[   11.372624] random: sshd: uninitialized urandom read (32 bytes read)
[....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c.
[....] Starting file context maintaining daemon: restorecond[?25l[?1c7[ ok 8[?25h[?0c.

Debian GNU/Linux 7 syzkaller ttyS0

syzkaller login: [   26.018893] random: sshd: uninitialized urandom read (32 bytes read)
[   26.307943] audit: type=1400 audit(1568465133.742:6): avc:  denied  { map } for  pid=1764 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1
[   26.353234] random: sshd: uninitialized urandom read (32 bytes read)
[   26.947955] random: sshd: uninitialized urandom read (32 bytes read)
Warning: Permanently added '10.128.0.152' (ECDSA) to the list of known hosts.
[   32.376029] random: sshd: uninitialized urandom read (32 bytes read)
2019/09/14 12:45:39 fuzzer started
[   32.479533] audit: type=1400 audit(1568465139.912:7): avc:  denied  { map } for  pid=1779 comm="syz-fuzzer" path="/root/syz-fuzzer" dev="sda1" ino=1426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
[   32.903411] random: cc1: uninitialized urandom read (8 bytes read)
2019/09/14 12:45:41 dialing manager at 10.128.0.26:37083
2019/09/14 12:45:41 syscalls: 1347
2019/09/14 12:45:41 code coverage: enabled
2019/09/14 12:45:41 comparison tracing: ioctl(KCOV_TRACE_CMP) failed: invalid argument
2019/09/14 12:45:41 extra coverage: extra coverage is not supported by the kernel
2019/09/14 12:45:41 setuid sandbox: enabled
2019/09/14 12:45:41 namespace sandbox: enabled
2019/09/14 12:45:41 Android sandbox: /sys/fs/selinux/policy does not exist
2019/09/14 12:45:41 fault injection: CONFIG_FAULT_INJECTION is not enabled
2019/09/14 12:45:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2019/09/14 12:45:41 net packet injection: enabled
2019/09/14 12:45:41 net device setup: enabled
[   34.826131] random: crng init done
12:46:39 executing program 0:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)={[{@fat=@debug='debug'}]})

12:46:39 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b304003d1048ac70caa", 0x85}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

12:46:39 executing program 4:
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000000380)=""/170, 0xaa}], 0x1, 0x0, 0x279}, 0x0)
sendmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002d40), 0xd4}}, {{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)}}], 0x2, 0x0)

12:46:39 executing program 2:
r0 = socket$inet6(0xa, 0x100000000000001, 0x0)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)

12:46:39 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)

12:46:39 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
socketpair$unix(0x1, 0x80000000003, 0x0, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmmsg(r0, &(0x7f0000008600)=[{{0x0, 0x0, &(0x7f0000003140)}}, {{&(0x7f00000072c0)=@un=@file={0x1, './file0\x00'}, 0xa, &(0x7f0000007380), 0x0, &(0x7f0000000600)}}], 0x2, 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)="a4ab12f728db4b2b4d2f2fba4fad273b1ea3e46f905080af4c90ccc270e60b3a8bf56db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d", 0x3e}], 0x4, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x3c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
ptrace$cont(0x18, r1, 0x0, 0x0)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r1, 0x0, 0x0)

[   92.345541] audit: type=1400 audit(1568465199.782:8): avc:  denied  { map } for  pid=1831 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=5044 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1
[   95.143962] FAT-fs (loop0): bogus number of reserved sectors
[   95.149981] FAT-fs (loop0): Can't find a valid FAT filesystem
[   95.174212] FAT-fs (loop0): bogus number of reserved sectors
[   95.180114] FAT-fs (loop0): Can't find a valid FAT filesystem
12:46:42 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)
recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0)

12:46:42 executing program 0:
r0 = gettid()
prctl$PR_GET_TSC(0x2, 0xffffffffffffffff)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCGETX(0xffffffffffffffff, 0x5432, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RAUTH(r2, 0x0, 0x0)
write$binfmt_aout(r2, 0x0, 0x0)
lseek(r1, 0x0, 0x0)
ioctl$TCSETX(r1, 0x5433, 0x0)
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
timer_gettime(0x0, 0x0)
utimes(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={{0x0, 0x7530}})
tkill(r0, 0x1000000000016)

12:46:43 executing program 4:
r0 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
clone(0x802103001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
tkill(r1, 0x40000000000006)
ptrace$cont(0x18, r1, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x3, 0x0, 0x400, 0x0, 0x48})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r1, 0x0, 0x0)

12:46:43 executing program 4:
perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000013, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
seccomp(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000100)=[{0x2, 0x0, 0x770, 0x200}, {}, {0x0, 0x0, 0x0, 0xe4}, {}]})
ftruncate(0xffffffffffffffff, 0x0)

12:46:43 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:43 executing program 2:
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x0, 0x0)
ioctl(r0, 0x0, 0x0)

12:46:43 executing program 2:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
lchown(&(0x7f0000000040)='./bus\x00', 0x0, r1)

12:46:46 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:46:46 executing program 2:
clone(0x8000100000203, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0)
execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0)
mknod(&(0x7f0000000000)='./file1\x00', 0xc808, 0x0)
r0 = creat(&(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x201000a)
close(r0)
execve(&(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f00000003c0)=0x400100000001, 0xfe32)
connect$inet6(r1, &(0x7f0000000080), 0x1c)
r2 = dup2(r0, r0)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64)
open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0)
clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000100), 0x4)

12:46:46 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:46 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:46 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
chroot(&(0x7f0000000000)='.\x00')

12:46:46 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca5055e62cfe47bf070")
r1 = gettid()
prctl$PR_SET_PTRACER(0x59616d61, r1)
clone(0x802103001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r2, 0x0, 0x0)
tkill(r2, 0x40000000000006)
ptrace$cont(0x18, r2, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x0, 0x4a})
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r2, 0x0, 0x0)

12:46:46 executing program 5:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={[{@fat=@errors_continue='errors=continue'}]})

12:46:46 executing program 1:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
creat(&(0x7f00000000c0)='./bus\x00', 0x0)

12:46:46 executing program 1:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0, 0x2ea}, {&(0x7f0000000040)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d3277", 0x1e}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

12:46:46 executing program 1:
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c9", 0x1, 0xfffffffffffffffe)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
keyctl$update(0x2, r0, &(0x7f0000000180)='s', 0x1)

[   99.274396] FAT-fs (loop5): bogus number of reserved sectors
[   99.299204] FAT-fs (loop5): Can't find a valid FAT filesystem
12:46:46 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCMBIC(r0, 0x5417, 0x0)

12:46:46 executing program 3:
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f000066fff4)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
accept4$unix(r1, 0x0, 0x0, 0x0)
ioctl(0xffffffffffffffff, 0x0, 0x0)
gettid()
prctl$PR_SET_PTRACER(0x59616d61, 0x0)
gettid()

[   99.367220] FAT-fs (loop5): bogus number of reserved sectors
[   99.382675] FAT-fs (loop5): Can't find a valid FAT filesystem
12:46:46 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[   99.497725] input: syz0 as /devices/virtual/input/input4
12:46:47 executing program 2:
r0 = gettid()
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56afb3b91e7f1ffd7e4ab56ad8e39808e0b6196bf7a301ffe8dac0726906da58a5d1ab046f24351eda628769d37cbcb5cab9c8b656eaf2c614702c97bf6e0496834bf1ac97fe5e8df9648d739667cae610100"/122, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb115be7b03b5278b53fe125393d00"/133], 0x0, 0x12c}, 0x20)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d3d23cf838f19c044dcd8034"], 0xc}}, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

12:46:47 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:47 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:47 executing program 5:
clone(0x2102005ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000980)='timers\x00')
exit(0x0)
wait4(0x0, 0x0, 0xc0000003, 0x0)
r1 = eventfd2(0x0, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
dup3(r2, r0, 0x0)

12:46:47 executing program 3:
r0 = memfd_create(&(0x7f0000000140), 0x0)
write(r0, &(0x7f0000002000)='/', 0x1)
sendfile(r0, r0, &(0x7f0000000040), 0x7f)
sendfile(r0, r0, &(0x7f00000000c0), 0xfec)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)

12:46:47 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:47 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x80000000001, 0x4)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4)
sendto$inet6(r0, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6)
recvmmsg(r0, &(0x7f0000000080), 0x21e, 0x40010002, 0x0)

12:46:47 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x20, r1, 0x323, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x5, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0)

12:46:47 executing program 3:
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000940)={0x0, 0x0, 0x7fff})

[  100.083191] audit: type=1400 audit(1568465207.522:9): avc:  denied  { map } for  pid=2874 comm="syz-executor.3" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=9342 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1
[  100.102753] input: syz0 as /devices/virtual/input/input6
12:46:47 executing program 3:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = dup(r0)
r2 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0)
write$selinux_attr(r2, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571)
sendfile(r1, r2, &(0x7f0000000080), 0x2008000fffffffe)

12:46:47 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:47 executing program 2:

[  100.185785] audit: type=1400 audit(1568465207.572:10): avc:  denied  { create } for  pid=2890 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  100.223014] audit: type=1400 audit(1568465207.572:11): avc:  denied  { write } for  pid=2890 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
[  100.232902] input: syz0 as /devices/virtual/input/input7
12:46:47 executing program 3:

[  100.271219] audit: type=1400 audit(1568465207.602:12): avc:  denied  { read } for  pid=2890 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1
12:46:48 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:48 executing program 2:

12:46:48 executing program 5:
sched_setaffinity(0x0, 0xffffffffffffff6b, &(0x7f0000000940)=0x5)
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x8, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

12:46:48 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:48 executing program 3:

12:46:48 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:48 executing program 2:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = dup(r0)
write$P9_RLERROR(r1, &(0x7f0000000080)={0x10, 0x7, 0x0, {0x7, 'proc({{'}}, 0x10)
write(r1, &(0x7f0000000100)='W', 0x1)

12:46:48 executing program 3:

12:46:48 executing program 3:

12:46:48 executing program 2:

[  100.954049] input: syz0 as /devices/virtual/input/input8
12:46:48 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
dup(r0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:48 executing program 3:

12:46:49 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

12:46:49 executing program 2:

12:46:49 executing program 3:

12:46:49 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
dup(r0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:49 executing program 5:

12:46:49 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

12:46:49 executing program 3:

12:46:49 executing program 2:

12:46:49 executing program 5:

12:46:49 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
dup(r0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:49 executing program 3:

12:46:49 executing program 5:

12:46:49 executing program 3:

12:46:49 executing program 2:

12:46:49 executing program 5:

12:46:49 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

12:46:49 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:50 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

12:46:50 executing program 5:

12:46:50 executing program 2:

12:46:50 executing program 3:

12:46:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:50 executing program 2:

12:46:50 executing program 3:

12:46:50 executing program 5:

12:46:50 executing program 2:

12:46:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:50 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

12:46:50 executing program 3:

12:46:50 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)

12:46:50 executing program 2:

12:46:50 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xb, 0x81, 0x7, 0x5, 0x1}, 0x3c)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r0, &(0x7f0000000180), &(0x7f0000000240)}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r0, &(0x7f0000000180)}, 0x10)
prctl$PR_GET_FPEXC(0xb, &(0x7f0000000000))

12:46:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:50 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="380100001000130700000000000000000000000000000000000000000000000000000000000000000000ffffac14ffaa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000ffffffff000000000000020000000000000000000000000001000000000000000000000000000000000000000000000000000055d4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006d64350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000"], 0x138}}, 0x0)

12:46:50 executing program 2:

12:46:50 executing program 5:

12:46:50 executing program 2:

[  103.452235] input: syz0 as /devices/virtual/input/input15
12:46:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:50 executing program 3:

[  103.568726] input: syz0 as /devices/virtual/input/input16
12:46:51 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:51 executing program 5:
socket$inet(0x2b, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x100000000000001, 0x84)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet6(0xa, 0x100000000000001, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="08dca50d5e0bcfe47bf070")
pipe(&(0x7f0000000440))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x7ff}, 0x0, 0x0, 0x0, 0x0)

12:46:51 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:51 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000040)=0x480100000001, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, 0x0, 0x0)
connect$inet6(r2, &(0x7f0000000080), 0x1c)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000440), 0x12f7e5)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$UI_SET_MSCBIT(r3, 0x40045568, 0x5)
getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54)
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x2f)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x67, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3)
r5 = dup(r4)
write$uinput_user_dev(r5, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r4, 0x5501)

12:46:51 executing program 3:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
r2 = socket$inet6(0xa, 0x803, 0x200000000000007)
dup2(r2, r0)

12:46:51 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:51 executing program 3:
syz_emit_ethernet(0x74, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x4, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0)

12:46:51 executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x0, @multicast1}, 0x10)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10)

[  104.273637] input: syz0 as /devices/virtual/input/input17
12:46:51 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  104.326650] input: syz0 as /devices/virtual/input/input18
12:46:51 executing program 3:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={[{@fat=@gid={'gid'}}]})

[  104.367185] input: syz0 as /devices/virtual/input/input19
12:46:51 executing program 5:
setreuid(0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0xff}, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, 0x18)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0)
fcntl$setpipe(r1, 0x407, 0x0)
write(r1, &(0x7f0000000340), 0x41395527)
clock_gettime(0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:46:51 executing program 2:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)={[{@fat=@nfs='nfs'}, {@fat=@codepage={'codepage', 0x3d, '857'}}]})

[  104.417583] FAT-fs (loop3): bogus number of reserved sectors
[  104.423807] FAT-fs (loop3): Can't find a valid FAT filesystem
[  104.460776] FAT-fs (loop2): bogus number of reserved sectors
[  104.466703] FAT-fs (loop2): Can't find a valid FAT filesystem
[  104.476161] FAT-fs (loop3): bogus number of reserved sectors
[  104.482934] FAT-fs (loop3): Can't find a valid FAT filesystem
[  104.503823] FAT-fs (loop2): bogus number of reserved sectors
[  104.510466] FAT-fs (loop2): Can't find a valid FAT filesystem
12:46:52 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:52 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:52 executing program 3:
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000400)=@known='system.posix_acl_default\x00', 0x0, 0x0)

12:46:52 executing program 2:
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="83ba9f370ad1", @dev, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @multicast2, @local, @remote}}}}, 0x0)

12:46:52 executing program 2:
syz_emit_ethernet(0x3e, &(0x7f0000000100)={@broadcast, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [0x29c, 0x58, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2], 0xffffffffffffffff}, @empty, {[], @udp={0x0, 0x0, 0x8}}}}}}, 0x0)

12:46:52 executing program 3:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='2'], 0x1)
close(r0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[  105.082972] input: syz0 as /devices/virtual/input/input21
12:46:52 executing program 2:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
r1 = gettid()
unshare(0x28020400)
exit(0x0)
syz_open_procfs$namespace(r1, &(0x7f00000002c0)='ns/mnt\x00')
syz_open_procfs$namespace(r1, &(0x7f0000000140)='ns/cgroup\x00')

12:46:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:52 executing program 3:
r0 = openat$random(0xffffffffffffff9c, &(0x7f0000001780)='/dev/urandom\x00', 0x0, 0x0)
lseek(r0, 0x0, 0x876c9b3251b205f2)

[  105.173987] input: syz0 as /devices/virtual/input/input22
12:46:52 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}}, 0x24}}, 0x0)

12:46:52 executing program 3:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)

12:46:53 executing program 1:
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r0 = dup(0xffffffffffffffff)
write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

12:46:53 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:53 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:53 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
close(r0)

12:46:53 executing program 3:
r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1)
write$binfmt_script(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='2'], 0x1)
close(r0)
execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

12:46:53 executing program 1:
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r0 = dup(0xffffffffffffffff)
write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

12:46:53 executing program 1:
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r0 = dup(0xffffffffffffffff)
write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

12:46:53 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r3 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r2, r3, 0x0, 0xa808)

12:46:53 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:53 executing program 3:

12:46:53 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:53 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0x8604}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x6, 0x487, &(0x7f000000cf3d)=""/195}, 0x48)

12:46:53 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  106.058646] audit: type=1400 audit(1568465213.492:13): avc:  denied  { prog_load } for  pid=3240 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
12:46:54 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:54 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:54 executing program 5:
r0 = socket$inet6(0xa, 0x803, 0x200000000000007)
setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@ipv4={[], [], @remote}}, 0x14)

12:46:54 executing program 3:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x700}}, 0x24, 0x0)

12:46:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:54 executing program 2:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0x701, 0x0, 0x0, {0x0, r1, {}, {}, {0xf}}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x44, 0x2, [@TCA_TCINDEX_ACT={0x40, 0x7, @m_mirred={0x3c, 0x0, {{0xc, 0x1, 'mirred\x00'}, {0x24, 0x2, @TCA_MIRRED_PARMS={0x20}}, {0x4}}}}]}}]}, 0x74}}, 0x0)

12:46:54 executing program 5:

12:46:54 executing program 3:

12:46:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:54 executing program 5:

12:46:54 executing program 3:

12:46:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:54 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:54 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:54 executing program 3:

12:46:54 executing program 5:

12:46:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:54 executing program 2:

12:46:55 executing program 5:

12:46:55 executing program 2:

12:46:55 executing program 3:

12:46:55 executing program 5:

12:46:55 executing program 2:

[  107.596851] input: syz0 as /devices/virtual/input/input26
12:46:55 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  107.714293] input: syz0 as /devices/virtual/input/input27
12:46:55 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:55 executing program 3:

12:46:55 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:55 executing program 5:

12:46:55 executing program 2:

12:46:55 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:55 executing program 3:

12:46:55 executing program 2:

12:46:55 executing program 5:

12:46:55 executing program 3:

12:46:55 executing program 2:

12:46:55 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  108.373517] input: syz0 as /devices/virtual/input/input28
[  108.462572] input: syz0 as /devices/virtual/input/input29
12:46:56 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:56 executing program 3:

12:46:56 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:56 executing program 2:

12:46:56 executing program 5:

12:46:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:56 executing program 5:

12:46:56 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x8, &(0x7f0000000240)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x1100, 0x0, 0x0, 0x0, 0x0, r0, 0x0}])

12:46:56 executing program 2:

[  109.192976] input: syz0 as /devices/virtual/input/input30
12:46:56 executing program 5:

12:46:56 executing program 2:

12:46:56 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:56 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:56 executing program 2:

12:46:56 executing program 5:

12:46:56 executing program 5:

12:46:56 executing program 3:

12:46:56 executing program 2:

12:46:56 executing program 5:

[  109.366022] input: syz0 as /devices/virtual/input/input31
12:46:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:56 executing program 3:

12:46:56 executing program 2:

[  109.474832] input: syz0 as /devices/virtual/input/input32
12:46:57 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:57 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:57 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
sendto$inet6(r1, &(0x7f0000000300), 0xfdb8, 0x4008080, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)

12:46:57 executing program 3:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
seccomp(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006, 0x0, 0x0, 0x40007fc00000}]})

12:46:57 executing program 2:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020700090200000000000000007a5b00"], 0x10}}, 0x0)

12:46:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  110.159549] input: syz0 as /devices/virtual/input/input33
12:46:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  110.210050] audit: type=1326 audit(1568465217.642:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3425 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0x7fc00000
[  110.267727] input: syz0 as /devices/virtual/input/input34
12:46:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  110.365970] input: syz0 as /devices/virtual/input/input35
12:46:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  110.449492] input: syz0 as /devices/virtual/input/input36
12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(0xffffffffffffffff)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  110.525241] input: syz0 as /devices/virtual/input/input37
12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(0xffffffffffffffff)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(0xffffffffffffffff)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:58 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:58 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:58 executing program 2:
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x200000000000c, &(0x7f0000000140)="eafd125c0000006b", 0x8)

12:46:58 executing program 5:
r0 = syz_open_dev$binder(&(0x7f0000000640)='/dev/binder#\x00', 0xffffffffffffffff, 0x0)
syz_open_dev$binder(0x0, 0x0, 0x2)
r1 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000480), 0x0)
mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0x8000000000000)
perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff00000000, 0x0, 0x3ff, 0x4, 0x0, 0x0, 0x200, 0xa, 0x0, 0x7, 0x1, 0x0, 0x9, 0x207ce7d2, 0x0, 0x401, 0x4, 0x99, 0x7, 0x5, 0xfffffffffffff001, 0x0, 0x8001, 0x0, 0x1000, 0x5aceb8fe, 0x401, 0x84, 0x0, 0x3, 0x0, 0x0, 0x4b, 0xb4, 0x9, 0x100, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0x3f}, 0x8, 0x6, 0x5, 0x4, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
openat$full(0xffffffffffffff9c, 0x0, 0x2400, 0x0)
r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getrusage(0xffffffffffffffff, &(0x7f0000000580))
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40086602, 0x400007)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xff4a)
lsetxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'U-', 0x7}, 0x28, 0x64c1fa1689873079)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280)='nbd\x00')
ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140))
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x4c, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xd04c}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x20000, 0x0)
openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SET_UNALIGN(0x6, 0x7)
syz_genetlink_get_family_id$tipc(&(0x7f00000001c0)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r1, 0x0, 0x4040090)
ioctl$EXT4_IOC_MIGRATE(r2, 0x6609)
keyctl$session_to_parent(0x12)

12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
dup(r0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:58 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r2, 0x0, 0xa808)

12:46:58 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
dup(r0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
dup(r0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

[  110.992788] audit: type=1400 audit(1568465218.432:15): avc:  denied  { map } for  pid=3547 comm="syz-executor.5" path="/dev/binder0" dev="devtmpfs" ino=5469 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1
[  111.020046] hrtimer: interrupt took 45187 ns
12:46:58 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:46:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:58 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4)
r1 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00')
sendfile(r1, r2, 0x0, 0xa808)

[  111.084623] audit: type=1400 audit(1568465218.512:16): avc:  denied  { set_context_mgr } for  pid=3547 comm="syz-executor.5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1
12:46:59 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:46:59 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:59 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
syz_read_part_table(0x0, 0x1, &(0x7f0000000080)=[{&(0x7f00000000c0)="02000f00000a00000000ff07000000000000000000000000000000000000fffffff4", 0x22, 0x1c0}])

12:46:59 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x20, r0, 0x0, 0x0)

12:46:59 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:46:59 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)


INIT: Id "6" respawning too fast: disabled for 5 minutes
12:46:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, 0x0, 0x0)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:59 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)


INIT: Id "3" respawning too fast: disabled for 5 minutes
12:46:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:46:59 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

12:46:59 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

12:46:59 executing program 3:
mkdir(&(0x7f0000000500)='./file1\x00', 0x0)


INIT: Id "2" respawning too fast: disabled for 5 minutes

INIT: Id "5" respawning too fast: disabled for 5 minutes

INIT: Id "1" respawning too fast: disabled for 5 minutes

INIT: Id "4" respawning too fast: disabled for 5 minutes
[  111.919276] input: syz0 as /devices/virtual/input/input47
12:47:00 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:00 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:47:00 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x2})

[  112.643272] input: syz0 as /devices/virtual/input/input48
12:47:02 executing program 5:
syz_emit_ethernet(0x46, &(0x7f0000000180)={@link_local, @broadcast, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x223}, @local}, @icmp=@parameter_prob={0x4, 0x4, 0x0, 0x0, 0x0, 0x8, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @empty=0x2}, "040088beffff0000"}}}}}, 0x0)

12:47:02 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:02 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:47:02 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000011fd4)={0x40000000003, 0x4, 0x4, 0x7cb, 0x0, 0xffffffffffffff9c}, 0x2c)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = bpf$MAP_CREATE(0x4, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x20000000, 0x0}, 0x2c)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)

12:47:02 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:02 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:02 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mlockall(0x1)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000080)={0x30}, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

[  114.836176] audit: type=1400 audit(1568465222.272:17): avc:  denied  { map_create } for  pid=3657 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
[  114.842665] input: syz0 as /devices/virtual/input/input49
12:47:02 executing program 5:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
creat(&(0x7f0000000100)='./file0\x00', 0x0)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))

12:47:02 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:02 executing program 5:
syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={[], [{@uid_eq={'uid'}}]})

12:47:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[  114.909067] audit: type=1400 audit(1568465222.302:18): avc:  denied  { map_read map_write } for  pid=3657 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1
12:47:02 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

[  115.007514] FAT-fs (loop5): bogus number of reserved sectors
[  115.013784] FAT-fs (loop5): Can't find a valid FAT filesystem
[  115.101670] FAT-fs (loop5): bogus number of reserved sectors
[  115.107504] FAT-fs (loop5): Can't find a valid FAT filesystem
12:47:03 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:03 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2479]}, 0x45c)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)

12:47:03 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
close(r0)

12:47:03 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

12:47:03 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:03 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x5b0)

12:47:03 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x4001000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")

12:47:03 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

12:47:03 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:03 executing program 4:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

12:47:03 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x80000004)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

12:47:03 executing program 4:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:03 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x80000004)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

12:47:03 executing program 0:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

12:47:03 executing program 5:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x20141042, 0x0)
write$selinux_attr(r0, &(0x7f0000000180)='system_u:object_r:hugetlbfs_t:s0\x00', 0x5571)

12:47:03 executing program 4:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:03 executing program 2:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x80000004)
r0 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r0, 0x540b, 0x2)

12:47:03 executing program 3:
r0 = socket$netlink(0x10, 0x3, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r7 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r7, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r12 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
writev(r0, &(0x7f0000003280)=[{&(0x7f0000000240)="580000001400192340834b80043f679a10ffff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f2346ae792945f64009400050028925aaa000000000000008400f0fffeff2c707f8f00fff9ffffff0010", 0xfff7}], 0x1)

12:47:03 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0)='TIPCv2\x00')
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x20, r1, 0x323, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0x20}}, 0x0)

12:47:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:04 executing program 4:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:04 executing program 0:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

[  116.545715] audit: type=1400 audit(1568465223.982:19): avc:  denied  { create } for  pid=3759 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
12:47:04 executing program 5:
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
r1 = dup(r0)
write$P9_RLERROR(r1, &(0x7f0000000080)={0x10, 0x7, 0x0, {0x7, 'proc({{'}}, 0x10)

12:47:04 executing program 1:

12:47:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:04 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:04 executing program 0:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)

[  116.656165] audit: type=1400 audit(1568465224.012:20): avc:  denied  { bind } for  pid=3759 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1
12:47:04 executing program 1:

12:47:04 executing program 3:

12:47:04 executing program 0:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:04 executing program 5:

12:47:04 executing program 3:

12:47:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:04 executing program 1:

12:47:04 executing program 5:

12:47:04 executing program 0:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:04 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:04 executing program 3:

12:47:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:04 executing program 5:

12:47:04 executing program 1:

12:47:04 executing program 0:
r0 = syz_open_dev$sndtimer(0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:04 executing program 5:

12:47:04 executing program 3:

12:47:04 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:04 executing program 1:

12:47:05 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:05 executing program 3:

12:47:05 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:05 executing program 5:

12:47:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:05 executing program 1:

12:47:05 executing program 3:

12:47:05 executing program 1:

12:47:05 executing program 3:

12:47:05 executing program 5:

12:47:05 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:05 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:05 executing program 3:

12:47:05 executing program 1:

12:47:06 executing program 1:

12:47:06 executing program 5:

12:47:06 executing program 3:

12:47:06 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:06 executing program 1:
socket$inet(0x2b, 0x1, 0x0)
socket$inet6(0xa, 0x100000000000001, 0x84)
socket$inet6(0xa, 0x100000000000001, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={0x0, <r2=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:47:06 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)="11dca5055e0bcfe4")
write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35}, 0x120)
r1 = socket$inet6(0xa, 0x803, 0x200000000000007)
dup2(r1, r0)

12:47:06 executing program 3:
r0 = socket$inet6(0xa, 0x1000000000002, 0x0)
r1 = socket$inet6(0xa, 0x1000000000002, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'ip_vti0\x00', 0x201e})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', <r3=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@dev, 0x49, r3})

12:47:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, 0x0)
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:06 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:06 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
lookup_dcookie(0x0, 0x0, 0x0)

12:47:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

[  119.265550] hid (null): unknown global tag 0xe
[  119.273415] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1
12:47:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:06 executing program 3:
r0 = gettid()
clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r1 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r1, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56afb3b91e7f1ffd7e4ab56ad8e39808e0b6196bf7a301ffe8dac0726906da58a5d1ab046f24351eda628769d37cbcb5cab9c8b656eaf2c614702c97bf6e0496834bf1ac97fe5e8df9648d739667cae610100"/122, @ANYRESHEX, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872b0001000000000000f515586de3c101e4f8d1b12b1894ef983d0cfcdfbb115be7b03b5278b53fe125393d00"/133], 0x0, 0x115}, 0x20)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="d3d23cf838f19c044dcd8034"], 0xc}}, 0x0)
tkill(r0, 0x3c)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

[  119.317977] hid-generic 0000:0000:0000.0001: unknown global tag 0xe
[  119.337483] hid-generic 0000:0000:0000.0001: item 0 0 1 14 parsing failed
[  119.351545] hid-generic: probe of 0000:0000:0000.0001 failed with error -22
12:47:06 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

[  119.371477] hid (null): unknown global tag 0xe
[  119.383550] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1
[  119.403536] hid-generic 0000:0000:0000.0002: unknown global tag 0xe
[  119.416104] hid-generic 0000:0000:0000.0002: item 0 0 1 14 parsing failed
[  119.424174] audit: type=1326 audit(1568465226.872:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=3933 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x4598e9 code=0x0
[  119.429001] hid-generic: probe of 0000:0000:0000.0002 failed with error -22
12:47:07 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:07 executing program 3:
r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
socket$inet6(0xa, 0x80000, 0x8001)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x80, 0x8)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f00000000c0)="11dca5055e0bcfe47bf070")
getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000005cc0)={{{@in=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000040)=0xe8)
io_setup(0x8, &(0x7f0000000000)=<r4=>0x0)
r5 = eventfd2(0x0, 0x0)
read$eventfd(r5, &(0x7f0000000080), 0x8)
r6 = socket$netlink(0x10, 0x3, 0x0)
io_submit(r4, 0x1, &(0x7f00000002c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x3, r5}])
lseek(r6, 0x0, 0x2)
r7 = creat(&(0x7f0000000340)='./file0\x00', 0x0)
write$binfmt_elf64(r7, &(0x7f0000000080)=ANY=[], 0xb9cfb3be)
r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='io.stat\x00', 0x0, 0x0)
dup3(r8, r2, 0xe69e242917ec0f9c)
r9 = geteuid()
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000005e00)={{{@in=@empty, @in6=@remote, 0x4e22, 0x8001, 0x4e24, 0x1, 0x2, 0x100, 0x80, 0x33, r3, r9}, {0x2d, 0x1, 0xa4, 0xfff, 0x3, 0x0, 0xfffffffffffffe00, 0x8}, {0xffffffff, 0x9, 0x9, 0x1}, 0x7, 0x6e6bb4, 0x2, 0x1}, {{@in, 0x4d4, 0x33}, 0x2, @in=@multicast1, 0x3501, 0x0, 0x5, 0x333, 0x1, 0x7ff, 0x5}}, 0xe8)

12:47:07 executing program 5:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/uinput\x00', 0x2, 0x0)
write$uinput_user_dev(r0, 0x0, 0x0)

12:47:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:07 executing program 1:
r0 = creat(&(0x7f0000000340)='./file1\x00', 0x0)
write$P9_RSTATu(r0, &(0x7f0000000040)=ANY=[], 0x445144e9)
sync_file_range(r0, 0x7fff, 0x0, 0x2)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0xfffffffffffffff9})

12:47:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:07 executing program 5:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x9e, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="c9", 0x1, 0xfffffffffffffffe)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup3(r2, r1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
keyctl$update(0x2, r0, &(0x7f0000000180)='s', 0x1)

12:47:07 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:07 executing program 5:
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x200001000008912, &(0x7f0000000000)="11dca5055e0bcfe47bf070")
write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, 'syz1\x00', 'syz0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\x00', 'syz0\x00', &(0x7f0000000000)=""/53, 0x35}, 0x120)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x803, 0x200000000000007)
dup2(r2, r0)

12:47:07 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

[  120.219094] hid (null): unknown global tag 0xe
[  120.225439] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  120.249495] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  120.270097] hid-generic 0000:0000:0000.0003: unknown global tag 0xe
[  120.286372] hid-generic 0000:0000:0000.0003: item 0 0 1 14 parsing failed
[  120.301513] hid-generic: probe of 0000:0000:0000.0003 failed with error -22
[  120.325093] hid (null): unknown global tag 0xe
[  120.335347] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  120.354345] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  120.361174] hid-generic 0000:0000:0000.0004: unknown global tag 0xe
[  120.367679] hid-generic 0000:0000:0000.0004: item 0 0 1 14 parsing failed
[  120.375150] hid-generic: probe of 0000:0000:0000.0004 failed with error -22
12:47:08 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:08 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffc8f)
wait4(0x0, 0x0, 0x0, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r2, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
ptrace$cont(0x20, r0, 0x0, 0x0)

12:47:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080))
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:08 executing program 5:
socket$inet(0x2b, 0x1, 0x0)
r0 = socket$inet6(0xa, 0x100000000000001, 0x84)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
socket$inet6(0xa, 0x100000000000001, 0x0)
pipe(&(0x7f0000000440)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
write(r2, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000100))
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:47:08 executing program 1:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'nr0\x01\x00', 0x4002})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
close(r0)

12:47:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:08 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x2)

12:47:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

12:47:08 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

12:47:08 executing program 1:
socket$inet(0x2b, 0x1, 0x0)
socket$inet6(0xa, 0x100000000000001, 0x84)
socket$inet6(0xa, 0x100000000000001, 0x0)
pipe(&(0x7f0000000440)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x41395527)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0)
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:47:09 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
syz_open_pts(r0, 0x0)
ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2)

12:47:11 executing program 3:
socket$inet6(0xa, 0x0, 0x0)
r0 = socket(0xa, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00pI\x00', 0x8}, 0x10)
ioctl(r0, 0x8918, &(0x7f0000000000))

12:47:11 executing program 1:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a28093020603000000000100000000390009003500400306000000f7ff144002000000000022dc1338d55700009b84136ef75afb83de4411001600c43ab8220000060cec4fab91d4", 0x55}], 0x1}, 0x0)

12:47:11 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:11 executing program 5:
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
seccomp(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x100000006}]})

12:47:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)

12:47:11 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:11 executing program 1:

12:47:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)

12:47:11 executing program 1:

12:47:11 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc))
ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x80000004)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCFLSH(r1, 0x540b, 0x0)

12:47:11 executing program 3:

12:47:11 executing program 1:

12:47:11 executing program 3:

12:47:11 executing program 5:

12:47:12 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:12 executing program 3:

12:47:12 executing program 2:

12:47:12 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:12 executing program 5:

12:47:12 executing program 1:

12:47:12 executing program 3:

12:47:12 executing program 2:

12:47:12 executing program 5:
r0 = gettid()
sched_yield()
pipe2$9p(&(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x0)
fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0)
timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000))
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
tkill(r0, 0x1000000000016)

12:47:12 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:12 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x6c060000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000012c0)={'raw\x00\x00\x00\x00\x00\x00\xc6\x00'}, &(0x7f0000000040)=0x54)
getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x2d, "0d3e7d8899885ebd01e3a968e0defd0e5121d369f58e8ea9f3b1a43fc097aee213eb32db3f70fca98d1bba1aeb"}, &(0x7f0000000040)=0x51)

12:47:12 executing program 3:
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0)
mprotect(&(0x7f00006e2000/0x1000)=nil, 0x1000, 0x4)

[  124.856230] mmap: syz-executor.3 (4136) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.txt.
12:47:13 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:13 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:13 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0)
mincore(&(0x7f0000000000/0x400000)=nil, 0x400000, &(0x7f0000000140)=""/177)

12:47:13 executing program 2:
r0 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getegid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
gettid()
gettid()
tkill(0x0, 0x4000000000002e)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000040)={0x14}, 0x14)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0)
socket$netlink(0x10, 0x3, 0x4000000000000004)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x140000914, 0x4)
write$P9_RCLUNK(r0, &(0x7f0000000100)={0x7, 0x79, 0x2}, 0x7)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000200)=0x7fff, 0x4)
keyctl$clear(0x7, 0xfffffffffffffffd)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0xdf5, 0xf087}, 0x14)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x4000000000013, &(0x7f00000001c0), 0x4)
sendto$inet(r1, &(0x7f0000000280)="b9", 0x1c84, 0x0, 0x0, 0x30d)

12:47:13 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:13 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:13 executing program 3:
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0)

12:47:13 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:15 executing program 5:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
syz_open_procfs(0x0, &(0x7f0000272000))

12:47:15 executing program 2:
syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
select(0x40, &(0x7f0000001840)={0x48}, 0x0, 0x0, &(0x7f0000001900))

12:47:15 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000300)="a4ab12f728db4b2b4d2f2fba4fad0b3a47006db763e3a227deb6999d32772cf2eebb1fb054d54ac45a333c28785d630f38ba0fd5e2d5fb109aa4d1a2d25799eb00ea36a133349cce8d7986f5f3a2518643b1287105afeb7e56476dd2c8cb575a0fad7e0b6f6355077e72904a4153389ea6ccd595d94ee538bc7bf15b", 0x7c}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x7, r0, 0x0, 0x0)

12:47:15 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:15 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:15 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100))
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:15 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:15 executing program 5:
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz'}, &(0x7f0000000100), 0x1f1, 0xfffffffffffffffe)

12:47:15 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:15 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:15 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:15 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:15 executing program 2:

12:47:15 executing program 2:

12:47:18 executing program 3:

12:47:18 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:18 executing program 2:

12:47:18 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:18 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:18 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:18 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:18 executing program 3:

12:47:18 executing program 2:

12:47:18 executing program 3:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000300), 0x4, 0x0)

12:47:18 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x2)
readv(r0, &(0x7f0000019fe0)=[{&(0x7f00008ec000)=""/219, 0x30}], 0x1000000000000308)

12:47:18 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:18 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x2f)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)
ioctl$UI_DEV_CREATE(r0, 0x5501)

12:47:18 executing program 1:
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:18 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

[  130.982871] input: syz0 as /devices/virtual/input/input53
12:47:18 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:19 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:19 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:19 executing program 3:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, r0, 0x0)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000200)='syz_tun\x00', 0x10)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r1, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070")
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x1000000000000c, &(0x7f0000000280)=0x41, 0x4)
bind(r1, &(0x7f0000000380)=@in={0x2, 0x4e20}, 0x80)
shutdown(r1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040)=0x404, 0x4)
sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x2, 0x18004e20}, 0x10)
recvmmsg(r1, &(0x7f0000000180), 0x400000000000370, 0x0, &(0x7f0000000100)={0x77359400})

12:47:19 executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000240))

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:19 executing program 2:
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000))

12:47:19 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:19 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, 0x0, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x1, 0x2e2)
init_module(&(0x7f00000000c0)='+}\x00', 0x3, 0x0)
io_setup(0x1, &(0x7f0000000100)=<r3=>0x0)
ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000000080)={0x0, 0x4, 0xee87, 0x52})
io_submit(r3, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x100000000001, 0x0, r1, &(0x7f0000000080), 0x101b2}])

12:47:19 executing program 2:
clone(0x2000003102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
clock_gettime(0x0, &(0x7f0000000300)={0x0, <r0=>0x0})
rt_sigtimedwait(&(0x7f0000000040), 0x0, &(0x7f00000002c0)={0x0, r0+30000000}, 0x8)

12:47:19 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:19 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:20 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:20 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:20 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:20 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:20 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:20 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0xffffff3a, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:20 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:20 executing program 2:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {}, {0x4}}, 0x24, 0x0)

12:47:20 executing program 3:
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {}, {0x8}}, 0x24, 0x0)

12:47:20 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:47:20 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:20 executing program 3:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180)='/dev/uinput\x00', 0x400000000000002, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
r1 = dup(r0)
write$uinput_user_dev(r1, &(0x7f0000000980)={'syz0\x00'}, 0x45c)

12:47:20 executing program 2:
perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000100)='./bus\x00', 0x0)
r0 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000))

12:47:20 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:47:20 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x0, 0x0, 0x0)

12:47:21 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:21 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:21 executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0x1, 0x4)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000000c0)=[@window], 0x1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
fstat(r1, &(0x7f00000002c0))
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb9, 0x1002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = fcntl$dupfd(r3, 0x406, r2)
ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000540)={@empty, @dev={0xfe, 0x80, [], 0x15}, @loopback, 0x2, 0x400, 0x0, 0x100, 0x8})
ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, 0x0)
shutdown(r0, 0x1)

12:47:21 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:21 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:21 executing program 2:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000001300)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0xc8f, 0x0)
lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

12:47:21 executing program 2:
pipe(&(0x7f0000001580)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES16=0x0]], 0xfd3f)
rt_sigprocmask(0x0, &(0x7f0000001240)={0xfffffffffffffffe}, 0x0, 0x8)
write$UHID_INPUT(r1, &(0x7f0000000100)={0x8, "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", 0x1000}, 0x1006)
close(r0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

12:47:21 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:21 executing program 3:
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x701, 0x0, 0x0, {0x0, r1}, [@filter_kind_options=@f_tcindex={{0xc, 0x1, 'tcindex\x00'}, {0x4}}]}, 0x34}}, 0x0)

12:47:21 executing program 1:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x4888, 0x5800f000}, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "0a0112", 0x10, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@ndisc_ra}}}}}, 0x0)

12:47:21 executing program 1:

12:47:21 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:22 executing program 1:

12:47:22 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0)
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:22 executing program 3:

12:47:22 executing program 2:

12:47:22 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:22 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:22 executing program 1:

12:47:22 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:22 executing program 3:

12:47:22 executing program 2:

12:47:22 executing program 3:

12:47:22 executing program 2:

12:47:22 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:23 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:23 executing program 3:

12:47:23 executing program 2:

12:47:23 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:23 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r4, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:23 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:23 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:23 executing program 2:

12:47:23 executing program 2:

12:47:23 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:23 executing program 2:

12:47:23 executing program 2:

12:47:24 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:24 executing program 2:

12:47:24 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:24 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:24 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:24 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:24 executing program 2:

12:47:24 executing program 2:

12:47:24 executing program 2:

12:47:24 executing program 2:

12:47:24 executing program 2:

12:47:24 executing program 2:

12:47:24 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040))
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:24 executing program 2:

12:47:24 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:24 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:24 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:24 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:24 executing program 2:

12:47:24 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 2:

12:47:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 2:

12:47:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 2:

12:47:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:25 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:25 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:25 executing program 2:

12:47:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 2:

12:47:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 2:

12:47:25 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:25 executing program 2:

12:47:26 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
dup3(r1, r0, 0x0)

12:47:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:26 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, 0x0, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 2:

12:47:26 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
dup3(r1, r0, 0x0)

12:47:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 2:

12:47:26 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 2:

12:47:26 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, 0x0, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:26 executing program 2:

12:47:27 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r3, 0x2007fff)
write$P9_RXATTRCREATE(r3, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r3, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r3, &(0x7f0000d83ff8), 0x800000000024)

12:47:27 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:27 executing program 2:

12:47:27 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, 0x0, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:27 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:27 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
dup3(r1, r0, 0x0)

12:47:27 executing program 2:

12:47:27 executing program 2:

12:47:27 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0), 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:27 executing program 2:

12:47:27 executing program 2:

12:47:27 executing program 2:

12:47:28 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(0xffffffffffffffff, 0x2007fff)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x800000000024)

12:47:28 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:28 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0), 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:28 executing program 2:

12:47:28 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:28 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:28 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:28 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5}]}, 0x10)

12:47:28 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0), 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:28 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000000)="11dca50d5e0bcfe47bf070")
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000100)='cgroup}ppp0cgroup\x00')

12:47:28 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:28 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:28 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(0xffffffffffffffff, 0x2007fff)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x800000000024)

12:47:29 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:29 executing program 2:
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f00000001c0), 0xfffffef3)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040))
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

12:47:29 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:29 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:29 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:29 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(0xffffffffffffffff, 0x2007fff)
write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, 0xffffffffffffffff, &(0x7f0000d83ff8), 0x800000000024)

12:47:29 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:29 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:29 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

12:47:29 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:29 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
socket$nl_route(0x10, 0x3, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:29 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:30 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
socket$nl_route(0x10, 0x3, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:30 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{0x0}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000300)={{0x2, 0x0, @loopback}, {0x0, @random="bcafc263e6f7"}, 0x0, {0x2, 0x0, @multicast1}, 'yam0\x00'})

12:47:30 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

12:47:30 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:30 executing program 2:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
waitid(0x1, 0x0, 0x0, 0x8, 0x0)

12:47:30 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
socket$nl_route(0x10, 0x3, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:30 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:30 executing program 2:

12:47:30 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 2:

12:47:30 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:30 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:30 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0)
dup3(0xffffffffffffffff, r0, 0x0)

12:47:30 executing program 2:

12:47:30 executing program 2:

12:47:30 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:30 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:30 executing program 2:

12:47:31 executing program 2:

12:47:31 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:31 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:31 executing program 2:

12:47:31 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:31 executing program 2:

12:47:31 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:31 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:31 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:31 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:31 executing program 2:

12:47:31 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:31 executing program 2:

12:47:31 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:31 executing program 2:

12:47:31 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
openat$tun(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/net/tun\x00', 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:32 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:32 executing program 2:

12:47:32 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:32 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:32 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:32 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
write$P9_RXATTRWALK(r0, &(0x7f0000000200)={0xf}, 0xf)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(0xffffffffffffffff, 0x0, r1, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:32 executing program 2:

12:47:32 executing program 2:

12:47:32 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[  145.112455] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.137659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
12:47:32 executing program 2:

[  145.189566] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
12:47:32 executing program 2:

12:47:32 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[  145.241244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.292900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.327087] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.354192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.380141] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.413734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
[  145.434857] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=4944 comm=syz-executor.5
12:47:33 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:33 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:33 executing program 2:

12:47:33 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:33 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:33 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r2, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0)
dup3(r1, r0, 0x0)

12:47:33 executing program 2:

12:47:33 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4)
bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0xfffffffffffffcd1, 0x200007fd, &(0x7f0000000140)={0x2, 0x4e23, @local}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
recvmmsg(r0, &(0x7f0000009880)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES16=0x0], 0xff5a)

12:47:33 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:33 executing program 2:
seccomp(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x20006, 0x0, 0x0, 0xfffffffffffffff8}]})
fcntl$lock(0xffffffffffffffff, 0x0, 0x0)

12:47:33 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{0x0}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:33 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[  146.164698] audit: type=1326 audit(1568465253.602:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 pid=5004 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45c72a code=0xffff0000
12:47:34 executing program 3:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000200)={0xf}, 0xf)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

12:47:34 executing program 1:
mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x6, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0)
write$P9_RATTACH(r1, &(0x7f0000000080)={0x7}, 0x10000003e)
splice(r0, 0x0, r1, 0x0, 0xffffffff, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x0)

12:47:34 executing program 5:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'\x00\x00\x00\xe6\xff\xff\xff\x00\x00\x00\x00\x00\x02\x00', 0x5002})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="030000000000000008001b000000000033881456ede0d8d33a043132e7e8a4c536036a42e8a955fb27c302b5da960652a8d4baf4a72da521b6af3e46771d3e"], 0x28}}, 0x0)
r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r3, 0x1000008912, &(0x7f00000000c0)="11dca50d5e0bcfe47bf070")
ftruncate(r2, 0x2007fff)
write$P9_RXATTRCREATE(r2, &(0x7f0000000140)={0x383}, 0x7)
write$P9_RSETATTR(r2, &(0x7f0000000040)={0x7}, 0x7)
sendfile(r0, r2, &(0x7f0000d83ff8), 0x800000000024)

12:47:34 executing program 4:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

12:47:34 executing program 2:
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070")
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r1, 0x0, 0xfffffffffffffeb0, 0x20000003, &(0x7f0000000080)={0x2, 0x1000004e23, @local}, 0x10)
getpeername$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000140)=0x10)

12:47:34 executing program 0:
r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000100)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}})
readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/200, 0xc8}], 0x1)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/33, 0x369}], 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4})
ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0)

[  147.091963] ==================================================================
[  147.099444] BUG: KASAN: use-after-free in tcp_init_tso_segs+0x19d/0x1f0
[  147.106196] Read of size 2 at addr ffff8881ccc86530 by task syz-executor.2/5034
[  147.113631] 
[  147.115256] CPU: 1 PID: 5034 Comm: syz-executor.2 Not tainted 4.14.143+ #0
[  147.122258] Call Trace:
[  147.124845]  dump_stack+0xca/0x134
[  147.128387]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.132787]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.137189]  print_address_description+0x60/0x226
[  147.142028]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.146428]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.150854]  __kasan_report.cold+0x1a/0x41
[  147.155090]  ? kvm_guest_cpu_init+0x220/0x220
[  147.159574]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.163975]  tcp_init_tso_segs+0x19d/0x1f0
[  147.168198]  ? tcp_tso_segs+0x7b/0x1c0
[  147.172095]  tcp_write_xmit+0x15a/0x4730
[  147.176157]  ? memset+0x20/0x40
[  147.179447]  __tcp_push_pending_frames+0xa0/0x230
[  147.184282]  tcp_send_fin+0x154/0xbc0
[  147.188088]  tcp_close+0xc62/0xf40
[  147.191631]  inet_release+0xe9/0x1c0
[  147.195342]  __sock_release+0xd2/0x2c0
[  147.199232]  ? __sock_release+0x2c0/0x2c0
[  147.203374]  sock_close+0x15/0x20
[  147.206823]  __fput+0x25e/0x710
[  147.210106]  task_work_run+0x125/0x1a0
[  147.213994]  exit_to_usermode_loop+0x13b/0x160
[  147.218573]  do_syscall_64+0x3a3/0x520
[  147.222459]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  147.227637] RIP: 0033:0x4135d1
[  147.230835] RSP: 002b:00007ffe6d9cf370 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  147.238534] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004135d1
[  147.245788] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  147.253037] RBP: 0000000000000001 R08: 00000000ec30bdcf R09: ffffffffffffffff
[  147.260289] R10: 00007ffe6d9cf450 R11: 0000000000000293 R12: 000000000075bf20
[  147.267542] R13: 0000000000023e8d R14: 0000000000760ac8 R15: ffffffffffffffff
[  147.274800] 
[  147.276424] Allocated by task 5038:
[  147.280032]  __kasan_kmalloc.part.0+0x53/0xc0
[  147.284503]  kmem_cache_alloc+0xee/0x360
[  147.288539]  __alloc_skb+0xea/0x5c0
[  147.292144]  sk_stream_alloc_skb+0xf4/0x8a0
[  147.296439]  tcp_sendmsg_locked+0xf11/0x2f50
[  147.300822]  tcp_sendmsg+0x2b/0x40
[  147.304339]  inet_sendmsg+0x15b/0x520
[  147.308114]  sock_sendmsg+0xb7/0x100
[  147.311801]  SyS_sendto+0x1de/0x2f0
[  147.315405]  do_syscall_64+0x19b/0x520
[  147.319276]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  147.324448]  0xffffffffffffffff
[  147.327702] 
[  147.329307] Freed by task 5038:
[  147.332567]  __kasan_slab_free+0x164/0x210
[  147.336786]  kmem_cache_free+0xd7/0x3b0
[  147.340737]  kfree_skbmem+0x84/0x110
[  147.344424]  tcp_remove_empty_skb+0x264/0x320
[  147.348894]  tcp_sendmsg_locked+0x1c09/0x2f50
[  147.353364]  tcp_sendmsg+0x2b/0x40
[  147.356888]  inet_sendmsg+0x15b/0x520
[  147.360669]  sock_sendmsg+0xb7/0x100
[  147.364357]  SyS_sendto+0x1de/0x2f0
[  147.367965]  do_syscall_64+0x19b/0x520
[  147.371831]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  147.377121]  0xffffffffffffffff
[  147.380394] 
[  147.381998] The buggy address belongs to the object at ffff8881ccc86500
[  147.381998]  which belongs to the cache skbuff_fclone_cache of size 456
[  147.395425] The buggy address is located 48 bytes inside of
[  147.395425]  456-byte region [ffff8881ccc86500, ffff8881ccc866c8)
[  147.407202] The buggy address belongs to the page:
[  147.412110] page:ffffea0007332180 count:1 mapcount:0 mapping:          (null) index:0x0 compound_mapcount: 0
[  147.422062] flags: 0x4000000000010200(slab|head)
[  147.426812] raw: 4000000000010200 0000000000000000 0000000000000000 00000001800c000c
[  147.434669] raw: ffffea000712bd80 0000000700000007 ffff8881d6770400 0000000000000000
[  147.442522] page dumped because: kasan: bad access detected
[  147.448214] 
[  147.449821] Memory state around the buggy address:
[  147.454745]  ffff8881ccc86400: 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc
[  147.462089]  ffff8881ccc86480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  147.469428] >ffff8881ccc86500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.476777]                                      ^
[  147.481690]  ffff8881ccc86580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.489023]  ffff8881ccc86600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  147.496356] ==================================================================
[  147.503699] Disabling lock debugging due to kernel taint
[  147.512065] Kernel panic - not syncing: panic_on_warn set ...
[  147.512065] 
[  147.519579] CPU: 1 PID: 5034 Comm: syz-executor.2 Tainted: G    B           4.14.143+ #0
[  147.527795] Call Trace:
[  147.530378]  dump_stack+0xca/0x134
[  147.533913]  panic+0x1ea/0x3d3
[  147.537097]  ? add_taint.cold+0x16/0x16
[  147.541066]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.545474]  ? ___preempt_schedule+0x16/0x18
[  147.549873]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.554269]  end_report+0x43/0x49
[  147.557706]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.562107]  __kasan_report.cold+0xd/0x41
[  147.566247]  ? kvm_guest_cpu_init+0x220/0x220
[  147.570815]  ? tcp_init_tso_segs+0x19d/0x1f0
[  147.575215]  tcp_init_tso_segs+0x19d/0x1f0
[  147.579436]  ? tcp_tso_segs+0x7b/0x1c0
[  147.583315]  tcp_write_xmit+0x15a/0x4730
[  147.587372]  ? memset+0x20/0x40
[  147.590652]  __tcp_push_pending_frames+0xa0/0x230
[  147.595486]  tcp_send_fin+0x154/0xbc0
[  147.599282]  tcp_close+0xc62/0xf40
[  147.602823]  inet_release+0xe9/0x1c0
[  147.606529]  __sock_release+0xd2/0x2c0
[  147.610413]  ? __sock_release+0x2c0/0x2c0
[  147.614550]  sock_close+0x15/0x20
[  147.618000]  __fput+0x25e/0x710
[  147.621277]  task_work_run+0x125/0x1a0
[  147.625157]  exit_to_usermode_loop+0x13b/0x160
[  147.629733]  do_syscall_64+0x3a3/0x520
[  147.633622]  entry_SYSCALL_64_after_hwframe+0x42/0xb7
[  147.638796] RIP: 0033:0x4135d1
[  147.641974] RSP: 002b:00007ffe6d9cf370 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[  147.649666] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00000000004135d1
[  147.656926] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004
[  147.664191] RBP: 0000000000000001 R08: 00000000ec30bdcf R09: ffffffffffffffff
[  147.671452] R10: 00007ffe6d9cf450 R11: 0000000000000293 R12: 000000000075bf20
[  147.678714] R13: 0000000000023e8d R14: 0000000000760ac8 R15: ffffffffffffffff
[  147.686645] Kernel Offset: 0x11400000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)
[  147.697546] Rebooting in 86400 seconds..