', @ifru_map={0x81, 0x0, 0x1f, 0x52, 0x9, 0x9}}}) write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x7}, 0x7) clone(0x8000000, 0x0, 0xfffffffffffffffe, &(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0xda9, 0x1) write$binfmt_elf64(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c9649002fd33d3d0d9ce83e30eed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000026f7c7342d2ea121a08d394ec6e705400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x578) 14:29:17 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x0, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:17 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x101000) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000894a, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:17 executing program 0: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:17 executing program 0: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 508.550110][T32159] input: syz1 as /devices/virtual/input/input198 [ 508.621109][T32167] input: syz1 as /devices/virtual/input/input199 [ 508.696752][T32170] __report_access: 3 callbacks suppressed [ 508.696813][T32170] ptrace attach of "/root/syz-executor.0"[7398] was attempted by "/root/syz-executor.0"[32170] [ 508.818334][ T25] audit: type=1326 audit(1552228157.672:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32133 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:17 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x2}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:17 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000894c, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:17 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x0, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x404000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:17 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x8, 0x0, 0x0, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80, 0x2dc5750825efd3c0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2800, 0x0) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000002c0)={0xd8f9, 0x2000000000000004}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000100)=0x480a) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$TIOCNXCL(r2, 0x540d) [ 508.999380][T32184] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[32184] [ 509.035497][T32191] input: syz1 as /devices/virtual/input/input200 [ 509.051200][ T25] audit: type=1326 audit(1552228157.902:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 509.109164][T32198] input: syz1 as /devices/virtual/input/input201 14:29:18 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f00000001c0)=0x3, 0x4) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x103100, 0x0) getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000000)) 14:29:18 executing program 0: r0 = socket$inet6(0xa, 0x80003, 0xff) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'veth1_to_bond\x00', &(0x7f0000000300)=@ethtool_stats}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYBLOB="8000640082a0bad51ea824dd0ba45a3896757fe1b3852d919dd17a8975b5810eb76250e8f0160be4b5bc4c73ba9493d9362900bee1b1fefb0711e96fb1e24eb1e911e233e68f252c2baf9582eebf2dbf88fe25d27f253c0a9867c110209cff070000000000005f3b"], 0x6c) 14:29:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008953, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0xc, 0x70bd2d, 0x25dfdbfe, {{}, 0x0, 0x410c, 0x0, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000280)={0xfffffffffffffffd}, 0x4) 14:29:18 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x0, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:18 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x840100000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lookup_dcookie(0x6, &(0x7f0000000280)=""/108, 0x6c) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000200)={0x0, 0x1000300, 0x44f0f00000000000, [], &(0x7f0000000240)={0x0, 0x0, [], @string=&(0x7f0000000100)=0x8001}}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='maps\x00') ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000180)) 14:29:18 executing program 0: r0 = socket(0x16, 0x800, 0x1) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0xe77}, 0x1c) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) [ 509.655700][T32314] input: syz1 as /devices/virtual/input/input202 [ 509.680700][T32316] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[32316] [ 509.772428][T32326] input: syz1 as /devices/virtual/input/input203 [ 509.847244][ T25] audit: type=1326 audit(1552228158.702:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:18 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x3}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:18 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008955, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz'}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@builtin='builtin_trusted\x00') keyctl$link(0x8, r0, r0) 14:29:18 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x12700, 0x0) recvfrom(r0, &(0x7f0000000000), 0x0, 0x40000100, &(0x7f0000000100)=@in={0x2, 0x4e22, @empty}, 0x80) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40047705, &(0x7f0000000040)={0x6, 0xffffffffffffffff}) write$P9_RAUTH(r0, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x10, 0x0, 0x2}}, 0x14) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c00060000001900a30704000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0) 14:29:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x40000000000002, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:18 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x0, 0x2}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$CAPI_NCCI_GETUNIT(r0, 0x80044327, &(0x7f0000000080)) fchown(r1, 0x0, 0x0) 14:29:19 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 510.105372][ T25] audit: type=1326 audit(1552228158.962:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32455 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008970, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:19 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) statfs(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) io_setup(0x800, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xd4dd, r0, &(0x7f0000000240)="9ef265c9", 0x4, 0xb6, 0x0, 0x2, r1}, &(0x7f00000002c0)) [ 510.227107][T32459] input: syz1 as /devices/virtual/input/input204 [ 510.237682][T32470] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[32470] 14:29:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = eventfd2(0x0, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) fsetxattr$security_capability(r1, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000280)=@v3={0x3000000, [{0x3, 0x100}, {0xff, 0x7}], r2}, 0x18, 0x3) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f00000001c0)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r5, r4) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r6, 0x1, &(0x7f0000000000)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x2000000, r4, 0x0, 0x0, 0x1, 0x0, 0x3}]) 14:29:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008971, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 510.510748][T32596] input: syz1 as /devices/virtual/input/input205 [ 510.650173][T32600] input: syz1 as /devices/virtual/input/input206 [ 510.887708][ T25] audit: type=1326 audit(1552228159.742:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32455 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:19 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:19 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) statfs(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) io_setup(0x800, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xd4dd, r0, &(0x7f0000000240)="9ef265c9", 0x4, 0xb6, 0x0, 0x2, r1}, &(0x7f00000002c0)) 14:29:19 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008980, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:19 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200000000002) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0x9, 0x1}) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x3, 0x600000000000000, [0x17b], [0xc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 14:29:19 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x6, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 511.010626][T32615] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[32615] [ 511.021447][T32617] input: syz1 as /devices/virtual/input/input207 [ 511.044283][ C1] net_ratelimit: 18 callbacks suppressed [ 511.044291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.049993][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.062717][ T25] audit: type=1326 audit(1552228159.912:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32625 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) statfs(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) io_setup(0x800, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xd4dd, r0, &(0x7f0000000240)="9ef265c9", 0x4, 0xb6, 0x0, 0x2, r1}, &(0x7f00000002c0)) 14:29:20 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000040)={{}, {0x1}, 0x8, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl(r0, 0xffffffffffffffb2, &(0x7f0000000040)) r2 = dup2(r1, r0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) 14:29:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008983, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{}, 'syz1\x00', 0x2b}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000200)={0xe1, "35e2a4563df622eda7bf0b83da6945ed0ae79758bbec77815542155e91ba113e", 0x5, 0xa2, 0x8001, 0x7cc6, 0x8, 0x2, 0x9, 0x2}) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000180)={0x6, 0xbb, 0x2b4}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000040)={0x7, 0x0, 0x10001, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40086436, &(0x7f0000000140)={r3, 0x3}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 511.284387][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 511.290224][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) statfs(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) io_setup(0x800, &(0x7f0000000200)=0x0) io_cancel(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xd4dd, r0, &(0x7f0000000240)="9ef265c9", 0x4, 0xb6, 0x0, 0x2, r1}, &(0x7f00000002c0)) 14:29:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x101}, 0x8) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe) [ 511.444317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 511.450152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 511.459063][T32745] input: syz1 as /devices/virtual/input/input209 [ 511.509381][T32752] input: syz1 as /devices/virtual/input/input210 [ 511.860328][ T25] audit: type=1326 audit(1552228160.712:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=32625 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:20 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x5}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:20 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008990, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:20 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) statfs(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) io_setup(0x800, &(0x7f0000000200)) 14:29:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000240)="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", 0xfd, 0xfffffffffffffffd) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:20 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x3, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x101}, 0x8) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000d83ff8)=0x1d, 0x8000fffffffe) [ 511.966176][ T301] input: syz1 as /devices/virtual/input/input211 14:29:20 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008992, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 512.006508][T32764] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[32764] [ 512.017805][ T25] audit: type=1326 audit(1552228160.852:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=311 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:21 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) statfs(&(0x7f0000000300)='./file0\x00', 0xffffffffffffffff) [ 512.084268][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 512.085129][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 512.090114][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 512.096307][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:21 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x210300, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000140)={0x3, 0x1, 0x3, {0x1ff, 0x9, 0x7, 0x2}}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0x0, r1, 0x0, 0x2, &(0x7f0000000180)='\x0e\x00', 0xffffffffffffffff}, 0x30) ptrace$setregs(0xf, r2, 0xe7, &(0x7f0000000300)="13662d8cf728e9b5f716557a589d00281d698ba5404b39f106165f5a968e3749644c04942116943145a872fef899b28acdc4fda24c046c153eec70469ca1cd0f376c679ee4cc20c42f64726cca7d5c65e888bffe36c8addbe3bb8fa3638a8623c10b8f75fadff53453cc747e731aeeda315dc352e0a54282ee77d62707ede9a9bda9e0e5e0817771c581c7f2d034f48baabab57adefc6af01f808a8aa0527c04ac890cb1cf40f4789f0f223be57dd5cf2436d7dd985a25826b0d5f9ca969eb66e092984db0abd8") ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) getrusage(0x1, &(0x7f00000000c0)) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000240)={{0x0, @dev={0xac, 0x14, 0x14, 0x2a}, 0x4e22, 0x1, 'nq\x00', 0x10, 0x5376, 0xa}, {@broadcast, 0x4e24, 0x0, 0x800, 0x0, 0x1f}}, 0x44) 14:29:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008993, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:21 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) close(r0) [ 512.337091][ T327] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[327] [ 512.357229][ T332] input: syz1 as /devices/virtual/input/input213 [ 512.802347][ T25] audit: type=1326 audit(1552228161.652:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=311 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:21 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:21 executing program 1: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x20, {{0xa, 0x0, 0x0, @ipv4={[], [], @rand_addr=0x3e6}}}, 0x1, 0x5, [{{0xa, 0x4e24, 0x0, @mcast2}}, {{0xa, 0x4e20, 0x8, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}, {{0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, {{0xa, 0x4e20, 0x101, @loopback, 0x7}}, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x82f5}}]}, 0x30c) ioctl$void(r0, 0x5450) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000340)=0x1) 14:29:21 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008994, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:21 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r1}, 0x10) 14:29:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) write$evdev(r1, &(0x7f00000000c0)=[{{}, 0x17, 0x0, 0x2}], 0x10) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000040)={0x2, 0xfa, 0x20}) 14:29:21 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 512.944402][ T451] input: syz1 as /devices/virtual/input/input215 14:29:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@security={'security\x00', 0xe, 0x4, 0x48c, 0xf4, 0x20c, 0x0, 0xf4, 0x0, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x3f8, 0x4, &(0x7f0000000100), {[{{@uncond, 0x0, 0x98, 0xf4}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x1, 0xa, [0x0, 0x4, 0x30, 0x21, 0x38, 0xb, 0xf, 0x6, 0x23, 0x38, 0x3b, 0x2e, 0x11, 0x1c, 0x1e, 0x3b], 0x2, 0xc6, 0x100}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xa}, @multicast1, 0xffffff00, 0xffffffff, 'bcsf0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x95, 0x3, 0x40}, 0x0, 0xbc, 0x118, 0x0, {}, [@common=@icmp={0x24, 'icmp\x00', 0x0, {0x10, 0x6, 0x7}}]}, @common=@CLUSTERIP={0x5c, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0x88, 0x7, [0x11, 0x26, 0x3, 0x13, 0x4, 0x1, 0x3c, 0x3d, 0x11, 0xd, 0xd, 0x2b, 0x11, 0x1e, 0x27, 0x18], 0x2, 0x15, 0x80}}}, {{@uncond, 0x0, 0xc4, 0x1ec, 0x0, {}, [@common=@addrtype={0x2c, 'addrtype\x00', 0x0, {0x88, 0x10}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x9, 'system_u:object_r:dpkg_exec_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x94}, {0x24}}}}, 0x4e8) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcb, &(0x7f0000000000), 0x10) 14:29:21 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000340)={'\x00', {0x2, 0x4e22, @multicast2}}) [ 512.975851][ T25] audit: type=1326 audit(1552228161.832:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=459 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 513.007061][ T453] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[453] [ 513.065033][ T451] input: syz1 as /devices/virtual/input/input216 14:29:22 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000080)={{}, {0x20000000304, @local}, 0x14, {0x2, 0x0, @remote}, '\xff\x7f\xff\xfe\x01\x00\x02\x01\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000100)={{0x2, 0x0, @empty}, {0x0, @remote}, 0x0, {0x2, 0x0, @broadcast}, 'gretap0\x00'}) 14:29:22 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$FUSE_GETXATTR(r1, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x20}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008995, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)=""/117, 0x75) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x208000, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000240)) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 513.522854][ T590] input: syz1 as /devices/virtual/input/input217 14:29:22 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:22 executing program 1: timer_create(0xfffffffffffffff9, 0x0, &(0x7f00000002c0)) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x77359400}}, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40, 0x402000) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080)={0x8000}, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x989680}, {0x77359400}}, 0x0) 14:29:22 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089a0, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:22 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 513.913804][ T607] input: syz1 as /devices/virtual/input/input218 [ 513.925227][ T605] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[605] [ 513.947585][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 513.947598][ T25] audit: type=1326 audit(1552228162.802:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=617 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:22 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x200002, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) r2 = openat$cgroup_type(r0, &(0x7f00000001c0)='cgroup.type\x00', 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x20f) 14:29:22 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:22 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089a1, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 514.130044][ T620] input: syz1 as /devices/virtual/input/input219 14:29:23 executing program 1: sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x40000000000009) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x800004000, &(0x7f0000000140), 0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) perf_event_open(&(0x7f000000a000)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4) clone(0x80a102001ff5, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mount(0x0, &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0xe, &(0x7f00000000c0)='\xc1\xef\x04\'H\xd0\x1b\\\xb5\x0e\x1c\xda\x9b<\x1d\x19\x88\x87\x8b\x0f\xb0\xe1\xc4') 14:29:23 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:23 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x2}) [ 514.386221][ T742] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[742] [ 514.621113][ T757] cgroup: fork rejected by pids controller in /syz1 [ 514.743961][ T25] audit: type=1326 audit(1552228163.592:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=617 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:23 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xa}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089a2, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:23 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000180), &(0x7f00000001c0)=0x30) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:23 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:23 executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRESDEC], 0x14}}], 0x1, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000002580)="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"}, {&(0x7f0000000b40)}], 0x0, &(0x7f0000003580)=[{0x0, 0x10f, 0x0, "84cc0dee617d35be8b111c18917e8ea0cc8c671f2e2c4da70b73cfe9b247cc4d547c1d5721437e7cb6121ea72dc2df5b2633063cf6b2f80ffed35f83d54cab4aba0a360fcc97981c7acd2fb49c680442be259f7239756a703e89164d2d2b858f9f3f10a212e026736c6a35f8095aed1deb4e6e8b443044d0311b18a8f68e8667bf843787b0be66f397a8fb16ccb96fccf4bf93a716c4308abddfa2567ac76a8e105dfdbea13826fb79ab0e5f18143418504f3c8abad11ed586c9bdef08771c2fd58fd2afa23e17db942e9f9536b9d20646d5c3e3934e180da266af11eb2cd26df207f8b64362265b8397b2009bdc3636"}, {0x0, 0x1ff, 0x7, "2cdaf051e927c5fc1abb620a1deba9b86086374bb7eaf5be0810d728b116820af092ea8b6c74f9041bfca3bfce118d13e5d2532c6e6c31d920667ac6010c9aaa029de689c95287be53a73ffb56758f7bc8a00da35dfc501370613099a8da68ea1a949aad71bcc4498fb00a9993b9fbd8769915f913637a6674b6d0386bccfcf38409525cf05f21ea12ef50f456400a78c9146bbc31a4456567d52236991a06b9ed3bb2427b316030480ce584e7fb0b545ce5f93902ff1329e877fad8843796abad52144d0f9d378c3a28525bf6b2b9d49678eed6fdbf1cc7c94d9d"}, {0x0, 0x114, 0xd312, "5317e3b4824448e8c0a84a77e2dfb629d1e608735883496b4b5195deeab16edfe4ec9f86b1797fd1d620b006a61abf91c4ccef219f68120a22f6b58cd85f65dcac852a20527c202c0a83c47c020a1ffe998e1e3a3c375a9400b17d3393bfc4b500b3b3324e89849cf9519f59ad871dfabad3053d00778dee53b825dab04b5dcd482fed42b5c06ce678bb60261590ebf09636bb7e687d6b43a5c4ed92166a84bee4f06de25613f9bfd3df2f85622c56d3e321ee2453da15572313cf76f24071ddfd8350ef664eb66fbd2ff9d8e1ee6bd69ab84a"}, {0x0, 0x13f, 0x0, "e3640e7c41f098ca3d62bb9be167d10a596d749fa8485bfe38730e846fdb2ebde4457e3c470b11b3c976c630709404ddd5c256d8bf0f524fb9a875a181ee4fcd5fb381b79b5e9f63a2e51a746c40fdba726844a082f7ed05f53fd9"}, {0x0, 0x111, 0xfffffffffffff1d2, "50bcf3b3f5b92891cf63674cfe7875cb74b94e8125f412b5ec3cd336cb37eff1bfd7fd81c618f1b26a1665b176e9a38980728338b51cde2328a930ee758b04dcc5a60a66de20589e5938ca5d796247cc9a0f9507ed3af68a8ff5905116f8f15cfe4844a4245eb66feff1bdfc5cb968f9d8eaeba97b221d449ae355ddf831b62d724254e23f2d1df8cace"}]}, 0x6b9}], 0x800000000000017, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000000180)=0xe8) clock_gettime(0x0, &(0x7f0000000f80)) clock_nanosleep(0x4000000000004, 0x0, &(0x7f0000000fc0), &(0x7f0000000f40)) r4 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f00000004c0)=0xe8) r6 = getegid() r7 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x7, 0x20400) ioctl$DRM_IOCTL_FREE_BUFS(r7, 0x4008641a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[0x3f, 0xffffffffffff5aae, 0x7, 0x4d]}) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000cc0)=ANY=[@ANYBLOB='nat\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYPTR=&(0x7f00000010c0)=ANY=[@ANYBLOB="00000000177dcd2e000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a91f22ffb0ad7f944f310b70c6f9ea272e000000000000000000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xc0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000dc0)={{0xa, 0x4e21, 0x80, @rand_addr="ccb597438204738ef042d4cbbf6e4621", 0xc41}, {0xa, 0x4e20, 0x7ff, @ipv4={[], [], @local}, 0x1}, 0x8, [0xffff, 0x3, 0x48, 0x7, 0x400, 0x2, 0x7, 0x1f]}, 0x5c) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000500)=0x0) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ec0)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000700)=0x0) getsockopt$inet6_buf(r2, 0x29, 0x7f, &(0x7f0000001580)=""/4096, &(0x7f0000000d80)=0x1000) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000740)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@loopback}}, &(0x7f0000000840)=0xe8) stat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000940)={{{@in6, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@empty}}, &(0x7f0000000a40)=0xe8) getresgid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)=0x0) r17 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r7, &(0x7f0000000e40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r17, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20000000) sendmsg$netlink(r2, &(0x7f0000000c00)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)=[{&(0x7f0000003980)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="14008f00fe80000000000000000000000000001f08006b003a00000040003b00646ea6cc50499d2df5a3153a070cc1bde2e05e22a860dcc8e05c465dbb428c80dc39de367a65128e60adfdf389ac6163f200000040a325988bd8646a4ca04f8a62c0642aa05881fa107d37c06e5a45e52466effdb5cabde961bdbd622d1cf54ceb7dd6b00a4419c361484c73c6e5fe8f333305edbb08f8ccc260a2a248164fa2"], 0x3}], 0x1, &(0x7f0000001000)=ANY=[@ANYBLOB="180000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="1800000001000000020000668914c87f628ea9c9b9ecfd063ed6e000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="180000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="200000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="180000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16], 0xac, 0x4000}, 0x40000) [ 514.854813][ T773] input: syz1 as /devices/virtual/input/input220 [ 514.870716][ T774] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[774] 14:29:23 executing program 0: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 514.886623][ T25] audit: type=1326 audit(1552228163.742:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=777 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:23 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089a3, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:23 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:24 executing program 0: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 515.134378][ T896] input: syz1 as /devices/virtual/input/input222 [ 515.190509][ T898] input: syz1 as /devices/virtual/input/input223 14:29:24 executing program 0: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 515.676830][ T25] audit: type=1326 audit(1552228164.532:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=777 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:24 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x10}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:24 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089b0, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:24 executing program 0: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:24 executing program 5: r0 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0xbfd, 0x2) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x21) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0x3e4600000000000, 0x1, 0xb8e, 0x5, 0x1, 0x5}) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089a3, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 515.795138][ T926] input: syz1 as /devices/virtual/input/input224 [ 515.815553][ T917] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[917] 14:29:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 515.833486][ T25] audit: type=1326 audit(1552228164.682:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 515.874117][ T933] input: syz1 as /devices/virtual/input/input225 14:29:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089b1, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:24 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x40000000001, 0x4, &(0x7f0000346fc8)=@framed={{0x18, 0x0, 0x0, 0x20000000000000}, [@alu={0x8000000000003fe, 0x3, 0x3fd}]}, &(0x7f0000f6bffb)='GPL\x1d', 0x80, 0x4e1, &(0x7f00001a7f05)=""/251}, 0x48) r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0xa00, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x101, 0xb1]) getsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 14:29:24 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:24 executing program 3 (fault-call:13 fault-nth:0): pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 516.063471][ T947] FAULT_INJECTION: forcing a failure. [ 516.063471][ T947] name failslab, interval 1, probability 0, space 0, times 0 [ 516.077175][ T947] CPU: 1 PID: 947 Comm: syz-executor.3 Not tainted 5.0.0+ #15 [ 516.084724][ T947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 516.094779][ T947] Call Trace: [ 516.098078][ T947] dump_stack+0x172/0x1f0 [ 516.102425][ T947] should_fail.cold+0xa/0x15 [ 516.107023][ T947] ? mark_held_locks+0xa4/0xf0 [ 516.111805][ T947] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 516.117616][ T947] ? perf_trace_lock+0xeb/0x510 [ 516.122455][ T947] __should_failslab+0x121/0x190 [ 516.127380][ T947] should_failslab+0x9/0x14 [ 516.131864][ T947] kmem_cache_alloc_trace+0x4b/0x760 [ 516.137129][ T947] ? find_held_lock+0x35/0x130 [ 516.141878][ T947] ? yama_ptrace_access_check+0x7d8/0xce3 [ 516.147589][ T947] report_access+0x158/0x460 [ 516.152160][ T947] ? __report_access+0x1a0/0x1a0 [ 516.157080][ T947] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 516.163322][ T947] ? kasan_check_read+0x11/0x20 [ 516.168175][ T947] yama_ptrace_access_check+0x475/0xce3 [ 516.173705][ T947] ? cap_ptrace_access_check+0x210/0x470 [ 516.179324][ T947] security_ptrace_access_check+0x71/0xb0 [ 516.185025][ T947] __ptrace_may_access+0x4b1/0x830 [ 516.190118][ T947] ptrace_may_access+0x31/0x60 [ 516.194864][ T947] mm_access+0xd7/0x150 [ 516.199005][ T947] process_vm_rw_core.isra.0+0x22e/0xb10 [ 516.204622][ T947] ? _kstrtoull+0x14c/0x200 [ 516.209104][ T947] ? _parse_integer+0x190/0x190 [ 516.213955][ T947] ? alloc_vmap_area.cold+0x24/0x24 [ 516.219133][ T947] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 516.225351][ T947] ? iov_iter_init+0xea/0x220 [ 516.230010][ T947] ? compat_import_iovec+0x12e/0x1fc [ 516.235276][ T947] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 516.240982][ T947] ? compat_rw_copy_check_uvector+0x351/0x3f0 [ 516.244286][ C0] net_ratelimit: 20 callbacks suppressed [ 516.244294][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 516.247041][ T947] compat_process_vm_rw+0x21f/0x240 [ 516.252706][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 516.258359][ T947] ? process_vm_rw+0x240/0x240 [ 516.258378][ T947] ? lock_downgrade+0x880/0x880 [ 516.258408][ T947] ? __mutex_unlock_slowpath+0xf8/0x6b0 [ 516.284768][ T947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 516.290206][ T947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 516.295645][ T947] ? lockdep_hardirqs_on+0x418/0x5d0 [ 516.300909][ T947] ? retint_kernel+0x2d/0x2d [ 516.305480][ T947] ? trace_hardirqs_on_caller+0x6a/0x220 [ 516.311092][ T947] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 516.316534][ T947] ? retint_kernel+0x2d/0x2d [ 516.321123][ T947] __ia32_compat_sys_process_vm_readv+0xe0/0x1a0 [ 516.327432][ T947] ? __ia32_compat_sys_process_vm_readv+0x1/0x1a0 [ 516.333826][ T947] do_fast_syscall_32+0x281/0xc98 [ 516.338831][ T947] entry_SYSENTER_compat+0x70/0x7f [ 516.343926][ T947] RIP: 0023:0xf7f17869 [ 516.347977][ T947] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 516.367560][ T947] RSP: 002b:00000000f5d130cc EFLAGS: 00000296 ORIG_RAX: 000000000000015b [ 516.375949][ T947] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000020000000 [ 516.383898][ T947] RDX: 0000000000000001 RSI: 0000000020003600 RDI: 0000000000000001 [ 516.391847][ T947] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 516.399799][ T947] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 516.407750][ T947] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:29:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 516.416896][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 516.422907][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 516.429365][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 516.435298][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 516.595531][ T25] audit: type=1326 audit(1552228165.452:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=929 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:25 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x48}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:25 executing program 1: r0 = socket$inet(0x2, 0x200000002, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@random="491287127f1d", @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) munlockall() 14:29:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x6, 0x800) fsetxattr$trusted_overlay_opaque(r2, &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x1) ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000140)={0x8000007f, "39ec5c9b9170be2d1854e84c2ddf1478f92ad9e6f130d641413a88d4a1a6d7bd", 0x3, 0x1}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:25 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000000089e0, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 516.719732][ T1083] input: syz1 as /devices/virtual/input/input226 [ 516.735933][ T25] audit: type=1326 audit(1552228165.592:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1088 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:25 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) [ 516.773123][ T1082] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1082] [ 516.800636][ T1094] input: syz1 as /devices/virtual/input/input227 14:29:25 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$tipc(r1, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10) tee(r0, r1, 0x5, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r3 = dup3(r0, r2, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) close(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x201, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r4}, 0x10) fdatasync(r3) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000380)={@rand_addr=0x3, @local, @multicast1}, 0xc) 14:29:25 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000040049409, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:25 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x300}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:25 executing program 0: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x2}) [ 517.008114][ T1112] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1112] [ 517.284295][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 517.290089][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:26 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4c}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000004020940d, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_vs\x00') getpeername$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000440)={@rand_addr="fe1f06692b9706dd8990358e61ee3ca6", r3}, 0x14) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$tipc(r1, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10) tee(r0, r1, 0x5, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r3 = dup3(r0, r2, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) close(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x201, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r4}, 0x10) fdatasync(r3) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000380)={@rand_addr=0x3, @local, @multicast1}, 0xc) 14:29:26 executing program 0: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:26 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x500}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 517.524311][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 517.530217][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 517.536078][ T25] audit: type=1326 audit(1552228166.382:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1088 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 517.632237][ T1241] input: syz1 as /devices/virtual/input/input228 [ 517.652412][ T1240] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1240] 14:29:26 executing program 0: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x2}) [ 517.675427][ T25] audit: type=1326 audit(1552228166.522:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:26 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = epoll_create(0x4) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockname$tipc(r1, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10) tee(r0, r1, 0x5, 0x4) socket$inet_dccp(0x2, 0x6, 0x0) ppoll(&(0x7f0000000140)=[{r2}, {r0}], 0x2, 0x0, 0x0, 0x0) vmsplice(r1, 0x0, 0x0, 0x2) keyctl$set_reqkey_keyring(0xe, 0xffffffffffffffff) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r3 = dup3(r0, r2, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='memory.high\x00', 0x2, 0x0) close(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x201, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000280)=0xe8) bind$can_raw(r1, &(0x7f00000002c0)={0x1d, r4}, 0x10) fdatasync(r3) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000380)={@rand_addr=0x3, @local, @multicast1}, 0xc) 14:29:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000402c5828, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 517.786940][ T1249] input: syz1 as /devices/virtual/input/input229 14:29:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, 0x0) 14:29:26 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, 0x0) 14:29:26 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000402c582a, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 518.465837][ T25] audit: type=1326 audit(1552228167.322:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1246 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:27 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x68}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, 0x0) 14:29:27 executing program 1: unshare(0x8000400) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) mq_getsetattr(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = creat(0x0, 0x29) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000200)=0x100) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20000004, &(0x7f000031e000)={0xa, 0x4e22}, 0x1c) shutdown(r3, 0x1) r4 = accept4(r1, 0x0, 0x0, 0x0) dup3(r1, r4, 0x0) 14:29:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x2000) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2) syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x8, 0x200) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x1f, @remote, 0x2}, 0x1c) 14:29:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000c0189436, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:27 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x600}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 518.588747][ T1392] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1392] [ 518.623009][ T1389] input: syz1 as /devices/virtual/input/input230 14:29:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x4000000c020660b, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 518.651801][ T1401] input: syz1 as /devices/virtual/input/input231 14:29:27 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:27 executing program 1: r0 = socket$packet(0x11, 0x40000000002, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a80)={'bond0\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$packet_int(r0, 0x107, 0x400000000a, &(0x7f0000000040)=0x2, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x3d9a, 0xfff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r3, 0xac, "e865c3feb32a06917b21b5699930de7770149a100e82c6624d55095402253c3323a8c1606f942156c9f285eb5c1a44c45c498afb1b5e2503a0f2859388052d9ac25ba488c7eb1647349bf9d00d8337efbd6acbc90b83932e13d3301a029187840828ccb2b0ece5f0ac561b804447c6a84e2d86f2db1f2726fc0e23487445c22b8b328ae036dfa1ce6c3c59b0f0ff6b711577fa0a2904e7f80c40ab317d6b0e84a0c3c9819201866af8ee1223"}, &(0x7f0000000240)=0xb4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) 14:29:27 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:27 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\xff\xff\xfd\xfd\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:28 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6c}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:28 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000240)=""/114) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) connect$rds(r1, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r2 = syz_open_dev$evdev(&(0x7f00000002c0)='/dev/input/event#\x00', 0x4, 0x0) lseek(r0, 0x0, 0x2) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r4 = dup(r3) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000100)=0x10) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000040)) 14:29:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\xfd\xfd\xff\xff\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:28 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x700}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x80005, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$inet6_sctp(0xa, 0x5, 0x84) io_setup(0x9, &(0x7f0000000080)) io_setup(0x5, &(0x7f00000000c0)) io_setup(0x4a5, &(0x7f0000000100)) io_setup(0x767a, &(0x7f0000000140)=0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x1, 0x4) io_destroy(r1) [ 519.415986][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 519.415999][ T25] audit: type=1326 audit(1552228168.272:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1398 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 519.534031][ T1541] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1541] [ 519.546127][ T1544] input: syz1 as /devices/virtual/input/input232 [ 519.574451][ T25] audit: type=1326 audit(1552228168.432:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1546 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000040)) [ 519.647582][ T1544] input: syz1 as /devices/virtual/input/input233 14:29:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\xff\xff\xfd\xfd', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000040)) 14:29:28 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000040)) 14:29:28 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\xff\xff\xfd\xfd\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:28 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x900}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 520.052816][ T1690] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1690] [ 520.345403][ T25] audit: type=1326 audit(1552228169.202:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1546 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:29 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x74}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x1}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000040)) 14:29:29 executing program 1: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x700}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\xfd\xfd\xff\xff\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:29 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0xa00}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 520.463056][ T1801] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1801] [ 520.491633][ T1808] input: syz1 as /devices/virtual/input/input234 14:29:29 executing program 1: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x700}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000040)) [ 520.499226][ T25] audit: type=1326 audit(1552228169.352:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1811 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 520.515881][ T1809] ptrace attach of "/root/syz-executor.1"[7401] was attempted by "/root/syz-executor.1"[1809] 14:29:29 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0xb00}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:29 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\xff\xff\xfd', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 520.638063][ T1900] ptrace attach of "/root/syz-executor.1"[7401] was attempted by "/root/syz-executor.1"[1900] 14:29:29 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000040)) 14:29:29 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x10000, 0x10000000000fff}, 'syz1\x00'}) sysfs$2(0x2, 0x4, &(0x7f0000000040)=""/29) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) socket$inet6(0xa, 0xf, 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 520.761833][ T1935] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[1935] [ 520.808012][ T1941] input: syz1 as /devices/virtual/input/input236 [ 520.902232][ T1941] input: syz1 as /devices/virtual/input/input237 [ 521.291229][ T25] audit: type=1326 audit(1552228170.142:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=1811 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:30 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7a}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000040)) 14:29:30 executing program 1: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x900}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\xff\xff\xfd\xfd\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:30 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0xc00}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x20001, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000100)={0x7, 0x0, [], {0x0, @reserved}}) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000240)=""/48) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x189800, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) [ 521.385235][ T2062] Unknown ioctl -1064020382 [ 521.409154][ T2062] input: syz1 as /devices/virtual/input/input238 [ 521.419710][ T2060] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[2060] [ 521.443235][ T2056] ptrace attach of "/root/syz-executor.1"[7401] was attempted by "/root/syz-executor.1"[2056] [ 521.444308][ C1] net_ratelimit: 21 callbacks suppressed 14:29:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000040)) [ 521.444317][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.459308][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.473795][ T25] audit: type=1326 audit(1552228170.322:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 521.511903][ T2072] Unknown ioctl -1064020382 14:29:30 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000040)) [ 521.542052][ T2080] input: syz1 as /devices/virtual/input/input239 14:29:30 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\xfd\xfd\xff\xff\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:30 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f00000000c0)={0x32}) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f0000000080)={0x0, 0x1, 0x6, {0x6e63, 0x3}, {0x5, 0xfffffffffffffeff}, @period={0x58, 0xffffffff, 0x0, 0x10000, 0x8, {0x80000000, 0x8, 0x3, 0xfffffffffffffffa}, 0x1, &(0x7f0000000040)=[0x8]}}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x0}) [ 521.685178][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 521.691471][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:30 executing program 1: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) r1 = getpgid(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="5277bc55be05c659bff37ba263a1928d060712f74bc36ca923473f49aa8b3065", 0x20) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f0000000240)=""/10, 0xa}], 0x2}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000001000)=""/26, 0x1a}], 0x1}}], 0x2, 0x0, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x10000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4068aea3, &(0x7f0000000340)={0x7b, 0x0, [0x2, 0x9, 0x6, 0x5f1]}) process_vm_writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/234, 0xea}], 0x1, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/68, 0x44}], 0x1, 0x0) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x119002) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000805}) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000740)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) 14:29:30 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x40000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f00000000c0)={0x800100f, 0xfffffffffffff68c, 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 521.844293][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 521.850175][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 521.906904][ T2201] input: syz1 as /devices/virtual/input/input240 [ 521.920418][ T2203] input: syz1 as /devices/virtual/input/input241 [ 522.235155][ T25] audit: type=1326 audit(1552228171.092:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2070 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:31 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x300}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\x00\xff\xff', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:31 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0xd00}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c0d774a, 0x0, 0x400000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 14:29:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x4946b796f3cf75c8, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x4) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 14:29:31 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c0d774a, 0x0, 0x400000000000, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) [ 522.348746][ T2218] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[2218] [ 522.363028][ T25] audit: type=1326 audit(1552228171.212:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2221 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:31 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000001c0), 0x10) ioctl$PPPIOCGFLAGS1(0xffffffffffffffff, 0x8004745a, &(0x7f0000000240)) syz_open_procfs(0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000000)=[{0x80000006}]}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r2, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x0, @multicast2}, 0x4}}, 0x26) recvmmsg(0xffffffffffffffff, &(0x7f0000006080)=[{{0x0, 0x0, &(0x7f00000016c0)}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000005fc0), 0x800000000000059, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x4}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) 14:29:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000040)) 14:29:31 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\xff\xff\xfd\xfd\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 522.484334][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 522.490137][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:31 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000738ff0)={0x2, 0x4e21, @multicast1}, 0x10) connect$unix(r0, &(0x7f0000000140)=@abs={0x1, 0x0, 0x4e23}, 0x6e) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='_', 0x1, 0x0, 0x0, 0x0) getpeername(r1, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x64, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x81}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2f}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4a38}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xbb}]}, @TIPC_NLA_NET={0x1c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x20008800}, 0xdab7053906da7848) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), 0x14) recvfrom$inet(r0, &(0x7f0000000b40)=""/4096, 0xfffffffffffffe67, 0x2, 0x0, 0xfffffffffffffc8f) [ 522.647353][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 522.653748][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 522.694476][ T2350] input: syz1 as /devices/virtual/input/input242 14:29:31 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000040)) 14:29:31 executing program 1: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000dddfc8)={0x0, 0x0, &(0x7f00008a7000)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c000000d5a30501ff0080fffdffff2e0a0000000c000100060000007d0a00010c000200000022ff02f10000"], 0x2c}}, 0x0) [ 523.167067][ T25] audit: type=1326 audit(1552228172.012:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2221 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:32 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x500}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\xfd\xfd\xff\xff\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:32 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0xe00}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000040)) 14:29:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)=0x800000400003) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x10000, 0xd000, 0xe, 0x6, 0x5, 0x0, 0x5e3, 0x9, 0x3, 0x5, 0x6, 0x4}, {0x1000, 0xd000, 0x8, 0x0, 0x0, 0x2, 0x1000000000000000, 0x0, 0xfffffffffffffff9, 0xf974, 0xffff000000000000, 0x4}, {0x6002, 0xd000, 0x0, 0x0, 0x3, 0x5, 0x3, 0x3, 0x0, 0xcfb7, 0xffffffffffff0001, 0x6}, {0x100004, 0xf000, 0xd, 0x100000000, 0x0, 0x6, 0x7, 0x0, 0x6, 0x10000, 0x1000000, 0x1}, {0x2000, 0x6000, 0xb, 0x7, 0x7, 0x6, 0x3, 0x3, 0x8, 0x3ff, 0x7ff}, {0x7004, 0x1000, 0xe, 0x8001, 0x61, 0xdb1, 0x400, 0x4f632d1, 0x8, 0x7, 0x6, 0x5}, {0x1f000, 0xf004, 0xf, 0x0, 0x6, 0x5, 0x101, 0x7ff, 0x10001, 0x80, 0x1, 0x7}, {0x1000, 0x100000, 0x9, 0x100000000, 0x4, 0xde44, 0x2852f352, 0x6, 0x100000000, 0xc1bb, 0x6, 0x81}, {0x1000, 0x10f000}, {}, 0x20000000, 0x0, 0x100000, 0x2010, 0x7, 0x400, 0x10000, [0x9, 0xfffffffffffffff8, 0x8001, 0x1]}) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000108}]}) [ 523.302497][ T2350] input: syz1 as /devices/virtual/input/input243 [ 523.325159][ T25] audit: type=1326 audit(1552228172.162:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2378 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 523.361430][ T2373] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[2373] 14:29:32 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000040)) 14:29:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x1000}, 'syz1\x00', 0x80000000000003}) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@l2, &(0x7f0000000000)=0x80, 0x80000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002a00)={0x0, @remote, @remote}, &(0x7f0000002a40)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000002b00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a80)=@gettfilter={0x34, 0x2e, 0x8, 0x70bd2d, 0x25dfdbff, {0x0, r2, {0xd, 0x3}, {0xd, 0x14}, {0xffff, 0xfffb}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x4) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x1, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0)=0x7f, 0x4) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) 14:29:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\x00\x00\xff', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x2, 0x2) write$P9_ROPEN(r2, &(0x7f0000000100)={0x18, 0x71, 0x2, {{0x1, 0x3, 0x7}, 0x7}}, 0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x2000000000048}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000003040), 0x3f162122ee96e25, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 14:29:32 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1002}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:32 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=""/3, &(0x7f00000000c0)=0x3) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) keyctl$session_to_parent(0x12) 14:29:32 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\xff\xff\xfd\xfd', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 523.943545][ T2625] input: syz1 as /devices/virtual/input/input246 [ 523.972042][ T2628] input: syz1 as /devices/virtual/input/input247 14:29:33 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x600}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:33 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1003}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\xfd\xfd\xff\xff', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$vivid(&(0x7f0000000140)='/dev/video#\x00', 0x0, 0x2) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000280)={@rand_addr, 0x0}, &(0x7f00000002c0)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000400)=0x14, 0x80000) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@initdev}}, &(0x7f0000000540)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000002a80)={0x0, @dev, @initdev}, &(0x7f0000002ac0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000002b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000002f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002b40)={0x3f4, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r5}, {0x244, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0xc, 0x4, [{0x3, 0x1000, 0x9, 0x100}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffff81f2}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x7, 0x9, 0x9, 0x10000}, {0x7, 0x72fc747c, 0xffffffffffffffe0, 0x2}, {0x5, 0x5, 0x1e}, {0xfff, 0x11f6, 0x8465, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x18c, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x423}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x1f}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x4000000000000000, 0x4, 0x6, 0x14}, {0x100, 0x4, 0x0, 0x4}, {0x40, 0x8000, 0x9, 0xffffffff80000001}, {0x5, 0x0, 0x7fffffff}, {0x9, 0x5, 0x100000001}, {0x100, 0x5, 0x100000001, 0x2}]}}}]}}]}, 0x3f4}, 0x1, 0x0, 0x0, 0x4}, 0x10) [ 524.223985][ T2637] input: syz1 as /devices/virtual/input/input248 14:29:33 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000040)) 14:29:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 524.290561][ T2677] input: syz1 as /devices/virtual/input/input249 14:29:33 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1004}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\xff\xff\xfd', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:33 executing program 1: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1003}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:33 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000040)) 14:29:33 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x40, 0x280000) write$evdev(r1, &(0x7f00000000c0)=[{{0x0, 0x2710}, 0x11, 0x45, 0x80000000}, {{0x0, 0x2710}, 0x17, 0x1ff, 0x80}], 0x20) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\xfd\xfd\xff', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 524.706912][ T2884] input: syz1 as /devices/virtual/input/input250 [ 524.801650][ T2891] __report_access: 3 callbacks suppressed [ 524.801693][ T2891] ptrace attach of "/root/syz-executor.1"[7401] was attempted by "/root/syz-executor.1"[2891] 14:29:33 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x700}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:33 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:33 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4020940d, &(0x7f0000000040)) 14:29:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x101000) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f0000000040)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000140)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000080)) ioctl(r0, 0xffffffffffffffb6, &(0x7f0000000000)) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) 14:29:33 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1005}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:33 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/dlm-control\x00', 0x8802, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000800)=0xffffffff, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)="1426e30f819401c30a024888e5bbce5ba119a5633bc4de767449992da98eafd1072bd471b61a27d92417ca005ec7f43a09f0e75ab2141ceb83021113c155ed1275687a333a76", 0x46, r1}, 0x68) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000006c0)={{0x0, 0x0, 0x8d, 0xd4e1}, 'syz0\x00', 0x53}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x12}) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x100, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000740), &(0x7f0000000780)=0x4) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x6, 0x0, 0x7, 0xffffffffffffffc1}, 0x4c, [0x5, 0x101, 0x95f, 0xb1e6, 0x100000000, 0x10000, 0xff, 0x3c8, 0x2, 0x2, 0x80, 0x5, 0xf8, 0x9, 0x4fa, 0x401, 0x4, 0x0, 0x7, 0x0, 0x5, 0x4, 0x3, 0x74, 0x100000000, 0xffffffffffffff00, 0x10000, 0x8, 0x3, 0xffffffffffff8000, 0x6, 0x0, 0x200, 0x58da, 0x81, 0x4, 0x5, 0x7f, 0x0, 0x7, 0x0, 0x8, 0xfffffffffffffff8, 0x1f, 0x4, 0x1, 0x81, 0x22, 0x5, 0x1, 0x80000001, 0xfffffffffffffffa, 0x7fff, 0x7fffffff, 0x10001, 0x81, 0x5, 0x8, 0x7, 0x7, 0x6, 0x9, 0x3, 0x9], [0x4, 0x401, 0x1, 0x80000001, 0x3, 0x2, 0x1, 0xffffffff, 0x40, 0x3, 0x100, 0x5, 0x5, 0x100000000, 0x7fffffff, 0x20, 0x5, 0x4b, 0x200000000000000, 0x5, 0x3, 0x7fb, 0x401, 0x7a, 0x1, 0x5, 0x100000001, 0x6, 0xffffffff, 0x3, 0x225e, 0x8, 0xfffffffffffffffb, 0x800, 0x8620000, 0x0, 0xffffffff, 0x8, 0xfffffffffffffffa, 0x5, 0x0, 0x1ff, 0xfffffffffffffffa, 0x7, 0x20, 0x9, 0x10000, 0x5, 0x9, 0x6, 0x20, 0xffff, 0x8, 0x1, 0x3, 0x800, 0x80, 0x80000000, 0x723b, 0x1, 0x401, 0xffffffffffff0001, 0x1f, 0x8], [0x3, 0x7c73, 0x5, 0xffff, 0x100, 0x81, 0xe816, 0x6, 0x2, 0x3, 0x0, 0xf416, 0x3ee23642, 0x7, 0x40, 0x83b6, 0x8, 0x3ff, 0x8, 0x100000000, 0xf3, 0x5, 0x200, 0x2, 0x100000001, 0x8, 0x101, 0x0, 0x9, 0x2, 0x6, 0x8001, 0x1, 0xfff, 0x9a, 0x40000000000, 0x2, 0x4, 0x5, 0x80000001, 0x81, 0x4, 0x8001, 0x8ec, 0x8, 0x5, 0x1a86b21e, 0x3f, 0x3f, 0x2, 0x81, 0x0, 0x400, 0x5, 0x401, 0x4d, 0x0, 0x200, 0x0, 0x36, 0x1, 0x91, 0xe7, 0x6], [0x8, 0x1, 0x1, 0x400, 0x5, 0x400000000000000, 0xff, 0x100, 0x100000001, 0x3, 0x0, 0x1, 0x1, 0x7fffffff, 0x6, 0x9c, 0xff, 0x0, 0x100000001, 0x400000000000, 0x5, 0x100000, 0x6, 0x40, 0x1, 0x8, 0x1f, 0x6, 0xff, 0x4, 0x6, 0x8, 0x9, 0x8, 0x4a3, 0x1f, 0x9b5, 0x81, 0x81, 0x0, 0x0, 0x6, 0x401, 0x2, 0x3, 0xb8, 0x73, 0x7f, 0x9, 0x4, 0x3f, 0x80000000, 0x50, 0x81, 0x4, 0xa63, 0x4, 0x3ff0000, 0x1, 0x6, 0xffff, 0x20, 0x1, 0x5]}, 0x45c) [ 525.050885][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 525.050898][ T25] audit: type=1326 audit(1552228173.902:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2644 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 525.148678][ T2904] input: syz1 as /devices/virtual/input/input252 14:29:34 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x228003, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f00000000c0)=""/24) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xffffff, 0x1) ioctl$FS_IOC_FSGETXATTR(r1, 0xc0185500, &(0x7f0000000080)={0x200041323, 0xe, 0x0, 0x9}) 14:29:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c5828, &(0x7f0000000040)) [ 525.185532][ T25] audit: type=1326 audit(1552228174.032:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2912 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 525.220530][ T2905] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[2905] 14:29:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\x00\xff\xff', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 525.302397][ T2931] vhci_hcd: invalid port number 14 [ 525.310200][ T2916] input: syz1 as /devices/virtual/input/input253 14:29:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x402c582a, &(0x7f0000000040)) [ 525.356443][ T2931] vhci_hcd: default hub control req: 2313 v0004 i000e l0 14:29:34 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1006}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\x00\xfd\xfd', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 525.505194][ T3041] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3041] [ 525.974104][ T25] audit: type=1326 audit(1552228174.822:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=2912 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:34 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xa00}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:34 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cruset.mems\x00y\a\xdf:T', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x10000, 0x800) getsockopt$IP6T_SO_GET_REVISION_TARGET(r2, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) fstat(r1, &(0x7f0000000280)) 14:29:34 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1000, 0x40) accept4(0xffffffffffffff9c, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80, 0x800) connect$packet(r1, &(0x7f0000000180)={0x11, 0xf, r2, 0x1, 0x9, 0x6, @random="146ece90e3ad"}, 0x14) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) 14:29:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x41045508, &(0x7f0000000040)) 14:29:34 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:34 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1007}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:34 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) [ 526.086012][ T3181] input: syz1 as /devices/virtual/input/input254 [ 526.091257][ T3192] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3192] [ 526.102070][ T25] audit: type=1326 audit(1552228174.942:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:35 executing program 1: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x700}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 526.155197][ T3181] input: syz1 as /devices/virtual/input/input255 14:29:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\x00\x00\xff', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045505, &(0x7f0000000040)) [ 526.290420][ T25] audit: type=1326 audit(1552228175.122:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3320 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 14:29:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004550f, &(0x7f0000000040)) 14:29:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x6, 0x4, 0x2}, 'syz1\x00', 0x47}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 526.489814][ T3356] input: syz1 as /devices/virtual/input/input256 [ 526.543799][ T3359] input: syz1 as /devices/virtual/input/input257 [ 526.645031][ C0] net_ratelimit: 20 callbacks suppressed [ 526.645066][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 526.656525][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 526.804292][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 526.810196][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 526.816022][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 526.821765][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 526.875735][ T25] audit: type=1326 audit(1552228175.732:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3194 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:35 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x3f00}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045510, &(0x7f0000000040)) 14:29:35 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\x00\x00\x00\x00\x00\x00\xfd', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:35 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1048}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:35 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x7, 0x0, 0x0, 0x2}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 526.968623][ T3367] input: syz1 as /devices/virtual/input/input258 [ 526.993815][ T3371] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3371] 14:29:35 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045515, &(0x7f0000000040)) [ 527.026521][ T25] audit: type=1326 audit(1552228175.872:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3379 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 527.065126][ T3378] input: syz1 as /devices/virtual/input/input259 14:29:35 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045519, &(0x7f0000000040)) 14:29:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0xffffffffffff9c86}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x657d, 0xc0, 0x4d, 0x7, 0x8000, 0x317, 0x200, {0x0, @in={{0x2, 0x4e21, @local}}, 0xc932, 0x7ff, 0x7fff, 0x0, 0x100000001}}, &(0x7f0000000340)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, [], 0x23}, 0x3910}}, [0x2, 0x80000000, 0x100, 0x8001, 0xfff, 0x76, 0x5, 0x3b, 0x1f, 0x5, 0x80000001, 0x8, 0x8001, 0xf0a, 0x3]}, &(0x7f0000000480)=0x100) sendmsg$inet_sctp(r2, &(0x7f0000000580)={&(0x7f0000000040)=@in6={0xa, 0x4e21, 0x7f, @loopback, 0x29e}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="11076e3e87439a43577f88ffef3151b65bee0f7b78b9b52d3db8616536cc7e6c129f706ecb15b6d4822451e3d3419ebca923d7dda9e604dfb1fd6c49fb94ddba6b0310c6b038e899b26725a2da77ed85d654378155af91b6e6e6b8a6b3cdaf555060bfd54adc8a8b00a64991c02d795cf5095cfa4e02ec669e3137f2659f2ba395231f98bec2a21833991f33c232788b85414b9d2b44ca311aaeb7fb7f599636bf0b83e57cf48168f43f4d131125ddd444bd5d23caf8dd738c9f1b212a9d418506593e7ec200a3af63043832f8d06f92422dee385aa095747563ed4d4db2dd58d285c4f62db76a07ca31668aae98b053a613ff8004d3", 0xf6}], 0x1, &(0x7f00000004c0)=[@sndrcv={0x2c, 0x84, 0x1, {0x0, 0x7, 0x8, 0x6, 0x101, 0xffff, 0xbe89, 0x2, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0x1, 0x2, 0x8000, 0x82, 0x7fff, 0x7, 0x1, 0x80000000, r4}}, @prinfo={0x14, 0x84, 0x5, {0x0, 0xfffffffffffffffb}}, @dstaddrv4={0x10, 0x84, 0x7, @multicast1}, @prinfo={0x14, 0x84, 0x5, {0x0, 0x20}}, @dstaddrv6={0x1c, 0x84, 0x8, @loopback}], 0xac, 0x40004}, 0x20000000) 14:29:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8004551a, &(0x7f0000000040)) [ 527.450790][ T3508] input: syz1 as /devices/virtual/input/input260 [ 527.498994][ T3512] input: syz1 as /devices/virtual/input/input261 [ 527.684316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 527.690151][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 527.822201][ T25] audit: type=1326 audit(1552228176.672:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3379 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:36 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:36 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x104c}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80085504, &(0x7f0000000040)) 14:29:36 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\xff\xff\xfd\xfd\x00'}) 14:29:36 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x109000, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000000c0)={0x7ff, 0x7, 0x1}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 527.924343][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 527.930176][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 527.953988][ T3527] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3527] 14:29:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008550e, &(0x7f0000000040)) 14:29:36 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)) [ 527.975359][ T25] audit: type=1326 audit(1552228176.832:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3531 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 528.005152][ T3529] input: syz1 as /devices/virtual/input/input262 14:29:36 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551c, &(0x7f0000000040)) 14:29:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\xfd\xfd\xff\xff\x00'}) 14:29:37 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)) 14:29:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8008551d, &(0x7f0000000040)) [ 528.768120][ T25] audit: type=1326 audit(1552228177.622:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3531 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:37 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4800}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\x00\xff\xff'}) 14:29:37 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_buf(r2, 0x0, 0x2d, &(0x7f00000000c0)=""/100, &(0x7f0000000040)=0x64) 14:29:37 executing program 1: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)) 14:29:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8010550e, &(0x7f0000000040)) 14:29:37 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1060}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000040)) [ 528.877493][ T3669] input: syz1 as /devices/virtual/input/input264 14:29:37 executing program 1: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) [ 528.932177][ T3689] input: syz1 as /devices/virtual/input/input265 [ 528.949250][ T3677] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3677] 14:29:37 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\xff\xff\xfd\xfd\x00'}) 14:29:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8038550a, &(0x7f0000000040)) 14:29:37 executing program 1: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:37 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x8108551b, &(0x7f0000000040)) 14:29:38 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4c00}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:38 executing program 1: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:38 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f00000000c0)) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc00c5512, &(0x7f0000000040)) 14:29:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\xfd\xfd\xff\xff\x00'}) 14:29:38 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1068}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000040)) [ 529.842062][ T3823] input: syz1 as /devices/virtual/input/input266 [ 529.865678][ T3829] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3829] 14:29:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105502, &(0x7f0000000040)) 14:29:38 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\x00\x00\xff'}) [ 529.949262][ T3851] input: syz1 as /devices/virtual/input/input267 [ 529.969351][ T3881] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 14:29:38 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:38 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105512, &(0x7f0000000040)) 14:29:39 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6800}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185500, &(0x7f0000000040)) 14:29:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xfff, 0x0) sysfs$1(0x1, &(0x7f00000000c0)='/dev/input/event#\x00') setrlimit(0xfffffffffffffffe, &(0x7f0000000140)={0x74c75cf7, 0x6}) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) setrlimit(0x7, &(0x7f0000000040)={0x80000000, 0x400}) 14:29:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\xff\xff\xfd\xfd'}) 14:29:39 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x106c}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 530.667419][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 530.667433][ T25] audit: type=1326 audit(1552228179.522:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3835 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 530.764995][ T3973] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 530.787335][ T25] audit: type=1326 audit(1552228179.642:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3980 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) [ 530.801475][ T3971] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[3971] 14:29:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0185502, &(0x7f0000000040)) 14:29:39 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\xfd\xfd\xff\xff'}) 14:29:39 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x400, 0x4000000028000) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:39 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:39 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0189436, &(0x7f0000000040)) [ 531.185283][ T4110] input: syz1 as /devices/virtual/input/input270 [ 531.253213][ T4113] input: syz1 as /devices/virtual/input/input271 [ 531.580195][ T25] audit: type=1326 audit(1552228180.432:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3980 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:40 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6c00}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:40 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:29:40 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1074}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc020660b, &(0x7f0000000040)) 14:29:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x80) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x20400) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r1, 0x6612) [ 531.678189][ T4127] input: syz1 as /devices/virtual/input/input272 [ 531.711031][ T4120] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[4120] 14:29:40 executing program 1: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)) 14:29:40 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000080)={0x0, 0x8000}) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f00000000c0)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x178, r2, 0x102, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7fff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffffc0}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x6, 0x8}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xdf}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0xcb2d}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) [ 531.716311][ T25] audit: type=1326 audit(1552228180.562:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4131 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 531.844338][ C1] net_ratelimit: 20 callbacks suppressed [ 531.844346][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 531.855830][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:40 executing program 1: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)) 14:29:40 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\xff\xff\xfd'}) 14:29:40 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 14:29:40 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) get_mempolicy(&(0x7f0000000100), &(0x7f00000004c0), 0xffff, &(0x7f0000fff000/0x1000)=nil, 0x2) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1000, 0x101280) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500)='TIPCv2\x00') openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000480)='/dev/dlm_plock\x00', 0x10000, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x214, r3, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x52}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x58, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xaf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7fff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4928}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x59b}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA={0xd0, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffff59d}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x980000000000000}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_BEARER={0x5c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 532.085422][ T4259] input: syz1 as /devices/virtual/input/input274 [ 532.095206][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 532.101426][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 532.244316][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 532.250164][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 532.493757][ T25] audit: type=1326 audit(1552228181.342:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4131 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:41 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7400}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:41 executing program 1: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045503, &(0x7f0000000040)) 14:29:41 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) write$binfmt_elf32(r0, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff8, 0xb1, 0x7ff, 0x1, 0x100, 0x2, 0x3e, 0x7fff, 0x1ef, 0x38, 0xca, 0x4, 0x61, 0x20, 0x2, 0x1, 0x2, 0x6}, [{0x6, 0x4, 0x5, 0x5, 0x32, 0x10001, 0x8, 0x5}], "102b77703d4893370902d86fbf9001a09d361fdad8da5760f584e7ff6ee20ee23b4b3e7ae7b36b67ec4960b366a8d329748efc5ed407c68a21301407ff18c5d1e4c3e642a8918d329762a1c94aadda1bc3c5ccb037673f9104df4982c3de4d24fa356d6fac063e44ae0ad49d97fac87370fbb1f8a5453005ad37aaea4cee75307296a812581d83094c1841fc6b9e2d711392b464ab35bf9e09ef918b6cc25e8a08332cf15aa7745e563ad4bc2650cf7d4f369ee7be45d0367ae112492421f430ad428f50d356f361d50285aeafc7e0edce9544f1806fa43039e955a8bb68cec21b78d7324acc4e7ec56ae240b5ff79d6", [[], [], [], []]}, 0x548) 14:29:41 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x107a}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\xfd\xfd\xff'}) 14:29:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace(0x4208, r3) fcntl$lock(r2, 0x26, &(0x7f0000000140)) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1) [ 532.593268][ T4277] input: syz1 as /devices/virtual/input/input276 14:29:41 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2000, 0x0) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000000140)=0x1f) r1 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)) 14:29:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, 0x0) [ 532.626570][ T25] audit: type=1326 audit(1552228181.482:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4284 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 532.626640][ T4280] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[4280] 14:29:41 executing program 0: stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000580)=0xe8) r4 = getuid() fstat(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000006c0)={0x0, 0x0, 0x0}, &(0x7f0000000700)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000010002000000000002000100", @ANYRES32=r0, @ANYBLOB="02000400", @ANYRES32=r1, @ANYBLOB="2d012fe5802ccaa9c23ed1cb7d5c21c423470a0d876c787fc686dfd79071783cfefb1b96fc539964b99b446cc529e33670cdd09dd0a459ed7b20a2a21edb7840e0a04ceeaa84c63f700df29d7935f120ab6fd8d1c2aa4995e7ab7aea048e1c10f8fac7eae245c6ee91909299d5ffa4881e71d78f85f83e7b3e29555d4b8b3da85038e9a5f9f7250f263010a2a4db21c540e6cddafd91cc", @ANYRES32=r2, @ANYBLOB="02000500", @ANYRES32=r3, @ANYBLOB="02000100", @ANYRES32=r4, @ANYBLOB="02000400", @ANYRES32=r5, @ANYBLOB="040005000000000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="08000600", @ANYRES32=r9, @ANYBLOB="10000400000000002000050000000000"], 0x74, 0x3) r10 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r10, &(0x7f0000000880)={0x1, 0x1c4, 0xfa00, {&(0x7f0000000180), r11}}, 0x6) 14:29:41 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x5, 0x200900) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0xffffffffffffffd0) fallocate(r1, 0x50, 0x6, 0x1) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:41 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:41 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, 0x0) [ 532.885510][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 532.891908][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 532.930396][ T4402] input: syz1 as /devices/virtual/input/input278 [ 533.006854][ T4402] input: syz1 as /devices/virtual/input/input279 [ 533.045174][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 533.050988][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 533.423855][ T25] audit: type=1326 audit(1552228182.272:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4284 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:42 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7a00}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:42 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1100}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:42 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, 0x0) 14:29:42 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) read(r0, &(0x7f0000000140)=""/243, 0xf3) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) 14:29:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\x00\xff\xff'}) 14:29:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x40002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000380)={@remote, @rand_addr=0x8b09, r3}, 0xc) r4 = dup(r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x80000000, 0x8, 0x2f, 0x401, 0x8}, &(0x7f0000000040)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r5, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x4}}, 0x7, 0x6, 0x5, 0xdfd1, 0x4}, &(0x7f0000000180)=0x98) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 533.526032][ T4431] input: syz1 as /devices/virtual/input/input280 [ 533.552048][ T4432] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[4432] 14:29:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fe, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)='veth1\x00\x00\x00\x00\xff\xff\xff\xff\xff\xef\x00', 0xb) r1 = dup2(r0, r0) write$P9_RGETATTR(r1, &(0x7f00000007c0)={0xa0}, 0xa0) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) [ 533.571233][ T25] audit: type=1326 audit(1552228182.422:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4436 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\x00\xfd\xfd'}) 14:29:42 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 533.837202][ T4557] input: syz1 as /devices/virtual/input/input282 [ 533.908829][ T4562] input: syz1 as /devices/virtual/input/input283 14:29:42 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1200}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:42 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\x00\x00\xff'}) [ 533.993419][ T4567] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[4567] [ 534.358313][ T25] audit: type=1326 audit(1552228183.212:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4436 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:43 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x1000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00\x00\x00\x00\x00\xfd'}) 14:29:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x400, 0xffffffffeffffffd) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:43 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x5, 0x200) r2 = openat$smack_thread_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/attr/current\x00', 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/133, 0x85}, {&(0x7f0000000280)=""/119, 0x77}, {&(0x7f0000000300)=""/155, 0x9b}, {&(0x7f00000003c0)}, {&(0x7f0000000400)=""/47, 0x2f}], 0x5, &(0x7f0000000480)=""/231, 0xe7}, 0x12000) pipe2(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) poll(&(0x7f0000000600)=[{r0, 0x240}, {r1, 0x200}, {r2, 0x4000}, {r3, 0x1}, {r4, 0x80}], 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f00000003c0)={0x0, 0x1000}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000680)=ANY=[@ANYRES32=r6, @ANYBLOB="0500000600000100000000000000000000"], 0x16) r7 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r7, 0x80045518, &(0x7f0000000040)) 14:29:43 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1300}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 534.461257][ T25] audit: type=1326 audit(1552228183.312:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4681 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 534.497789][ T4693] input: syz1 as /devices/virtual/input/input284 14:29:43 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'vet\x00\x00\x00\x00\x00\a\x00'}) [ 534.525313][ T4689] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[4689] 14:29:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'nodevcpuset&{{.('}], 0xa, "90483fcd6af1ffff97938f2dfdd76bb607d5cffd98675f89412cd527d860f838ef925c7d54123104dae7e97a47d2d2856b2468e349b34933fbc5f8"}, 0x57) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:43 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x200, 0x0) getsockname$netlink(r1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) 14:29:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)) r3 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x41) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f00000ff000)={0x0, r3}) recvmsg(r5, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) dup3(r0, r1, 0x0) 14:29:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) 14:29:43 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 534.723077][ T4812] input: syz1 as /devices/virtual/input/input286 14:29:43 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x1fd, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x10000000}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1) time(&(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @multicast2}}, 0x68, 0x0, 0x2, 0x0, 0x6}, &(0x7f0000000080)=0x1a1) ioctl$VIDIOC_S_FREQUENCY(r1, 0x402c5639, &(0x7f0000000200)={0x9, 0x3}) [ 534.839368][ T4828] input: syz1 as /devices/virtual/input/input287 14:29:44 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x2000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:44 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0xfffffffdfffffffe, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) 14:29:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) fcntl$lock(r1, 0x26, &(0x7f0000000080)) r3 = gettid() socketpair$unix(0x1, 0x1000000005, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000008ff8)=0x41) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f00000ff000)={0x0, r3}) recvmsg(r5, &(0x7f0000172fc8)={0x0, 0x0, 0x0}, 0x0) dup2(r4, r5) r6 = gettid() tkill(r6, 0x16) dup3(r0, r1, 0x0) 14:29:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x18}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0xffffffffffffffff) mmap(&(0x7f0000ab1000/0x3000)=nil, 0x3000, 0x3, 0x8012, r2, 0x0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000040)=0x1, 0x4) 14:29:44 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x2f00}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 535.351610][ T4848] input: syz1 as /devices/virtual/input/input288 [ 535.389519][ T4846] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[4846] 14:29:44 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) pipe(&(0x7f0000000080)) 14:29:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x35, 0x6, 0x0, {0x5, 0x6, 0xc, 0x0, '[\\mime_type\x9e'}}, 0x35) [ 535.432110][ T4859] input: syz1 as /devices/virtual/input/input289 14:29:44 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0) 14:29:44 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/sctp\x00') getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:44 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) getsockopt$inet_dccp_int(r0, 0x21, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 14:29:44 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x1000}, 'syz0\x00', 0x37}) socketpair(0x11, 0xf, 0xde62, &(0x7f0000000000)={0xffffffffffffffff}) sendto$isdn(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x76, 0x44, &(0x7f0000000140)={0x22, 0x77, 0x3, 0x6, 0x4}, 0x6) r2 = dup3(r1, r0, 0x80000) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x400) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e24, 0x80, @mcast1, 0x4c53}}, 0x0, 0x1}, &(0x7f0000000180)=0x88) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) [ 535.849475][ T4989] input: syz0 as /devices/virtual/input/input290 [ 535.861428][ T4989] input: syz0 as /devices/virtual/input/input291 14:29:45 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x3000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:45 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) 14:29:45 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) getresuid(&(0x7f00000011c0), &(0x7f0000001200)=0x0, &(0x7f0000000140)) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000001180)) quotactl(0xd212, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000180)="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") ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) fdatasync(r0) 14:29:45 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x7300}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) ioctl$TIOCEXCL(r2, 0x540c) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf4.\x00\x00\x00\x0e\x003\xd5\x96\xcc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006\x0f\x00', 0x23}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x10, 0x4) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vfio/vfio\x00', 0x2, 0x0) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000240)="bcaa5451c1431fc226f98dd3f40328fcf667e81b65e2a9e2ad3bac9936553540e93b279e659e6a1791426fc98bb70f02daaa2588624b7be62de738515d3ddbc2aebffaae02b4cb3c899ae46a0b3cb0cd085a0d9f4ae234ae2e5d91eafb154d677e96290551f8933227f014070e84ba8d95592cbe6402eb3f50b00695825d162a90fb0ab306a6541e18c1fc6bdedf6b7af6730f60a25871") syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000100)="66ba4300b80e000000ef0f01f866baf80cb8508f668fef66bafc0cb80b000000efc422799cdf66baf80cb89b66d787ef66bafc0cb078ee0f017f980f34c4823dac0cfb420f1afc48b80f000000000000000f23d00f21f835100000060f23f8", 0x5f}], 0x1, 0x40, &(0x7f0000000300)=[@dstype0={0x6, 0xa}], 0x1) [ 536.170991][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 536.171004][ T25] audit: type=1326 audit(1552228185.022:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=4849 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 536.276884][ T25] audit: type=1326 audit(1552228185.132:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5009 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 536.281188][ T5002] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5002] 14:29:45 executing program 0: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x30100, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x178) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) [ 536.363354][ T5005] input: syz1 as /devices/virtual/input/input292 14:29:45 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x7fff, 0x81, 0x3, 0x9, 0x0, 0x8, 0x401, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xea, 0xf92, 0x4, 0x3, 0x80000001}}, &(0x7f0000000080)=0xb0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x8001}, 0x8) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40246608, &(0x7f0000000200)={0x40, 0x8000, 0x9, 0x100, 0x1, 0x2}) ioctl$FS_IOC_FSGETXATTR(r3, 0x80045518, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000240)={r2, 0x2, 0x800, 0x88, 0x0, 0x1, 0x3, 0x54, {r1, @in={{0x2, 0x4e21, @multicast2}}, 0x67, 0xc8, 0x21, 0x3}}, &(0x7f0000000300)=0xb0) 14:29:45 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="010003f14db746d2251302aaaaaaaa620180c2000001d1342078c6cd231027afd3e0c529a0adb08800fe14418c0e097887ca1fc8aeb83f0e2d41e39ba5b6397052cb0b0b89b1efc88fdb58ef4047399f83eae07e08de77c0bbbfe5fe1486e7fa"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x80, 0x0) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f00000000c0)="7698f632ecddb5ae066f7ebea727b943ac1f9c97ac6978a0dcf9ae7b9f3a16a0cf61a45ce44343e33ffe7ceae24f786f08f27a79189b3c394b24ad65c72627", 0x3f) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 536.437232][ T5021] input: syz1 as /devices/virtual/input/input293 14:29:45 executing program 0: ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) [ 536.609207][ T25] audit: type=1326 audit(1552228185.462:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5003 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 14:29:45 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x20002300}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:45 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x767a9cab26104e9a, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x6) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x1) syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x100) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f00000000c0)) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 536.740930][ T5141] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5141] [ 536.787541][ T5145] input: syz1 as /devices/virtual/input/input294 [ 536.808942][ T5210] input: syz1 as /devices/virtual/input/input295 [ 537.054292][ C0] net_ratelimit: 20 callbacks suppressed [ 537.054300][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 537.065771][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 537.084439][ T25] audit: type=1326 audit(1552228185.922:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5003 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 [ 537.121247][ T25] audit: type=1326 audit(1552228185.932:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5009 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) openat(r0, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000080)) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0), 0x4) 14:29:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r2 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000200)="8ab68cde446c1b93543f3e4de819c2a7154d7c644f4eb8b76909ce5f9b9dc23aed83b2deb540ba97a44cde3b5e686b28889af9ba5c9ec2a23e8cbbd541764d7cc2668d697e27780f18e6e8f7ec7caca6b9c2e49b8ef8cded154979d715df81d5d7ddb9ffc8cee1ee2c", 0x69, 0xfffffffffffffff9) keyctl$set_timeout(0xf, r2, 0x1) 14:29:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x800, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="0402000000000000c910f0a3eb6fada460f4629f9cd47c93fc2e0000000000007abda12da95f74171cf86fd98fe597f9e80e6cb2a95937701f7f7232bbcf5de42a13b89b9b64993c4d6b82d32a69307dd395ae0ae6094de33529768166c5c6268a32f52714a25d5d2fee14e9f14ea5b24275a587744dda6f39e0e111d4d577a35e21"], 0x20) 14:29:46 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) 14:29:46 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:46 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x7ffff000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 537.204291][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 537.210091][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 537.215937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 537.221689][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 537.242984][ T5263] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5263] [ 537.281802][ T25] audit: type=1326 audit(1552228186.132:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 14:29:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1fe, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 537.340538][ T5265] input: syz1 as /devices/virtual/input/input296 14:29:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000380)={0x0, 0xfffffffffffffffe, 0x64, 0x2, @buffer={0x0, 0x24, &(0x7f0000000180)=""/36}, &(0x7f0000000200)="6f322cf3e3ac72ed1b1abb9d91839ff74be323473ffd0a45ae6fdd8efd599e6951e4cc3e43d078c4b2b0121f5013d65bb7a812f075544db743790784496825d5e65a45b767e8899f732efbbbe65f7687c020a6ab18df6f9b80293adffd5c59cf93e0eb41", &(0x7f0000000280)=""/166, 0x5, 0x20, 0x2, &(0x7f0000000340)}) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000003c0)=0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x65, 0x200000) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f00000000c0)={0x100000001, 0x1}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'\xf4q\x00\x04\x00\xf1\x00\x00\x00\x00\x00\xff\xe1\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 537.387962][ T25] audit: type=1326 audit(1552228186.182:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 [ 537.444029][ T5327] input: syz1 as /devices/virtual/input/input297 14:29:46 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) 14:29:46 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) [ 537.511702][ T25] audit: type=1326 audit(1552228186.212:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5326 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:46 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) fcntl$notify(r0, 0x402, 0x13) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0x43, 0x1, 0x401}, 0x3d, [0x3f, 0x4897, 0x6, 0x7fff, 0x4, 0x7, 0x6, 0x3, 0x3ff, 0x7ff, 0x5, 0x1ff, 0x24, 0x3, 0x4, 0x7ff, 0xd8, 0x100000000, 0x3, 0x2, 0xff, 0x1f, 0x0, 0xfffffffffffffffe, 0xd8, 0x3, 0x2, 0x10000, 0xe5, 0x90000, 0x150e, 0x3ff, 0x1, 0x291b, 0x5, 0x9, 0x3, 0x0, 0x1, 0x2, 0x1, 0x3, 0x8001, 0x6, 0x8, 0x6, 0x8, 0x8, 0x6, 0x1000, 0x200, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x80000000, 0x2, 0x6, 0x7f, 0x5202, 0x6, 0x3, 0x2, 0x4], [0x5, 0x94, 0x39b, 0x8, 0xffff, 0x6, 0x5, 0x8, 0x84, 0x7, 0xfffffffffffffffe, 0x10000, 0x7, 0x6, 0x0, 0x79f, 0x6, 0x10000, 0x101, 0x0, 0x8, 0x9, 0x5, 0x400, 0xffff, 0x5, 0x3, 0x400, 0x2, 0xff, 0xffffffff00000001, 0x5, 0x1, 0x9c6, 0x2, 0x8, 0x6, 0x4, 0x3, 0x1, 0x7, 0x4, 0x100, 0x2d, 0x1, 0x3, 0xffffffff, 0x7, 0x81, 0xffffffff, 0x8, 0x1, 0x400, 0x6b, 0xffff, 0xfffffffffffff22c, 0x20, 0xd8, 0x8ad, 0x9, 0x902, 0x6, 0x7, 0x101], [0x3f, 0x4f69, 0x800, 0x3, 0x0, 0x6, 0x0, 0xf5cb, 0x1, 0x3, 0x7f, 0x0, 0x0, 0xad50, 0xfffffffffffffe00, 0x100000001, 0x68, 0x9, 0x4, 0x0, 0x5, 0x9, 0x20, 0xfff, 0x2, 0x7fff, 0x3, 0x8, 0x81, 0x7ff, 0x401, 0x80000001, 0x2, 0x7, 0xda, 0x7, 0x4, 0x1, 0x6, 0x5, 0x3, 0x1ff, 0x13200000000, 0x80000001, 0x8, 0x5, 0x7, 0x0, 0x1, 0x6, 0x0, 0x1f, 0x0, 0x8, 0xffffffff, 0x3, 0x1, 0x81, 0x400, 0x3, 0x79, 0x9, 0x7], [0x80000001, 0x200, 0x80, 0x1f, 0x7, 0xc8, 0x2, 0x5, 0x81, 0x9, 0x0, 0xffffffff, 0x400, 0x80000001, 0x7, 0x9, 0xa610, 0x10, 0x1000, 0x80000001, 0x4, 0x7ec3d977, 0x8, 0x86fe, 0x7, 0x3, 0x7, 0x449, 0x7, 0x3, 0x2, 0x101, 0x2, 0x86c7, 0x1000, 0xffffffff, 0xc61, 0x7, 0x1, 0x6, 0xe9c, 0xe40000000, 0x800, 0x4, 0x2, 0x80000001, 0x4, 0x100000001, 0xf7cc, 0x55, 0x5, 0x3ff, 0x1, 0x3b8, 0x100000000, 0x100000000, 0x10000, 0x6, 0x400, 0xffff, 0xff, 0x100, 0x200, 0x2]}, 0x45c) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:46 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x2, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:46 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x211, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f00000001c0)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x12, 0x64, &(0x7f0000000040)="d3c8564057336de1ac346a66c060c9c9ec50", &(0x7f0000000080)=""/100, 0x8}, 0x28) time(&(0x7f0000000180)) [ 537.667386][ T25] audit: type=1326 audit(1552228186.222:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5269 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 14:29:46 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x4) ioctl$VIDIOC_DBG_G_REGISTER(r2, 0xc0385650, &(0x7f00000000c0)={{0x0, @addr=0x8000}, 0x8, 0x1ff, 0x8}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 537.773792][ T5402] input: syz1 as /devices/virtual/input/input298 [ 537.787168][ T5401] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5401] [ 537.806968][ T25] audit: type=1326 audit(1552228186.512:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5393 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 [ 538.084285][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 538.090118][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:47 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x5000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:47 executing program 1: seccomp(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{0x6}]}) seccomp(0x1, 0x1, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6}]}) 14:29:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffb23, 0x8000, 0x54d0000000000000, 0xd10, 0x2, 0x6, 0x8, 0x100, 0x7ff, 0x84c9, 0x9, 0x81}) 14:29:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:47 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x4, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 538.230491][ T5530] input: syz1 as /devices/virtual/input/input300 [ 538.232401][ T5527] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5527] 14:29:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000140)={0x7, 0x3, 0x0, [{0x1800000000000, 0x6, 0x5, 0x8, 0x8, 0x8, 0x6224}, {0x2, 0x352c, 0x9, 0x1f, 0x2, 0xc000000000, 0x7}, {0x401, 0x2, 0x9, 0xe395, 0x75fd, 0x4, 0x5}]}) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x7, 0x2) 14:29:47 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000480)='/dev/autofs\x00', 0x180000, 0x0) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f0000000300)) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r1, 0x0, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x4000000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000380)=0x1000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$revoke(0x3, r4) ioctl$sock_ifreq(r2, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 538.285888][ T5539] input: syz1 as /devices/virtual/input/input301 [ 538.324287][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 538.330155][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x60) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000140)=0x1) 14:29:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@random="9f5fd736f08c", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "ca819d", 0x8, 0x3a, 0x0, @dev, @local, {[], @icmpv6=@echo_request}}}}}, 0x0) 14:29:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) 14:29:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x10000) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) 14:29:47 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:47 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0x0, 0x2}, 'syz1\x00', 0x5}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x1000080000) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000013c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f0000000240)) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000280)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000003c0)='\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000001300), &(0x7f0000001340)=0x18) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000540)=[0x0, 0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xee00, 0x0, 0xee01]) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = geteuid() sendfile(r1, r1, &(0x7f00000012c0), 0x0) lstat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@empty}}, &(0x7f00000008c0)=0xe8) stat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000ac0)=0xe8) stat(&(0x7f0000001380)='./file1\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000cc0)=0xe8) getgroups(0x5, &(0x7f0000000d00)=[0xee00, 0xee01, 0x0, 0xee01, 0xffffffffffffffff]) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000d40)={0x550, 0x0, 0x4, [{{0x6, 0x2, 0x7, 0xffffffffffffff7f, 0x2, 0x4, {0x4, 0x58229e7, 0x3ff, 0x1ff, 0x7f, 0x1ff, 0x8000, 0xbfa, 0x8001, 0x5, 0x9, r3, r4, 0x7ff, 0x9}}, {0x4, 0xfffffffffffffff8, 0x1, 0x7ff, '^'}}, {{0x0, 0x0, 0x8, 0x2, 0x332, 0x8, {0x1, 0xffffffff, 0xffff, 0x1000, 0x0, 0x2, 0x2, 0x2, 0x9, 0x7fff, 0x3, r5, r6, 0x7}}, {0x5, 0xbd1, 0xb, 0x786, '}vmnet0user'}}, {{0x2, 0x2, 0xd48, 0x5, 0x3, 0xffffffff, {0x3, 0x9, 0xac, 0x60000000000, 0x48f, 0x101, 0xcf, 0x1, 0x4, 0x6, 0x101, r7, r8, 0x9, 0x5}}, {0x4, 0xf77, 0xc, 0x0, '/dev/uinput\x00'}}, {{0x0, 0x3, 0xbb6, 0x2, 0x5, 0x100000000, {0x3, 0x40, 0x0, 0xfffffffffffff84d, 0x1, 0x0, 0x7fffffff, 0x0, 0x94e, 0x5, 0x80000000, r9, r10, 0x0, 0x6}}, {0x3, 0x6, 0xc, 0x9, '/dev/uinput\x00'}}, {{0x6, 0x2, 0x100, 0x7, 0x5547, 0x2, {0x0, 0x1f, 0x6, 0xfffffffffffffe01, 0x253003ce, 0x7fff, 0x9, 0x0, 0x7fffffff, 0x8001, 0x100000000, r11, r12, 0x0, 0x3611}}, {0x0, 0xa2d, 0x1, 0x4, '.'}}, {{0x3, 0x2, 0x0, 0x6, 0x70a2c9b1, 0x2, {0x3, 0x2ad, 0x6, 0x2, 0x4, 0x3, 0x5, 0x1, 0x6, 0x3, 0x8253, r13, r14, 0x5, 0xef78}}, {0x0, 0x70, 0x12, 0x8, '/dev/input/event#\x00'}}, {{0x0, 0x2, 0x0, 0xffffffffffff8000, 0x81, 0x4, {0x6, 0x2, 0x40, 0x8000, 0x5, 0x80000001, 0x10001, 0x4, 0x7, 0x1000, 0x1000, r15, r16, 0x6, 0x1}}, {0x0, 0x4ed, 0xc, 0x7fff, '/dev/uinput\x00'}}, {{0x3, 0x3, 0x78d, 0x0, 0x3, 0x1, {0x0, 0x9, 0x100000001, 0x8, 0xd4bc, 0x100, 0x10000, 0x7, 0x7fff, 0x10000, 0xc6, r17, r18, 0x3, 0x3}}, {0x4, 0x200, 0x12, 0x1, '/dev/input/event#\x00'}}]}, 0x550) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 14:29:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'nr0\x00', 0xfffffffffffffffd}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000180)={'raw\x00'}, &(0x7f00000000c0)=0x54) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x806}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:47 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x8, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:47 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) 14:29:47 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) pread64(r0, &(0x7f0000000140)=""/137, 0x89, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0086418, &(0x7f0000000000)={0x7, 0x9, 0x100000000, 0xc2, 0x9, 0x100000001}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 539.131130][ T5673] input: syz1 as /devices/virtual/input/input302 14:29:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$IMHOLD_L1(r0, 0x80044948, &(0x7f0000000000)=0x3) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) [ 539.190605][ T5683] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5683] [ 539.211032][ T5682] input: syz1 as /devices/virtual/input/input303 14:29:48 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x4, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x400, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) 14:29:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) close(r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x2}) 14:29:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000001c0)='/dev/bus/usb/00#/00#\x00', 0x200, 0x400) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) setsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f0000000000)=0x6000000000, 0x4) delete_module(&(0x7f00000000c0)='em0eth1vboxnet1GPLeth1selfem0em0systemvmnet0user-\x00', 0x200) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000000140)=0xffffffff80000000) syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x0) 14:29:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x58102, 0x8) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000100)=""/35) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1f, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 539.515538][ T5810] input: syz1 as /devices/virtual/input/input304 [ 539.538261][ T5813] input: syz1 as /devices/virtual/input/input305 14:29:48 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:48 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) close(r0) 14:29:48 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:48 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x1}) 14:29:48 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x10, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:48 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x40a82, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r2, 0x40044581, 0x0) [ 540.086694][ T5832] input: syz1 as /devices/virtual/input/input306 14:29:49 executing program 1: close(0xffffffffffffffff) 14:29:49 executing program 0: r0 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x40000) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000001c0)={0x5, 0x0, 0x4}) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x211, 0x10880) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x80, 0x0) syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x3, 0x2) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0) [ 540.141822][ T5838] input: syz1 as /devices/virtual/input/input307 [ 540.153654][ T5833] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5833] 14:29:49 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') accept4$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14, 0x0) recvmmsg(r0, &(0x7f00000045c0)=[{{&(0x7f0000000280)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000300)=""/87, 0x57}, {&(0x7f0000000380)=""/152, 0x98}], 0x2}, 0x3}, {{&(0x7f0000000480)=@x25={0x9, @remote}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/254, 0xfe}], 0x2}, 0x7}, {{&(0x7f0000000680)=@isdn, 0x80, &(0x7f0000002c40)=[{&(0x7f0000000700)=""/166, 0xa6}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/130, 0x82}, {&(0x7f0000001880)=""/85, 0x55}, {&(0x7f0000001900)=""/181, 0xb5}, {&(0x7f00000019c0)=""/83, 0x53}, {&(0x7f0000001a40)=""/129, 0x81}, {&(0x7f0000001b00)=""/34, 0x22}, {&(0x7f0000001b40)=""/234, 0xea}, {&(0x7f0000001c40)=""/4096, 0x1000}], 0xa, &(0x7f0000002cc0)=""/7, 0x7}, 0x1}, {{&(0x7f0000002d00)=@generic, 0x80, &(0x7f0000003100)=[{&(0x7f0000002d80)=""/254, 0xfe}, {&(0x7f0000002e80)=""/243, 0xf3}, {&(0x7f0000002f80)=""/241, 0xf1}, {&(0x7f0000003080)=""/122, 0x7a}], 0x4, &(0x7f0000003140)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000004140)=@isdn, 0x80, &(0x7f00000044c0)=[{&(0x7f00000041c0)=""/97, 0x61}, {&(0x7f0000004240)=""/250, 0xfa}, {&(0x7f0000004340)=""/145, 0x91}, {&(0x7f0000004400)=""/18, 0x12}, {&(0x7f0000004440)=""/80, 0x50}], 0x5, &(0x7f0000004500)=""/189, 0xbd}, 0xa7}], 0x5, 0x2000, &(0x7f0000004680)={0x77359400}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000046c0)={@broadcast, @dev, 0x0}, &(0x7f0000004700)=0xc) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000004740)={@rand_addr, @broadcast, 0x0}, &(0x7f0000004780)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004800)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004840)={{{@in=@multicast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000004940)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004a00)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6}}, &(0x7f0000004b00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000004cc0)={'vcan0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000005040)={&(0x7f0000000100), 0xc, &(0x7f0000005000)={&(0x7f0000004d00)={0x2e0, r3, 0xd00, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xd0, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x39}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x134, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffa}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r9}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xb0, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000047c0)={r2}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'bridge_slave_1\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000011c0)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001380)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001340)={&(0x7f0000001200)={0x130, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xb0, 0x4, [@TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}]}, @TIPC_NLA_LINK={0x4c, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x40040}, 0x40) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x200000) ioctl$CAPI_MANUFACTURER_CMD(r2, 0xc0084320, &(0x7f0000000040)={0x5, &(0x7f0000000140)="111af638ae3c093041d7c5e0c4743206ccbdec5cdbceaa481402692b7171dcac4f9f9f16060aac9aa7de9a9cec26fba00da5b2bcb224ea6533d8a09de760521768211b73eae60727c085f2ebcde8d63992b7e484cf368f061573951b4a124358daa47ce14073729d31ec481901689990fa3e962556b7f8a1003301916979df8411f3aaa3295a4fb5f2149d8189057f8e683253e06d9d95445c44c33e07e3966a4af51d7a954326b0bbce0bdf5f2aec67c554379dbf7163af763a39abf6879d67a1e5d6573c04d33f43c82ad9bca79b30ef8f37573f5ef8d1e41c5b20e91f3fd3dcab0b8f68f5683ec24d7cf9b9c5dc10e1b5c8"}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001140)={r2, &(0x7f00000023c0)="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", &(0x7f00000013c0)=""/4096}, 0x18) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000000)={0x0, 0x100000001, 0x1, 0x10, 0x7}) 14:29:49 executing program 1: close(0xffffffffffffffff) 14:29:49 executing program 1: close(0xffffffffffffffff) 14:29:49 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000000c0)={0x6151, 0xbeca, 0x6, 0x1ff, 0x0, 0x3}) 14:29:49 executing program 1: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) close(r0) 14:29:49 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xa000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:49 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) 14:29:49 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x13, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:49 executing program 1: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) close(r0) 14:29:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1000001f9, 0x800000002005) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xc3dd}) [ 541.074742][ T5979] input: syz1 as /devices/virtual/input/input308 [ 541.080334][ T5974] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[5974] [ 541.136203][ T5987] input: syz1 as /devices/virtual/input/input309 14:29:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x34, "0b46d375dd886940fa2d043057607d5aebd304f069dd34c97409a25f14b65723256d341f22fb2947b8e6334485e4827a455053e6"}, &(0x7f00000000c0)=0x3c) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x103000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r2, 0x9d, "6ed92e00b2c4de1ed2019763e9601e7d6b117dedccbf7de84bb9731bd19cb062e1f4dde2582936daa5e26e7fbd24eece6b2406a032206fcaf6dc18d16ba4e9e9aed58ed73f44f3a574427e5b160120e3a959e5d510455137f331167dd2dec2b1936eec1d45e499296703fd731f8e74440fa5c81926f9101c4fadb41aab591f68f284756245e783878dc089501f7794f50aa3115dab5f8c95a2a621d4d0"}, &(0x7f00000002c0)=0xa5) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={r2, 0x4fe8}, 0x8) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:50 executing program 1: r0 = syz_open_dev$usb(0x0, 0x201, 0x800000002009) close(r0) 14:29:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) sendfile64(r0, r0, &(0x7f0000000000), 0xfffffffffffffffd) 14:29:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) close(r0) 14:29:50 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:50 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x547a42, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x1, 0x80000000, 0x2e, 0x1, 0xfffffffffffffffc}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0xffffffff, 0x6, 0x6, 0x3f, 0x9}, 0x14) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)) [ 541.519242][ T6115] input: syz1 as /devices/virtual/input/input310 [ 541.605500][ T6121] input: syz1 as /devices/virtual/input/input311 14:29:50 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x10000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:50 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:50 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x25, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) close(r0) 14:29:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x1ff}) 14:29:50 executing program 5: getrandom(&(0x7f00000000c0)=""/174, 0xae, 0x3) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) [ 541.905549][ T25] kauditd_printk_skb: 13 callbacks suppressed [ 541.905564][ T25] audit: type=1326 audit(1552228190.762:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=5985 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 542.015747][ T6135] input: syz1 as /devices/virtual/input/input312 [ 542.048190][ T6130] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[6130] 14:29:50 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x0, 0x800000002009) close(r0) 14:29:50 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000240)=[{0x0}], 0x1) write(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000785000), 0x34a) r3 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) getsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0) sendmmsg$alg(r2, &(0x7f0000236fc8)=[{0x0, 0x0, &(0x7f00000fff80), 0xc, &(0x7f00001e1e78)}], 0x4924924924926c8, 0xf5ffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) bind$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @host}, 0x10) ptrace$getregset(0x4204, r4, 0x7, &(0x7f00000001c0)={&(0x7f0000000140)=""/76, 0x4c}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 542.052695][ T25] audit: type=1326 audit(1552228190.902:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6139 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) 14:29:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) accept4$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000007c0)=0x14, 0x80000) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000800)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, 0x0) 14:29:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200, 0x0) getsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00\xcf\xab\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 542.244886][ C1] net_ratelimit: 20 callbacks suppressed [ 542.245006][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.257266][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 542.310759][ T6259] input: syz1 as /devices/virtual/input/input314 14:29:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) [ 542.484309][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 542.490162][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 542.644313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 542.650136][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 542.852226][ T25] audit: type=1326 audit(1552228191.702:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6139 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:51 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x3f000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:51 executing program 4: socketpair$unix(0x1, 0x1000000000000001, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket$kcm(0x2, 0xffffffffffffffff, 0x73) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x10) connect(r0, &(0x7f0000000080)=@pppol2tpv3={0x2, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x1ee) sendmmsg(r2, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001200)=[{0x0, 0x4}], 0x1}}], 0x1, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0xc0000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000280)={0xffffffff, 0x401, 0x9, 0xc5, 0xb40, 0x4, 0x100000000, 0x3, r4}, 0x20) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xc69, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x9}) close(r0) 14:29:51 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) 14:29:51 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x73, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 542.939669][ T6281] input: syz1 as /devices/virtual/input/input316 14:29:51 executing program 1: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(0xffffffffffffffff) 14:29:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x10000) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f0000000000)=0x401) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x917}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r1, 0x1}, 0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 543.006892][ T6288] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[6288] [ 543.032821][ T25] audit: type=1326 audit(1552228191.882:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6293 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:51 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x800, 0x10081) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)={0x0, 0x1000, 0xfffffffffffffff6, 0x4, 0xffff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f00000000c0)={0x7fffffff, 0x0, 0x3013, 0xa5, 0x39, 0x7, 0x1000}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040), &(0x7f0000000100)=0x4) 14:29:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:52 executing program 1: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(0xffffffffffffffff) 14:29:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) open_by_handle_at(r0, &(0x7f0000000140)={0x8f, 0x6, "5ac38f9f1e72235ff32add38d2915e0c226415ea4b2ba91b96457b07fd4920db43c90723d6169f04425a94095195694719fddd913676f39b7c3fb98956bdb5a697350cb3215d2aeb781d536a263daeed582bd61f80fb5386c035bdc4bdb30f67c845eff60334ae0906eb400b593b04f712e389e3beb0e8fbdd219e8a82907b65be06d712080755"}, 0x4000) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 543.292389][ T6418] input: syz1 as /devices/virtual/input/input317 [ 543.298917][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 543.298968][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 543.445487][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 543.452304][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 543.819800][ T25] audit: type=1326 audit(1552228192.672:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6293 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:52 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x40000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000100)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000200)={r3, 0x7}, 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000240)={{0x2, 0x3, 0x3, 0x7fff, 0x0, 0x4}, 0x2}) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x111000, 0x0) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x5) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x401, 0x1, 0xfffffffffffffff8, 0x7, 0x0, 0x3, 0x22429, 0x5, 0x3, 0x8001, 0x1, 0x1000, 0xff, 0x8, 0x1000, 0x1, 0xc022, 0x1, 0x10000, 0xa74a, 0x3, 0x1, 0x0, 0x6, 0x1000, 0xa14, 0x9, 0x6, 0x2, 0xab, 0x40, 0x63, 0x7, 0x8, 0x5, 0x3f, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000000), 0x5}, 0x802, 0x77, 0x1, 0xf, 0xa7a, 0x7, 0x800}, 0xffffffffffffffff, 0x9, r0, 0x8) write$capi20(r0, &(0x7f0000000140)={0x10, 0x1, 0xff, 0x83, 0x6, 0xff}, 0x10) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x80) 14:29:52 executing program 1: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(0xffffffffffffffff) 14:29:52 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x3ffff, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:52 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 543.923941][ T6438] input: syz1 as /devices/virtual/input/input318 14:29:52 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000080)={r1}) 14:29:52 executing program 1: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 543.986935][ T25] audit: type=1326 audit(1552228192.842:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6446 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:52 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000003b40)={@rand_addr, @multicast2, 0x0}, &(0x7f0000003b80)=0xc) bind$can_raw(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 544.090310][ T25] audit: type=1326 audit(1552228192.932:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6466 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7f78869 code=0x0 14:29:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:53 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101400, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) r1 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x1ff, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xf6bb0e85a309beb0}, 0x48000) syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x1, 0x2) 14:29:53 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, &(0x7f0000000780)='syzkaller\x00', 0x8000, 0xa4, &(0x7f00000007c0)=""/164}, 0x48) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x10000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0x1, 0x4) [ 544.201001][ T6568] input: syz1 as /devices/virtual/input/input319 [ 544.748728][ T25] audit: type=1326 audit(1552228193.602:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6446 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:53 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x48000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:53 executing program 0: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000540)={@loopback, r1}, 0x14) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x8001, 0x3}}) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x832) 14:29:53 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x7ffffff2, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:53 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x80, 0x0) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) personality(0x410000f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f00000002c0)) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)='mime_typeem1\x00') r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40046607, &(0x7f0000000380)=0x2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r2, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000200)) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000180)={'ip6gretap0\x00', @ifru_map={0x0, 0x401, 0x9749, 0x1, 0x5, 0x2}}) ioctl$BLKGETSIZE(r4, 0x1260, &(0x7f00000000c0)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000400)={0x9e, 0x2, 0x8, "97b3b65323d72abc646f53253f7d1ed93a9e9f597a7ec7a701a9c707e5840ef5657fa211dd679e6eb48ca07fa081be50ec9db1ab57f6cbf31bf29a777f2cdbf572b2cd1857d06a3f15f2f766e9d8702d50bef664b1cf34c8cfd531a44517bc411255c0c96f1c334dc2b3c75f3c5c26f92ba4660906d79e7f43423dc0f4e81917a572eef5d8669bdf7cfa1bae477e76588f8c825f4cf9a3fd7cf27a515d0e"}) ioctl$BLKBSZSET(r0, 0x40041271, &(0x7f00000003c0)=0x2e5) [ 544.841857][ T6587] Unknown ioctl 8828 14:29:53 executing program 1: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x107a}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 544.862282][ T25] audit: type=1326 audit(1552228193.712:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6584 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 544.887656][ T6592] input: syz1 as /devices/virtual/input/input320 14:29:53 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffff, 0x80) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000140)={[0x7f, 0x3, 0x8, 0x0, 0x5, 0x100000000, 0x8bfe, 0x0, 0x5, 0x400, 0xfffffffffffffffa, 0x1c, 0x7fff, 0xc9, 0x9, 0x80], 0xf000, 0x9090}) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) [ 544.957938][ T6587] Unknown ioctl 8817 [ 544.977298][ T6587] Unknown ioctl 1 [ 544.999203][ T6587] Unknown ioctl 1074008689 [ 545.010474][ T6691] Unknown ioctl 8828 [ 545.023693][ T6602] Unknown ioctl 8817 [ 545.036336][ T6602] Unknown ioctl 1 [ 545.043170][ T6587] Unknown ioctl 1074008689 14:29:53 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$P9_RLERRORu(r0, &(0x7f0000000000)={0xd, 0x7, 0x1, {{}, 0x1}}, 0xd) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x1000}) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000240)=""/253) rt_sigreturn() 14:29:53 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:54 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x9, 0x80000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x68, "5f5fda499863fe493dae3e220a2412150a3689ebc909d60cc3ed8811937690e4e5d38a95d3edfd40dc7c9ac16a944475395a68a704be998ac9773bebbcfd0727fc406d9183c32b3a8db116fe3c8cd76b2165779177ebf48595d4b961a812123cceb6867d8301ceee"}, &(0x7f0000000140)=0x70) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r1, 0x8}, &(0x7f00000001c0)=0x8) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)) 14:29:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x103000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2020002, 0x0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000080)=""/39) [ 545.146675][ T6685] ptrace attach of "/root/syz-executor.1"[7401] was attempted by "/root/syz-executor.1"[6685] [ 545.212963][ T6717] input: syz1 as /devices/virtual/input/input321 14:29:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002005) ioctl$CAPI_NCCI_OPENCOUNT(r0, 0x80044326, &(0x7f0000000000)=0xbbd9) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)=0x3) [ 545.637737][ T25] audit: type=1326 audit(1552228194.492:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6584 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:54 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4c000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:54 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x7ffffff8, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:54 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) delete_module(&(0x7f0000000180)='/dev/radio#\x00', 0x800) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x403c5404, &(0x7f0000000340)={{0xffffffffffffffff, 0x1, 0x2025, 0x10000000001, 0x7fffffff}, 0x3f, 0x3}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x66, 0x10}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000280)={r4, 0x7}, &(0x7f00000002c0)=0x8) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r5 = syz_open_dev$radio(&(0x7f0000000480)='/dev/radio#\x00', 0x3, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000200)=0x5) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000380)='SEG6\x00') sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r6, 0x500, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr="b381d096a2c3755f3d79c3d63584ebc4"}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x7c}}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) 14:29:54 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0xc0105500, &(0x7f0000000040)) 14:29:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000000)) [ 545.731707][ T6742] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 545.751705][ T6744] input: syz1 as /devices/virtual/input/input322 14:29:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x1e0, 0x2, 0x8, 0x2, 0x70bd25, 0x25dfdbfb, {0xf, 0x0, 0x2}, [@nested={0xc4, 0x2b, [@generic="806c7d2dc6ce3b770a6defeb028d2f9f421ca11cae75ff1d687c1a9303", @generic="8c2ac2f85c276e499a9042945c57a5ff9235e3022c77cc07358f1f83d4a2a1b41bbc31f727a6ea1de543d01bdf48f3b46afc3598c193542d08f69c0426d840c7667b091b46c93e1f23ebca4912e431ef0b1d536aac6f0053aed0f26ffaa6fd04154041bc2549e3c14297c9975360e38f684900cde1ad0f683ae4bc0d7211fa4f824f591217978c6328de928c6097315dad2560e4b956ce40a7cfbe27760d9693", @generic]}, @typed={0x20, 0x55, @str='\x91\xe8/cpusetvboxnet0security(\x00'}, @nested={0xe0, 0x19, [@typed={0x8, 0x83, @ipv4=@remote}, @typed={0xc, 0x87, @u64=0x7}, @generic="e4e35c06afed94cafa718009de36ef854ee156e339caf5182005dd5e7c43c6b2f602f2a54fca4dcc1d6e3c7880237b0c9e326469ec1a467679bd5cb2dac025f370d2e37e31b67e9b8b6c1b24784debd4da78d2bd2ca6e8f195c8ba516d76871fc85212cd787d7a46a71d355f849a7d42350769c7c4c47ffb7cbeacce09354e7571c894bf8130ffdbcc5ecadec28b220a56f6b302b09e5068b7b269b1f9164ec11b8deb9802fc1d0314c9a200ad452adc2affaf285b59f78501ab7370771efd2e", @typed={0x8, 0x8d, @ipv4=@local}]}, @typed={0x8, 0x82, @u32}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x40}, 0x800) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000000)={0x0, 0xdee, 0x3, 0x4, 0x3, 0x8}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:54 executing program 1: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1006}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:54 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:54 executing program 4: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x101200, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000000c0)=0x101) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x7) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x205, 0x80001) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd}) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80000, 0x0) 14:29:54 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x45, 0x80) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) [ 546.105949][ T6872] ptrace attach of "/root/syz-executor.1"[7401] was attempted by "/root/syz-executor.1"[6872] 14:29:55 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x68000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:55 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_SETVERSION(r0, 0x40047602, &(0x7f0000000000)=0xff) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) 14:29:55 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) 14:29:55 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x7ffffff9, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) 14:29:55 executing program 4: openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x8040, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1f}) r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x1) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000500)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xffffff76) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) getegid() ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r3, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:55 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)) r0 = socket$netlink(0x10, 0x3, 0x1f) fsetxattr$security_capability(r0, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v2={0x2000000, [{0x4, 0x4}, {0x3, 0x7}]}, 0x14, 0x2) 14:29:55 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:55 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x2, 0x67ff, 0x10001, 'queue1\x00', 0x80000000}) 14:29:55 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001780)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000001880)=0xe8) sendmsg$nl_route(r2, &(0x7f00000019c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001980)={&(0x7f00000018c0)=@ipv6_newaddr={0xa0, 0x14, 0x10, 0x70bd25, 0x25dfdbff, {0xa, 0x20, 0x400, 0xfe, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x0, 0x121a, 0x7}}, @IFA_FLAGS={0x8, 0x8, 0x90}, @IFA_FLAGS={0x8, 0x8, 0x1}, @IFA_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @IFA_ADDRESS={0x14, 0x1, @remote}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x98f, 0x7, 0x4}}, @IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, [], 0x24}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 547.444355][ C0] net_ratelimit: 20 callbacks suppressed [ 547.444363][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 547.455855][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:56 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6c000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:56 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x8001, 0x180000, 0x5, 0x2, 0x0, 0x4, 0x91000, 0x6, 0x10001, 0x2, 0x8000, 0x5, 0x7, 0x200, 0x0, 0x0, 0x334, 0x400, 0x4, 0x3f, 0x2, 0x6, 0x5e, 0x1f, 0x7, 0x2, 0x609, 0x0, 0x33, 0x9, 0x5, 0x100, 0x7, 0x100, 0xf, 0x3ff, 0x0, 0xea52, 0x3, @perf_bp={&(0x7f0000000000), 0xe}, 0x400, 0x0, 0x0, 0x9, 0x8, 0x5, 0x9}, r1, 0x8, 0xffffffffffffff9c, 0x1) perf_event_open(&(0x7f00000001c0)={0x4, 0x70, 0x2, 0x2, 0x7fff, 0x7, 0x0, 0x5, 0x8000, 0xa, 0x8, 0x9c8, 0x6, 0x4, 0xfffffffffffffff7, 0x2, 0x9, 0x8, 0x7, 0x9, 0x789d, 0x0, 0x5, 0x6, 0x1, 0x2e4d, 0x1390, 0x5, 0x6, 0x7dcc, 0x100, 0x100000001, 0x800, 0x8, 0x1, 0x6, 0x3, 0xed2b, 0x0, 0xff, 0x4, @perf_config_ext={0x6, 0xffffffff}, 0x10404, 0x5, 0x0, 0x7, 0xfffffffffffff0dd, 0x2, 0x499}, 0x0, 0xc, 0xffffffffffffff9c, 0x2) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000100)=0x2) 14:29:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'ip6erspan0\x00', &(0x7f0000000000)=ANY=[@ANYRESDEC=r0]}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) close(r0) rmdir(&(0x7f0000000040)='./file0\x00') 14:29:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000080)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) syz_open_dev$video(&(0x7f0000000080)='/dev/video#\x00', 0x9, 0x0) 14:29:56 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x7ffffffe, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 547.512971][ T25] kauditd_printk_skb: 3 callbacks suppressed [ 547.512984][ T25] audit: type=1326 audit(1552228196.362:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6891 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 547.604294][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 547.610113][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 547.615982][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 547.621749][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:56 executing program 1: inotify_init() r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x800, 0x200801) close(r0) chdir(&(0x7f00000000c0)='./file0\x00') unlink(&(0x7f0000000040)='./file0\x00') 14:29:56 executing program 0: ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x800000003}) [ 547.665917][ T25] audit: type=1326 audit(1552228196.522:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7049 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:56 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:56 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x83) close(r0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000140)="08d5d7611126735bd3356321b4647d735e871435ae2f59cf02f905b8d4fe1065db077d5e0f23a593028ec6f9f84c7674b9defadf9910c58c1dd55b1196c7c667bc33c647e9ed4e63b2590a67df10d2329dc84e5cf78f47bab8765f317edd7de3f6c3be1ad4944bbdac06022b08ed2df23c7ecae11eea8ae64e648a3a3116088f71bfccbb83b2b823ea23968d14f5397383ed342602ed72eee2d70faaf523d4b309bca57dfd52a34c5a6a55be7771ab8ad753f9ad0024c676a7f05d908531ffd691af7a433c5704ce20e6fdc9c6978e63f50de3c83c27bc818bae1c8fafc106ea4dd334f1837ca719e462e0d31af853114d473363c286b26603a415c5bb76ce7963e5c2a6079220ac521fe6dd1e0cb0bbb7d907685ae609e7feef171ae2ae27d2af9fddbfdb639d4c6932d6a2e1745d0ec984b12dc476ba304a5da78d1f8ac182a02ef2c5213fba98852f3b8672c555e935081700c6f3215cea82cef9d9cd8e224b1926e0ddb5c1eb6309c7ff3e09b162a749581eb5cfe22bc43a3f79080ac5b23dd5c071bb7943fbce149763cb9d30656182689da96dce39b8690c5ad52377fd33af401a4b8d0207e8ff25e347286574fe995e1641794ea47fb3f8d9b6becc396c0099aa91234c6ae2eb74711fb564ce0d0c47aadb6e6605b0e688120dda04483c0d5244de741991b55e816fdb517c1d83233128b09f283ad2bbb7ac8a6a36d2106360e219b5a621b2a456b1bfb8e210e8aebf9b8f92396f54139590afef0a31470008a37765fd6df2863e73d883e33e1ef96ee4d94a076aa0581534dfddc8af8fec8c149c62ab5a34c4b046645a18a39e242ef477bbed810be1119a4656b25ebf0c692826394ef5924da4835e5740eda9604ed40f3785c3e568c19cfd4e6f8d6925a767415a62e4b98b3438c67f7e7f9037b55981800561d12a252e2a9104ec9827c9518af8d18093c2d1eb6ba75514c6810b37a99248bb7e4831a4c0c50b5c37bcb433ab8c36faaa81de00c6e4b108b736e1b8951c0a9acf6d26a6872845d68ddac7cb5c9392512846739d07474e8735703355325162fb69c4087692af0486da28a12f7a53ec82a528792f1e35f40e2609106006e02c4e121034dbe3be8e74bf63f2fcf293605a5651dd5c283e52003f2bc945ca34e6891c0e15ed35de6d301153ebf1608164eccd802b302d32ee15f6c2504e9a4ec9afff498a6bbc32d47b8961cb358797683fa1f2bf30a7f6126a37c775c40f30214de4a96786318629f08d861f2a38ad83eff5bb0ba2115a5c38111b526cdefc8bac42601854c387011ead83fdd6993b198b900db198f37f7b39f5af279045ac55bb0361bcabb9facaa12eec62e9ed6a7eacc446476fad7227b3a590db6a028db8fb35eafbe60a8c97eede78a89d32d917d8ae66d0f143b88da758f67771392acc4aba34a048c07f448136768a7fe335594bfb8fa8509ef8240320383fe3a8c9f76b369d012fedea6e600ec0b4a183534a0f3987825491488d9c80070dcd6a59981040de64eb362c868e0e916fa7b9e4c59ce79d7df03fb2fcf054427b9b9088bc36a8852db69a6305ff7856a4690441707b5355fa4a249e43bd2a49fc5ac7c107bc5337826f1fb128596b3f6aed290c9e13d3221c400915c447e9fb6bf9743f1824470befeb80d90aeb259e30efcf8957bf71f3a67dafdb2ba043dc77759286bd246da1a7f7eea6dd3a465ed84eca93a1e709a7e51a02f9e774017dc17121732e631586e244be1cff90d94df71dc5657271876922c166890b272693d2291e383ae902d495fb8248a525cf2248026a0aaa5f0d8c200cf015940a0342ad34122bf1d7932c336815aa555bc0d46ceb70dfc3a2ec149ec7149ef32697f0784abe8eed197d5f2d097cd71e1b7648d26960fdaac156b37b6c3284b4bcff41e6a2f91cdf2f61ef1310a04438d619f672f5ef7c0b625e21b44beb8f712b0889b7ab493190838c8731de09b31202201c45efee281b5e0e3093aaad72b16784348535211095ba22e810521f7746d69bd5eccb7bd82ce6a4733b1c1d6fef00ae75edcb3d98395708fc5f63b08357b4010e12ff0dfac55f162cd14eee00101501bc23e77febe08691712e17a02be975fa20a8f91fa562241e2028f39f1a5511ab2bb9d61a5011b5d2a0bde64967a7b9ab246a6b6537c3caf6b36c887bfe819ad5f7b38daebfc6adc1ca37d906bab7c2f7652c9b9e90d7b51edb9ce0db3c5efaeb9b3f6f7828dbf98ce8fba954ab8dd19f408dab23d6669c804e5170c2097e7711edb90b932d4765f5f7fc3ceb7705eb328ac1cad85367dabe0940b209c447580f59d91abee7e841005f51a2365af080ebbd2b3bfe9440c90a0edbc326964f930a2de9b04887395b3c731ccad73401bff9f4dc3e19e7ad7d579fd84f041b689a1916707d54370fd46bd229d680236e675753dff10cad148cac03468302f34081fdfe69dac015b71896999bf10016597b556ca94df41dffb3a8adb1382c6573d370661a1c3937c9aa2f0e0ba9ccaa067bafdc1a8860711083a8791d6cc17407eb952399fcf1235b306c9eab5a2f5938c8f9ae457d2150a7cf55a6e539d3ee2eb840b9d64d0ecdf4ec3b00205afddacd3748e3b804d4eb996262afa9613260d3b465716aabe35dbf69701549d3b8672f4d9a59f023163e8c55f11604ed517f81092de0bed3f5c92bfb07f172555d5e20072d7b444afa8289d5569e2765412a8188706407e9c9ecadbd293718589a44b1c5dbdd974aadf348900fb8df4e4f8cf10001e097d55bf9160e6d6bb079933cf181908b0c60fa609a6df6201d1565f24e77f10ffe29229c30a014dee14f3615f6619d43ed5702db73c6492a444963b27edeafdaa2cb5e8ad8219cb8ffd1af723b0ea85c3195f5661d6e1d6b2a2918bbaab4f09ca7582199c8197f07dccdf0182909faa822a7f7b682725c3ded995b3f6e3a851c95c46901d6384083bd8664bd6329d9e8b3f5f270f1130d64f4bf7553eb796302b9d255e6a06c022095f2c9da1a7ed8cfddcfe2a627b51ddc9ec4d23a0104444de79fe3dcec4e1f28f00aa70842796e5a7c5d64cd7f49d6a4d24d92bb590ba36ceabc72d57b16bd52487b10cefc20c8fd0f2abf30882e0b7aa8da6119bbc3b394e82a77f5583e880cf4cbc55577238ac2aa6f29c3d4d417ad1eb93dda9500da6aa6cb47e2a19acc47c2546f56723a351c4afdbd63663baff0a107e686a8008f87f336df3b37b03a65f51b7d647178d28c18bcb30b0730c1740804ec170d552419da86cd053b89404741ab4c87230207cf8eb4063525751cc68adfc0309a27076482e3bdafcf190bf82fedb0b4bbc3a72e698ae268b57ee6f2bbe9ebd790d38ff305ed2dbb1a2021190ec0697cce9b557e8a1944656948e51f8c5767d1c5b0a172cbcef33ed69453c837cd1e0a03fab28aca08ef8aab41f40462c3f9d6c1823345a78a2a58babb49f6ffcf2860f2a1ef5b71bea80c37dec666b47adce382619132a9f3887f99f943554e60419166551da4b8ff69044a4a548cf9464a475ea50448969f3954bedcc68a037b175de2c27c1fb4a04ed0b7f839f4ad037ef0dee29f3c0514e96b219072c7483b4c984c83dd26d1a02927cb476919b444a76e6573586a6173b5ca19749b71ed9b40de999ee03179d4e6677231a95d5ca79d9bfe151106f8b05136d63a54fe16c1f4b792376af5bc84be307618444f41929f2f936b9d49fac714ba895137e6c36b5c27e63930c188fa534b29388b4c43277c1431be37fdd6acb30d7ee94fc2ed7c7090dac058c419c28576b033d14061920d8c458816484f330ac6c3ecc5b28bc6805c009b6ae73b99fb1b6bc7203db6752213da55a3a92ec6a4487839fe5c587d54f6625b306f028b99b035b6d6e21a209b4296aba304439bdb55526a734497a14f8dc1ccff80a5fa6db99e958098d796367069852f66db2675cae7744a816fbdd27b10a7e0af67c54472992d0a1aa2aa55085b0018c6514995826553535ee47a9a1f92ef3602da8b368a9f3121ba2b2b76d5df740886fdc1b688013f786cb2cbfd0fd633315c03b614b772852af506fc489db721bf5d2b9bc0f6e1b07e3a6bbef711a766f7b605add21cea4ac63feaaf836a7c0b520b4756008fd4697fcdf78faea017398ec5b1dce1d8829bafdaa1aead0ab8e224daa7d6725490bb2b012e1147c850ecb680d3319cbf45a9de809c769e1130908e6fd46855163c8ce02efe20f1f0ae30d32ec2722c0e905e598bb3c04f1aa604cdfc3df6c97044897e0db0382b9e3d49366e0d32268797476fd50790781110f411a70bd0522775e88c7f6700f6281258e1a0258333ada8addbfffb4ba155dca2d989a2ef45dd6bdc83597be33bbb5e79a4d1c5ba4de0ccb9e04da42fc1f8c49738cca214dff56665bb2435438958985b93bc264b916e803a33257031bcdbf175703770ed213648e44d733153949420954791fe55c28c3d4ac9327e132d5c84ffd0592abb77ec9086bcb4db2a8e1d085c3cccdf2ebd72c07ec7dc74942badb5293f87760213b713d69ac59c9565404222d8e05f6607e86dd40b6c94ce41da33ee36b148e7eb25117c90a2ecf89e844a6151176a28b37f4fc8d823557b3523afe62da9da767fabf7e020460824502adafec8e7bec36c7aa316cae0a0bdc57126549285a117f9ea735cf9fa9c88ed78ac7adb4c4007ebbdee952642f58a13d17eb6020f67caccace6a709337c504204b00c11dc153b9f7a9441bf9d7a1626d167017ee76ca010a04b3ffe77eef4bd83c5c417dec710cd7e8ae6fd93bb6cb4f2dec7c26fe39c1679e2cbbca3e343accd82d224d7fdb55fba6353ffef1d865bef94395c98db93d727e091a8aeac1932c04cbb02aae46145171eb240e7e051006d9110e3398d95b6bfb239eb7aa871a302e1e785433d8ab9853d3dcca1c1e4321d610280047b1f5ce898ec0e762b8bdfe8412aa53b5e1b03d670d8bc7a526f621a909d6c996d6ab788e9cf95cfb3041c4d5c3dabde86bc4f0247a7bbc1f4b52e090cffd870be3117fc35ce17f8f2e886165dddd565b63ed73e9352dd95713b9a1e083aeab0b5961e284acfc42463e67ac20151e4c58294d85d0a4032bdf3cc6ae8087e084fd2dfabe403124f70d6a5b4631b9d6f8b1a9328a7e7bb1406086705cd78d66b23af1937426617666593b295c64bbf68e7f31749bf26bdcab7ef859888705c5bc7c74292cb97e7ac7bd25942b968380a21532974a4e1c0de4dde6e11f7578588a5bec457ab7cd9d7762a69aa99c825cd0a851f0436fae55f5bab644d9577511ef6315ec1016a8ab1fef4567853b2a9937e593dac9a33621e8d8958e864e81183d0f7d607945c2d8c97a5e08c6a77cc6a4bc72bdd7706b1ab0a64dfb1d2769cc522e1997362d9e26c57565af5712ce5df38d6c51985d1403babc633c3b904948e1d4da263e9ba23f4c98d0fbfe47f5a5255d968166df023f31aa099092aa82ffbbf3b023fd03d2a863ae144f644e7d165c7123f594ffacdf3f02d9b16dbb8ad2311a3137d9b04e0b6b18ef5dfb1485423ac2b9ad726d88c5a5cefa783137c4ecfd0b2bfc3306630f14707318a49958139700267bc260d56842691f92baabbe62077c263c9bfe3df38cd419cf1d6bb6f644fb58c42e292796d92e2de5c89618a95b1a79b98e602b688429f5831d0679c291bab91182554697ace8450450c8d0e416e1231658d2bdb11cba6bb18351febbc67323cee25469d146ce9a64d1e7b5b06f8e17eea8fb0f12b547b07e192b9fc") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x200000, 0x0) socket$inet6(0xa, 0x4, 0xfffffffffffffff8) 14:29:56 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) mq_timedreceive(r0, &(0x7f0000000000)=""/47, 0x2f, 0x42, &(0x7f0000000080)={0x0, 0x989680}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x8204, 0x1, 0x1, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x7}}}, 0x84) 14:29:56 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x6, 0x1) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/187, 0xbb) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000000c0)={0x5, 0x0, 0x9, 0x1, 0x1000}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x8800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000002c0)={0x5, 0x4, 0x100000001, 0x8, 0x80000001}) 14:29:57 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x74000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:57 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) recvfrom$inet(r0, &(0x7f0000000140)=""/139, 0x8b, 0x10160, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 14:29:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x7fff, "74b88d12da4f7b5111eee17527ec2814"}, 0x18) close(r0) r1 = gettid() ioctl$RTC_PLL_GET(r0, 0x801c7011, &(0x7f0000000080)) write$cgroup_pid(r0, &(0x7f0000000040)=r1, 0x12) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x6) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 14:29:57 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0xa}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 548.464635][ T25] audit: type=1326 audit(1552228197.322:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7049 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 548.486760][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 548.486798][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:29:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r1) 14:29:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) [ 548.595683][ T7208] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[7208] [ 548.597884][ T25] audit: type=1326 audit(1552228197.452:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7219 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:57 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3, 0x10000) getpeername$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, &(0x7f0000000100)=0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:57 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) r1 = getpgid(0xffffffffffffffff) sched_setparam(r1, &(0x7f0000000000)=0xffff) [ 548.724328][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 548.730248][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:29:57 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 14:29:57 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000080)={0x4000000000000000, 0xfffffffffffffffc}) [ 549.393214][ T25] audit: type=1326 audit(1552228198.242:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7219 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:58 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7a000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r0, 0xc040564b, &(0x7f0000000000)={0x1, 0x0, 0x2014, 0x5, 0x40, {0x1, 0x35a}, 0x1}) 14:29:58 executing program 0: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x400, 0x0) ioctl$NBD_DO_IT(r0, 0xab03) 14:29:58 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x25}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:29:58 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 14:29:58 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xffffffffffffff2d, 0x9}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000180)={0xae, 0x0, 0x300f, 0x7, 0x0, {0x8, 0xfffffffffffffffc}}) [ 549.471952][ T25] audit: type=1326 audit(1552228198.322:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7370 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800003eae, 0x40) close(r0) [ 549.532165][ T7390] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[7390] 14:29:58 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) pwrite64(r0, &(0x7f0000000140)="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", 0x1000, 0x0) 14:29:58 executing program 5: ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 14:29:58 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000380)='/dev/zero\x00', 0x101000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x80101, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_ifreq(r2, 0x8932, &(0x7f0000000100)={'vxcan1\x00', @ifru_hwaddr=@dev={[], 0x16}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40000, 0x90) write$FUSE_WRITE(r3, &(0x7f00000000c0)={0x18, 0x0, 0x1, {0x1fc000000000000}}, 0x18) socketpair(0x1b, 0x7, 0x4, &(0x7f00000003c0)) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x5, 0xcd, 0x8, 0x7, 0x5, 0x7ff, 0xa3c8, {0x0, @in6={{0xa, 0x4e20, 0x40, @ipv4={[], [], @local}, 0x6}}, 0x0, 0xf, 0x5, 0xffff, 0xf6}}, &(0x7f0000000000)=0xb0) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f0000000400)={0x7, 0xff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @rand_addr=0x6}}, 0x100000001, 0x4}, &(0x7f0000000300)=0x88) fcntl$setstatus(r0, 0x4, 0x46400) ioctl$sock_ifreq(r2, 0x400000000008923, &(0x7f0000000140)={'irlan0\x00', @ifru_flags=0x4001}) 14:29:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) fsync(r0) sync_file_range(r0, 0x0, 0x5, 0x5) 14:29:58 executing program 0: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) getsockopt$inet_buf(r0, 0x0, 0x25, &(0x7f0000000080)=""/122, &(0x7f0000000140)=0x7a) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r1) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x100) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7}) alarm(0x1) [ 550.271592][ T25] audit: type=1326 audit(1552228199.122:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7370 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:59 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xfeffffff}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:29:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:59 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, &(0x7f00000000c0)=0xe8) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000540)=r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000440)=@assoc_value={0x0, 0x80000001}, &(0x7f0000000480)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000004c0)={r5, 0xffffffff80000001}, &(0x7f0000000500)=0x8) lseek(r0, 0x0, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@local}}, &(0x7f0000000100)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000300)=0xc) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000700)={r3, 0x100, 0x3ff, "6a0a25b10069856b45fa0b714abbf9cc8a3e8c72d5b27758539f57d6a38a1567a8d4569109f6939a4686e671b18c1e26cea7985f935dc7cd6df0c8bd23"}) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000340)={{{@in=@broadcast, @in=@rand_addr=0x7fffffff, 0x4e23, 0x100, 0x4e24, 0x20, 0x2, 0xa0, 0xa0, 0x1, r6, r7}, {0x8, 0x6, 0xfff, 0x7fffffff, 0x2, 0xdf, 0x5, 0x9}, {0xc046, 0x1, 0x9, 0x3}, 0x2, 0x6e6bb3, 0x1, 0x1, 0x1}, {{@in=@multicast1, 0x4d3, 0x6c}, 0xa, @in=@multicast1, 0x34ff, 0x4, 0x3, 0x200, 0x8, 0x20, 0xffff}}, 0xe8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000680)={0x1, 0x100, 0x20e, 0xd881, 0xffff, 0x6, 0x9, 0x20, r5}, &(0x7f00000006c0)=0x20) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:29:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$RTC_EPOCH_READ(r0, 0x8004700d, &(0x7f00000000c0)) write$FUSE_GETXATTR(r0, &(0x7f0000000080)={0x18, 0x0, 0x1, {0x8}}, 0x18) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x9, 0x24d, 0x8}) close(r0) 14:29:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000000)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) 14:29:59 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x7ffff000}], 0x1, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 550.401407][ T7572] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[7572] 14:29:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8a800) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:29:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) [ 550.432123][ T25] audit: type=1326 audit(1552228199.282:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7576 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:29:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:29:59 executing program 4: socketpair$unix(0x1, 0x800005, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ip\xff\xff\xff\x7f\x00\x00\x00\x00at_reroute\x00\x98', 0x2, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f00000002c0)={@empty, @dev, @multicast2}, &(0x7f0000000180)=0xc) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000000c0)=0x4, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e21, 0x522fd040, @loopback, 0x1}}, [0x80000000, 0x59, 0x5, 0x2, 0x10001, 0x3b88000000, 0x80000001, 0xd37, 0x8000, 0x8, 0x5, 0x0, 0x8, 0xfffffffffffffffa, 0x3ff]}, &(0x7f0000000280)=0x100) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000600)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000200)=0xc) lsetxattr$trusted_overlay_origin(&(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='trusted.overlay.origin\x00', &(0x7f0000000540)='y\x00', 0x2, 0x1) getsockname$netlink(r3, &(0x7f0000000580), &(0x7f00000005c0)=0xc) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000000)=0x2) ioctl$TUNSETOWNER(r2, 0x400454cc, r5) 14:29:59 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x5}) 14:29:59 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0xffffffffffffffff) close(r0) [ 551.213975][ T25] audit: type=1326 audit(1552228200.062:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7576 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:00 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xffffff7f}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000000000000}) 14:30:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) pwritev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)}, {&(0x7f0000000080)="6e6b7ae46daff6", 0x7}, {&(0x7f00000000c0)="a0a1d9fa0c27b0ccb79afd52ed2fea9804f60ef49ea27993f1f3b62028", 0x1d}], 0x3, 0x0) write$P9_RUNLINKAT(r0, &(0x7f0000000000)={0x7, 0x4d, 0x2}, 0x7) 14:30:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:00 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:00 executing program 1: clock_getres(0x7, &(0x7f0000000000)) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) 14:30:00 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x80000) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 551.340274][ T7724] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[7724] [ 551.354598][ T25] audit: type=1326 audit(1552228200.212:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7736 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:00 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x2000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:00 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:00 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x7fffffff) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0485510, &(0x7f0000000400)={0x9, 0x8, 0x4, 0x1, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}]}) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080126bd7000fddbdf250500040000000c000300080008000500000108000600004afce4e4c2a90800060002000000000000000000"], 0x38}}, 0x10) socket(0x0, 0x200003, 0x6) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1, 0x0) 14:30:00 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80000, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000140)) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x0, 0x3, 0x0, 0xbe, 0x1}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000080)={0x4, 0x0, [{0x1, 0x1, 0x6, 0x1000, 0x8}, {0x4, 0x3, 0x77cb06c9, 0x100000000, 0x101}, {0xc0000001, 0xe7, 0x0, 0x9, 0x400}, {0x40000005, 0xa087, 0x100000001, 0x401, 0x80000001}]}) 14:30:01 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xfffffffe}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) close(r0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./file0\x00', 0x0, 0x18}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.advise\x00', &(0x7f0000000080)=""/112, 0x70) 14:30:01 executing program 0: prctl$PR_GET_TIMERSLACK(0x1e) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000400)=ANY=[@ANYBLOB="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"]) 14:30:01 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x80d}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffff9c, 0x0, 0x6, &(0x7f0000000080)='wlan1\x00'}, 0x30) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000200)={0x29, 0x20, 0x8}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:01 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x4, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) sendto$unix(r0, &(0x7f0000000000)="5f5c05eff0379962e612add94dc485efd641f0f3e99db1f7f4f55842c2c0b9bb7c5ce1", 0x23, 0x840, &(0x7f0000000080)=@abs={0x1, 0x0, 0x80000000}, 0x6e) renameat(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000000180)='./file0\x00') ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 552.272859][ T7882] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[7882] 14:30:01 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x1000000000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x10000400, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000200)={0x5, &(0x7f00000001c0)=[{0x828, 0x800, 0x3, 0x1f}, {0xffff, 0x2, 0x100000000, 0x4}, {0xfffffffffffffffc, 0x0, 0x7, 0xbad}, {0xae5c, 0xeeb, 0x924, 0x8000}, {0x3, 0x40, 0x38, 0x7}]}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x3}, &(0x7f00000000c0)=0x8) delete_module(&(0x7f0000000180)='/dev/null\x00', 0x800) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="cd750a000800000009000000020006000800bc0004000000"], 0x1c) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x57}) 14:30:01 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00', 0x3}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:01 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x109200, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x0, 0xfe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8004700b, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r5, 0xfff7ffffffffffc8, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0x80045505, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, @start}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0xe2ca, 0xfd, 0x7b28, 'queue0\x00', 0x2ab4}) dup2(r0, r0) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 552.516512][ T8017] QAT: Invalid ioctl 14:30:01 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000140)={0x4, 0x3a, 0x4, 'queue0\x00', 0x10001}) [ 552.644339][ C1] net_ratelimit: 20 callbacks suppressed [ 552.644368][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 552.650083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 552.711049][ T8017] QAT: Invalid ioctl [ 552.884371][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 552.890225][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.044297][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 553.050080][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:02 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x100000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:02 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x8, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000001140)=""/105, 0x69}], 0x3) readahead(r0, 0x9, 0x2) chroot(&(0x7f00000011c0)='./file0\x00') close(r0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x402, 0x0) 14:30:02 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x1000, 0x2, [0x3f, 0x80]}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x0, 0x800, 0x2, 0xfff}, &(0x7f0000000140)=0x14) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:02 executing program 4: socketpair$unix(0x1, 0x6, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_data=&(0x7f0000000080)="c245f524c8c4ba76f25fa2ad1ce9eee34e05401c05eb367451b9047148c58a42"}) [ 553.086949][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 553.086961][ T25] audit: type=1326 audit(1552228201.942:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=7880 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 553.213496][ T8034] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[8034] 14:30:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x8, 0x40000) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x100000001, 0x401, 0x2, {0xb, @sliced={0xecbc, [0x7d, 0x9, 0x6, 0x4, 0x9, 0x0, 0x6, 0x0, 0x0, 0x400, 0x9, 0x2, 0x100000000, 0xfffffffffffff821, 0x80000000, 0x100, 0x3ff, 0x8, 0x3, 0x400, 0x4, 0x7ff, 0x40, 0x1, 0x401, 0x8, 0x5, 0x32e6, 0x80000000, 0x9, 0xffffffffffffffc0, 0x5, 0x68, 0x81, 0x7, 0x9, 0xfffffffffffff2f6, 0x81, 0x7f, 0xab, 0x4b01, 0x2, 0x7, 0xff37, 0x1, 0x6, 0x80000000, 0xfff], 0x8}}}) close(r0) open_by_handle_at(r0, &(0x7f0000000140)={0x1008, 0x4, "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"}, 0x4000) 14:30:02 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x450202, 0x0) fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.impure\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x444401, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000140)={0x7b, 0x0, [0x9, 0x8, 0xfffffffffffff800, 0xe8a]}) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1fe, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)) 14:30:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getgid() r1 = creat(&(0x7f00000008c0)='./file0\x00', 0x20) getsockopt$inet6_int(r1, 0x29, 0xdd, &(0x7f0000000900), &(0x7f0000000940)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KDDISABIO(r3, 0x4b37) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) ioctl$PPPIOCDISCONN(r3, 0x7439) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) [ 553.247733][ T25] audit: type=1326 audit(1552228202.102:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8048 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) sendmsg$alg(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)="a52492baa897438826984d2ca585f69a5b39f0a226cf95c2e954f4f83ec60d7d997042cf2e26ec9bb3bf8ab64cb23958a45310282a9322f0fb79de489b6fff45c9bdadf5d3cbb139bb968974ee3f5390a81c1f70cee39a5439ee318630e3a4d32ef703e94925cb0872bc042929d5db359379d30c54d02dbd1a3f31473d3876c9b21f833bf97032a83140cf9a663a2e31e6adcf1371015aa87b17d984d8101edaa85a0e70dd57b22b22d0c89e6d0764e387ef442dd7e5f543b41f2489f55a8c3b42170df575c2391a1a2c82c3", 0xcc}, {&(0x7f0000000140)="4ae494ff02877eb7ef4f77649aa43403c14ce1a9c5795b1d527ea32fb0cb6aaf50d051420eea299fcb8c1d446b1b82c6c63484bc91fd", 0xffffffffffffff03}, {&(0x7f0000000180)="4f292c86ec698202a3ffaf9bab836fe58d47a1389cb7c7fc763d0c12b6daac7183f1a2f13dd15511dbfe77ad950bd0cdb72c6ccfff14b24911a94eff", 0x3c}, {&(0x7f00000001c0)="82e990de0bc347ec34c9cf899940768a873c66b25348636105c29d649dd33ea6476a64a148fc41e2da6b7fe2805b2a790e244b4aff8d0f55b7fb78fb61b6ab0c5a218359e335a9a81fb9f975f9db1a5a9cbb2e52118317a4c210832aedc055680e0c84ddf39bba825153f5a21c675586830f50b648cf8aacaee87da80580f231a5d3e78fa9fce6cbe6e6e4b3e9be5e7bc52bad92bd2f23c9e89f0621176d79ed380b8c73cd90ed56b433edf4f3e403e76d67dd1299b3d642657fd07facdec42618be708aef25f3ec1dfc06c14c65", 0xce}, {&(0x7f00000002c0)="ff015d1fd9b1ea6c196d3c904e30f03cdb95dc5f2813c1ed53c8691a11cb1c6e73d44ad3e7ff1bfe384497e26edaf8b48805152cf9390ee584f0fbcaf0b5e5ff10000fea4e751491585b89323084ffb11f899357d83ffdbc3eb23f8b6d6901909b5e5de00f0abf7c4bae4e11a747c62ccdae0297b1c668f90a0ba126f4d89b07d300ccf45335ef72dc66ef49c58c53163245a34050d7a74cdf2ff3f9d15aaaa1fc3e0a0dd73f8eb14856dfec42335ef8401379df1eaabf3f28bb89fcd5aeb04be5052fcce173b07e066920ac5af106ad06fb47f9f75d55b0956e199219c822694fe4114cddaec7ff0e", 0xe9}, {&(0x7f00000003c0)="4a972f0a3d307b80a018bac955c3fd5792d408db37e3fa7f49b12e2e340afc360e9eed5d1682c5cb3310fccf01196fc40e061f40b43f3080942bd50dcffc8ee2762e1d9a12a384153d9650ec4f7b52810c0da584d2cd7031afbfff436a4182f80656f235283c87fb53d078b79107f635b5a0698cf9c0c22f0e9f3b74fa4ac5f5651ada84823e509ab1641c9a7ac25be41d77157d59397e02ab641079a2590bdf5ac35b8598b20b903c4069b84166ff2fbf5013907de498eba3b1dc6ae943cdc73877a214069d86074fb919f9312bd73a17bc", 0xd2}, {&(0x7f00000004c0)="8a1307ee7362bbb8231c3fa7e208d2cf3ee96576899269787b63fbc6b48dc2db580ccb109c206634c05cd9e882d62fed2dd7ac0760ff1bf4b15fc527d11b3e5bf4784b0a", 0x44}], 0x7, &(0x7f0000000580)=[@op={0x10, 0x117, 0x3, 0x1}, @assoc={0x10, 0x117, 0x4, 0x8}, @iv={0x1010, 0x117, 0x2, 0x1000, "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"}, @iv={0x58, 0x117, 0x2, 0x45, "5371937d016bff82199557e8bd085cf0b2ec405dceff8bc92ab59d1a47b4a2f1ae3f092981a4deacf08f7234f732f8b8b6c572071cb0f18dc8bea34ad129cbeeeaf7139b96"}], 0x1088, 0x1041}, 0x4000005) close(r0) 14:30:02 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000000)={0x1, 0x2}) [ 553.684295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 553.690142][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 553.844282][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 553.850053][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 554.041821][ T25] audit: type=1326 audit(1552228202.892:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8048 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:02 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x200000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:02 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) bind$rds(r1, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) 14:30:02 executing program 0: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x9, 0x200) ioctl$TIOCEXCL(r0, 0x540c) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x5}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x0, 0x0) 14:30:02 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:02 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x200000, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000000)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nlmon0\x00', 0x1000}) 14:30:02 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x10, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000140)=""/118, &(0x7f00000000c0)=0x76) close(r0) 14:30:03 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) syncfs(r0) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x1ff, 0x8001, 0x2, 0x4, 0x0}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x1, 0x8000, 0xffffffffffffffff, 0x3f, r2}, 0x10) write$P9_RWALK(r1, &(0x7f0000000000)={0x3d, 0x6f, 0x2, {0x4, [{0x0, 0x3, 0x8}, {0x92, 0x3, 0x5}, {0x80, 0x1, 0x8}, {0xe, 0x4, 0x3}]}}, 0x3d) [ 554.163827][ T25] audit: type=1326 audit(1552228203.002:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8188 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 554.187317][ T8197] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[8197] 14:30:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:03 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x0, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000280)=0x4, 0x8) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x1fe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000200)={{0x2, 0x80000001}, {0x5, 0x6}, 0x7, 0x6, 0x1f}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x8000) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) 14:30:03 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x13, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:03 executing program 0: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0x81, 0x0, 0x1, r1}}}, 0x28) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000140)={0x24, 0xe5f, 0x401}) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x600, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r2, 0x80045518, &(0x7f0000000040)) [ 554.339502][ T8322] input: syz1 as /devices/virtual/input/input335 [ 554.441885][ T8332] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[8332] [ 554.953883][ T25] audit: type=1326 audit(1552228203.802:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8188 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:03 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x300000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:03 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) 14:30:03 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:03 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x1fffffffc, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'sit0\x00', 0x100801}) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) ioctl$BLKZEROOUT(r3, 0x1266, 0x0) ioctl$sock_ifreq(r0, 0x8991, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_map={0x3ff, 0x6, 0x5e26, 0x7, 0x6b5, 0x5941b1a3}}) 14:30:03 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x25, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:03 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000100)='/dev/vbi#\x00', 0x1, 0x2) ioctl$PPPIOCSMRU1(r0, 0x40047452, &(0x7f00000000c0)=0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000080)={0x9, 0x3, 0x3f, 0x4, 'syz1\x00', 0x6}) r1 = syz_open_dev$usb(&(0x7f0000000140)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) 14:30:03 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200000, 0x0) ioctl$RTC_PLL_GET(r2, 0x801c7011, &(0x7f00000000c0)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x7, @remote, 0x3}}, 0x81, 0x10, 0x2, 0xe4c, 0x70}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={r3, 0x8}, &(0x7f00000002c0)=0x8) [ 555.078821][ T8456] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[8456] 14:30:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1cb, 0x80001) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) close(r0) arch_prctl$ARCH_SET_GS(0x1001, 0x200) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f00000000c0)={r0, r0}) [ 555.117090][ T25] audit: type=1326 audit(1552228203.972:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8460 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:04 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x0, 0x1000000000000}) 14:30:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$VIDIOC_QUERYSTD(r0, 0x8008563f, &(0x7f0000000000)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=r1) [ 555.914084][ T25] audit: type=1326 audit(1552228204.762:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8460 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:04 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x400000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:04 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x480, 0x0) ioctl$CAPI_GET_FLAGS(r3, 0x80044323, &(0x7f0000000300)) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000200)="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") 14:30:04 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x100) mq_open(&(0x7f0000000000)='#,vboxnet0keyringmd5sum\\selfselfeth1+wlan1keyring\x00', 0x40, 0x8, &(0x7f0000000080)={0x5, 0x80, 0xffffffffffff8000, 0x7fff, 0x4, 0x1c, 0xffffffff, 0x80000001}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:04 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0xffffffffffffeffe) close(r0) 14:30:04 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x73, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:04 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) write$P9_RSETATTR(r0, &(0x7f0000000140)={0x7, 0x1b, 0x1}, 0x7) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:04 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x50000, 0x0) r1 = getpid() ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f00000003c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000400)={0x0, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f0000000100)={r3}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000080)=r1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r4, 0x5}, &(0x7f0000000200)=0x8) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000002c0)={0x5, 0x7fff, 0x6, 0x0, 0x0, [{r0, 0x0, 0x1}, {r0, 0x0, 0x4}, {r0, 0x0, 0x1}, {r0, 0x0, 0x6}, {r0, 0x0, 0x10000}, {r0, 0x0, 0x1f}]}) r5 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x20000001ff, 0x2) close(r5) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x10) [ 556.042866][ T25] audit: type=1326 audit(1552228204.892:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8603 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 556.093139][ T8610] ptrace attach of "/root/syz-executor.3"[7407] was attempted by "/root/syz-executor.3"[8610] 14:30:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000100)={'ip_vti0\x00', {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x26}}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x1, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb0, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'irlan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1000000000000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x14}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000004}, 0x8000) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e20, @rand_addr=0xfffffffffffffffa}, {0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffff80, 0x0, 0x40, 0x7f, 0x4d}) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x117, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000003c0)={0x15, 0xfffffffffffffe27, 0xfa00, {r2, 0x9ab, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x4f9, @remote}}}, 0xffffffffffffffa3) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0x8008550e, &(0x7f0000000200)={0x0, 0x0, @start}) timerfd_create(0x9, 0x80800) fremovexattr(r0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00') 14:30:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000080)={0x0, 0x0, 0x17660, &(0x7f0000000000)=0x9e05}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 556.268346][ T8716] input: syz1 as /devices/virtual/input/input339 [ 556.841889][ T25] audit: type=1326 audit(1552228205.692:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8603 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:05 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x500000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:05 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000000)=0x40, 0x8) close(r0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x1000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r1, 0xffffffffffff8000}, 0x8) 14:30:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000180)) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x9, 0x5, 0xc5b6, 0x0, 0x7}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0x0, r1, 0x14, r0}, 0x10) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:05 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:05 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x3ffff, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 556.947220][ T8760] input: syz1 as /devices/virtual/input/input340 14:30:05 executing program 1: pipe(&(0x7f00000000c0)) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000000)={{0x9, 0x1}, 'port0\x00', 0x80, 0x4, 0xfffffffffffffff7, 0x507, 0x42e, 0x8, 0xffffffffffffffff, 0x0, 0x5, 0xfffffffffffffff8}) close(r0) 14:30:05 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x10000004, 0x20800) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x800) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 556.996894][ T25] audit: type=1326 audit(1552228205.852:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8770 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:05 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2200, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000240)={0xf92, "d4d4f56cc22963739c358936bda498b28bdd7ccdfc201c782a41c75585e359a4", 0x1, 0x1, 0x9, 0x50007, 0x4}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f0000000180)={0xfff, 0x8, 0x32, "4f78cc004a129afe145116e315d3a04b70e045aa13338a99d3e0f7d1a81109c2949ee938b5175427679a563424d1e17772374c983694c43a0d4e4260", 0x2d, "a69836af7f7a26b71e85f4c75272111ad297c6cecb9276a76680015dffe198e5f453d9aa9a62aca6e211f42761b51c341b02f2ca65cd3b043dba093f", 0x80}) 14:30:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(0x0, 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:06 executing program 4: r0 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x800, 0x10000) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) socketpair(0x21, 0x2, 0x2, &(0x7f0000000140)={0x0, 0x0}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x4002) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000080)={"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"}) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 557.221279][ T8890] input: syz1 as /devices/virtual/input/input341 14:30:06 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x600000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:06 executing program 1: r0 = add_key(&(0x7f0000000100)='cifs.spnego\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)='<', 0x1, 0xfffffffffffffffc) keyctl$clear(0x7, r0) open$dir(&(0x7f0000000300)='./file0\x00', 0x400800, 0x6) fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x72, 0x204001) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000480)='/dev/urandom\x00', 0x6001, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000003c0)={0x0, 0x2, 0x10}, 0xc) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm_plock\x00', 0x40000, 0x0) close(r1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000280)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x22, @multicast2}, {0x2, 0x4e23, @rand_addr=0x4}, 0x2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)='hsr0\x00', 0x2, 0x1, 0x4}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@ipv4={[], [], @broadcast}, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) 14:30:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:06 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x125000, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r1, 0x80045518, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000080)={0x8, 0x1, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}}) 14:30:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000a40)={0x2, 0x7, 0x0, 0x5, 0xa33, 0x40}) ppoll(&(0x7f0000000040)=[{r0, 0x20}, {r2, 0x400}], 0x2, &(0x7f0000000100), &(0x7f0000000180)={0x2}, 0x8) ioctl$VIDIOC_G_ENC_INDEX(r3, 0x8818564c, &(0x7f0000000200)) 14:30:06 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x7ffffff2, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 557.844297][ C0] net_ratelimit: 20 callbacks suppressed [ 557.844304][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 557.855770][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 557.874160][ T8913] input: syz1 as /devices/virtual/input/input342 14:30:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x803, 0xa12200) setsockopt$inet_buf(r0, 0x0, 0x33, &(0x7f00000002c0)="66a5e1692f56032832e4146f12b4a76a250123917deaafe55dbd956f67d52f6218c156648e7a818355e4feafb03c75c7cdeb01434bbcd58a152f90c9e8bd43af8302bdceebdfcd8cebd9be2472bec8c2658fc7c27b490f0fa949603a5d18c68b79b69fac0d938faf1102cb312263c3a44b1a1b1a2a9ae5c0941694dfced2649490763dc4d8a1f43a9ae00087b321fee0588cb235f2083af6455257a23af1b396e95391ceb827f1ffebced6d16a5275bcdd717308", 0xb4) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) write$P9_RATTACH(r0, &(0x7f0000000080)={0x14, 0x69, 0x2, {0x38, 0x1, 0x1000}}, 0x14) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000280)) 14:30:06 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0x3ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)={r1, 0x5}, &(0x7f0000000180)=0x8) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) signalfd(r2, &(0x7f0000000000)={0x10001}, 0x8) close(r2) 14:30:06 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 558.004313][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 558.010288][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 558.016135][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 558.021903][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:06 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:06 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x105000, 0x0) 14:30:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) getgid() [ 558.227297][ T9047] input: syz1 as /devices/virtual/input/input343 [ 558.721843][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 558.721862][ T25] audit: type=1326 audit(1552228207.572:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=8909 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:07 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x700000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:07 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000040)=""/173) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r1) 14:30:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x6, 0x10000, 0x100000000, 'queue1\x00', 0x3}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={r1, @rand_addr=0xfffffffffffffffd, @broadcast}, 0xc) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x101000) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:07 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x7ffffff8, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 558.817470][ T9061] Unknown ioctl -2108641626 [ 558.827035][ T9061] Unknown ioctl -2108641626 [ 558.857621][ T9068] input: syz1 as /devices/virtual/input/input344 14:30:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) close(r0) r2 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000240)={r2, 0x9, 0x3}, &(0x7f0000000040)=ANY=[@ANYBLOB="656e633d706b63733120686173683d706f6c79313330352d73696d6400000000000000000000000000000000000010000000000000001000000000000000000000000000000000000000000000000065040500000031ed280b"], &(0x7f0000000300)="70df4482b58c30c00b1494535a5d77605a13159ac952638a4e592d9ac3dc1baa48b4ffe5a55f44", &(0x7f0000000340)=""/248) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000140)={{0x0, 0x3, 0x2e6, 0x2, 0xfffffffffffffadc}, 0x2, 0x8001}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000000c0)=0x4, 0x4) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20\x00', 0x410101, 0x0) 14:30:07 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x7, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r3 = dup3(r0, r1, 0x80000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000080)={{0x3, 0x3, 0x8, 0x2}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 558.889073][ T25] audit: type=1326 audit(1552228207.742:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9074 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 558.911183][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 558.911232][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:07 executing program 0: syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) socket$can_bcm(0x1d, 0x2, 0x2) 14:30:07 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) 14:30:07 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) [ 559.124805][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 559.131155][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 559.205904][ T9201] input: syz1 as /devices/virtual/input/input345 [ 559.657384][ T25] audit: type=1326 audit(1552228208.512:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9074 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:08 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0xa00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x202, 0x800000002009) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000000)=0x2000000) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) 14:30:08 executing program 1: ioctl$VIDIOC_G_JPEGCOMP(0xffffffffffffffff, 0x808c563d, &(0x7f0000000040)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x200002, 0x0) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40106435, &(0x7f0000000000)={0x4, 0x0, 0x0, 0xeb56}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000180)=ANY=[@ANYBLOB="014ec78a4325f695fd8a4e89269f2b69e732df46361cf24d41c7bdb166b873e26e55e353157fad0b0740ea1d41faae7c29b39a6191c6d5696f166a958cb69d29d189f79ee3c0b382222e7eb6350d37c149f16b9b672e732e71aa9cd3dd864b09d1486b82baa039884c0d7666132f240cafbaf05cad22b288baedccd4d273e27177b070f5252015f80a7f6f46d76c16b93295638b97"], 0x2) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000100)={0x7, "7443f19fb134f373fb3b511050fc62f18e2aabdfaa057e2bdd8fa7de0436e9de", 0x2, 0x1}) 14:30:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) socketpair(0x2, 0xa, 0x3b, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f00000000c0)={0x8}, 0x1) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 14:30:08 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x7ffffff9, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x120c, 0x32, 0x308, 0x70bd29, 0x25dfdbfd, {0xb}, [@typed={0xc, 0x6d, @u64=0x6}, @typed={0x8, 0x87, @ipv4=@multicast1}, @generic='|o', @nested={0x7c, 0x6d, [@generic="d2fd1870a2f6cfdcc0a2c3396d46158d39004f515752b2ea5f6f30c930faa42b49cbf1590e7ce0e9d8dcc1ec551f92cb5aace6d8bad135e83b8d67ae4d4dd797b5d68e214492a1518291dff6af174143cee9dc9dca60911ec051c5af7cc83c80d534eb2c0b210fe5edf3b336ba85dee89016825e41d228cb"]}, @typed={0xc, 0x8b, @u64=0x1}, @typed={0x8, 0x4a, @u32=0x7}, @typed={0x8, 0x65, @u32=0x2b8}, @nested={0x148, 0x60, [@generic="cbc4be1d804f7c8d0d9a9b36a075339f242b4e0c44cac9925bc3f0ac1d3ae5883b21fae360aced9da39c4a3db6367379c4666dd16a3b46ce2671ae740ca1c5e357a079b175733bcc14ba506b44cf4a6885cd12119261e46d331550122c65b8ad1992c5bc1a3a1e73314ef6bd73952bc6cdf8ff2ad4b14efedc035ecb96a48a10a3233d2c35f63c9ac7534a9ca68bc983e23f1832ae39a95fe3d0b61d3d4da3e21af38fa5ab5346b7df4c9b013ae66ed1f6d688bf8db71025b166e1f056271c4ba04fd51cf4a6680713316227135c27b5b0659d72f9c156e5fad673c07f33d2b68e235e5e77e166b2b16ff73558e1c9f32041", @typed={0x14, 0x33, @ipv6=@local}, @generic="3508480ce1c3cb8aff1f9df52719fb3fdeac6bfe47698dc5e2a03cbfa7e55b65904d46ded6c631979d65cfa56223cdaadbad5b37f3eddf1c33750fb304"]}, @generic="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"]}, 0x120c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) 14:30:08 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000000)=0x5) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) r1 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000004ffc)=0x1000) read(r1, &(0x7f0000000340)=""/143, 0xfffffc68) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f00000000c0)) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) [ 559.774794][ T9212] input: syz1 as /devices/virtual/input/input346 [ 559.792053][ T25] audit: type=1326 audit(1552228208.642:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9222 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000100)="329206fa7d280b4691b1ed567b4280ae4eeb960ba9d99e1bc03f8152235f0133360fcb505fa492ab81d413e91945235dc281c4965f8d2a51aeeb8213b40f846c8f3401ac1829c46c9c214f19dec1daaf13dcf6b01e5fc4171f3d6732267e64976a6bb80512aca9771cde3b385731bc2958c25f4d301d212308aed457de1a09906b6ae29f99172e7b6d2cb2db59ffc5d43bfb132124e0d236f025ccb90b334a42dc3ee35ac90fee6f7a11138250bae97f1b") r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x20, 0x402500) readahead(r1, 0xffffffffffffffff, 0x4bd1) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2040000002000201, 0x20000) close(r2) 14:30:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x40000000000891f, &(0x7f0000000080)={'eql\x00\x00\x00\xa9[\x00', @ifru_ivalue=0x101}) 14:30:08 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 14:30:08 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) dup(r0) [ 560.093210][ T9347] input: syz1 as /devices/virtual/input/input347 [ 560.574913][ T25] audit: type=1326 audit(1552228209.422:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9222 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:09 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x1000000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:09 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x7ffffffe, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x8, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x7) ioctl$PPPIOCCONNECT(r0, 0x4004743a, &(0x7f00000002c0)=0x4) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x428000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in=@initdev, @in6=@dev}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f00000000c0)=0xe8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'eql\x00', 0x44}) ioctl$sock_ifreq(r2, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x3) close(r0) 14:30:09 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x109200, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x0, 0xfe}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x1) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8004700b, &(0x7f0000000140)) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_TRY_FMT(r4, 0xc0cc5640, 0x0) r5 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl(r5, 0xfff7ffffffffffc8, &(0x7f0000000080)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101080, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) r6 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x8000000100079) ioctl$VIDIOC_TRY_DECODER_CMD(r6, 0x80045505, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, @start}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 560.659402][ T9369] QAT: Invalid ioctl 14:30:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x8001, 0x400000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a45320, &(0x7f0000000200)={{0x8000, 0x1}, 'port1\x00', 0x8, 0x400, 0xd0, 0x16, 0xcfac, 0xff, 0x0, 0x0, 0x6, 0x2800}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)={0x0, 0x1, 0x4}) getsockname$unix(r0, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e) [ 560.736628][ T25] audit: type=1326 audit(1552228209.592:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9384 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:09 executing program 1: syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x38c, 0x200000) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000, 0x0) close(r0) 14:30:09 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) bind$isdn(r0, &(0x7f0000000000)={0x22, 0x3000000000, 0xfffffffffffffffc, 0x1, 0x7ff}, 0x6) r1 = gettid() r2 = getpgrp(r1) sched_rr_get_interval(r2, &(0x7f0000000040)) 14:30:09 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200040, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001bc0)={{{@in6=@ipv4={[], [], @empty}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@empty}}, &(0x7f0000001cc0)=0xe8) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001e00)={@ll={0x11, 0x8, r1, 0x1, 0xffff}, {&(0x7f0000001d00)=""/146, 0x92}, &(0x7f0000001dc0), 0x5}, 0x9c) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x0, @loopback, 0x4e22, 0x1, 'sed\x00', 0x1, 0x81, 0x14}, 0x2c) r3 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0xeb, 0x200) close(r2) ioctl$DRM_IOCTL_VERSION(r3, 0xc0246400, &(0x7f00000002c0)={0xfffffffffffffffe, 0x100000001, 0x3, 0x48, &(0x7f0000000140)=""/72, 0x54, &(0x7f00000001c0)=""/84, 0x5f, &(0x7f0000000240)=""/95}) 14:30:09 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x0, [], [{0x0, 0x10000, 0x9, 0x1, 0x7fffffff, 0x100000001}, {0x401, 0x8, 0xfffffffffffffffa, 0x6, 0x40, 0x3}], [[], [], []]}) 14:30:09 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000200)=""/237, 0xed, 0xffffffffffffffff}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r2, 0x4) [ 561.536483][ T25] audit: type=1326 audit(1552228210.392:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9384 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:10 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x3f00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:10 executing program 5 (fault-call:4 fault-nth:0): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:10 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x4082) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x2}}, 0x10) r2 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r2) 14:30:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045518, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80042407, &(0x7f0000000000)) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) 14:30:10 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x2) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:10 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x40, 0x30}, &(0x7f0000000240)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000280)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0xfffffffffffffffe, 0x9}, 0x2) readahead(r0, 0x100000001, 0xd0b) socket$vsock_dgram(0x28, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$TIOCGLCKTRMIOS(r2, 0x5456, &(0x7f00000002c0)={0x1, 0x9, 0x9ae, 0x100000000, 0x15, 0x1, 0x4, 0x9, 0xe28, 0x800, 0x611, 0x5}) [ 561.635809][ T9522] input: syz1 as /devices/virtual/input/input348 [ 561.659162][ T9522] FAULT_INJECTION: forcing a failure. [ 561.659162][ T9522] name failslab, interval 1, probability 0, space 0, times 0 [ 561.680096][ T9522] CPU: 0 PID: 9522 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 561.687655][ T9522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.697701][ T9522] Call Trace: [ 561.700990][ T9522] dump_stack+0x172/0x1f0 [ 561.705329][ T9522] should_fail.cold+0xa/0x15 [ 561.705350][ T9522] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 561.705373][ T9522] ? ___might_sleep+0x163/0x280 [ 561.720575][ T9522] __should_failslab+0x121/0x190 [ 561.720597][ T9522] should_failslab+0x9/0x14 [ 561.730001][ T9522] __kmalloc_track_caller+0x2d8/0x740 [ 561.735369][ T9522] ? pointer+0x910/0x910 [ 561.739616][ T9522] ? debug_smp_processor_id+0x3c/0x280 [ 561.745082][ T9522] ? kasprintf+0xbb/0xf0 [ 561.749338][ T9522] kvasprintf+0xc8/0x170 [ 561.753578][ T9522] ? bust_spinlocks+0xe0/0xe0 [ 561.758253][ T9522] ? debug_check_no_obj_freed+0x200/0x464 [ 561.763966][ T9522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 561.770238][ T9522] kasprintf+0xbb/0xf0 [ 561.774307][ T9522] ? kvasprintf_const+0x190/0x190 [ 561.779335][ T9522] ? perf_trace_lock+0xeb/0x510 [ 561.784191][ T9522] ? __lockdep_free_key_range+0x120/0x120 [ 561.789916][ T9522] ? input_default_getkeycode+0x520/0x520 [ 561.795628][ T9522] input_devnode+0x4c/0x90 [ 561.800039][ T9522] device_get_devnode+0x175/0x2e0 [ 561.805057][ T9522] ? refcount_sub_and_test_checked+0x154/0x200 [ 561.811213][ T9522] devtmpfs_delete_node+0xaa/0x1a0 [ 561.816327][ T9522] ? devtmpfs_create_node+0x250/0x250 [ 561.821696][ T9522] ? __device_link_free_srcu+0x120/0x120 [ 561.827322][ T9522] ? refcount_dec_and_test_checked+0x1b/0x20 [ 561.833302][ T9522] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 561.839537][ T9522] ? kobject_put+0x84/0xe0 [ 561.843957][ T9522] ? __device_link_free_srcu+0x120/0x120 [ 561.849585][ T9522] ? klist_children_put+0x4a/0x60 [ 561.854608][ T9522] ? klist_put+0xdc/0x180 [ 561.858942][ T9522] device_del+0x8b4/0xc40 [ 561.863273][ T9522] ? __device_links_no_driver+0x250/0x250 [ 561.868990][ T9522] ? mark_held_locks+0xa4/0xf0 [ 561.873747][ T9522] ? _raw_spin_unlock_irq+0x28/0x90 [ 561.878943][ T9522] ? __input_unregister_device+0x153/0x4a0 [ 561.884744][ T9522] ? _raw_spin_unlock_irq+0x28/0x90 [ 561.889945][ T9522] cdev_device_del+0x1a/0x80 [ 561.894531][ T9522] evdev_disconnect+0x42/0xb0 [ 561.899207][ T9522] __input_unregister_device+0x200/0x4a0 [ 561.904843][ T9522] input_unregister_device+0xc5/0x110 [ 561.910231][ T9522] uinput_destroy_device+0x1f4/0x250 [ 561.915521][ T9522] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 561.921432][ T9522] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 561.927520][ T9522] ? __fget+0x381/0x550 [ 561.931682][ T9522] ? ksys_dup3+0x3e0/0x3e0 [ 561.936110][ T9522] ? fput_many+0x12c/0x1a0 [ 561.940524][ T9522] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 561.946652][ T9522] uinput_compat_ioctl+0x70/0x90 [ 561.951580][ T9522] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 561.957006][ T25] audit: type=1326 audit(1552228210.532:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 561.957474][ T9522] __ia32_compat_sys_ioctl+0x197/0x620 [ 561.984751][ T9522] do_fast_syscall_32+0x281/0xc98 [ 561.989758][ T9522] entry_SYSENTER_compat+0x70/0x7f [ 561.994850][ T9522] RIP: 0023:0xf7f34869 [ 561.998918][ T9522] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 562.018493][ T9522] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 562.026877][ T9522] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 14:30:10 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) 14:30:10 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x80045503, &(0x7f0000000040)) [ 562.034865][ T9522] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.042811][ T9522] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.050813][ T9522] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 562.058766][ T9522] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:30:10 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x3) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:11 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x1741, 0x400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f00000000c0)={0x1, 0x6, 0x0, r0}) ioctl$sock_ifreq(r2, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) prctl$PR_GET_NO_NEW_PRIVS(0x27) 14:30:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x2, &(0x7f0000000040)) 14:30:11 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0xb5, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x104) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) close(r1) [ 562.494037][ T25] audit: type=1326 audit(1552228211.342:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9533 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:11 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4000000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:11 executing program 5 (fault-call:4 fault-nth:1): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x541b, &(0x7f0000000040)) 14:30:11 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x88000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106, 0x1007}}, 0x20) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000140)={0x6, 0x2, 'client1\x00', 0x6, "7b47022e0282bdd7", "43f03179f9f2c9dd0231556965b7aa2b9fdf8f94c36bce4b3604b7bd954e02cb", 0x80000000}) close(r1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000200)={0x2, 0x9, 0x9f, 0xfffffffffffffffe, 0x80}) 14:30:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'syzkaller1\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:11 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x4) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5421, &(0x7f0000000040)) [ 562.632264][ T9780] input: syz1 as /devices/virtual/input/input349 [ 562.659903][ T25] audit: type=1326 audit(1552228211.512:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9779 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000140)) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0xffffffffffffffff) write$FUSE_DIRENT(r1, &(0x7f0000000000)={0x90, 0x0, 0x6, [{0x0, 0x1d, 0x1, 0x1, ':'}, {0x3, 0x2, 0x5, 0xfffffffffffff801, '\\,\\-C'}, {0x1, 0x10000, 0x0, 0x1}, {0x1, 0x101, 0xe, 0x9, '(user^security'}]}, 0x90) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0x1, 0x4) 14:30:11 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x1000000000806, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 562.729867][ T9780] FAULT_INJECTION: forcing a failure. [ 562.729867][ T9780] name failslab, interval 1, probability 0, space 0, times 0 [ 562.777050][ T9780] CPU: 1 PID: 9780 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 562.784621][ T9780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.784628][ T9780] Call Trace: [ 562.784655][ T9780] dump_stack+0x172/0x1f0 [ 562.784697][ T9780] should_fail.cold+0xa/0x15 [ 562.784719][ T9780] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 562.784744][ T9780] ? ___might_sleep+0x163/0x280 [ 562.784762][ T9780] __should_failslab+0x121/0x190 [ 562.784789][ T9780] should_failslab+0x9/0x14 [ 562.784807][ T9780] kmem_cache_alloc_trace+0x2d1/0x760 [ 562.784825][ T9780] ? mutex_trylock+0x1e0/0x1e0 [ 562.837171][ T9780] ? kasan_check_write+0x14/0x20 [ 562.842120][ T9780] kobject_uevent_env+0x2fb/0x1030 [ 562.842141][ T9780] ? wait_for_completion+0x440/0x440 [ 562.842162][ T9780] kobject_uevent+0x20/0x26 [ 562.857025][ T9780] device_del+0x758/0xc40 [ 562.861357][ T9780] ? __device_links_no_driver+0x250/0x250 [ 562.861377][ T9780] ? _raw_spin_unlock_irq+0x28/0x90 14:30:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0xfffffffffffffffd) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f0000000000)=0x9) close(r0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) [ 562.861391][ T9780] ? __input_unregister_device+0x153/0x4a0 [ 562.861408][ T9780] ? _raw_spin_unlock_irq+0x28/0x90 [ 562.883286][ T9780] cdev_device_del+0x1a/0x80 [ 562.887881][ T9780] evdev_disconnect+0x42/0xb0 [ 562.892564][ T9780] __input_unregister_device+0x200/0x4a0 [ 562.898201][ T9780] input_unregister_device+0xc5/0x110 [ 562.898220][ T9780] uinput_destroy_device+0x1f4/0x250 [ 562.898241][ T9780] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 562.898260][ T9780] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 562.898288][ T9780] ? __fget+0x381/0x550 14:30:11 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5450, &(0x7f0000000040)) 14:30:11 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) close(r0) ioctl$VIDIOC_ENUMSTD(r0, 0xc0405619, &(0x7f0000000000)={0x0, 0xffffff, "1041ef2642e25f0347b2f48fa1376f0610380b830c9a140e", {0x800000000000, 0xb8}, 0x700}) [ 562.920855][ T9780] ? ksys_dup3+0x3e0/0x3e0 [ 562.920873][ T9780] ? fput_many+0x12c/0x1a0 [ 562.920907][ T9780] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 562.933925][ T9780] uinput_compat_ioctl+0x70/0x90 [ 562.944970][ T9780] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 562.950872][ T9780] __ia32_compat_sys_ioctl+0x197/0x620 [ 562.956338][ T9780] do_fast_syscall_32+0x281/0xc98 [ 562.961371][ T9780] entry_SYSENTER_compat+0x70/0x7f [ 562.966498][ T9780] RIP: 0023:0xf7f34869 [ 562.970570][ T9780] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 562.990179][ T9780] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 562.990195][ T9780] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 562.990204][ T9780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 562.990213][ T9780] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 562.990221][ T9780] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 562.990230][ T9780] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 563.044322][ C1] net_ratelimit: 20 callbacks suppressed [ 563.044329][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.055782][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 563.284320][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 563.290102][ C0] protocol 88fb is buggy, dev hsr_slave_1 14:30:12 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4800000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:12 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x5) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5452, &(0x7f0000000040)) 14:30:12 executing program 5 (fault-call:4 fault-nth:2): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r2 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={r3, 0xfffffffffffffffc, 0x1}, &(0x7f0000000200)=0x8) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000240)={'gre0\x00', @ifru_ivalue=0xa41e}) prctl$PR_GET_TSC(0x19, &(0x7f0000000280)) socket$bt_hidp(0x1f, 0x3, 0x6) pkey_alloc(0x0, 0x1) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000000)) 14:30:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) dup(r0) close(r0) [ 563.444304][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 563.450096][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:12 executing program 1: rseq(&(0x7f00000000c0), 0x20, 0x1, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$lock(r0, 0x0, &(0x7f0000000080)={0x3, 0x4, 0x7, 0x10000, r1}) 14:30:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5460, &(0x7f0000000040)) [ 563.555118][ T9935] input: syz1 as /devices/virtual/input/input350 [ 563.613900][ T9935] FAULT_INJECTION: forcing a failure. [ 563.613900][ T9935] name failslab, interval 1, probability 0, space 0, times 0 14:30:12 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r2, 0x8818564c, &(0x7f0000000200)) [ 563.660883][ T9935] CPU: 1 PID: 9935 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 563.668468][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 563.678520][ T9935] Call Trace: [ 563.681818][ T9935] dump_stack+0x172/0x1f0 [ 563.686160][ T9935] should_fail.cold+0xa/0x15 [ 563.690757][ T9935] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 563.696579][ T9935] ? ___might_sleep+0x163/0x280 [ 563.701437][ T9935] __should_failslab+0x121/0x190 [ 563.706399][ T9935] should_failslab+0x9/0x14 [ 563.706417][ T9935] __kmalloc+0x2dc/0x740 [ 563.706434][ T9935] ? kobject_uevent_env+0x2fb/0x1030 [ 563.706457][ T9935] ? rcu_read_lock_sched_held+0x110/0x130 [ 563.706475][ T9935] ? kobject_get_path+0xc4/0x1b0 [ 563.706496][ T9935] kobject_get_path+0xc4/0x1b0 [ 563.720477][ T9935] kobject_uevent_env+0x31f/0x1030 [ 563.720502][ T9935] ? wait_for_completion+0x440/0x440 [ 563.746227][ T9935] kobject_uevent+0x20/0x26 [ 563.750728][ T9935] device_del+0x758/0xc40 [ 563.755065][ T9935] ? __device_links_no_driver+0x250/0x250 [ 563.760791][ T9935] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.765998][ T9935] ? __input_unregister_device+0x153/0x4a0 [ 563.771807][ T9935] ? _raw_spin_unlock_irq+0x28/0x90 [ 563.777014][ T9935] cdev_device_del+0x1a/0x80 [ 563.781612][ T9935] evdev_disconnect+0x42/0xb0 [ 563.786299][ T9935] __input_unregister_device+0x200/0x4a0 [ 563.791939][ T9935] input_unregister_device+0xc5/0x110 [ 563.797315][ T9935] uinput_destroy_device+0x1f4/0x250 [ 563.802609][ T9935] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 563.802629][ T9935] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 563.802655][ T9935] ? __fget+0x381/0x550 [ 563.814584][ T9935] ? ksys_dup3+0x3e0/0x3e0 [ 563.814601][ T9935] ? fput_many+0x12c/0x1a0 [ 563.814627][ T9935] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 563.814640][ T9935] uinput_compat_ioctl+0x70/0x90 [ 563.814657][ T9935] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 563.814676][ T9935] __ia32_compat_sys_ioctl+0x197/0x620 [ 563.814706][ T9935] do_fast_syscall_32+0x281/0xc98 [ 563.823239][ T9935] entry_SYSENTER_compat+0x70/0x7f 14:30:12 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x550b, &(0x7f0000000040)) 14:30:12 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x8, 0x1, 0x80000000, 0x9, 0x0, 0x4ee9, 0x10003, 0x2, 0xd2, 0x51a, 0x9, 0xef4, 0x0, 0xf08, 0x7bcf, 0x1ff, 0x5, 0xffffffffe14e8dba, 0x4, 0x2, 0x7ff, 0x80, 0x4, 0x1, 0x5, 0x3, 0x8, 0x0, 0xfff, 0xffffffffffffb740, 0x2, 0x9, 0x1ff, 0x100000000, 0x2000000000000, 0x8734, 0x0, 0x4, 0x1, @perf_config_ext={0x1000, 0x80000000000000}, 0x200, 0x1a0efa5b, 0x0, 0x6, 0x5, 0x1000, 0x800}, 0x0, 0x6, 0xffffffffffffffff, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x80800, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f00000001c0)={0x3, 0x3}) [ 563.823253][ T9935] RIP: 0023:0xf7f34869 [ 563.823267][ T9935] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 563.823282][ T9935] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 563.844595][ T9935] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 563.844604][ T9935] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 14:30:12 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x6) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 563.844613][ T9935] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 563.844622][ T9935] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 563.844630][ T9935] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 564.084295][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 564.090256][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 564.245102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 564.251979][ C1] protocol 88fb is buggy, dev hsr_slave_1 14:30:13 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x4c00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f0000000040)) close(r0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x7, 0x4) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x14, 0x4, [0x8, 0x0, 0x4ee, 0x4]}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x8, 0x6, 0xb479}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 14:30:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x5514, &(0x7f0000000040)) 14:30:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:13 executing program 5 (fault-call:4 fault-nth:3): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:13 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x7) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 564.386659][ T25] kauditd_printk_skb: 2 callbacks suppressed [ 564.386683][ T25] audit: type=1326 audit(1552228213.242:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=9939 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 564.485313][T10183] input: syz1 as /devices/virtual/input/input351 14:30:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x551f, &(0x7f0000000040)) [ 564.531812][ T25] audit: type=1326 audit(1552228213.382:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10191 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xa9, "45ee83124d2efb825decce451613daf743f1bdf9b32d03684e85f9d719e6bd69b1cf15c29f6885c6ce194e88d40f9c050f5ad90b301cdbd2eb7e001dbccc318db548efa0b1a7d4bdbcfb00bf0390af2a43858b09bc9b1222a81affe4b13a0072f3c37bde4a099056431157a8b6814f17bd6c6abc219d3d645a8b5b89bdd8ba5a1d430904db5475f7a7385d3204ab7bb824af4742a5e413e9c23ddd566436847e9ddb52b85bc16cfa74"}, &(0x7f00000000c0)=0xb1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r1, 0x9d6}, &(0x7f0000000180)=0x8) 14:30:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm-monitor\x00', 0x100000000, 0x0) getsockopt$inet6_dccp_int(r1, 0x21, 0xb, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20005, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 564.609992][T10229] FAULT_INJECTION: forcing a failure. [ 564.609992][T10229] name failslab, interval 1, probability 0, space 0, times 0 [ 564.719399][T10229] CPU: 1 PID: 10229 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 564.727072][T10229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 564.737125][T10229] Call Trace: [ 564.740421][T10229] dump_stack+0x172/0x1f0 [ 564.744767][T10229] should_fail.cold+0xa/0x15 [ 564.749378][T10229] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 564.755192][T10229] ? ___might_sleep+0x163/0x280 [ 564.760046][T10229] __should_failslab+0x121/0x190 [ 564.764984][T10229] should_failslab+0x9/0x14 14:30:13 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550c, &(0x7f0000000040)) [ 564.769490][T10229] __kmalloc+0x2dc/0x740 [ 564.773738][T10229] ? kobject_uevent_env+0x2fb/0x1030 [ 564.779021][T10229] ? rcu_read_lock_sched_held+0x110/0x130 [ 564.784733][T10229] ? kobject_get_path+0xc4/0x1b0 [ 564.789677][T10229] kobject_get_path+0xc4/0x1b0 [ 564.794455][T10229] kobject_uevent_env+0x31f/0x1030 [ 564.799563][T10229] ? wait_for_completion+0x440/0x440 [ 564.804854][T10229] kobject_uevent+0x20/0x26 [ 564.809370][T10229] device_del+0x758/0xc40 [ 564.813731][T10229] ? __device_links_no_driver+0x250/0x250 [ 564.819446][T10229] ? _raw_spin_unlock_irq+0x28/0x90 [ 564.824831][T10229] ? __input_unregister_device+0x153/0x4a0 [ 564.830643][T10229] ? _raw_spin_unlock_irq+0x28/0x90 [ 564.835859][T10229] cdev_device_del+0x1a/0x80 [ 564.840442][T10229] evdev_disconnect+0x42/0xb0 [ 564.845118][T10229] __input_unregister_device+0x200/0x4a0 [ 564.850752][T10229] input_unregister_device+0xc5/0x110 [ 564.856122][T10229] uinput_destroy_device+0x1f4/0x250 [ 564.861406][T10229] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 564.867296][T10229] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 564.873387][T10229] ? __fget+0x381/0x550 [ 564.877544][T10229] ? ksys_dup3+0x3e0/0x3e0 [ 564.881955][T10229] ? fput_many+0x12c/0x1a0 [ 564.886389][T10229] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 564.892539][T10229] uinput_compat_ioctl+0x70/0x90 [ 564.897474][T10229] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 564.903370][T10229] __ia32_compat_sys_ioctl+0x197/0x620 [ 564.908838][T10229] do_fast_syscall_32+0x281/0xc98 [ 564.913865][T10229] entry_SYSENTER_compat+0x70/0x7f [ 564.918973][T10229] RIP: 0023:0xf7f34869 [ 564.923033][T10229] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 564.942627][T10229] RSP: 002b:00000000f5cee0cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 564.951024][T10229] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 564.958979][T10229] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 14:30:13 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000000)={0x6, 0x1ff}) ioctl$TIOCNOTTY(r0, 0x5422) close(r0) 14:30:13 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x48) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 564.966932][T10229] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 564.974886][T10229] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 564.982831][T10229] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 565.328912][ T25] audit: type=1326 audit(1552228214.182:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10191 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:14 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6800000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000000)) 14:30:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x28000, 0x0) pipe(&(0x7f0000000080)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:14 executing program 5 (fault-call:4 fault-nth:4): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:14 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x4c) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 565.436729][T10432] input: syz1 as /devices/virtual/input/input352 [ 565.456492][ T25] audit: type=1326 audit(1552228214.312:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10436 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:14 executing program 1: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x9}, 0x8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x10000, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000100)=0x9, 0x4) r3 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0x201, 0x200) close(r3) r4 = add_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="7472e06df98916997e5a24305aa73fd1c443bc54295e34ef801c8ac33cdb4eba733f8afde1014405e76de008d8edd7aa972725a778d6e21cdae072a45a7739973056239d034d85d9b65e6037f97c6c08a9a75e3f377dd8f291b4bcae45e7264af795a6d604d613ead6db18d603565cac79412e763039362eee239742d998", 0x7e, 0xfffffffffffffff8) keyctl$invalidate(0x15, r4) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40086410, &(0x7f0000000040)={0xe, &(0x7f0000000000)="04eeb87494f111fb68530a78f77f"}) [ 565.506368][T10432] FAULT_INJECTION: forcing a failure. [ 565.506368][T10432] name failslab, interval 1, probability 0, space 0, times 0 14:30:14 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000000c0)={0x1d}, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 565.577048][T10432] CPU: 1 PID: 10432 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 565.584755][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.594814][T10432] Call Trace: [ 565.598115][T10432] dump_stack+0x172/0x1f0 [ 565.602457][T10432] should_fail.cold+0xa/0x15 [ 565.607060][T10432] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 565.613009][T10432] ? ___might_sleep+0x163/0x280 [ 565.617876][T10432] __should_failslab+0x121/0x190 [ 565.622813][T10432] should_failslab+0x9/0x14 14:30:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x88004002}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x60, r1, 0x14, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffff}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x403adfd91a5f0738}, 0x10) close(r0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000000)={0x8000, 0xfffffffffffff868}) [ 565.622832][T10432] kmem_cache_alloc_node+0x264/0x710 [ 565.622851][T10432] ? find_held_lock+0x35/0x130 [ 565.622875][T10432] __alloc_skb+0xd5/0x5e0 [ 565.622892][T10432] ? skb_trim+0x190/0x190 [ 565.632647][T10432] ? kasan_check_read+0x11/0x20 [ 565.632670][T10432] alloc_uevent_skb+0x83/0x1e2 [ 565.632689][T10432] kobject_uevent_env+0xa63/0x1030 [ 565.632705][T10432] ? wait_for_completion+0x440/0x440 [ 565.632726][T10432] kobject_uevent+0x20/0x26 [ 565.670510][T10432] device_del+0x758/0xc40 14:30:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'U-', 0x800000000000000}, 0x28, 0x3) close(r0) [ 565.674853][T10432] ? __device_links_no_driver+0x250/0x250 [ 565.680576][T10432] ? _raw_spin_unlock_irq+0x28/0x90 [ 565.685775][T10432] ? __input_unregister_device+0x153/0x4a0 [ 565.691591][T10432] ? _raw_spin_unlock_irq+0x28/0x90 [ 565.696798][T10432] cdev_device_del+0x1a/0x80 [ 565.701393][T10432] evdev_disconnect+0x42/0xb0 [ 565.706104][T10432] __input_unregister_device+0x200/0x4a0 [ 565.711740][T10432] input_unregister_device+0xc5/0x110 [ 565.717112][T10432] uinput_destroy_device+0x1f4/0x250 [ 565.722408][T10432] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 565.728307][T10432] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 565.734385][T10432] ? __fget+0x381/0x550 [ 565.738573][T10432] ? ksys_dup3+0x3e0/0x3e0 [ 565.742992][T10432] ? fput_many+0x12c/0x1a0 [ 565.747423][T10432] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 565.753580][T10432] uinput_compat_ioctl+0x70/0x90 [ 565.758519][T10432] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 565.764424][T10432] __ia32_compat_sys_ioctl+0x197/0x620 [ 565.769893][T10432] do_fast_syscall_32+0x281/0xc98 14:30:14 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004550d, &(0x7f0000000040)) 14:30:14 executing program 1: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x4) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x2710}, {r1, r2/1000+30000}}, 0x100) r3 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r3) [ 565.774928][T10432] entry_SYSENTER_compat+0x70/0x7f [ 565.780039][T10432] RIP: 0023:0xf7f34869 [ 565.784110][T10432] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 565.803713][T10432] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 565.812128][T10432] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 565.820097][T10432] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 565.828067][T10432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 565.836057][T10432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 565.844028][T10432] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:30:14 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r0) socket$xdp(0x2c, 0x3, 0x0) [ 566.255277][ T25] audit: type=1326 audit(1552228215.112:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10436 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:15 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0xa002}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) recvfrom$inet6(r2, &(0x7f0000000200)=""/228, 0xe4, 0x100, 0x0, 0x0) 14:30:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4004551e, &(0x7f0000000040)) 14:30:15 executing program 5 (fault-call:4 fault-nth:5): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:15 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x6c00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$VIDIOC_S_JPEGCOMP(r0, 0x408c563e, &(0x7f0000000000)={0x7ff, 0xa, 0x2e, "5f3cc46289b2bdcdca9772b638f14d99f41ef9aaed7096ef53440dced1c08e42b1b77161e5c71f053be497652dbd682fb4795191c43fdbaeeb94bdcb", 0x2f, "3ee5a776698b200232f1f1423f744d6a528777fcc5df11cbe94a4f3195c3cf0bdc30b0f5607ed81c14120eaa31d6beaf552395d850fb9a5ea4e82a34", 0x30}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000140)={0xc, @output={0x1000, 0x0, {0x5, 0x101}, 0x10001, 0x6}}) close(r0) 14:30:15 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x60) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x40049409, &(0x7f0000000040)) [ 566.351673][T10588] input: syz1 as /devices/virtual/input/input353 14:30:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24010000", @ANYRES16=r1, @ANYBLOB="030328bd7000fcdbdf25020000000400050004000500080001004e240000"], 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x4004850) lseek(r0, 0x0, 0x3) close(r0) [ 566.394776][T10588] FAULT_INJECTION: forcing a failure. [ 566.394776][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 566.423902][T10588] CPU: 1 PID: 10588 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 566.431564][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.441614][T10588] Call Trace: [ 566.444910][T10588] dump_stack+0x172/0x1f0 [ 566.449257][T10588] should_fail.cold+0xa/0x15 [ 566.453855][T10588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 566.453879][T10588] ? ___might_sleep+0x163/0x280 [ 566.453900][T10588] __should_failslab+0x121/0x190 [ 566.469451][T10588] should_failslab+0x9/0x14 [ 566.473974][T10588] kmem_cache_alloc_node_trace+0x270/0x720 [ 566.479796][T10588] __kmalloc_node_track_caller+0x3d/0x70 [ 566.485449][T10588] __kmalloc_reserve.isra.0+0x40/0xf0 [ 566.490824][T10588] __alloc_skb+0x10b/0x5e0 14:30:15 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550c, &(0x7f0000000040)) [ 566.495247][T10588] ? skb_trim+0x190/0x190 [ 566.499586][T10588] ? kasan_check_read+0x11/0x20 [ 566.504449][T10588] alloc_uevent_skb+0x83/0x1e2 [ 566.509233][T10588] kobject_uevent_env+0xa63/0x1030 [ 566.514352][T10588] ? wait_for_completion+0x440/0x440 [ 566.519643][T10588] kobject_uevent+0x20/0x26 [ 566.524149][T10588] device_del+0x758/0xc40 [ 566.528494][T10588] ? __device_links_no_driver+0x250/0x250 [ 566.534216][T10588] ? _raw_spin_unlock_irq+0x28/0x90 [ 566.539433][T10588] ? __input_unregister_device+0x153/0x4a0 [ 566.545254][T10588] ? _raw_spin_unlock_irq+0x28/0x90 [ 566.550472][T10588] cdev_device_del+0x1a/0x80 [ 566.555066][T10588] evdev_disconnect+0x42/0xb0 [ 566.559759][T10588] __input_unregister_device+0x200/0x4a0 [ 566.565399][T10588] input_unregister_device+0xc5/0x110 [ 566.570776][T10588] uinput_destroy_device+0x1f4/0x250 [ 566.576069][T10588] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 566.581966][T10588] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 566.588044][T10588] ? __fget+0x381/0x550 [ 566.592198][T10588] ? ksys_dup3+0x3e0/0x3e0 [ 566.596612][T10588] ? fput_many+0x12c/0x1a0 [ 566.601033][T10588] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 566.607183][T10588] uinput_compat_ioctl+0x70/0x90 [ 566.612141][T10588] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 566.618040][T10588] __ia32_compat_sys_ioctl+0x197/0x620 [ 566.623499][T10588] do_fast_syscall_32+0x281/0xc98 [ 566.628521][T10588] entry_SYSENTER_compat+0x70/0x7f [ 566.633620][T10588] RIP: 0023:0xf7f34869 [ 566.637679][T10588] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 566.657278][T10588] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 566.665685][T10588] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 566.673646][T10588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 566.681595][T10588] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 14:30:15 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x68) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14:30:15 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x201, 0x2) close(r0) [ 566.684325][ T25] audit: type=1326 audit(1552228215.502:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 566.689547][T10588] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 566.689557][T10588] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:30:15 executing program 5 (fault-call:4 fault-nth:6): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) [ 566.896367][T10829] input: syz1 as /devices/virtual/input/input354 [ 566.913297][T10829] FAULT_INJECTION: forcing a failure. [ 566.913297][T10829] name failslab, interval 1, probability 0, space 0, times 0 [ 566.928286][T10829] CPU: 0 PID: 10829 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 566.935931][T10829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 566.945981][T10829] Call Trace: [ 566.949279][T10829] dump_stack+0x172/0x1f0 [ 566.953608][T10829] should_fail.cold+0xa/0x15 [ 566.958182][T10829] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 566.963977][T10829] ? ___might_sleep+0x163/0x280 [ 566.968809][T10829] __should_failslab+0x121/0x190 [ 566.973727][T10829] should_failslab+0x9/0x14 [ 566.978206][T10829] kmem_cache_alloc+0x2b2/0x6f0 [ 566.983033][T10829] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 566.988813][T10829] ? lock_downgrade+0x880/0x880 [ 566.993644][T10829] skb_clone+0x150/0x3b0 [ 566.997882][T10829] netlink_broadcast_filtered+0x870/0xb20 [ 567.003590][T10829] netlink_broadcast+0x3a/0x50 [ 567.008337][T10829] kobject_uevent_env+0xa94/0x1030 [ 567.013443][T10829] ? wait_for_completion+0x440/0x440 [ 567.018720][T10829] kobject_uevent+0x20/0x26 [ 567.023196][T10829] device_del+0x758/0xc40 [ 567.027506][T10829] ? __device_links_no_driver+0x250/0x250 [ 567.033201][T10829] ? _raw_spin_unlock_irq+0x28/0x90 [ 567.038377][T10829] ? __input_unregister_device+0x153/0x4a0 [ 567.044287][T10829] ? _raw_spin_unlock_irq+0x28/0x90 [ 567.049589][T10829] cdev_device_del+0x1a/0x80 [ 567.054154][T10829] evdev_disconnect+0x42/0xb0 [ 567.058814][T10829] __input_unregister_device+0x200/0x4a0 [ 567.064430][T10829] input_unregister_device+0xc5/0x110 [ 567.069779][T10829] uinput_destroy_device+0x1f4/0x250 [ 567.075047][T10829] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 567.081003][T10829] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 567.087048][T10829] ? __fget+0x381/0x550 [ 567.091186][T10829] ? ksys_dup3+0x3e0/0x3e0 [ 567.095592][T10829] ? fput_many+0x12c/0x1a0 [ 567.099988][T10829] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 567.106116][T10829] uinput_compat_ioctl+0x70/0x90 [ 567.111029][T10829] ? __sanitizer_cov_trace_switch+0x49/0x80 [ 567.116915][T10829] __ia32_compat_sys_ioctl+0x197/0x620 [ 567.122364][T10829] do_fast_syscall_32+0x281/0xc98 [ 567.127371][T10829] entry_SYSENTER_compat+0x70/0x7f [ 567.132466][T10829] RIP: 0023:0xf7f34869 [ 567.136522][T10829] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 567.156114][T10829] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 567.164517][T10829] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 567.172462][T10829] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.180414][T10829] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.188358][T10829] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.196301][T10829] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 14:30:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) r3 = pkey_alloc(0x0, 0x0) pkey_free(r3) r4 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x101, 0x101000) ioctl$UI_SET_FFBIT(r4, 0x4004556b, 0x64) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x302, 0x0) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f00000000c0)=0x2) ftruncate(r0, 0x6) ioctl$DRM_IOCTL_ADD_MAP(r5, 0xc0186415, &(0x7f0000000180)={0x0, 0x2, 0x5, 0x80, &(0x7f0000ffd000/0x3000)=nil, 0x6}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x400}) 14:30:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x3, 0x0) close(r0) ioctl$TCSBRK(r0, 0x5409, 0x2) 14:30:16 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x6c) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 567.419983][ T25] audit: type=1326 audit(1552228216.272:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:16 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7400000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) 14:30:16 executing program 5 (fault-call:4 fault-nth:7): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x4, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) 14:30:16 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video37\x00', 0x2, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) sendto$inet6(r1, &(0x7f0000000100)="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", 0x1000, 0x8000, &(0x7f0000001100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x7, 0x4) close(r0) 14:30:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x4008550d, &(0x7f0000000040)) 14:30:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0xfffffffffffffffd, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r0, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) [ 567.581451][T10953] input: syz1 as /devices/virtual/input/input355 14:30:16 executing program 0: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x800000002009) ioctl$FS_IOC_FSGETXATTR(r0, 0x40085511, &(0x7f0000000040)) [ 567.636101][ T25] audit: type=1326 audit(1552228216.482:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10957 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 14:30:16 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fsync(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'eql\x00', 0x809}) ioctl$sock_ifreq(r1, 0x400000000008923, &(0x7f0000000000)={'eql\x00\x00\x00\xa9[\x00', @ifru_names='eql\x00\x00\x00\xfd\xfd\xff\xff\x00'}) 14:30:16 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x4, 0x4) r1 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) close(r1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000080)) [ 567.676608][T10953] FAULT_INJECTION: forcing a failure. [ 567.676608][T10953] name failslab, interval 1, probability 0, space 0, times 0 [ 567.740303][T10953] CPU: 0 PID: 10953 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 567.747976][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 567.758031][T10953] Call Trace: [ 567.761329][T10953] dump_stack+0x172/0x1f0 [ 567.765687][T10953] should_fail.cold+0xa/0x15 [ 567.770285][T10953] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 567.776105][T10953] ? ___might_sleep+0x163/0x280 [ 567.780968][T10953] __should_failslab+0x121/0x190 [ 567.785930][T10953] should_failslab+0x9/0x14 [ 567.790437][T10953] kmem_cache_alloc_trace+0x2d1/0x760 [ 567.790453][T10953] ? kasan_check_write+0x14/0x20 [ 567.790477][T10953] kobject_uevent_env+0x2fb/0x1030 [ 567.805846][T10953] ? wait_for_completion+0x440/0x440 [ 567.811134][T10953] kobject_uevent+0x20/0x26 [ 567.811152][T10953] device_del+0x758/0xc40 [ 567.811171][T10953] ? __device_links_no_driver+0x250/0x250 [ 567.825675][T10953] ? trace_hardirqs_on+0x67/0x230 [ 567.830712][T10953] __input_unregister_device+0x3a4/0x4a0 [ 567.830732][T10953] input_unregister_device+0xc5/0x110 [ 567.830747][T10953] uinput_destroy_device+0x1f4/0x250 [ 567.830784][T10953] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 567.852889][T10953] ? uinput_request_submit.part.0+0x2d0/0x2d0 [ 567.852911][T10953] ? __fget+0x381/0x550 [ 567.852946][T10953] ? ksys_dup3+0x3e0/0x3e0 [ 567.867522][T10953] ? fput_many+0x12c/0x1a0 [ 567.871957][T10953] ? uinput_ioctl_handler.isra.0+0x1cc0/0x1cc0 [ 567.878104][T10953] uinput_compat_ioctl+0x70/0x90 [ 567.878123][T10953] ? __sanitizer_cov_trace_switch+0x49/0x80 14:30:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x100, 0x2000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x40, 0x1, 0x9]}, 0xa) close(r0) 14:30:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @mcast1, 0x400000000}, 0x1c) close(r0) 14:30:16 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x201, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close(r0) [ 567.878144][T10953] __ia32_compat_sys_ioctl+0x197/0x620 [ 567.878168][T10953] do_fast_syscall_32+0x281/0xc98 [ 567.878189][T10953] entry_SYSENTER_compat+0x70/0x7f [ 567.889085][T10953] RIP: 0023:0xf7f34869 [ 567.889101][T10953] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 567.889109][T10953] RSP: 002b:00000000f5d300cc EFLAGS: 00000296 ORIG_RAX: 0000000000000036 14:30:16 executing program 3: pipe(&(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x40, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe49}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000200), 0xffffffffffffffff) r1 = inotify_init1(0x800) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) process_vm_readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1, &(0x7f0000003600)=[{&(0x7f0000003580)=""/121, 0x79}], 0x1, 0x74) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000240)={0x9, {0x8, 0x1}}) ioctl$UI_SET_PHYS(0xffffffffffffffff, 0x4008556c, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000140)=""/40, &(0x7f0000001000)=0xfffffffffffffd41) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r2, 0xffffffffffffffff, 0x0, 0xfffffea0, &(0x7f0000000300)='memory.swap.current\x00', 0xffffffffffffffff}, 0x30) pipe2(&(0x7f00000002c0), 0x40000000084000) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000100)={0x11, 0x0, 0x2}) socket$inet_udp(0x2, 0x2, 0x0) socket(0x200000800000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) [ 567.889123][T10953] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000005502 [ 567.889131][T10953] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 567.889139][T10953] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 567.889147][T10953] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 567.889159][T10953] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.127619][T10948] ================================================================== [ 568.136080][T10948] BUG: KASAN: use-after-free in string+0x208/0x230 [ 568.142573][T10948] Read of size 1 at addr ffff888099733880 by task syz-executor.5/10948 [ 568.150792][T10948] [ 568.153117][T10948] CPU: 1 PID: 10948 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 568.160738][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.172870][T10948] Call Trace: [ 568.176167][T10948] dump_stack+0x172/0x1f0 [ 568.180499][T10948] ? string+0x208/0x230 [ 568.184675][T10948] print_address_description.cold+0x7c/0x20d [ 568.190648][T10948] ? string+0x208/0x230 [ 568.194798][T10948] ? string+0x208/0x230 [ 568.198950][T10948] kasan_report.cold+0x1b/0x40 [ 568.203709][T10948] ? string+0x208/0x230 [ 568.207864][T10948] __asan_report_load1_noabort+0x14/0x20 [ 568.213485][T10948] string+0x208/0x230 [ 568.217466][T10948] ? widen_string+0x2e0/0x2e0 [ 568.222583][T10948] ? console_unlock+0x6a7/0xeb0 [ 568.227433][T10948] ? find_held_lock+0x35/0x130 [ 568.232199][T10948] vsnprintf+0xbfc/0x1af0 [ 568.236535][T10948] ? pointer+0x910/0x910 [ 568.240775][T10948] ? string+0x1cc/0x230 [ 568.244319][ C0] net_ratelimit: 20 callbacks suppressed [ 568.244353][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 568.244925][T10948] add_uevent_var+0x14d/0x310 [ 568.250624][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 568.256233][T10948] ? cleanup_uevent_env+0x50/0x50 [ 568.256247][T10948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 568.256273][T10948] ? input_dev_uevent+0x110/0x890 [ 568.256291][T10948] input_dev_uevent+0x163/0x890 [ 568.271666][T10948] ? input_add_uevent_bm_var+0x150/0x150 [ 568.271688][T10948] dev_uevent+0x312/0x580 [ 568.271704][T10948] ? device_get_devnode+0x2e0/0x2e0 [ 568.271716][T10948] ? kobject_uevent_env+0x2fb/0x1030 [ 568.271736][T10948] ? rcu_read_lock_sched_held+0x110/0x130 [ 568.282959][T10948] ? kobject_uevent_env+0x37d/0x1030 [ 568.282975][T10948] ? device_get_devnode+0x2e0/0x2e0 [ 568.282990][T10948] kobject_uevent_env+0x487/0x1030 [ 568.283008][T10948] ? release_nodes+0x548/0x9c0 [ 568.334192][T10948] kobject_uevent+0x20/0x26 [ 568.338696][T10948] kobject_put.cold+0x177/0x2ec [ 568.343544][T10948] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 568.349521][T10948] put_device+0x20/0x30 [ 568.353675][T10948] evdev_free+0x51/0x70 [ 568.357828][T10948] device_release+0x7d/0x210 [ 568.362424][T10948] kobject_put.cold+0x28f/0x2ec [ 568.367269][T10948] cdev_default_release+0x41/0x50 [ 568.372285][T10948] kobject_put.cold+0x28f/0x2ec [ 568.377142][T10948] cdev_put.part.0+0x39/0x50 [ 568.381730][T10948] cdev_put+0x20/0x30 [ 568.385713][T10948] __fput+0x6df/0x8d0 [ 568.389698][T10948] ____fput+0x16/0x20 [ 568.393676][T10948] task_work_run+0x14a/0x1c0 [ 568.398273][T10948] exit_to_usermode_loop+0x273/0x2c0 [ 568.403566][T10948] do_fast_syscall_32+0xa9d/0xc98 [ 568.408588][T10948] entry_SYSENTER_compat+0x70/0x7f [ 568.413688][T10948] RIP: 0023:0xf7f34869 [ 568.417755][T10948] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 568.437352][T10948] RSP: 002b:000000000845fd7c EFLAGS: 00000216 ORIG_RAX: 0000000000000006 [ 568.445778][T10948] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 568.453738][T10948] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000000 [ 568.461699][T10948] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 568.469663][T10948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 568.477628][T10948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 568.485610][T10948] [ 568.487935][T10948] Allocated by task 10953: [ 568.492349][T10948] save_stack+0x45/0xd0 [ 568.496499][T10948] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 568.502124][T10948] kasan_kmalloc+0x9/0x10 [ 568.506444][T10948] __kmalloc_track_caller+0x158/0x740 [ 568.511804][T10948] kstrndup+0x5f/0xf0 [ 568.515785][T10948] uinput_dev_setup+0x1d4/0x310 [ 568.520631][T10948] uinput_ioctl_handler.isra.0+0x12b8/0x1cc0 [ 568.526603][T10948] uinput_compat_ioctl+0x70/0x90 [ 568.531538][T10948] __ia32_compat_sys_ioctl+0x197/0x620 [ 568.536996][T10948] do_fast_syscall_32+0x281/0xc98 [ 568.542025][T10948] entry_SYSENTER_compat+0x70/0x7f [ 568.547131][T10948] [ 568.549449][T10948] Freed by task 10953: [ 568.553514][T10948] save_stack+0x45/0xd0 [ 568.557664][T10948] __kasan_slab_free+0x102/0x150 [ 568.562601][T10948] kasan_slab_free+0xe/0x10 [ 568.567221][T10948] kfree+0xcf/0x230 [ 568.571023][T10948] uinput_destroy_device+0xf8/0x250 14:30:17 executing program 2: getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f0000000200)=[{0x0, 0x0, 0x7a00000000000000}, {0x3fffc000000000, 0x0, 0xfffffffffffffffe, 0x29}, {}, {0x0, 0x6, 0x1, 0x3}]}) memfd_create(&(0x7f0000000140)='cgroup2\x00u\xb56\xe0\x8f\x97\xe1\fB\x89\xe2\x96F/<\x8f\xc6\xa4\x18\"\x80\'\xbfMu\x93\x1e#\x8bA\xcfU\xaf\xcf}\xd2(Eg\xedZs\x8f3\x82\xaa\xe64\x9e\x103j\xdfhd\x99\xeb\x1d\x93y\xeb(', 0x1) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x81806) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) socket$inet6(0xa, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x39044, 0x2000005) [ 568.574337][ T25] audit: type=1326 audit(1552228217.322:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=10957 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 568.576214][T10948] uinput_ioctl_handler.isra.0+0x886/0x1cc0 [ 568.576227][T10948] uinput_compat_ioctl+0x70/0x90 [ 568.576241][T10948] __ia32_compat_sys_ioctl+0x197/0x620 [ 568.576272][T10948] do_fast_syscall_32+0x281/0xc98 [ 568.619437][T10948] entry_SYSENTER_compat+0x70/0x7f [ 568.624530][T10948] [ 568.626852][T10948] The buggy address belongs to the object at ffff888099733880 [ 568.626852][T10948] which belongs to the cache kmalloc-32 of size 32 [ 568.640738][T10948] The buggy address is located 0 bytes inside of [ 568.640738][T10948] 32-byte region [ffff888099733880, ffff8880997338a0) [ 568.640744][T10948] The buggy address belongs to the page: [ 568.640756][T10948] page:ffffea000265ccc0 count:1 mapcount:0 mapping:ffff88812c3f01c0 index:0xffff888099733fc1 [ 568.669493][T10948] flags: 0x1fffc0000000200(slab) [ 568.669750][ T25] audit: type=1326 audit(1552228217.522:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11091 comm="syz-executor.2" exe="/root/syz-executor.2" sig=9 arch=40000003 syscall=265 compat=1 ip=0xf7fc6869 code=0x0 [ 568.674424][T10948] raw: 01fffc0000000200 ffffea00023c6e08 ffffea0002404388 ffff88812c3f01c0 [ 568.674440][T10948] raw: ffff888099733fc1 ffff888099733000 000000010000002a 0000000000000000 [ 568.674446][T10948] page dumped because: kasan: bad access detected [ 568.674450][T10948] [ 568.674454][T10948] Memory state around the buggy address: [ 568.674465][T10948] ffff888099733780: fb fb fb fb fc fc fc fc 05 fc fc fc fc fc fc fc [ 568.674475][T10948] ffff888099733800: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 568.674490][T10948] >ffff888099733880: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 568.704967][T10948] ^ [ 568.704979][T10948] ffff888099733900: fb fb fb fb fc fc fc fc 05 fc fc fc fc fc fc fc [ 568.704989][T10948] ffff888099733980: fb fb fb fb fc fc fc fc fb fb fb fb fc fc fc fc [ 568.704994][T10948] ================================================================== [ 568.704999][T10948] Disabling lock debugging due to kernel taint [ 568.705203][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 568.792305][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 568.798120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 568.803862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 568.812213][T10948] Kernel panic - not syncing: panic_on_warn set ... [ 568.818850][T10948] CPU: 1 PID: 10948 Comm: syz-executor.5 Tainted: G B 5.0.0+ #15 [ 568.827854][T10948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 568.832089][ T3874] kobject: 'loop3' (0000000024c31064): kobject_uevent_env [ 568.837897][T10948] Call Trace: [ 568.837919][T10948] dump_stack+0x172/0x1f0 [ 568.837940][T10948] panic+0x2cb/0x65c [ 568.837954][T10948] ? __warn_printk+0xf3/0xf3 [ 568.837968][T10948] ? string+0x208/0x230 [ 568.837985][T10948] ? preempt_schedule+0x4b/0x60 [ 568.853083][ T3874] kobject: 'loop3' (0000000024c31064): fill_kobj_path: path = '/devices/virtual/block/loop3' [ 568.856512][T10948] ? ___preempt_schedule+0x16/0x18 [ 568.856540][T10948] ? trace_hardirqs_on+0x5e/0x230 [ 568.856556][T10948] ? string+0x208/0x230 [ 568.856576][T10948] end_report+0x47/0x4f [ 568.898573][T10948] ? string+0x208/0x230 [ 568.902722][T10948] kasan_report.cold+0xe/0x40 [ 568.907396][T10948] ? string+0x208/0x230 [ 568.911564][T10948] __asan_report_load1_noabort+0x14/0x20 [ 568.917190][T10948] string+0x208/0x230 [ 568.921162][T10948] ? widen_string+0x2e0/0x2e0 [ 568.925832][T10948] ? console_unlock+0x6a7/0xeb0 [ 568.930672][T10948] ? find_held_lock+0x35/0x130 [ 568.935433][T10948] vsnprintf+0xbfc/0x1af0 [ 568.939759][T10948] ? pointer+0x910/0x910 [ 568.943994][T10948] ? string+0x1cc/0x230 [ 568.948147][T10948] add_uevent_var+0x14d/0x310 [ 568.952819][T10948] ? cleanup_uevent_env+0x50/0x50 [ 568.957833][T10948] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 568.964070][T10948] ? input_dev_uevent+0x110/0x890 [ 568.969091][T10948] input_dev_uevent+0x163/0x890 [ 568.973934][T10948] ? input_add_uevent_bm_var+0x150/0x150 [ 568.979562][T10948] dev_uevent+0x312/0x580 [ 568.983882][T10948] ? device_get_devnode+0x2e0/0x2e0 [ 568.989069][T10948] ? kobject_uevent_env+0x2fb/0x1030 [ 568.994353][T10948] ? rcu_read_lock_sched_held+0x110/0x130 [ 569.000064][T10948] ? kobject_uevent_env+0x37d/0x1030 [ 569.005343][T10948] ? device_get_devnode+0x2e0/0x2e0 [ 569.010530][T10948] kobject_uevent_env+0x487/0x1030 [ 569.015634][T10948] ? release_nodes+0x548/0x9c0 [ 569.020391][T10948] kobject_uevent+0x20/0x26 [ 569.024883][T10948] kobject_put.cold+0x177/0x2ec [ 569.029726][T10948] ? evdev_handle_set_keycode_v2+0x140/0x140 [ 569.035696][T10948] put_device+0x20/0x30 [ 569.039840][T10948] evdev_free+0x51/0x70 [ 569.043988][T10948] device_release+0x7d/0x210 [ 569.048574][T10948] kobject_put.cold+0x28f/0x2ec [ 569.053417][T10948] cdev_default_release+0x41/0x50 [ 569.058431][T10948] kobject_put.cold+0x28f/0x2ec [ 569.063285][T10948] cdev_put.part.0+0x39/0x50 [ 569.067865][T10948] cdev_put+0x20/0x30 [ 569.071840][T10948] __fput+0x6df/0x8d0 [ 569.075816][T10948] ____fput+0x16/0x20 [ 569.079786][T10948] task_work_run+0x14a/0x1c0 [ 569.084372][T10948] exit_to_usermode_loop+0x273/0x2c0 [ 569.089649][T10948] do_fast_syscall_32+0xa9d/0xc98 [ 569.094677][T10948] entry_SYSENTER_compat+0x70/0x7f [ 569.099775][T10948] RIP: 0023:0xf7f34869 [ 569.103837][T10948] Code: 85 d2 74 02 89 0a 5b 5d c3 8b 04 24 c3 8b 14 24 c3 8b 3c 24 c3 90 90 90 90 90 90 90 90 90 90 90 90 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 569.123427][T10948] RSP: 002b:000000000845fd7c EFLAGS: 00000216 ORIG_RAX: 0000000000000006 [ 569.131829][T10948] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 569.139796][T10948] RDX: 0000000000000005 RSI: 0000000000000005 RDI: 0000000000000000 [ 569.147758][T10948] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 569.155721][T10948] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 569.163681][T10948] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 569.172695][T10948] Kernel Offset: disabled [ 569.177019][T10948] Rebooting in 86400 seconds..