1:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'wg1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="030000003daa86ae48da0cf87b39344ca03ea08477ef000051403c1d6790e9f0d2904a0e01d37db2502ce404ef3e17b8adaa67c3580a5bf01af331452b42bf6d0e2b8cf4b8371438531c1208bc14254d828fdda7d89fe7fec1e6b0dc72f2fcc84f10a396dd6843d228cd79730623087cd3c7b26eba2d4d5b540ecd93111e53f34c17a23bdc4afc8a241332979aef18cd3361544e41a5262cc33bd9be72daf957e146eaca9736778f8c96e42cc61191000000000000000000e1ffffffbe0000000000"]})
prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0)
accept4(r1, &(0x7f0000000340)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f00000003c0)=0x80, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000080)={0x0, 'vlan1\x00', {}, 0xfffd})
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0)='NLBL_MGMT\x00')
read$dsp(r0, &(0x7f0000000040)=""/1, 0x3fffff)
ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000400)={0x1, 0x2, 0x6, 0x4a, 0x6, 0x96c5})
r2 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0xc88, 0x101000)
ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/187)

09:43:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setuid(0x0)
kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0)
lsetxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080), 0xc, 0x2)
ioprio_get$uid(0x3, 0x0)
socket(0x11, 0x800000003, 0x0)

09:43:58 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0)
r1 = openat$char_raw_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/raw/rawctl\x00', 0x0, 0x0)
ioctl$RAW_CHAR_CTRL_GETBIND(r1, 0xac01, &(0x7f0000000000)={0x0, 0x7, 0x0})
io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000000180)="14a9c02674dba19700ecfc3d13c78071ee63779ba778fb43014b91343bf01518e34f8da5320091194b3c1806bb271c5ef1a5d6f2a1f1bfda686e88e60e35e1f90be0e67ca7ab441753475f05640428826b5fd20f95b50cd6d42a8d44dec8ca49f6c929f12b75664b3403f40eb2b57fd65e80843e570ac8fa788ec051817ac8c0bd2cb09cd3c04e02b1be7dd2357eb86e5cc271ed0066ed34ab9e026308871899ebdeb51ec859c800e5908aa519bec91640", 0xb1, 0x8, 0x0, 0x1, r0}])
read$hidraw(r0, &(0x7f0000000040)=""/161, 0xa1)
r2 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_SIOCGIFCONF(r2, 0x890b, 0x0)
openat$cgroup_subtree(r0, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}], 0x20)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000380))
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003440)={'gre0\x00', &(0x7f0000003340)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r4, 0x89fa, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x83666c71a4226d78, 0x7f, 0x2, 0x3e0a, 0x0, @empty, @mcast2, 0x700, 0x7, 0x80000001, 0x6}})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000003340)={'syztnl1\x00', 0x0, 0x7800, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}})
recvfrom$llc(r3, &(0x7f00000002c0)=""/128, 0x80, 0x40010001, &(0x7f0000000340)={0x1a, 0x338, 0xb4, 0x7, 0x0, 0x20, @local}, 0x10)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xe558da317baf90c5, 0x0)

09:43:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:43:58 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0)
dup3(r1, r0, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x10}, 0xc)
ftruncate(r2, 0x600004)
sendfile(r0, r2, 0x0, 0x80001d00c0d0)

[ 2526.677952][   T28] audit: type=1804 audit(1599558238.661:1754): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:43:58 executing program 3:
getpid()
sched_setattr(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x131)
close(0xffffffffffffffff)
ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3)

09:43:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:43:58 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x1f, @loopback, 0x2}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x8)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm_plock\x00', 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "d4d9555c7493900e8fca36117aaad1e04b13c6563e692554223bde6b665498a5da3279a9ec12f428fc01cfe93bdc65c43e18383242571f0a284393bdb6520d648f243408f9c330b42dff6af66cb970b7b4aba153fadaafe1311599e664cc74973d682e590c1b7346bc73b2e766611a6ba29f0b2045565b8aa1677b7dc14295cf8e39279f6016c36b6231a3c5bfb6e3346e523bd4c0810df2e6499a59a5cc4c1dc4599b22ccf1d3939290f9b23dabc0c07cae6fe3380b9535a0c51aa60997e5b1eb904d3b01252c1d74de4bc2f0f8b2638a15faaec456600d56e0db131664f21927eb9f9a3435fe283327e2258b1ef611cf0fc81e6edff49848cbcfe1dca0552f"}, r5}}, 0x128)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x7, 0x0, "af5eb3f3133f7ba636f2c92800b6b7facc62c3c4e2d6b785ea8b418853c9ced33554bd04cdee3b09603605073a60c9f564e92085e5c30039f7cdbaa76f010c7766e90988eb751136bbbf1135a26b317a"}, 0xd8)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000680))
r7 = getegid()
getgroups(0x2, &(0x7f0000000540)=[r6, r7])
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast2}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x3fe0000, 0x80000000)
r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r8, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r8, &(0x7f0000001380), 0x40003ad, 0x2000000)

09:43:58 executing program 5:
r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x4, 0x2)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x2, @pix={0x0, 0x0, 0x31364d4e}})

09:43:58 executing program 2:
socket$can_bcm(0x1d, 0x2, 0x2)
getrandom(0x0, 0x0, 0x0)
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x80)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00')
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'ib', 0x3a, 'xfrm0\x00'}}}}}, 0x30}}, 0x0)
accept(r2, &(0x7f00000000c0)=@llc, &(0x7f00000001c0)=0x80)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000080)={0x0, 'geneve1\x00', {}, 0x81})
setsockopt$rose(r0, 0x104, 0x1, &(0x7f0000000180)=0x1, 0x4)

09:43:58 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x0, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:43:58 executing program 0:
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setuid(0x0)
kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0)
lsetxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000080), 0xc, 0x2)
ioprio_get$uid(0x3, 0x0)
socket(0x11, 0x800000003, 0x0)

09:43:58 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xb0, 0xa, 0xd0e00fe, 0xb0, 0x100, 0x180, 0x1d8, 0x1d8, 0x180, 0x1d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x90, 0xb0, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}]}, @unspec=@TRACE={0x20, 'TRACE\x00'}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'veth0_to_team\x00', 'geneve0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x286)

09:43:58 executing program 3:
getpid()
sched_setattr(0x0, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10)
socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x78)
r1 = creat(&(0x7f0000000280)='./file0\x00', 0x0)
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x131)
close(0xffffffffffffffff)
ioctl$SIOCRSACCEPT(0xffffffffffffffff, 0x89e3)

[ 2526.920859][   T28] audit: type=1804 audit(1599558238.901:1755): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:43:58 executing program 2:
set_mempolicy(0x2, &(0x7f00000003c0)=0x1f, 0x3)
r0 = socket$inet(0x2, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = fcntl$dupfd(r0, 0x3, 0xffffffffffffffff)
write(r1, &(0x7f0000000100), 0x200eb100)
prctl$PR_GET_UNALIGN(0x5, &(0x7f0000000100))

09:43:59 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={0x0}, 0x10)
pipe2(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x10)
setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f00000001c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}}, 0x0, 0x5}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x1f, @loopback, 0x2}}}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x5}, 0xd8)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101140, 0x0)
ioctl$KDDELIO(r2, 0x4b35, 0x8)
getsockopt$inet6_mreq(r1, 0x29, 0x0, &(0x7f0000000080)={@local}, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/dlm_plock\x00', 0x2, 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r5}}, 0x128)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000580)={@in={{0x2, 0x4e21, @multicast2}}, 0x0, 0x0, 0x7, 0x0, "af5eb3f3133f7ba636f2c92800b6b7facc62c3c4e2d6b785ea8b418853c9ced33554bd04cdee3b09603605073a60c9f564e92085e5c30039f7cdbaa76f010c7766e90988eb751136bbbf1135a26b317a"}, 0xd8)
openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000680))
r7 = getegid()
getgroups(0x2, &(0x7f0000000540)=[r6, r7])
connect$pptp(0xffffffffffffffff, &(0x7f0000000180)={0x18, 0x2, {0x0, @multicast2}}, 0x0)
syz_extract_tcp_res(&(0x7f0000000140), 0x3fe0000, 0x80000000)
r8 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$llc(r8, &(0x7f0000000380)={0x1a, 0x1, 0x0, 0x9}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @local, 0x14}, 0x80, 0x0}, 0x0)
sendmmsg(r8, &(0x7f0000001380), 0x40003ad, 0x2000000)

09:43:59 executing program 0:
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000180)={0x77359400}, 0x0)

[ 2526.971322][T14840] ipt_CLUSTERIP: Please specify destination IP
09:43:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

[ 2527.017252][   T28] audit: type=1804 audit(1599558239.001:1756): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:43:59 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x54, 0x1, 0x8, 0x0, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x8854)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x20}, 0x0, [0x400, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1c0, 0x18, 0x3, 0x20eb7b2c, 0x0, 0x5, 0x40, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x5, 0x0, 0x200, 0xb4c, 0x80000000, 0x2, 0x5, 0x0, 0x0, 0x6e, 0x8000, 0x20, 0xf3b, 0x4, 0x800, 0xcc0, 0x9, 0x400, 0x0, 0x0, 0x7f, 0x0, 0xffff, 0x0, 0x0, 0x8ae, 0x0, 0x0, 0x81, 0xfff, 0xff, 0x6, 0x0, 0x1000, 0x6, 0x7, 0x3, 0x0, 0x7, 0x0, 0x0, 0x2, 0x6, 0x0, 0x10000000, 0x0, 0x7, 0x5, 0x40, 0x0, 0x3f, 0x0, 0x3883, 0x7ff, 0x8000, 0x1, 0x1d6000, 0x0, 0x4397b30, 0xf7, 0x0, 0x9, 0x1f, 0xd2c, 0x3, 0x15, 0x0, 0x6, 0x3, 0x1, 0x800, 0xd68, 0x9, 0x9, 0x9, 0x0, 0x2, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8001, 0x1, 0x10001, 0x80, 0x6, 0x0, 0x0, 0x9, 0x1, 0x0, 0x3, 0x0, 0x9, 0xbd9b, 0x3, 0x0, 0x0, 0x9, 0xffffffff, 0xfffffffd, 0x7f, 0x200, 0x0, 0x0, 0x44c, 0x3, 0xfff, 0x3f, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfa3b, 0x0, 0x101, 0x0, 0x10001, 0x7ff, 0x0, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0x3980000, 0x1000, 0xe0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x200, 0x7fff, 0xfffffffc, 0x0, 0x881, 0x3, 0xffffffe0, 0x8, 0x0, 0x0, 0xd9b, 0x0, 0x0, 0x0, 0x3, 0xc064, 0x7c3f, 0x873, 0xe6e8, 0x0, 0x0, 0x26c3, 0x8000, 0x8, 0x8, 0x0, 0x80000000, 0x7, 0x6, 0x21, 0xffff, 0x1, 0x2, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x401, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0xbca5, 0x4, 0x31, 0x7, 0x0, 0x0, 0x1c, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x5, 0x220, 0xdb5, 0x8, 0x1, 0x2f, 0x0, 0x3, 0x0, 0xe3, 0x1, 0x2, 0x2, 0xfffff28d, 0x0, 0x0, 0x4, 0x4, 0xdf7, 0x0, 0x8, 0x40, 0x5, 0x0, 0x80000001, 0x7, 0xb60e, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2ac0, 0x2, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x9, 0x1, 0x2d9d, 0x9, 0x9, 0x0, 0x5, 0x7, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0xffffffff, 0x80000000, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0xff, 0x0, 0x0, 0x38a, 0x2, 0x0, 0x0, 0xe349, 0x0, 0x0, 0x4, 0xad, 0x400, 0x7fff, 0x0, 0x0, 0x9, 0x1ff, 0x4, 0x0, 0x6, 0x400, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x6, 0x8, 0x0, 0x8, 0x7fff, 0x1, 0x7fffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0xffff, 0x80000001, 0x0, 0x2, 0x1, 0x1000, 0x316, 0x0, 0x10000, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3f, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x1, 0xd52, 0x1, 0xf840, 0x2, 0x3ff, 0x3d39b54a, 0x10001, 0x2, 0x9, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffff, 0xfffffff7, 0xc0, 0xbb72, 0x0, 0x0, 0x6, 0x0, 0xe10, 0x209303b5, 0x5, 0x5, 0x9, 0x91, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x8, 0xfffffe3a, 0x7, 0x3, 0x0, 0x7, 0x0, 0x7, 0x2, 0x6, 0xc0, 0x5, 0x80000000, 0x96, 0x400, 0x1, 0x0, 0x0, 0x200, 0x0, 0x210, 0x0, 0xffffff93, 0x0, 0x3, 0x0, 0x100, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x46, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x297a, 0x7, 0x0, 0x2, 0x2, 0x4, 0xdeb3, 0x35, 0x9, 0xaad, 0x8, 0x0, 0x3, 0x7, 0x3, 0x1f, 0x0, 0xffff, 0x8, 0x1, 0x9, 0x1ff, 0x3ff, 0x0, 0x9, 0x81, 0x0, 0xfff, 0xfffffe01, 0x0, 0x3, 0x120000, 0x1, 0x5, 0xfffffe00, 0x9, 0x0, 0x0, 0x0, 0x4, 0x8fe, 0x0, 0x8, 0x0, 0x9, 0x4, 0x1, 0x6, 0x10000, 0x0, 0x0, 0x9, 0x2, 0x6, 0x1ff, 0x0, 0x86, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x7e7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x7, 0x0, 0x0, 0x20, 0xfffffff8, 0x2, 0xf7, 0x7fff, 0x8d92, 0xffff9a7e, 0x378, 0x80000001, 0x7fff, 0x0, 0x0, 0x1ff, 0x9, 0x2, 0x8, 0x5, 0xff, 0x401, 0x6, 0xfffffff8, 0x8000, 0x9, 0x0, 0xffffffe0, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x7fff, 0x6, 0x0, 0x3, 0x8, 0x400, 0x19b585cb, 0x8, 0x0, 0xfffffffd, 0x9, 0x80000001, 0x9, 0x66, 0x0, 0x101, 0x400, 0x8, 0x0, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x3, 0x12, 0x2, 0xffffffff, 0xfffffc00, 0x3, 0x400, 0x20, 0x0, 0x2, 0x7fff, 0x0, 0x3f, 0x0, 0x0, 0x101, 0x7, 0x0, 0x4, 0x400, 0x19, 0x8, 0x1, 0x0, 0x8000, 0x2, 0x7fffffff, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0x4b4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x7ff, 0x0, 0x80000000, 0x1, 0x101, 0xfffffffd, 0x9, 0x0, 0x7, 0x52, 0x3ff, 0x3ff, 0x200, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, 0x9, 0x7, 0x401, 0x0, 0x0, 0x7ff, 0xfffffff7, 0x0, 0x0, 0x3, 0xb829, 0x7, 0x100, 0x4, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x5, 0x5, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x6b4, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x34a, 0x324, 0x3, 0x40, 0x7, 0x7, 0x3, 0x0, 0x5, 0x0, 0x5, 0x0, 0x6, 0x9, 0x40, 0x44000000, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x753b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x655, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3f]})
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000540)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$describe(0x6, r0, &(0x7f0000000080)=""/241, 0xf1)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

09:43:59 executing program 5:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101})
syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
dup3(r0, r2, 0x0)
fallocate(r1, 0x4000000000000010, 0x4, 0x7fff)

09:43:59 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c)
bind$rose(r0, &(0x7f0000000280)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000001c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)

[ 2527.109480][   T28] audit: type=1804 audit(1599558239.091:1757): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:43:59 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x3, 0x1007, 0x9, 0x0, 0xffffffffffffffff, 0x0, [0x2]}, 0x40)

09:43:59 executing program 3:
epoll_create1(0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0)
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x54, 0x1, 0x8, 0x0, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3f}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffff8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6005}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x44800}, 0x8854)
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000680)={{0x0, 0x0, 0x0, 0x20}, 0x0, [0x400, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0x7, 0x1c0, 0x18, 0x3, 0x20eb7b2c, 0x0, 0x5, 0x40, 0x3ff, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10001, 0x5, 0x0, 0x200, 0xb4c, 0x80000000, 0x2, 0x5, 0x0, 0x0, 0x6e, 0x8000, 0x20, 0xf3b, 0x4, 0x800, 0xcc0, 0x9, 0x400, 0x0, 0x0, 0x7f, 0x0, 0xffff, 0x0, 0x0, 0x8ae, 0x0, 0x0, 0x81, 0xfff, 0xff, 0x6, 0x0, 0x1000, 0x6, 0x7, 0x3, 0x0, 0x7, 0x0, 0x0, 0x2, 0x6, 0x0, 0x10000000, 0x0, 0x7, 0x5, 0x40, 0x0, 0x3f, 0x0, 0x3883, 0x7ff, 0x8000, 0x1, 0x1d6000, 0x0, 0x4397b30, 0xf7, 0x0, 0x9, 0x1f, 0xd2c, 0x3, 0x15, 0x0, 0x6, 0x3, 0x1, 0x800, 0xd68, 0x9, 0x9, 0x9, 0x0, 0x2, 0x10000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8001, 0x1, 0x10001, 0x80, 0x6, 0x0, 0x0, 0x9, 0x1, 0x0, 0x3, 0x0, 0x9, 0xbd9b, 0x3, 0x0, 0x0, 0x9, 0xffffffff, 0xfffffffd, 0x7f, 0x200, 0x0, 0x0, 0x44c, 0x3, 0xfff, 0x3f, 0x3, 0x0, 0x0, 0x4, 0x0, 0xfa3b, 0x0, 0x101, 0x0, 0x10001, 0x7ff, 0x0, 0x0, 0x0, 0x7fff, 0x4, 0x0, 0x3980000, 0x1000, 0xe0, 0x0, 0x0, 0x8, 0x0, 0x10001, 0x200, 0x7fff, 0xfffffffc, 0x0, 0x881, 0x3, 0xffffffe0, 0x8, 0x0, 0x0, 0xd9b, 0x0, 0x0, 0x0, 0x3, 0xc064, 0x7c3f, 0x873, 0xe6e8, 0x0, 0x0, 0x26c3, 0x8000, 0x8, 0x8, 0x0, 0x80000000, 0x7, 0x6, 0x21, 0xffff, 0x1, 0x2, 0x7f, 0x4, 0x0, 0x0, 0x0, 0x1f, 0x401, 0x101, 0x2, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x0, 0xbca5, 0x4, 0x31, 0x7, 0x0, 0x0, 0x1c, 0x0, 0x3ff, 0x0, 0x7, 0x0, 0x5, 0x220, 0xdb5, 0x8, 0x1, 0x2f, 0x0, 0x3, 0x0, 0xe3, 0x1, 0x2, 0x2, 0xfffff28d, 0x0, 0x0, 0x4, 0x4, 0xdf7, 0x0, 0x8, 0x40, 0x5, 0x0, 0x80000001, 0x7, 0xb60e, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2ac0, 0x2, 0x0, 0x0, 0x100, 0x3f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x9, 0x1, 0x2d9d, 0x9, 0x9, 0x0, 0x5, 0x7, 0x8, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x8001, 0x0, 0x0, 0xffffffff, 0x80000000, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0xff, 0x0, 0x0, 0x38a, 0x2, 0x0, 0x0, 0xe349, 0x0, 0x0, 0x4, 0xad, 0x400, 0x7fff, 0x0, 0x0, 0x9, 0x1ff, 0x4, 0x0, 0x6, 0x400, 0x0, 0x0, 0x3, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x6, 0x8, 0x0, 0x8, 0x7fff, 0x1, 0x7fffffff, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0xffff, 0x80000001, 0x0, 0x2, 0x1, 0x1000, 0x316, 0x0, 0x10000, 0x4, 0x0, 0x7, 0x0, 0x0, 0x9, 0x0, 0x3, 0x1, 0x3f, 0x0, 0x0, 0x800, 0x0, 0x10001, 0x0, 0x0, 0x1, 0xd52, 0x1, 0xf840, 0x2, 0x3ff, 0x3d39b54a, 0x10001, 0x2, 0x9, 0x81, 0x6, 0x0, 0x0, 0x0, 0x0, 0x800, 0xffff, 0xfffffff7, 0xc0, 0xbb72, 0x0, 0x0, 0x6, 0x0, 0xe10, 0x209303b5, 0x5, 0x5, 0x9, 0x91, 0x7, 0x0, 0x0, 0x7, 0x4, 0x7, 0x8, 0xfffffe3a, 0x7, 0x3, 0x0, 0x7, 0x0, 0x7, 0x2, 0x6, 0xc0, 0x5, 0x80000000, 0x96, 0x400, 0x1, 0x0, 0x0, 0x200, 0x0, 0x210, 0x0, 0xffffff93, 0x0, 0x3, 0x0, 0x100, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x46, 0x1f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x297a, 0x7, 0x0, 0x2, 0x2, 0x4, 0xdeb3, 0x35, 0x9, 0xaad, 0x8, 0x0, 0x3, 0x7, 0x3, 0x1f, 0x0, 0xffff, 0x8, 0x1, 0x9, 0x1ff, 0x3ff, 0x0, 0x9, 0x81, 0x0, 0xfff, 0xfffffe01, 0x0, 0x3, 0x120000, 0x1, 0x5, 0xfffffe00, 0x9, 0x0, 0x0, 0x0, 0x4, 0x8fe, 0x0, 0x8, 0x0, 0x9, 0x4, 0x1, 0x6, 0x10000, 0x0, 0x0, 0x9, 0x2, 0x6, 0x1ff, 0x0, 0x86, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x7fffffff, 0x7e7, 0x3, 0x2, 0x0, 0x0, 0x0, 0x8, 0x3, 0x1, 0x0, 0x7, 0x0, 0x0, 0x20, 0xfffffff8, 0x2, 0xf7, 0x7fff, 0x8d92, 0xffff9a7e, 0x378, 0x80000001, 0x7fff, 0x0, 0x0, 0x1ff, 0x9, 0x2, 0x8, 0x5, 0xff, 0x401, 0x6, 0xfffffff8, 0x8000, 0x9, 0x0, 0xffffffe0, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff, 0x1, 0x7fff, 0x6, 0x0, 0x3, 0x8, 0x400, 0x19b585cb, 0x8, 0x0, 0xfffffffd, 0x9, 0x80000001, 0x9, 0x66, 0x0, 0x101, 0x400, 0x8, 0x0, 0x3, 0x6, 0x0, 0x7fff, 0x0, 0x3, 0x12, 0x2, 0xffffffff, 0xfffffc00, 0x3, 0x400, 0x20, 0x0, 0x2, 0x7fff, 0x0, 0x3f, 0x0, 0x0, 0x101, 0x7, 0x0, 0x4, 0x400, 0x19, 0x8, 0x1, 0x0, 0x8000, 0x2, 0x7fffffff, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0x4b4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40, 0x7ff, 0x0, 0x80000000, 0x1, 0x101, 0xfffffffd, 0x9, 0x0, 0x7, 0x52, 0x3ff, 0x3ff, 0x200, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, 0x9, 0x7, 0x401, 0x0, 0x0, 0x7ff, 0xfffffff7, 0x0, 0x0, 0x3, 0xb829, 0x7, 0x100, 0x4, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x8, 0x5, 0x5, 0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x6b4, 0x0, 0x0, 0x0, 0x5, 0x9, 0x0, 0x34a, 0x324, 0x3, 0x40, 0x7, 0x7, 0x3, 0x0, 0x5, 0x0, 0x5, 0x0, 0x6, 0x9, 0x40, 0x44000000, 0x0, 0x0, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x753b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x655, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3f]})
r0 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000540)=@secondary='builtin_and_secondary_trusted\x00')
keyctl$describe(0x6, r0, &(0x7f0000000080)=""/241, 0xf1)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

09:43:59 executing program 0:
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0)
socket(0x11, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
r0 = socket(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8982, &(0x7f0000000000)={r0})

09:43:59 executing program 2:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000200)='/dev/adsp1\x00', 0x2, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000240))

09:43:59 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x6, 0x4, &(0x7f0000000000)="c4811cc1", 0x4)

09:43:59 executing program 5:
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
io_setup(0x1ff, &(0x7f00000004c0)=<r3=>0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x35b2, 0xe0b7})
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531101})
syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}])
dup3(r0, r2, 0x0)
fallocate(r1, 0x4000000000000010, 0x4, 0x7fff)

[ 2527.237959][   T28] audit: type=1804 audit(1599558239.221:1758): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:43:59 executing program 3:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getpeername$packet(r0, 0x0, 0x0)

09:43:59 executing program 1:
syz_mount_image$minix(0x0, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

09:43:59 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:43:59 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x0)
setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0)

09:43:59 executing program 0:
openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x0, 0x0)
socket(0x11, 0x3, 0x0)
socket(0x2a, 0x2, 0x0)
r0 = socket(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x8982, &(0x7f0000000000)={r0})

09:43:59 executing program 1:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(cast6))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
recvfrom(r1, &(0x7f0000003240)=""/4096, 0x100000205, 0xfffffff0, 0x0, 0x415)

09:43:59 executing program 5:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5)\x00'}, 0x58)
socket$nl_crypto(0x10, 0x3, 0x15)
bind$alg(r0, 0x0, 0x57)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0)
read$midi(r1, &(0x7f0000000280)=""/240, 0x20000370)

09:43:59 executing program 3:
r0 = socket(0xa, 0x6, 0x0)
connect$l2tp6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}, 0x20)

09:43:59 executing program 2:
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xfffffffffffffe83}}, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020609100000000000004c9e0000000200130002000000000000000000004105000600200000000a00000000000000000500e50008070000001f00000000000009200000000000020001000000000000000002000098a805000500000000000a00000000000000ff1700000000ffff00ba90a27854bb86020000ff00000000b3e6e44468a8bb71384a34542c29513db37b0e15712d698c1949695c1420914e00591abf5f03d977b781bae815b53f67378e9b7665c5874388e2c4b5f743ed329627643507a4d6da"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x393, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0)
sendmmsg(r3, &(0x7f0000000180), 0x393, 0x0)

09:43:59 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
pipe2$9p(&(0x7f0000000380), 0x4800)
write$P9_RWSTAT(0xffffffffffffffff, 0x0, 0x0)

09:43:59 executing program 0:
r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x2, &(0x7f0000000180)=[{&(0x7f0000000040)="040800090000ff01e66174000410090a0200027400f8", 0x16}, {&(0x7f00000004c0)="dbed7d4cac17", 0x6, 0x1f}], 0x0, &(0x7f0000000100))
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
fchownat(r0, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x100)

09:43:59 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xd840, 0x602c0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0x5452, &(0x7f00000000c0)={0x4000000000003e})
openat$cgroup_ro(r2, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)=0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="2e00000025000511d25a802a8c63940d0424fcfa75376004000e000a001100020000803715", 0x25}, {&(0x7f00000001c0)="6e62fb65418610abd90b9c1b0f4255b4ec983e6ee91a00"/33, 0x21}], 0x2}, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x240800, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0xf000, &(0x7f0000000180), 0x8, r4, 0x4})
r5 = socket(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={0x0, 0x12}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x4, r8, 0x2})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x2, &(0x7f00000000c0), 0x4, r4, 0x8})

09:43:59 executing program 2:
setuid(0xee01)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0)

09:44:00 executing program 0:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x70, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$net_dm(&(0x7f0000000040)='NET_DM\x00')

[ 2528.013606][T14921] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2528.126553][T14921] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
09:44:00 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:00 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xff}, 0x0, 0xe0c, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40000, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x102)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000001400)="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", 0xe00)
fallocate(r0, 0x11, 0x0, 0x10000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000200)={0x4, 0x6, 0x9, 0x0, 'syz0\x00', 0x40})
sendfile(r0, r1, 0x0, 0x14000)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

09:44:00 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)

09:44:00 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x91, 0x7, 0x5}, 0x40)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040)}, 0x20)
bpf$MAP_UPDATE_ELEM(0x4, &(0x7f0000000400)={r0, 0x0, &(0x7f0000000240)}, 0x20)

09:44:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xd840, 0x602c0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0x5452, &(0x7f00000000c0)={0x4000000000003e})
openat$cgroup_ro(r2, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)=0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="2e00000025000511d25a802a8c63940d0424fcfa75376004000e000a001100020000803715", 0x25}, {&(0x7f00000001c0)="6e62fb65418610abd90b9c1b0f4255b4ec983e6ee91a00"/33, 0x21}], 0x2}, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x240800, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0xf000, &(0x7f0000000180), 0x8, r4, 0x4})
r5 = socket(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={0x0, 0x12}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x4, r8, 0x2})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x2, &(0x7f00000000c0), 0x4, r4, 0x8})

09:44:00 executing program 3:
r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0)
syz_io_uring_setup(0x395a, &(0x7f0000000200)={0x0, 0xae16}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000280), &(0x7f00000002c0))

[ 2528.765370][T14961] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
09:44:00 executing program 2:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0x10000000)
semop(0x0, &(0x7f00000021c0)=[{0x0, 0xae}, {0x3}], 0x2)

09:44:00 executing program 3:
clone3(&(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

09:44:00 executing program 0:
perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)

09:44:00 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xd840, 0x602c0)
r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0x5452, &(0x7f00000000c0)={0x4000000000003e})
openat$cgroup_ro(r2, &(0x7f00000003c0)='io.stat\x00', 0x0, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)=0x8)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="2e00000025000511d25a802a8c63940d0424fcfa75376004000e000a001100020000803715", 0x25}, {&(0x7f00000001c0)="6e62fb65418610abd90b9c1b0f4255b4ec983e6ee91a00"/33, 0x21}], 0x2}, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsu\x00', 0x240800, 0x0)
ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0xf000, &(0x7f0000000180), 0x8, r4, 0x4})
r5 = socket(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={0x0, 0x12}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = eventfd(0x0)
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f00000001c0)={0x0, 0x0, 0x4, r8, 0x2})
ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000340)={0x2, &(0x7f00000000c0), 0x4, r4, 0x8})

09:44:00 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "209aee1f"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0})

[ 2528.956734][T14998] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.5'.
09:44:01 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001540)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x3}, 0x18)
r2 = epoll_create(0x8)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040))
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x8}, 0x0)

[ 2529.109712][T15020] vxcan1: tx drop: invalid da for name 0x0000000000000003
[ 2529.119030][T15021] vxcan1: tx drop: invalid da for name 0x0000000000000003
[ 2529.274037][T27821] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[ 2529.514033][T27821] usb 4-1: Using ep0 maxpacket: 16
09:44:01 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:01 executing program 2:
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfd1, 0x4)
bind$inet(r0, &(0x7f0000001440)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x2600cff9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$inet_sctp(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001500)="b7", 0x1}], 0x1}, 0x0)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000000300)="e1b023c21959ab1ba3cbe9cd17eadd14833ae32526d1ad2e3a922135cafa4e435c017ac331af3e613b3f5d3efbccb018c7010d8379a2084d6c4368890829a860782e3c68240479d5244541b48e4928dcef63a92824456314ba92efb1924809167f17291f3a056b4c428e5f449fd95961e65a0323d5607b1d9c17986505a2ebbc78e484b54000789ec6b90c1a18e45de2bf20baba1f1aa2ecd5261523b07414f75da3566d246eda5ac8b09e15b6462229a15d9130f07bc823105e81b02483e9003b2a2ab1f7607662fcaeb30aac", 0xcd}, {&(0x7f0000002c80)="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", 0xad7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="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", 0x144}, {&(0x7f0000001780)="ad0a09ef8e22c58b49eb22c2200043aed885612288c46a28e8ec3788515a86047f41ce89053371e4506929ab22f129c2bfa5013d61c53a21d4d2360399cc1994ae62318c2549e032fb9d", 0x4a}, {&(0x7f0000003840)="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", 0x29f}], 0x3}}], 0x2, 0x480d1)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @dev, 0x8}, 0x1c)
recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x100)

09:44:01 executing program 1:
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xff}, 0x0, 0xe0c, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nullb0\x00', 0x801, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x40000, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x102)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000001400)="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", 0xe00)
fallocate(r0, 0x11, 0x0, 0x10000)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40405515, &(0x7f0000000200)={0x4, 0x6, 0x9, 0x0, 'syz0\x00', 0x40})
sendfile(r0, r1, 0x0, 0x14000)
ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400})

09:44:01 executing program 5:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000300)={'vlan0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{}, {0xffff, 0x18ace7ba}]}})

09:44:01 executing program 0:
r0 = socket(0x27, 0xa, 0x0)
r1 = socket$kcm(0x29, 0x7, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x3d, &(0x7f0000000140)=""/163, &(0x7f0000000040)=0xffffffffffffffb7)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'macvlan0\x00'})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={<r3=>r1})
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00')
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x81010008}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r4, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x7d3, 0x0, 0x1, 0xfffffeff}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r4, 0x20, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x5, 0xf306, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x24000000)

09:44:01 executing program 2:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/timer\x00', 0x4a000)
dup2(r0, r1)

[ 2529.619190][   T28] kauditd_printk_skb: 14 callbacks suppressed
[ 2529.619201][   T28] audit: type=1804 audit(1599558241.601:1773): pid=15031 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="nullb0" dev="sda1" ino=16246 res=1 errno=0
[ 2529.654820][T27821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
09:44:01 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101})
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
read$usbmon(r1, 0x0, 0x0)

09:44:01 executing program 5:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101})
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000300)="d58881daf737c453ced927a38847", 0xe, 0x0, &(0x7f00000003c0)={0x11, 0x0, r3}, 0x14)

[ 2529.692518][T27821] usb 4-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00
[ 2529.711684][T27821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
09:44:01 executing program 2:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r2=>0x0}, &(0x7f0000000040)=0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x400, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0xfffffffd}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x1f4)

09:44:01 executing program 1:
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a004000022f000037153e", 0x23}], 0x1}, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(0xffffffffffffffff, 0x40184152, &(0x7f0000000340)={0x0, &(0x7f0000000300)=[&(0x7f0000000140), 0x0], 0x1f})
getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)

[ 2529.725465][   T28] audit: type=1800 audit(1599558241.621:1774): pid=15031 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16356 res=0 errno=0
[ 2529.754702][T27821] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 2529.809155][   T28] audit: type=1804 audit(1599558241.621:1775): pid=15031 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="file0" dev="sda1" ino=16356 res=1 errno=0
[ 2529.850440][   T28] audit: type=1804 audit(1599558241.691:1776): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2529.868031][T27352] usb 4-1: config 0 descriptor??
[ 2529.916640][T27352] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[ 2529.942443][   T28] audit: type=1804 audit(1599558241.821:1777): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2530.115554][ T6045] usb 4-1: USB disconnect, device number 22
[ 2530.584020][ T6045] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[ 2530.824041][ T6045] usb 4-1: Using ep0 maxpacket: 32
[ 2530.944069][ T6045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2530.955019][ T6045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2530.965819][ T6045] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.04
[ 2530.975175][ T6045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2530.986952][ T6045] usbip-host 4-1: 4-1 is not in match_busid table... skip!
09:44:03 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "209aee1f"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0})

09:44:03 executing program 0:
r0 = syz_open_dev$sg(&(0x7f00000002c0)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r0, 0x2287, 0x0)

09:44:03 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0x5c, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ctinfo={0x44, 0x1, 0x0, 0x0, {{0xb, 0x1, 'ctinfo\x00'}, {0x4}, {0x15, 0x6, "31e2738ad688c934c384d2b1127406a080"}, {0xc}, {0xc}}}]}]}, 0x5c}}, 0x0)

09:44:03 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept$ax25(0xffffffffffffffff, 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORLOCK(0xffffffffffffffff, 0x5380)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)

09:44:03 executing program 1:
r0 = socket(0xa, 0x2, 0x73)
sendmmsg$unix(r0, &(0x7f00000068c0)=[{&(0x7f00000001c0)=@abs, 0x6e, 0x0}], 0x1, 0x0)

09:44:03 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

[ 2531.979046][T27821] usb 4-1: USB disconnect, device number 23
[ 2532.030972][T15105] tc_dump_action: action bad kind
09:44:04 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000000))

09:44:04 executing program 5:
r0 = syz_io_uring_setup(0x36d0, &(0x7f0000000200), &(0x7f0000000000/0x3000)=nil, &(0x7f0000ee7000/0x3000)=nil, &(0x7f0000000080), &(0x7f0000000000))
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/152, 0x98}], 0x1)

09:44:04 executing program 1:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x2f, 0x0, 0x0, 0x3ff, 0x10, @local, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x1, 0x23, 0xea7c}})
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2a6df, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004880)={&(0x7f0000000000)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000000200)="d21e00e71e22eb7b456b3236b9b183f7c59bd6baa8d59ee10a522901d4b39c971db4159d0e470b32f87d8e18ee6c61218ec04fb86d8846c6357b3bfafb9a01456c7985b87fb9e3e5ade883aea3ee8278fbe83256eda8b58f71e0333747936676aaf15b1db676c9c27773459cf5b29b0fec11d19a0f55715c0fbe219a9593cccfadadf308b4cab8f31b822442e4467f69e5223d9745d35fc91c22954e1a8c33e55bc20fd2d36c42ff322785a2df9533ff03de0e21bfafbec51b5ac2eef08c2be72d38d1b27d71e40bd26179c95a4614a97553d136b773c8e046f7696a130d4ca9137194ef3d00888cc5352d76cca57a3da507733bfe6e8ff2dd93490d5ec0a5b4b700c308d20e7f5279d1cdd084d11d40841fa991a8493409a65f4bd699b3c5bca0103e74e4ecde94133eb88ede99a6a2b9cf3f09a5826af1d15a8227a096c6dfdbae871be66887e2a150d0653c63d1f39fdc62c598a74e5edddde5a6ea96f61ea09ddfa5f8df7bd529a50fd8daccdad61aed5286ac98e1881ddd28aa11e9e07ebee25ebb46bc39978eae0df2638ae5442b889ebc2358a30f7fa5176baeceb09b85961e9287c2bf8b5149106961014b7a16b63658f55901798b71e6b7bd7e725a30f2c883a1d2edfcc73b70f2e50977702c70c3dfd66b15a4b15abf4ddd1db0ef921150ab87efb9b71ac31d624c93f1b067751caaa949ed2a4aaacfb255abfd0061da865447d5978767f788ba598d6a6b350d1b38b0d3f0592204d80f3f4f85db57e254c27cab08996e9fb0f06119ffe6541a57629470faeee4000e83aa6e58d3879f3f22ef53907c4c4f94e8dd0485cd6f16ebed7b81de05b5cb26495dc056a311a0c480e8832394c90f139f576e8ebbba7658887a96c0862853a7e48b7664f88a308b60ceb7cbd906acf51617720a6e3e0e9bcb438d826e12caa9088c64d051beb0411e76063d50f70353ba593047ac83b8ec0b3b3d52316b848057fcc778f66c72d4eccebf1b79edd10edb6a598e5f6b018dd8d8122ffcbbe8d60686b1d8251d1f7877a98f5e3026d69ca3945c879511cfa8957ee6b8d5d9b01137ef80794c737648ef16eb482052d04daf4888ab01de70fb4504069ab2e229e57947847497a407bf99a995dec2ba9ccd335653f9fb2e28190b36458c4f91d70ac3feadc21357e90a95631dfdbf241177da2924abfddafada3d917e466e0f965cf3a982b93cce331fbdfcfad457d7829cab1a7b00dbc2ba316cca1c8dc9f414e6ad521d2a2ecbf8eb3d74592bd4c4e0e1857e32191dc7c93931e239a89c3388d396acdd51e61dc6298134cb6f24bfe32fe56b5e58702e2076d9c6c4651b2eddaa3e514f4fe74a635ee4ebb7127cd67b5d5a24d79d93e3bef98085af483856157b20c44ad74d41c9bcd39412aabdabc8db39916bf604adbcdb9ccf4c9eded53e414b7244f80c2c306230583e710a1ee91972393afb9003a9ce3d481865d49138870a2dbae3dbf4a7f39d18f10261ee521ccb83bef5a00868e69604be39901c7aeaaa5006438b0d7fd3a0fbeffca612ae3a5757ef5e29887394b3de50484769f4c4cc8627240cd8604f21132806ad659850b68013eeee49ea6bcf91ec54f75cb091dbfaa05658bd177cae18d3b5fb69a40548c652047f48225b7fad6e480fd5d3648bf3d605a1bd07ec288573b5f4ebc871b19a32abc1fd08b3a50312d024f0e62c8ca6c2026911f2a15e5de9592e2b427d02acdf0b095ea2ebd87bac3d3acf7e60e9d188cf28c36f1fc73751894ee44c2c9393cfb9165cdc9500611780bc8754d1689e61bcb5b5eeda52a30d9d96e129f89b7cbaf17bc5183c9d6dab6fdd8f9e41163ab2306702d7969dfd639153a5a014f164bc1a4edd817fccb048eebe4ac458a27c5be413c081df902562ef6066b91e7e06d79c555bb6145287b3c4d65724e629d7d13cd1a0d063ab9f27709a17b6a30c553128037dd4a65328addbe8d74b12983bf5ab93f50883146570ae0e9329e3e72ff39c8581d622b3f3a52247d2736703f589665c6853b7be9daa2d6d204dae8eb09ed4e09c97447da6cbe1c58b48bc1a33536e79f41cc6afa0d86aa8a68c914708a69dc423425f6b7aeab24d4311efd01fd70dd60249df6032a780021ab103de1beba697f1fca00200e0eebdd7b8e2d970e5b5d6dc855ec9cbd03b409fb7393cc6f6d2ebd62bc7a0160828cc748b6749ebcba23bdf23fd27557f274659ecf965edd7461426fb571c4c459ce86921c1d93c3c0a5b179a5513de5a05998625fee90d736091d09c1dafddc441c49ea70491c3ffe4c886bde66d91f8bee3bf70971f63d2613f7b6f0eacc304fb02d29fc1d1c7380d1caa7071bf452a0fc93af41695573095b3fbdc9f87d39f00cb887dd434ee737fa90455761ea2f04c35f50ccbbff353b3efcffc06960fe5f29761e51934b5d4abac41ebb958a6ac79465ddcfe3c2e2242b86360ec579cf4cfc65938688be75eff5bdba0f1773e30e51cf14859b623235655f95ec98dce7bb656d57f3cf6b5218c639edd252576b6d5d98548697d0b1ca6b2df8f2b61dc9cf42c26cc44e0ffc85fe3dd778a248a7037530ef28d1429f6d500ddcbfc79d392b9f7c4b9d6cbeebdff098345c38f6dd694813496b554a8f6526638ad9ab62b5f178dee578d9c4bca28157fabeec0bc7b5b22ed9743814bb47aa9e1c25b531901d64d820187d1d2943a6416110c0c105558a1a3e791258ee187eb9e2a3c210733e95a8e939793f03b445535db6cc4eac2ff6785a7fcdb0c8ac8da5f19a8fdd267c6a35adc35a2902f2553c033a7a6bd807f094d05f26f66ddd82881e83fe205819451916f743a31dab537c1e77451c74b0262f03d20987f84e48131fe53e41d6177b790594c4f3f897fbfa9b11d6638fce8d7a3830dec958a0128fbe35bcbf1577b602241629dd17a959bcea53fcb3946449bb8b7134c869c8d83263de3050e3dbd7a65fdc2adeb36ccd74abd2b2e205495d4a8c898f1b69454f1062347c46f5b936b3a176f25395dcd2eec96776686679fb644289454931db5ff41474c05c9e547cfae55e12e4ceef05acddfe9b0d240472f3a7c6674a818a860606e2d5952ac3dc1c364c0cd62983d9f86f33e1b7c0dcd6f7f8c7da40650cc14f2528a4a892b869d0f8938bfdaf1534e97458639f6904a8614f1fc9975f16fa0c2cfdf6baab98352a90fd6b9a874fa8399f2a8850c154bcf45a704cb6ac78eb114606e48f1c8168be0c4710e0bfe2de8d6a81cf6d469976dc45b183fa3f2784fbbb0472c4c2a934abcbdb8c2c141364314b53b01786a9ed83c217e91c01332f9fbbbfcdcbf090c9dd42143fbab86f8692317b52236f459afc3beb3e5d1428bc635144afaaad7aa6a54e4be4d1343f8f2cf2b49bd7a443519b3a4947b41e010acbe17f853027b93c5838808931df3019376cc6bd675003955c23c690a2421efce25c958bd438c370ce910475432a8222ca523fe9a2fe62e725778b968c4b4ff754c21a9697a939bbcc70d29c86f2f664bbfe01347c5e44e7435520a8374559a3410f399a03acdddcd879bc2ce2daf5685b1cedbefc0025b26393a35649b2f6098add614afb8f56fda63dc3af506af1dc38c8025590af02f9b32dd9f7e99d3d98d017fa6ee5d9a0cf149fafea96fc8453883635605accb34e14faf2c1fa09a69b82b549740820cbc3048b05bb06b764bf3e1700cc427c16bfddaf4b9c27f8f07296876fbd284adacea08100ef36f51013577527b82f692ae4eee61d154d7146cf4d52af73a15f6a5585b164165f6d77bdf52fee2329a46174c7c96d58f30aa7627d05ad17a13337b9e5384ea5540f1f9398b51f87911d861dfd48102fee9869a284fede86df6c2526889c79ef2c592e3ec0bc48730d0194adfe55b61bde6252ea8920be5dd2d0db4fdc91680577264af6814faa36be082fd1849ed106be7d60fb6f4df272d9cfdc41f8bfa0897fdd8cee68becf190bd8665ef66e0814146d2c30f1617cbae85918e3e256a9c7a6fec2271d388b89c7fa82020e24594739bde69080762ce01bf2f1eddf12668d5949a1d03abd3d9a456cedc02d84d7cc677f9275f544fb8fe8d3e4d4cc14c03c4c1ad78ded1856dd03b1b1b70452150b1e5e8a1bde5bf7fc7ad8add6b0ba72493950e5881a9102b6fa5b4cfe179d9a7027828d1779a4edaa23ba7e4eb6dbf92801628149a3e857c076e6de23f5d076abb97ccb72f4ed64ba250bc43b5c493cf1542e278695499ab63b22bdb060c1d43e0d2d63fa103041789ac64dfcd68edee7eb0e7b8a574fee25bdd6663763a3320a4796132d5316cb7e7f8188ee629904242140902b5d9f2795714ca6f1b984462cc4cfc4d1b0735556c2358432cfd90a9f171ac1e83ef295f9193d405c39130ee11cf0a2133646c28f36a5d75a8bba514c222f1641ad6e3528f031b565817268b0404f433cbd9bf83929ac5a840df1342827595bcb3e079a9c2eebdd97f2961ca9d989a3a7a5e7774ca6b470c656b43cabf792b2124203bc42c93e16c2c1a37c7c52effc683d54151ae7c61e41792d58a1378c31cb2e8a7130163a7a4bfe02682110f1e517c103a5700b51a58ea4f6bfada0d98012f82c9594235ff0a311796e8a72aaed64e944bd3c1595783361d4e8239b84eb591a0e636b2d0c3b05c643d7d1f29270f89ff4579f68e5905b6fb24886096729bbe262ae6c9bf59f863682b8f2cc8ae3252a2c25f70196632f9e33637285f2fe859df8e6626866d3828885e4d9016a054b18fd5078c9e47d1cfd9118860767f72352d08d809756775be96cb10fb9832a758fafe11ef8dc73ae2521fbe88dcd3dbbfb7cb50411900b50f206054885539a4d2cbab272e547dfcffeac6db3a8aba0b0e021614f3738c68efaaffb7669ee2332987ef3c845cb1be5d52830d5b604b027257afe6a87d5863bc650e9b020ca0227002a0a5a040b1f3650be4ea44be88fd23027d0a931bd08b9d0ca01ce0c2ae55e6ee019006cc126a15d93b2a7db6822f805fc0ba78752939fd10c550fb618ac64fe07a887159b4af1d1cf6bd93473ec14d0f7b4de763709863be65e0202c4da2e99572cc3785030ebdf73840d10e411886eb4e25129bf56d3f1626170afe9ed1ec5df718128a653ba11676ddfe78cf45c9b07130e4f301bd0c02f9b601c1a954a4a2e5efd022044d9e4fd80d25059be7814b735525b9fde3d226b4ec0a8529efe2f40d3774995c2cb29fca51c63574bd94fc2a3cba0359418d30d8d7ab44acee707a2b097e50e8342395bec1da5702fd0a0cda7e409fb209d684dd8712509317dc31da41806e259942d0a7901197c95402e9ac63935e19311dc7d68182dff9025b9b764875da2836f6e1d65f960be3d37622b32d23e7393e854da001587c7d0604c1b06f36d95941cbd29ad8c9bf7e3caef6f37cec18fd7490449e08cdb299bbd287667c0202bb5be8ceb940edb82d7d24b2eeb401368f342553dfdf6b7fe48fadd2be0f7f6a1f2c8a8d995fcf59b32f71d393aae8d63bc19fde939507258758450e2968bf3ef8b7b9318b5a4c745c677bce89afaf2a1a68b6c9de04d6d437ed8a43abe46f8cecf6c6095edc4b396e82ce715b33bde2d284b411ed5b68668a264d6a03b6da02d4291a9eb8394e2ab6e11b7853357ee6c6a7caefa6ba590cff5bf7091dc90b08da945cf5436663e52b52cfa7821b5a802335baa32530e64b3c9c1fae11dbb7115a191be3a3100c3dea070571b069bb014218e0f5983dfe793f0c5a655e378ad5a69791085afc61a47fef5db3a858ec8f3d16a6d96d9ce569e2ee3f4f9b94bc9d0c6380742ee3c755afbcbd5092f998d38e596788eb9a029c0e146b2543f58113a1a50e617d5d96edaf64ee6d8d3785a8a31c3c4fde94c0591f020fec5b05039d8558de969c27dd45e6d567c15b11cb30d65b761e11ab86991645fded9bc034b238d85fee0ab01317ecbed9d869bd7f64f92b0cec2168dbea0b5be0c6896dbe231d739a2befebd337ac53d6be9be8a9dbc0e12c1454bafaf77f5b8401672458833464f6a3fdcbbff5f481a66b5e438308ebadbb11e24dec8dd40d47dcdff6b5b7add5d484f5eb655a08d19849eaccde1152e74af4bb4e55b82b5b82317b2fbaa43666ae9fb6729501774a1935e49fd73cdf7c1c6f906c4cf4bb5b2138f529c612297fe64d6a7e34aebee5d8ebb22ff2d6ce292b56f6b1c2c1570a58339808d4c109843b3ee882a6e66f85361e5366ddba5226f2ae62d6d913f3b4269fddc411dee96eeed727a7543e96cdf80369481d0111159d7d9f6ad97601b95dce3d5e13878bbf2a2f5eff64b4163af8eba29cf7c4e75e2c3fce7530f7a79a9198e8e8279f9084b8a54bf0c18e197c2e73707243f9e5bd512ec1f6105b90f16200275a26a2937912b76ea02e575ffa290db1164e73ebea2ed5a7d39ff7e37ec5514fcecf6ffeb2b719ee2d875a10a37fa3109dd9883c62e7c1df5d52f081553b9c00c5ceb23a6d86022d09790c9a47d3d566fa15804b0055545a107f945c6e5336feefa7b2d13b725fd6f35277478b02a35450aaea47e3230c7e51c9704add93eac66a404cf0ea0dce6702efadc85d7c099d540917daea7ad47be6fbe5f2caea9556dd3c8352e42e4daac37a59025168cef8c9544ef58f475c740d11362dd61d949826e52a64918acb6067bf8833be09efc8d632a2e1f34816c9619c73c882603be023b0986af5c0aa9c6463df5c95071ecf6d91cabbcdd4973a0c4ae19129698a78740fc952c354ee559e3cf730f8b2bd11f28afdfe0a982463f53a459d5ce8c5cee6c8864b4ad93985baeb8cb6bc572e0fcf32c99a0a9fd882c91792b5f06a0810cfc0f6fbd68ed6acb394fe435714d785aaa18e946682dabc2701f8671f493af9bf7d49e441a3531f1a05731503dab17a81f8935f8d4c54adc28127858f68e2990a0757c01c6818f7e3abd241e3277eb6a47b93343adec81dbcbb1a084b8ef73857f9407d888a314710e7722f0cffcf342e1a1b006e53bebaf6b836b423895df8bfdc7dcedcddb2dba8bbcf1b06c2cfc38afcb4538fe8817d222817928cf2a2f79d973c261c3130986f470bf8ffa1b3a2bdde03be5ca32280757856948334e5e2e04c7a38aaa5fc3e8e4be1af892dd2d2967520dfef40f4582f153db08dc6f01c257a16bc293af723c8a9518095488a61c5aaafe57789a8afb5b2922647553f17366ec34e53b0eac94457310fe464db7b54c8a6b44d054fcdbd0e25f0a5573b32ab4c3407a61ef17beb7f61f3912cfa514732683413174b27bf11e8f1db552a7f49f1f64616a73a82341c92cb0432787f729243baa7de487649d42d287d8027438457b600ba3d0bd296c95662db21f5f14dd84440d3dce441c6a544e18242febedce0ec5772cd29b20c6e00c1b7c7deaea2a92460f1e85b03a51805adaff0893a03d7ed9e605e50846ccff1740e958ff701b47126a1f1ad1794553ad6e394f891df4130e7ecaa4ee6facf7ba8fc522dae362f420a8006190950c578b7cc1ec5f8b8c0d9b26abba05b18b749fcb97c8fc64fc75c0a043f0358bf3b72d4e0d128ad125d15a5a521250d12950f272e6524ada8012a9122eaebf71425e85b786edd4f8a1e1b69093b5bee09b43e1da363682ebda94b3f9fca82e6b6311cbddc56fbe01ace7db30d4c9c06124cc8a5490964fab2138c01e5ef290499c7d282350d43473f698d1a487d8bfb0a4817843c5405d1e412ec1d8395fa33d48f3075ab161ab46f97bd86e426fcfe4739bb47bc34bd80b66f4079a4c67aeb3433f38f299961e8b5f96940c80ae03faf775ae9d42da62db6970b277c297b0d3f87d73c0306cde7f04132fab1d238beff078546d6b2c926acfa419e3aab64459f30839f325a4aec8bb4fd1fe733e1c1c420e17e799be150f56d14699aeb39c3832f4ad5ee5c742c5e8bee793b35d873a0cb3471759474e68c151c7149c8a19b856929925c134805f9233ad4361e297942f5d472894a4173c4abfd0baafd938a044765cbe393808ea9d365747996ee4a9008b1b20566b8c18bcab4f53db5fb52b8a4730ffa89219a687661dfb2cfb86d5bcbd6b7e711889710e51eda20984a49093038bcdc7886b01e191a923c7411e5b23582c1a2a66762e6d8cbd09d2f4dbb10302b969ce7b40671adb55721de48af08c6fff8c2a219d47af9b4101f10802a13dc9fd769fc712a856c97c66588fc11d695eab35df8f81bbf348205d69514fe6444e90789d571a5079852b46c645e70b39ff23b661008ec95af14ef08433686dacacd906f02d6e527e20c74c7eb6fa69375a4596a7e5376e0d0b28f6ae94d6dc9daa217066d265328bcfc091c97ae9c6b011126e489c27f353c2dbbda5027793fbaada0904e43f9349e5d68c64b59ac424d431f48735acf5506dd6ab47defae8603dc91842e14ca1ea06f591662c20ee8c8cca1751f36c99c920784ca9dc6cc9344274e25c46013b62b4f28167b8754fd484ddc2044a7435a6a58ba5dbe5bc716cef35f189d868131648bd81d3a356008d8d674a001e1661afdae9a464be3e276db48350605e9583d0813fc8eaa0c8b722b61dc2c6ece563d718a1a5b5fbbd1a0060a96c978ac67b27dbb662cd2945c371f8ca63c465527144712f67be74f92a4a72f1bd5c7f9bee6fff0ddf9e883e6fe35b3a2bd15308c7c330a899e42f8af2d6bb2a760376643b812ca6361a2a84c754e2179cacf94d24e695b37b480dd4ecceea043802f764d33335b15eebb12ec992039273c729f38674808f853ff0edcdc8d22327bbd9fb95a437f19a08df08f7abb755126f815a0e03b12b821b8fe4877125a29b5be2530ecd6673ea2f41609c167b7b099673725beb436fa25aa068b9b63143170a0d35017bfdfd1504b09ebcfc880f8c5d05e124be559c88e198dee047be8d0fdc19b49dd7cdd606afeb93eae4d9230468f9dfa3e5ce33495d9f416bbabe83d55b31fed6f5804c68f6c456d0623c8ac3c31db933f7d4d5895798ea48c63b6298df04dc7d4ca9f33d5c4975858a3a0f2bdee9b73b79a100fee7a1297c29d0d1d9f2f40b6f914fa6f119b54ce44181e0fa0585226783a18a1f875a10c905e55aa4e3b749b6aa01ec79b13f191eebe2a0654891b0bfc482263582542edb667b0a82a1257c71b73bcd0e3c2a5a25280e68cb0cf3380890cd2e903edfbba6a1cd27bbe4c4c3d5ddd442e50d054694988383fb3783d5a6c1a91418eca6d56c36f0848fedd606bc31b1cfd457e5648d8df825da4cb6f2856f52a944e40f990efab590427da9b7db2bb3e6f2b512776b6d11c5df0338b38dce500a7fe31cb4c83d59bb8f4a6a253258e84faaf1c2df15e08880882fcf77957c8126185ea345c3cf982e14ac3b30cf7cb566b93cbd9967d63d7572a6e5768c48365e57eb8a70d33a1d9a7f7a747d97ccb979ebafa0585c2237a3a8b6d857e28832f56cfcc6cf5d54faee8884cc005a333a144738dd2d82b1c0491f1a36389e37d9699afeba595391ddaffce4d47010aed251c4bdc0b40226a0a6ebe5b9fd3fa26fc5b12db72d30d042846c41713eb93536f348cab3a70088b959d4b531e9ba7b814f8af2d1e2158eaccb86e29c5708ec72f80fda1b60776fd9644ba9e16c8b4cb146ffd545b32d6fa12fe1a4384ca6cd60fca223fcf734b64fd80fd3c7b7cb8c57360282a9a9e8811fad21b1664780e4323a39b153a8cb33b85351f2ccb61085c88aaa4b6a7c9557339f8a8554c0f39379a63ac8fd60424bdf248b2a8d5fff25093e58421bade116534d518c6b834e4a2e4d0e437f7555ac6d11f3795a185355fff2c77ae10c131aa61cfedab5bf4d62c4abec2143a72199efceb1963e0ff82f18c37be02325f3ce24591823f6b385482b16c5e4644fe39da0f97ed69c1fe9c1afd13975e73cede3087a99dfe1198e8f5960df667aab6ec2b14c99f163d8b26acf468aa2db7cacf5e35e3d8bfef893cc57fb00ca0be0cdf83f020418a34c2b8b12b88a53f8e6c6f26a6c0571165323b709bf732a3f6adb3bd87c3cd4ec40dd63ec012b81df9398f1edfbccc4a7ad859fcf3c3307c94e327c051ad4a5971d192a085b26d096bfefcbb83841280988f7d245acd28fbff80a9d7d0ddc3187da30463cbe9a3a620c5af7ec21a234d2688ba30c0bf36ac9771af2ec32409a4fe9419e54ae201af847a2bf67ec6c6dae9c714ba59af49a5a06fc9bab2e3cbe424b3bde88dd0a8f770776c9b7f46aecd70d7cbd95c1f029899afc213396f00d9a72fbbb9682f24055478a01281073f35433dca33b9b70d9ce435f2586a1317227c3a1c174b65da625c7f069a139c165f1ce0bfc7f068f67c06e3e7d4f027873b49d206d35f2e9bb236f72aba82be6d898c3fafdece7764b080b0d77995641bf6e5605837ccaed2a47703b2dc044bdae03a586146734cbef28e02c425bb2a0febe521906ef5a2f14f9deccdf479c0d610c9ff99c22082542311e1fc92003d2229484c5b91945722842dd57bbbd5ea2147e2e979142eee2873196b29adfebf579ecadf4d2e91e8e9d04b1f82a900df3a6d1d0cd83d88e6f73c3c37b5b02c9df2923bf1249c64fe65f06ff5e203b25b3818f35eea574c3a607efb94345fe431ef84cc62285ebee141bc77aa15f6e85236b80d8bd2a0894c671b5aae3e7232b89ce1ba789dca6031661e5e16e0532857be7217536667d50e7a15d5751e02852d00f65f9fd14bffaf6b28db42c62d667266f2739d55b73fbd75e0b070d23a5270282f88285aacf165d6d87f5ee15e2232632d8fcd55ef45c3167c5b632ec6a5a362176c600456af1d7a76bc5e60fa0994eafe7421e7101e0143b05c7d6fbe14bb4a0bd282b0c44ac5c2e2908108a253574f875b83bdf788c7fa1832e192027ea239e655b9283926e60c22aca98a0969ca0ad17623db41f1c2657db473e0d4574b38ab3eafac5ef0f6f0623b38f338353f1d8a21b8157e6a8df9647118cdb2e07674b6bcf8c2b641efe08044ab12f679077f160c8693e91df48dd82e26d9d91af1f6344d27711c838bfbec9585a5bd39f89286a8cf33f779a9d6078d27d09336f33ce325d53cf4377e05ea8c42119d4933fa70cd2a782e6b014704d89d56ff9c664b0d222f57bee763c2c9585182534291a56b6c525c1464ff02ba0d71b64b713955df67abe5a055202672fc62fd4263bb037ef82b28f4bfa5998159a433512291cf34d17bf5463ebab479a88737f27d8244d74a82607e3baf76429367fa9d076f4e35e7b4bb89a65b6c721be4bd964e5883733eb7009b86e5d89b2571cf463378b5f0f20792d1e4e312026a826759942d5b01abd771cde0441a014437cbf476576866d77d4aaad58c122739ecd3a29d02be57a0350cf0a46a62faec6d5810b6d0a649f55ab424d207c5d8f7b0d0dab8555f14402564fa027ac838234b36d15a2b8ace77cc6b97f5df9a45fc6f2a83ef6e0c3041102d882f97fd007fc1a1f6cf38b8c6d3f689370facbebeafee943f51d21f5999f4cfe10b4f7e1d7896c4b50cdf7260e40a1cbd45cb1d60d1eec4dfa22fac6d33ce13baaecf36fbe81a64837063b162", 0x2000, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={0x20}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0xa0, 0xfffffffffffffffe, 0x4, {{0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3, 0x8, 0x10000, 0x4, 0x80, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x989}}, {0x0, 0x10}}}, &(0x7f0000006840)={0x20, 0x0, 0x2, {0x4}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r0, 0x80, 0x700, 0xaa6, 0x4, {{0xf, 0x4, 0x2, 0x1b, 0x3c, 0x0, 0x0, 0x81, 0x0, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0x13, 0xbc, [@multicast1, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}}})

09:44:04 executing program 2:
socket(0x2, 0x3, 0x200000000000ff)

[ 2532.070055][   T28] audit: type=1804 audit(1599558244.051:1778): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:04 executing program 0:
pselect6(0x40, &(0x7f0000000080)={0x0, 0x1000000, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
ioctl$SNDCTL_SEQ_NRSYNTHS(0xffffffffffffffff, 0x8004510a, &(0x7f00000000c0))
write$FUSE_LSEEK(r0, &(0x7f0000002200)={0xffffffee, 0x0, r1, {0x1000004}}, 0x18)
r3 = getpid()
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r3, 0x0, r4, 0x0)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x0, 0x74, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}]}, 0x3c}}, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002440)={&(0x7f0000002280)={0x18c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r7}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x1)
openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0)

09:44:04 executing program 2:
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc))
futex(&(0x7f0000000100)=0x1, 0x800000000006, 0x0, &(0x7f0000000040)={0x77359400}, 0x0, 0x0)
r0 = gettid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x10006, 0x80011, r1, 0x0)
tkill(r0, 0x1000000000016)

[ 2532.139088][   T28] audit: type=1804 audit(1599558244.121:1779): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2532.424033][T27821] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[ 2532.684028][T27821] usb 4-1: Using ep0 maxpacket: 16
[ 2532.814483][T27821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2532.832770][T27821] usb 4-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00
[ 2532.842546][T27821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2532.851594][T27821] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 2533.015047][   T28] audit: type=1804 audit(1599558245.001:1780): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:07 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "209aee1f"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0})

09:44:07 executing program 1:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0xf8da}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000240)={&(0x7f0000000040)=@in={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000000c0)="e9", 0x1}], 0x1}, 0x0)

09:44:07 executing program 5:
perf_event_open(&(0x7f0000000bc0)={0x2, 0x70, 0xc8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x27, 0x304, &(0x7f0000000040)="b9010360e002f000009e0ff043051fffffe100004000633a77fbac141441e0000001be3e7d2a182fff", 0x0, 0x104, 0xa000000, 0xe0ffffff, 0xfeb9, &(0x7f0000000640)="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", &(0x7f0000000100)}, 0x28)

09:44:07 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, 0x0, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:07 executing program 0:
perf_event_open(&(0x7f00000003c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f096d07ff00cd66299667b70536342623b372d82fefa01f", 0x1f}], 0x1)

09:44:07 executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400019)
write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x0, 'memory', 0xff}]}, 0xfdef)

[ 2535.029553][ T6042] usb 4-1: USB disconnect, device number 24
09:44:07 executing program 0:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/35)

09:44:07 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00')
sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0)

09:44:07 executing program 0:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = dup(r1)
setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000340), 0x2)

[ 2535.128438][   T28] audit: type=1804 audit(1599558247.111:1781): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:07 executing program 0:
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', <r0=>0x0, 0x2f, 0x0, 0x0, 0x3ff, 0x10, @local, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x8000, 0x1, 0x23, 0xea7c}})
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x2a6df, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_fuse_handle_req(r1, &(0x7f0000000100)="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", 0x2000, &(0x7f0000004880)={&(0x7f0000000000)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000000200)="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", 0x2000, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002340)={0x20}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0xa0, 0x0, 0x4, {{0x6, 0x2, 0x0, 0xffffffffffffffff, 0x8, 0x8, {0x0, 0x0, 0x0, 0x3, 0x8, 0x10000, 0x4, 0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x989}}, {0x0, 0x10}}}, &(0x7f0000006840)={0x20, 0x0, 0x2, {0x4}}})
bpf$MAP_CREATE(0x0, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xfffffffffffffc98)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl0\x00', r0, 0x80, 0x700, 0xaa6, 0x4, {{0xe, 0x4, 0x2, 0x1b, 0x38, 0x68, 0x0, 0x81, 0x0, 0x0, @private=0xa010101, @local, {[@rr={0x7, 0xf, 0x0, [@multicast1, @empty, @local]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xf, 0x53, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x18}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, 0x0)

09:44:07 executing program 5:
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
symlinkat(&(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fspick(r1, &(0x7f0000000000)='./file0\x00', 0x2700000000000000)

[ 2535.169554][   T28] audit: type=1804 audit(1599558247.151:1782): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:07 executing program 2:
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x401000, 0x0, 0x2, @thr={0x0, 0x0}})

[ 2535.210788][   T28] audit: type=1804 audit(1599558247.191:1783): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2535.243391][   T28] audit: type=1804 audit(1599558247.221:1784): pid=15174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2535.280875][   T28] audit: type=1804 audit(1599558247.251:1785): pid=15174 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2535.309643][   T28] audit: type=1804 audit(1599558247.291:1786): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2535.484061][ T6042] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[ 2535.744028][ T6042] usb 4-1: Using ep0 maxpacket: 16
[ 2535.874427][ T6042] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2535.887367][ T6042] usb 4-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00
[ 2535.896991][ T6042] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2535.906024][ T6042] usbip-host 4-1: 4-1 is not in match_busid table... skip!
09:44:10 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0x404a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090000206d041cc304000000000109022400010000a0000904000001"], 0x0)
syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x29, 0xf, {0xf, 0x29, 0x1, 0x0, 0x0, 0x0, '\x00', "209aee1f"}}, 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000002880)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x0, 0x4, "6852c892"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000001c0)={0x0, 0x0, 0x4, "37b0aa6c"}, 0x0, 0x0, 0x0, 0x0})

09:44:10 executing program 2:
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x11, 0x800000003, 0x0)
write(0xffffffffffffffff, &(0x7f0000000280)="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", 0xec4)
setsockopt$packet_buf(r3, 0x107, 0xf, &(0x7f00000014c0)="12cb96df", 0x4)
bind(r3, &(0x7f0000000200)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80)
write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8)
splice(r0, 0x0, r2, 0x0, 0x10005, 0x0)

09:44:10 executing program 5:
add_key$user(&(0x7f0000000180)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)

09:44:10 executing program 0:
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0)

09:44:10 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:10 executing program 1:
r0 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)=')\\*/{\x00', &(0x7f0000000100)='\x00', 0x0)

[ 2538.075192][ T9872] usb 4-1: USB disconnect, device number 25
09:44:10 executing program 5:
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x80045006, &(0x7f00000000c0))

09:44:10 executing program 1:
r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
ftruncate(r0, 0x1000)
lseek(r0, 0x0, 0x2)
r1 = open(&(0x7f0000000240)='./bus\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f00000000c0))
creat(0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r0, r1, 0x0, 0x80000000002b)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
setsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000300)=0x8, 0x4)

09:44:10 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x257}, 0x0)

[ 2538.183504][   T28] audit: type=1804 audit(1599558250.161:1787): pid=15209 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="bus" dev="sda1" ino=16267 res=1 errno=0
09:44:10 executing program 5:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000002c0)={0x3, 0x0, 0x8913e4ac, 0x0, 0x80000001})

[ 2538.245329][   T28] audit: type=1804 audit(1599558250.231:1788): pid=15218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="bus" dev="sda1" ino=16267 res=1 errno=0
09:44:10 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000041c0)=ANY=[@ANYBLOB="3c000000100081"], 0x3c}}, 0x0)
recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0)

09:44:10 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x2, 0x5, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4)

[ 2538.339973][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2538.350268][T15223] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2538.544233][ T9872] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[ 2538.804724][ T9872] usb 4-1: Using ep0 maxpacket: 16
[ 2538.954651][ T9872] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2538.984229][ T9872] usb 4-1: New USB device found, idVendor=046d, idProduct=404a, bcdDevice= 0.00
[ 2538.993267][ T9872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2539.026048][ T9872] usbip-host 4-1: 4-1 is not in match_busid table... skip!
[ 2539.035819][   T28] audit: type=1804 audit(1599558251.021:1789): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2539.144066][   T28] audit: type=1804 audit(1599558251.121:1790): pid=15218 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="bus" dev="sda1" ino=16267 res=1 errno=0
09:44:13 executing program 3:
syz_mount_image$cifs(&(0x7f00000000c0)='cifs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)='[}\x00')
lremovexattr(&(0x7f0000000000)='./file0/file0\x00', 0x0)
syz_mount_image$nfs4(0x0, 0x0, 0x0, 0x0, &(0x7f0000001740), 0x0, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200)

09:44:13 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0x9, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0xa0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x28}}, 0x0)

09:44:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:13 executing program 2:
setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x4)
sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r1)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @dev, 0x6}, 0x1c)
splice(r0, 0x0, r1, 0x0, 0x100000002, 0x0)

09:44:13 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00')
preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/154, 0x9a}], 0x1, 0x4ad, 0x0)

09:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
syslog(0x4, &(0x7f0000000140)=""/177, 0xb1)

[ 2541.121685][T27821] usb 4-1: USB disconnect, device number 26
09:44:13 executing program 5:
socketpair(0x28, 0x80801, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100))
syz_io_uring_submit(0x0, 0x0, 0xfffffffffffffffd, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x10e, 0x0, 0x0, 0x0)
accept4$packet(0xffffffffffffffff, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000540)=0x14, 0x800)
socket$packet(0x11, 0x0, 0x300)
socket$packet(0x11, 0x0, 0x300)

[ 2541.197908][T15247] CIFS: Attempting to mount (null)
[ 2541.220691][T15247] CIFS: VFS: Device name not specified
09:44:13 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x12c}}, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x42, 0x0, 0x0)

[ 2541.246906][T15247] CIFS: VFS: Malformed UNC in devname
[ 2541.268615][   T28] kauditd_printk_skb: 2 callbacks suppressed
[ 2541.268625][   T28] audit: type=1804 audit(1599558253.251:1793): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2541.275044][T15247] CIFS: Attempting to mount (null)
09:44:13 executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x1, 0x0, 0x0, 0x6}, 0x0)
clock_gettime(0x3, &(0x7f00000002c0))

09:44:13 executing program 5:
r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={[], 0x0, 0x8, 0x2})

09:44:13 executing program 2:
clone3(0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x5, 0xca)
perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x1)

[ 2541.339122][T15247] CIFS: VFS: Device name not specified
[ 2541.351987][T15247] CIFS: VFS: Malformed UNC in devname
09:44:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x160, 0x0, 0x148, 0x160, 0x148, 0x310, 0x240, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'vlan1\x00', {}, {}, 0x6}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'bond0\x00'}}}, {{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

09:44:13 executing program 3:
open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d::],0::6:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0)

09:44:13 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x0, 0x0, 0x0)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, "8000"})
ioctl$TCSETA(r0, 0x5451, 0x0)
r1 = syz_open_pts(r0, 0x0)
ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, "000000001000000000000010000000001000"})
fstat(0xffffffffffffffff, &(0x7f0000000240))
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0bc8f30686d3828edec", @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf25450000000c009900ffffffff020000000c00990001800000000000"], 0x2c}}, 0x2004c004)

[ 2541.411447][   T28] audit: type=1804 audit(1599558253.391:1794): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2541.486520][T15271] ceph: No mds server is up or the cluster is laggy
[ 2541.508016][   T28] audit: type=1804 audit(1599558253.491:1795): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:13 executing program 2:
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyprintk\x00', 0x0, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000100))

09:44:13 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:13 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000600)={0x198, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x170, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x13c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x198}}, 0x0)

09:44:13 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x8)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x160, 0x0, 0x148, 0x160, 0x148, 0x310, 0x240, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @empty, 0x0, 0x0, 'ip6gretap0\x00', 'vlan1\x00', {}, {}, 0x6}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50, 'multiport\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'bond0\x00'}}}, {{@uncond, 0x0, 0x190, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}, @common=@inet=@recent0={{0xf8, 'recent\x00'}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x408)

09:44:13 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0x1, 0x4, 0x4, 0x4002, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
r1 = socket$packet(0x11, 0x2, 0x300)
dup2(r0, r1)

09:44:13 executing program 3:
socket$inet(0x2, 0x3, 0x7)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000001740)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300), 0x10)
openat$cgroup_devices(r0, 0x0, 0x2, 0x0)
clone3(&(0x7f00000015c0)={0x208201000, &(0x7f0000000200), 0xffffffffffffffff, &(0x7f0000001440), {}, &(0x7f0000001480)=""/51, 0x33, &(0x7f00000014c0)=""/129, 0x0, 0x0, {r0}}, 0x58)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001680)={0x100000000, 0x0, &(0x7f00000000c0), &(0x7f0000000100), {0x19}, 0x0, 0x0, &(0x7f0000001340)=""/216, 0x0}, 0x58)

09:44:14 executing program 5:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0)
clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000002, 0x0)
r0 = getpid()
rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f00000000c0))
ptrace(0x10, r0)
r1 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0)
getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x8)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0)
write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {'\x00', 0x1000}}, 0x1006)
r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0)
ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="ff1d1b99", @ANYRES32=<r4=>0x0], &(0x7f000095dffc)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={r4}, &(0x7f0000000040)=0x100)
ptrace$peeksig(0x21, r0, 0x0, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200)='TIPC\x00')
sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000340)={&(0x7f00000001c0), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r5, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80000000}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x2000000)

09:44:14 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000440)='wireguard\x00')
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000600)={0x198, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x170, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg='\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x13c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik'}, @WGPEER_A_ALLOWEDIPS={0x114, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={[], [], @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x198}}, 0x0)

09:44:14 executing program 2:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0)
read$hiddev(r1, 0x0, 0x0)
read$eventfd(r1, 0x0, 0x300)

09:44:14 executing program 1:
r0 = syz_open_dev$char_raw(0x0, 0x0, 0x0)
read$char_raw(r0, 0x0, 0x7ffffffffffff)
socket$kcm(0x29, 0x0, 0x0)
r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x800400)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$char_raw(&(0x7f0000000000)='/dev/raw/raw#\x00', 0x0, 0xa02)
write$char_raw(r2, &(0x7f0000000080)=ANY=[], 0xfffffdef)
ioctl$CHAR_RAW_ALIGNOFF(r2, 0x127a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$CHAR_RAW_RRPART(r1, 0x125f, 0x0)

09:44:14 executing program 5:
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0xffffffffffffffff, 0x2)
r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0x4020940d, &(0x7f0000000140)={0x3, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "4452a259"}, 0x0, 0x0, @planes=0x0})

09:44:14 executing program 0:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket(0x28, 0x1, 0x0)
getsockopt$nfc_llcp(r1, 0x28, 0x0, 0x0, 0x401000)

09:44:14 executing program 3:
r0 = socket(0x11, 0x2, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x541b, &(0x7f0000000000)={0x0, @l2tp={0x2, 0x0, @empty}, @llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, @generic={0x0, "dbb3e50b93d12494bab3361cf0a1"}})

09:44:14 executing program 2:
mkdir(&(0x7f0000000380)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
r0 = socket$rxrpc(0x21, 0x2, 0x0)
dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00')
bpf$PROG_LOAD(0x5, 0x0, 0x0)
open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
lseek(0xffffffffffffffff, 0xec, 0x0)

[ 2542.137361][   T28] audit: type=1804 audit(1599558254.121:1796): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2542.228696][   T28] audit: type=1804 audit(1599558254.201:1797): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:14 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:14 executing program 3:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
sendmmsg$inet(r0, &(0x7f000000a940)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000000c0)='S', 0x1}], 0x1}}, {{&(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000380)='h', 0x1}], 0x1}}, {{&(0x7f0000001800)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000001a80)=[{&(0x7f0000001840)="88", 0x1}], 0x1}}, {{&(0x7f0000001b40)={0x2, 0x0, @remote}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000001b80)="f4", 0x1}], 0x1}}], 0x4, 0x0)

09:44:14 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0)

09:44:14 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fffff7a}]})
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x103001, 0x0)
write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'io'}, 0xb)

09:44:14 executing program 5:
shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000)
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x20041, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00'}, 0x200004dc)

09:44:14 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x8914, &(0x7f00000000c0)={'tunl0\x00', 0x0})

09:44:14 executing program 0:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f00000000c0))

09:44:14 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080)='ethtool\x00')
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x3, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}]}, 0x2c}}, 0x0)

09:44:14 executing program 1:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000700))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x800}]})

09:44:14 executing program 2:
r0 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000100))

[ 2542.919210][   T28] audit: type=1804 audit(1599558254.901:1798): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:15 executing program 1:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080))
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, <r1=>0xffffffffffffffff, 0x3000500})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000080))
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001280)={0x0, 0x0, "cce1135361296a18a846aa4b3e974023e534277e89c1619af25de20d75e53d4f2aa955288914fbc6787997ef72d11fa9dd98738bfd0c98b43d39bffc95ed9d6e6dd9c8bab534be243834f9d57ede9db0675c543606bb4d301816387970c10ca47730764c519037c0a3bf66f2363011c14c2941f924e2213ed33dbb8238cf637681e260e748db589b5315bd4bedcd255beb285b6294177f5ab0d79c357a0b4e24b447d9855797dadea111b9eb0ad1158de906a05c4c4357d7337496030ee14b6c70cc48f83937a7db9f032ca3d15e57c138ccc21e805040c003494d60a3f1fcae93862acefb2bb0b07f3f3f8e24d4f5de3981cd753acdb4d333f7a38fb54ab38c", "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"})
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000044ec0)={0x103, [], 0x1, "df58c9725fd91d"})
openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0)

09:44:15 executing program 2:
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x0, &(0x7f0000000280)})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000900)={0x400a0100, &(0x7f0000000140), 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58)

[ 2542.982471][T15346] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2542.995383][T15349] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2543.039087][   T28] audit: type=1804 audit(1599558255.021:1799): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2543.083125][T15354] IPVS: ftp: loaded support on port[0] = 21
[ 2543.099723][T15354] vxcan1 speed is unknown, defaulting to 1000
[ 2543.184672][T15354] lo speed is unknown, defaulting to 1000
[ 2543.226557][T26278] tipc: TX() has been purged, node left!
09:44:15 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:15 executing program 5:
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0), 0x0, &(0x7f0000002480)={[{@block={'block', 0x3d, 0x800}}]})

09:44:15 executing program 0:
syz_emit_ethernet(0x4e, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x4, "6ed418", 0x18, 0x3a, 0x0, @initdev={0xfe, 0x88, [0x8, 0x0, 0x0, 0x0, 0xd], 0x0, 0x0}, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @loopback}}}}}}, 0x0)

09:44:15 executing program 1:
syz_mount_image$tmpfs(&(0x7f0000000400)='tmpfs\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[])
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$tmpfs(&(0x7f00000000c0)='tmpfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x80000, &(0x7f0000000240)={[], [{@fsname={'fsname', 0x3d, 'tmpfs\x00'}}]})

09:44:15 executing program 2:
r0 = socket$inet(0x2, 0x3, 0x1)
sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x2, 0x0, 0xf0ff7f}, 0x17, &(0x7f0000000140)={0x0}, 0x73}, 0x0)

09:44:15 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
r2 = getpgrp(0x0)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000800)={0x0, 0x9000000, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, r1, 0x536ae464467e3e0b, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

09:44:15 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000021c0)={0x2, &(0x7f0000002180)=[{0x2c}, {0x6}]})

09:44:15 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
recvfrom(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

09:44:15 executing program 1:
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140), 0x4)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x6, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x1605daec6ff55df8}, 0x24024040)
socket(0x0, 0x2, 0x0)

09:44:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001c0000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

09:44:15 executing program 0:
clone3(&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc37)

[ 2543.821097][   T28] audit: type=1804 audit(1599558255.801:1800): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:15 executing program 3:
r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r1)
r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, r2)
keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f0000000240)={0x5, 0x70, 0x1, 0x40, 0x20, 0x1, 0x0, 0x1f, 0x0, 0xc, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x7fffffff, 0x4, @perf_bp={&(0x7f0000000200), 0x6}, 0x0, 0x9, 0x2e1, 0x8, 0x75b, 0x0, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0xa)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000080))
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000140)={0x27, 0x1, 0x2, 0x1, 0x1, 0x7, "4c02e9e747c32db0ca2dea492f9dbc65e169fee5d575e727b8ee994566ff3a1b4dd488ab7a62b29b1ecea3c9eef7cff2f1184bb342e155a5889764a4b077d1", 0x16}, 0x60)

[ 2543.863327][T15402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2543.867588][   T28] audit: type=1326 audit(1599558255.821:1801): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=15394 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0
[ 2543.951972][   T28] audit: type=1804 audit(1599558255.911:1802): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2544.194024][ T9872] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[ 2544.444034][ T9872] usb 4-1: Using ep0 maxpacket: 32
09:44:16 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:16 executing program 0:
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000180)={0x1, 0x0, 0x551d})
fcntl$lock(r0, 0x5, &(0x7f0000000240)={0x0, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff})

09:44:16 executing program 5:
r0 = socket(0x2, 0x1, 0x0)
setsockopt$inet_buf(r0, 0x6, 0x20, &(0x7f0000000140)="0200018cc90ae595f95d38abc8382d002d89fbfe048c6518f65d7b6f6de772fe054d36fe0896e9a20f93d1c9acf6e441dfcd557f02ef990cc70c7cb24ab5a9eb305d5ce5bec9fede3bca3ef5bff990162259647568d8eb665136e9f9eeff6c77d36093f768276470824ab6a58deb3860f84c78b26d85cd92634feeb3590fb17c5a7cd6c06d140f6954d14294ec51d02c1a2e82344110eb714a89aa051dbdc42ba52b3d5c200a066fb429bb73c33ff1b4ee4d67cdc6e9331f3cd323e661e6dfb12c6c9fd70c411fcc489e0dfe1ea909054773ac7e2d9d01c6", 0xd8)

09:44:16 executing program 1:
r0 = socket(0xa, 0x5, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x84, 0x6, 0x400000, 0x84)

09:44:16 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00')
sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002280)={0x2c, r1, 0xfed4aeb3a435894d, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0)

[ 2544.585772][ T9872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2544.608977][ T9872] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
09:44:16 executing program 5:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0)
mmap$snddsp_status(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x13, r0, 0x82000000)

09:44:16 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f0000000780)=0x700)

09:44:16 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x3, 0x8)
setsockopt$packet_drop_memb(r0, 0x29, 0x3e, 0x0, 0x0)

09:44:16 executing program 1:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00', @private1}})

09:44:16 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101})
r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4)

[ 2544.637785][ T9872] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2544.650063][ T9872] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[ 2544.664835][ T9872] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[ 2544.676163][ T9872] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
09:44:16 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x26900, 0x0)

[ 2544.894122][ T9872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2544.903248][ T9872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2544.911584][ T9872] usb 4-1: Product: syz
[ 2544.915860][ T9872] usb 4-1: Manufacturer: syz
[ 2544.920474][ T9872] usb 4-1: SerialNumber: syz
[ 2544.930060][ T9872] usbip-host 4-1: 4-1 is not in match_busid table... skip!
09:44:18 executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'})
close(r0)

09:44:18 executing program 0:
socket$packet(0x11, 0x3, 0x300)
socket$rds(0x15, 0x5, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x6b)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xebb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9, 0x1, 'vlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0)

09:44:18 executing program 1:
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f00000002c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0)
r1 = creat(&(0x7f0000000080)='./bus/file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}, @prinfo={0x18}], 0x38}], 0x1, 0x0)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, 0x0, &(0x7f0000000140))
rmdir(&(0x7f00000000c0)='./bus/file0\x00')
ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESHEX])
mknodat(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = dup(0xffffffffffffffff)
ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, 0x0)

09:44:18 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x65}, [@call={0x5c}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f)

09:44:18 executing program 2:
r0 = socket(0x2b, 0x1, 0x0)
r1 = io_uring_setup(0x55b4, &(0x7f0000000040))
clone3(&(0x7f0000001600)={0x180000000, &(0x7f0000001340)=<r2=>0xffffffffffffffff, &(0x7f0000001380), &(0x7f00000013c0), {0x16}, &(0x7f0000001400)=""/193, 0xc1, &(0x7f0000001500)=""/184, &(0x7f00000015c0)=[0x0, 0xffffffffffffffff, 0x0], 0x3}, 0x58)
r3 = clone3(0x0, 0x0)
clone3(&(0x7f0000000400)={0x1000, &(0x7f0000000240), &(0x7f0000000280), 0x0, {0x23}, &(0x7f0000000300)=""/69, 0x45, 0x0, &(0x7f00000003c0)=[r3, r3, 0x0, r3, 0x0, r3, 0x0], 0x7}, 0x58)
clone3(0x0, 0x0)
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x81, 0x4, 0x7, 0x6, 0x0, 0x5, 0x0, 0xc, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x2, 0x1, 0x2, 0x8, 0x0, 0x81}, r5, 0xd, r4, 0x5)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000002400)=[{&(0x7f00000000c0)=""/114, 0x72}, {&(0x7f0000000140), 0x5000000}], 0x2)
io_uring_setup(0x55b4, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x4, 0x0, r1})
ioctl$BTRFS_IOC_BALANCE_V2(r2, 0xc4009420, &(0x7f0000001740)={0x8, 0x4, {0x5, @usage=0x9, 0x0, 0x80, 0x3, 0x9, 0x1, 0x0, 0x5a, @usage, 0x8, 0x3, [0x0, 0x0, 0x6, 0x3, 0xfffffffffffffff7, 0x5]}, {0x8000, @struct={0x4, 0x9}, 0x0, 0x8000, 0x0, 0xffffffff, 0x74b1, 0x9, 0x2, @usage=0x13f, 0x80, 0x7, [0xfffffffffffeffff, 0x9, 0x4, 0x4, 0x9, 0x100000000]}, {0x80, @usage=0x6, 0x0, 0x7, 0x81, 0x7, 0x1039dd4a, 0xfffffffffffffffa, 0x11, @usage=0x2, 0x8, 0x4, [0x7fffffff, 0x7, 0x4, 0x5, 0x9, 0x6]}, {0x40, 0x3, 0xa155}})
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x8901, &(0x7f0000000000)={'syztnl0\x00', 0x0})

09:44:18 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

[ 2546.924868][ T9872] usb 4-1: USB disconnect, device number 27
09:44:19 executing program 5:
perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa032b071afe91957}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='/proc\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x82, 0x4, 0xf}, 0x40)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0), 0x1000, r0}, 0x38)

09:44:19 executing program 3:
shmget$private(0x0, 0x3000, 0x120, &(0x7f0000ffb000/0x3000)=nil)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty={[0x45]}, @ipv4={[0x0, 0x2], [], @local}}})

09:44:19 executing program 3:
r0 = socket(0x2, 0x3, 0x1)
connect$l2tp6(r0, &(0x7f00000002c0)={0x2, 0x0, 0x0, @ipv4={[], [], @loopback}, 0x2}, 0x20)
socket$packet(0x11, 0x2, 0x300)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

09:44:19 executing program 1:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendto$packet(r0, 0x0, 0x34, 0x0, 0x0, 0x0)

09:44:19 executing program 0:
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000680)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

09:44:19 executing program 3:
r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000140))

[ 2547.167934][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 2547.167944][   T28] audit: type=1804 audit(1599558259.151:1806): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:19 executing program 3:
syz_open_dev$dri(0x0, 0xc82, 0x20000)
r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1a5, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x100, 0x1efd6, 0x4})
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x1, 0xff, 0x6})
r2 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x20, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x100, 0x1efd6, 0x4, 0x0, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3})

09:44:19 executing program 5:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

09:44:19 executing program 0:
ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000000680)={{}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]})
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000019c0)='/dev/sequencer\x00', 0x1, 0x0)
write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33)

09:44:19 executing program 3:
r0 = socket(0xa, 0x3, 0x8)
ioctl$SIOCGETLINKNAME(r0, 0x89e0, 0x0)

[ 2547.313817][   T28] audit: type=1804 audit(1599558259.291:1807): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2547.373104][   T28] audit: type=1804 audit(1599558259.331:1808): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:19 executing program 2:
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @private1, 0xf820}})

09:44:19 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:19 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="0000b20000000000"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a3e005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010068667363000000000800020000001000"], 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@newtfilter={0x4c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}, {}, {0xf}}, [@filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x10, 0xc}, @TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x10}}]}]}}]}, 0x4c}}, 0x0)

09:44:19 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@getchain={0x24, 0x66, 0x68ce5f4fe75be671}, 0x24}}, 0x0)

09:44:19 executing program 5:
prctl$PR_GET_CHILD_SUBREAPER(0x29)

09:44:19 executing program 3:
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt$inet_pktinfo(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))

09:44:19 executing program 2:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x2, 0x3, 0x3f0, 0x198, 0x198, 0x0, 0x0, 0x198, 0x358, 0x358, 0x358, 0x358, 0x358, 0x3, 0x0, {[{{@ip={@multicast2, @broadcast, 0x0, 0x0, 'vcan0\x00', 'wg1\x00'}, 0x0, 0x158, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0e0004000000000000007c04fff0cf81dfd28c89544e14cd3e01dd24289831866346c88621039b284c3ff45c42995560a99952bed40cf5a8b9fb6133db7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a7dbaae5592e8b15900000100", 0x78}}, @inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "631499f89a95e49806ea7f9eaecf0b0fd0691f86bb9a323cbbaffc30fb26"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'team_slave_1\x00', 'netdevsim0\x00'}, 0x0, 0x98, 0x1c0, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00'}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x450)

09:44:19 executing program 5:
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4c00}, 0x2000000c, &(0x7f00000000c0)={0x0, 0x2}}, 0x4ac000)

09:44:19 executing program 3:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8927, &(0x7f0000000100)={'ip6gre0\x00'})

09:44:19 executing program 0:
r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
mmap$usbmon(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x5, 0x28012, r0, 0x1c00000000000000)

09:44:19 executing program 2:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001800)='/dev/ocfs2_control\x00', 0x0, 0x0)
execveat(r0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)

[ 2547.826623][T15532] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[ 2547.853689][   T28] audit: type=1804 audit(1599558259.831:1809): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:19 executing program 0:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x10010008, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3000500})

[ 2547.883633][T15539] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
09:44:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002000018e0f47335ad7308ee60a"], 0x1c}], 0x1}, 0x0)

[ 2547.916561][   T28] audit: type=1804 audit(1599558259.891:1810): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2547.980941][   T28] audit: type=1804 audit(1599558259.961:1811): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:20 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:20 executing program 5:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80102, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0x5001, 0x0)

09:44:20 executing program 1:
r0 = getpgrp(0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, r1, 0x0, 0x0, 0x0}, 0x32)

09:44:20 executing program 3:
r0 = syz_open_dev$video4linux(&(0x7f00000003c0)='/dev/v4l-subdev#\x00', 0x0, 0x0)
ioctl$VIDIOC_QUERYBUF(r0, 0xc008561c, &(0x7f0000000440)={0x980903, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e514c858"}, 0x0, 0x0, @fd})

09:44:20 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x1, 0x0, 0xdc, 0x0, 0x0, 0x3, 0x8}, &(0x7f0000000040)={0x9, 0xffffffffffffff81, 0x3eb, 0x0, 0x5, 0x7e, 0x4}, &(0x7f0000000080)={0x6e, 0x4, 0x0, 0x0, 0x3, 0x57, 0x7fffffff}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100), 0x8})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440)='ethtool\x00')
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000000c0)={0x18, r1, 0x703, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6gre0\x00', 0x0, 0x0, 0x5, 0x3d, 0x0, 0x0, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, [], 0x1}, 0x7, 0x0, 0x101, 0x101}})
bpf$BPF_LSM_PROG_LOAD(0x5, 0x0, 0x0)
socket(0x3, 0x5, 0x80040000)
r2 = socket(0x0, 0x2, 0x0)
accept$packet(r2, 0x0, 0x0)

09:44:20 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
r2 = dup2(r1, r0)
read$usbmon(r2, &(0x7f0000000100)=""/114, 0x20000172)

09:44:20 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @dev}})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket(0x2a, 0x2, 0x0)
getsockname(r4, &(0x7f0000016d40)=@ll={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000016dc0)=0x80)
sendmmsg$inet(r3, &(0x7f0000001d80)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @remote}}}], 0x20}}], 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2={0xfc, 0x2, [0x0, 0x0, 0x0, 0x7]}, 0x1, r5})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private1, @dev}})
sendmmsg$inet(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="f18413b7ab2e9dea607a2b11270f2a1ac53a96897e1a22bd2c9fc41d420cc347a467198e2c11040e39e76ab242b1db48f3633eea62c8dc0e91fd52d0415e269afee38ab38f9ccf02ba976444", 0x4c}, {&(0x7f0000000340)="999de9a957195047936ecc625bede3a502beb5ed61c2c5dcc2c89c5db92a64d64e1088a6c358204ca2deb78fd488d92eeadeef12ea55e234d5d479a44a009bfb9c9874f32f5c5092499352df977441f2e4accb6295fd4fb5a211947f799d2efd78ae403b88101ea920983ff80df23b8acd1d78a0334192febaace07bf707599149e60c9ffd868aafda96f15b4c50067e57c36baadd59a7d1d49022d5446242ad4c12961efc9cd448d6e5d4333808af731516f4c0a74808e625fccff382d25cf584c8149b5cb91c3844", 0xc9}, {&(0x7f0000000440)="aed4c1a61204cec13b36e1b4e20d32e2bbd605a73c242922546b66789e97928d414a98fbd6d62f4f7cebbb1419d0ee0ff4170e042003dc7a5817138b2f5ab01391aecb122ef094", 0x47}], 0x3, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x13}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x50}}, {{&(0x7f0000000580)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000980)=[{&(0x7f00000005c0)="a8db02e2ded2b1e8b3df46ba54deae018feb0748113a03456b332f22b2e479751ff3eccc673fcbf3cb2e4449ea5505cc9561879f7dabfea0f64be2859a181063fc6a587eb845ec68ca431cecedad083fa38e9797c1d8f7232e211bc060a0fa1f6eb7a31b1c216b8f2e239df5334cc68e9ad46dd88406ee73a899383a5b033af0878f853ef7de0d68c1ab7e080267912fc6acdf3b9ca7525ef055cd1f4f347b4e435dbff3b4b97156", 0xa8}, {&(0x7f0000000680)="4f5267c90fd07eb3e66eae4e5bbedbc67516bd69bf24cf79349d445af6a417932687b5feeba985c23ba0d8e5d868871d370d438e2baf0b3b852211e5327a5631c8df2472face32ee4c2cbf2e5ef121bd2f6d2dd79fbeeff270035f2d6219b43c4b13d065b7400c1fd8", 0x69}, {&(0x7f0000000700)="4fd25d375f0a9b721dcdf246f52cb63cc2fb5894f2e88ea641127cad16303d8ddb7c72f19d6937f7e38325360f79ab96dc8f09363867ceeee4dda0b45819b4e185ddbe72783d80f79c9183250bd8b4bca4ef91b7191016420bb3ee314149199a19d069acae14dd6d5ecd93e1", 0x6c}, {&(0x7f0000000780)="d40ceb48cd7acd59bee6d002868c97", 0xf}, {&(0x7f00000007c0)="7560a90492b242272021f830421bfe16c99b3226c620080c7118a22235610684edf54b05249b3daee304b6bb96e2c464507f830e7efce3658f18524b9092c9230b3f744d42c0fabeebf03496fc47ebeaa62ac25318c1259c5d91c7128ac94e0a5b9daa9d2e58c30a8d5b7339e52796058d409da9ea8146a78ecee30a7f087f313e930c545f9fffbf68539dcda3d2d55de38a50573009abba3a10089493baca7a659626b556a8746e7d1cf791fd9acb6faf4917416678f89406b2ca70a2dde1c0654b80379b637796c0df83922bcb9d94642379c757eb81878798cb3746dcfa27d81eb369fd898b61ffa0ba9880150c654714b296", 0xf4}, {&(0x7f00000008c0)="02c055335f0b11afcb58cecd6792debdba5128813fd184f1f237924d96b29af1e6b5b8b9ba08393e2d38e55b93c6c14077c31434be43a0f035a88aeb7f51ea29d88250dc3ac285566cfd88bade12b8ec6bf4155649299efb8ace894877b5d4efc06aca2cd03d4fa6dc3f73491288941069fa1d857bcbfc202558c4ecfd04f76794884042e2e8338355e153b6b46754416b770703814fd9ff2449d2ba940a5e8aa9452a8e3ea689aa3e", 0xa9}], 0x6}}], 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl1\x00', <r7=>r2, 0x700, 0x8, 0x40, 0x80000000, {{0x16, 0x4, 0x2, 0x12, 0x58, 0x64, 0x0, 0x81, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x40}, {[@noop, @rr={0x7, 0x17, 0x57, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @multicast2, @loopback]}, @cipso={0x86, 0x13, 0x2, [{0x0, 0xd, "d67d6541be7703c13e92d7"}]}, @lsrr={0x83, 0x7, 0x86, [@dev={0xac, 0x14, 0x14, 0x10}]}, @generic={0x94, 0x11, "268146d7bf29e1e11107d736b0f146"}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6_vti0\x00', r7, 0x2b, 0x0, 0x2, 0x3, 0x8, @local, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x10, 0x8000, 0x7, 0x7}})
recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0)

09:44:20 executing program 5:
setreuid(0xee01, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10240, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000580)='./file0\x00', r1, &(0x7f00000005c0)='./file1\x00', 0x0)
faccessat2(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)

09:44:20 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0xa, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x10, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000080)=0x8)
r3 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r2}, &(0x7f0000000000)=0x8)

09:44:20 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
socket(0x2, 0x5, 0x0)
getpid()
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000010000108000000400000000000000000", @ANYRES32=r4, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)

09:44:20 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000008)
ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, &(0x7f0000000000)=0x6)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r2, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000080)='./file0\x00', 0x2)

[ 2548.744039][   T28] audit: type=1804 audit(1599558260.721:1812): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@typedef={0x0, 0x0, 0x0, 0x8, 0xfffffffe}]}}, &(0x7f0000000180)=""/134, 0x26, 0x86, 0x1}, 0x20)

[ 2548.783284][T15580] sctp: [Deprecated]: syz-executor.3 (pid 15580) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2548.783284][T15580] Use struct sctp_sack_info instead
[ 2548.850496][   T28] audit: type=1804 audit(1599558260.831:1813): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2548.875255][T15591] sctp: [Deprecated]: syz-executor.3 (pid 15591) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 2548.875255][T15591] Use struct sctp_sack_info instead
09:44:21 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:21 executing program 0:
openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0)
read$snddsp(0xffffffffffffffff, 0x0, 0x0)
socket(0x1, 0xa, 0x2)
getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r0, 0x0, 0x0)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/urandom\x00', 0x0, 0x0)
ioctl$RNDGETENTCNT(r1, 0x40085203, &(0x7f0000000040))

09:44:21 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
socket(0x2, 0x5, 0x0)
getpid()
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000010000108000000400000000000000000", @ANYRES32=r4, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)

09:44:21 executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @vti={{0x8, 0x1, 'vti\x00'}, {0x4}}}]}, 0x30}}, 0x0)

09:44:21 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00')
r2 = socket(0x1e, 0x1, 0x0)
getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0)

09:44:21 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000001400)="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", 0xe00)
sendfile(r0, r1, 0x0, 0x14007)

09:44:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
r1 = socket(0x2, 0x5, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
ioctl$NBD_DO_IT(r0, 0xab03)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x437)
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)

[ 2549.541106][   T28] audit: type=1800 audit(1599558261.521:1814): pid=15605 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16262 res=0 errno=0
09:44:21 executing program 5:
syz_open_dev$vim2m(&(0x7f00000000c0)='/dev/video#\x00', 0x16e3, 0x2)
select(0x40, &(0x7f0000000240)={0x8}, 0x0, 0x0, 0x0)

09:44:21 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0xea60}}, 0x0)

09:44:21 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0)
socket(0x2, 0x5, 0x0)
getpid()
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
getsockname$packet(r3, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000010000108000000400000000000000000", @ANYRES32=r4, @ANYBLOB="0b00000000000000cc001a8018000a8014000700fe"], 0xec}}, 0x0)
ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)

[ 2549.623242][   T28] audit: type=1804 audit(1599558261.561:1815): pid=15605 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir575767473/syzkaller.47zJsa/3354/file0" dev="sda1" ino=16262 res=1 errno=0
09:44:21 executing program 2:
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
socket$packet(0x11, 0x3, 0x300)

09:44:21 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000080)="de5584b60714ce5d8aee031781", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x890c, &(0x7f0000000040)={'batadv_slave_1\x00'})

09:44:22 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:25 executing program 0:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10)

09:44:25 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f00000005c0)=@nameseq={0x1e, 0x1, 0x0, {0x2000000}}, 0x10)

09:44:25 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(r0, &(0x7f0000001400)="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", 0xe00)
sendfile(r0, r1, 0x0, 0x14007)

09:44:25 executing program 2:
r0 = socket(0xa, 0x5, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000001800)=[{&(0x7f0000000240)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000580)='_', 0x1}], 0x1, &(0x7f0000003b40)=ANY=[@ANYBLOB=' '], 0x20}], 0x1, 0x0)
read$alg(r0, &(0x7f0000004000)=""/139, 0x8b)
sendmmsg$inet_sctp(r0, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000040)='e', 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="8e", 0x1}], 0x1}], 0x1, 0x0)

09:44:25 executing program 5:
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000040))
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000280)='./file0\x00')
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
ftruncate(r0, 0x208200)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x14103e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r1, 0x0)
read(r1, &(0x7f0000000180)=""/19, 0xfffffe47)

09:44:25 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

[ 2553.544047][   T28] audit: type=1804 audit(1599558265.511:1816): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:25 executing program 1:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x18, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}]}, 0x38}}, 0x0)

[ 2553.583077][   T28] audit: type=1800 audit(1599558265.541:1817): pid=15639 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16260 res=0 errno=0
09:44:25 executing program 1:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x5)
accept4$nfc_llcp(r0, 0x0, 0x0, 0x0)

[ 2553.628649][   T28] audit: type=1804 audit(1599558265.551:1818): pid=15639 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir575767473/syzkaller.47zJsa/3355/file0" dev="sda1" ino=16260 res=1 errno=0
09:44:25 executing program 5:
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0xc004743e, &(0x7f0000000340))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x81}, {0x6}]})

09:44:25 executing program 1:
open(&(0x7f0000000000)='./file0\x00', 0x7840, 0x0)
syz_open_dev$binderN(&(0x7f0000000400)='/dev/binder#\x00', 0x0, 0x2)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x8010aebc, 0x0)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/capi/capi20ncci\x00', 0x200000, 0x0)
execve(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

09:44:25 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$alg(0x26, 0x5, 0x0)
dup(0xffffffffffffffff)
syz_open_dev$vcsa(0x0, 0xfffffffffffffff9, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000180)='/dev/bus/usb/00#/00#\x00', 0x77, 0x1)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_IOCTL(r0, 0xc00c5512, &(0x7f0000000380))
ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x8, 'veth1_to_hsr\x00', {'macsec0\x00'}, 0x56a})

[ 2553.763608][   T28] audit: type=1800 audit(1599558265.741:1819): pid=15659 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16260 res=0 errno=0
[ 2553.772411][T15661] hub 9-0:1.0: USB hub found
[ 2553.790678][T15661] hub 9-0:1.0: 8 ports detected
09:44:25 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(0xffffffffffffffff, 0x80084121, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x204202, 0x0)
pipe2$9p(&(0x7f0000000040)={<r0=>0xffffffffffffffff}, 0x0)
fcntl$lock(r0, 0x26, 0x0)
r1 = creat(0x0, 0x104)
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f00000001c0)={0x0, 0x68}}, 0x20000090)
r2 = syz_io_uring_setup(0x50bb, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000340)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540)={0x4304c0, 0x2, 0x2}, &(0x7f0000000580)='./file0\x00', 0x18, 0x0, 0x23456}, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000002280)={0x1, 0x70, 0x81, 0x2, 0x0, 0x9, 0x0, 0x2, 0x8400, 0x19, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000002240), 0x8}, 0x0, 0x8, 0x0, 0x1, 0x8, 0x81}, 0x0, 0xd, 0xffffffffffffffff, 0xa)
ioctl$PERF_EVENT_IOC_ID(0xffffffffffffffff, 0x80082407, &(0x7f0000000380))
r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000100)={0x1, 0x10, 0xfa00, {0x0, r7}}, 0x18)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000300)={0x7, 0x8, 0xfa00, {r7}}, 0x10)
io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0)

[ 2553.810671][   T28] audit: type=1800 audit(1599558265.791:1820): pid=15659 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=16260 res=0 errno=0
09:44:26 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x22, &(0x7f00000001c0)={@ipv4={[0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2], [], @empty}}, 0x10)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

09:44:26 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x4c, 0x12, 0x62d, 0x0, 0x0, {0x23}}, 0x4c}}, 0x0)

09:44:26 executing program 5:
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001780)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r0, 0x50009405, &(0x7f0000001880))

[ 2554.372892][   T28] audit: type=1804 audit(1599558266.351:1821): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2554.410642][T15688] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:26 executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_matches\x00')
read$char_raw(r0, &(0x7f0000000200)={""/36844}, 0x9000)

09:44:26 executing program 1:
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0xffffffffffffffff)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x106}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @dev}, r1}}, 0x48)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, 0x0}}, 0x20)

09:44:26 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x2, 0x3, 0x301}, 0x14}}, 0x0)

09:44:26 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f", 0x17}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:26 executing program 0:
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff)
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2)
r1 = memfd_create(&(0x7f0000000140)='\\vnet0?\'`/{,vi.et1eb0u_er\x00', 0x5)
ftruncate(r1, 0x1000000)
bind$isdn_base(0xffffffffffffffff, 0x0, 0x0)
sendfile(r0, r1, &(0x7f0000000000)=0xf18000, 0x40000000005)

09:44:26 executing program 3:
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/timer\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
select(0x4, &(0x7f0000000000)={0x8}, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x2710})

[ 2554.420220][T15688] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2554.447249][   T28] audit: type=1804 audit(1599558266.431:1822): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:26 executing program 5:
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000080)=0x7, 0x4)
connect$caif(r0, &(0x7f0000000000)=@dbg, 0x18)

09:44:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000000000))

09:44:26 executing program 1:
unshare(0x10000080)

09:44:26 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00')
read$qrtrtun(r0, 0x0, 0x0)

09:44:26 executing program 3:
socket(0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000e80))
syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0), 0x0, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_mount_image$reiserfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000002340), 0x0, 0x0)

09:44:26 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$NFT_MSG_GETGEN(r1, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, 0x10, 0xa, 0x5}, 0x14}}, 0x0)

[ 2554.558362][   T28] audit: type=1804 audit(1599558266.541:1823): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:26 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

09:44:26 executing program 3:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mkdir(&(0x7f00000009c0)='./file1\x00', 0x0)
pipe2(&(0x7f00000003c0)={<r0=>0xffffffffffffffff}, 0x80800)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000480)=0x46a3, 0x4)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x8000000000000, 0x40, &(0x7f0000000c00)=ANY=[], 0x1)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
sendto$inet(r3, &(0x7f0000000340)="e4865f178232628c065fe1057833539bc18f8c63245e8c9aaa39769911d57457af8a794f49b765f67cb900dae7a949ecf33248e8f909a4a69c15d04bde1f5c04fcf48e99abfc9ce259639494928ca7ff0713dc91e1a27f5c8bb4ab4370169e447db32575e6ef375c11cb9168745cf8ecfc3955203ca3af0b122d2d25e1f185f8", 0x80, 0x8000, &(0x7f0000000140)={0x2, 0x0, @private=0xa010102}, 0x10)
mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0xf824b000)
fsetxattr$trusted_overlay_nlink(r3, &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000300)={'L-', 0x6}, 0x16, 0x2)
r4 = perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0xc7, 0x1, 0x0, 0x0, 0x126b, 0x48a69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000e72, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x40000, 0x3, 0x2, 0x1, 0xb, 0x0, 0x80}, 0x0, 0x1, r1, 0xa)
perf_event_open(&(0x7f0000000500)={0x2, 0x70, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x8000000000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8, 0xffff}, 0x0, 0x0, r4, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x100)
mount$overlay(0x40000a, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}], [], 0xf603000000000000})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='cgroup2\x00', 0x0, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, &(0x7f0000000400))

09:44:26 executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/mdstat\x00', 0x0, 0x0)
read$midi(r0, 0x0, 0x0)

[ 2554.677082][   T28] audit: type=1804 audit(1599558266.661:1824): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2554.740762][T15731] overlayfs: conflicting lowerdir path
[ 2554.750476][T15737] overlayfs: workdir and upperdir must reside under the same mount
09:44:27 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f", 0x17}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:27 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x0, 0xff}, 0x20)

09:44:27 executing program 5:
socket(0x18, 0x0, 0x1)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x0, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000140)=0x7)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x2, 0x80, 0x6, 0x0, 0x7, 0x4501, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe13}, 0x0, 0x1, 0x0, 0x0, 0x5ca, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7, 0x0, <r2=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000380)=0x1)
ioctl$BLKTRACESTART(r0, 0x1274, 0x0)
getsockname(0xffffffffffffffff, 0x0, &(0x7f00000004c0))
r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000000)={0x10010005, 0xffffffffffffffff, 0x0, <r4=>0xffffffffffffffff, 0x3000500})
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000100)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x7)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000000)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x3)

09:44:27 executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp1\x00', 0x18b282, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0x800c5011, &(0x7f0000000300))

09:44:27 executing program 1:
syz_mount_image$ocfs2(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
faccessat2(0xffffffffffffff9c, &(0x7f0000001900)='./file0\x00', 0x0, 0x1000)

09:44:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000080)={'tunl0\x00', @ifru_mtu=0x531101})
msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7)

09:44:27 executing program 1:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd)

09:44:27 executing program 2:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_REGISTER(r0, 0xc0404309, &(0x7f0000000040))

09:44:27 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan1\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)

09:44:27 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r4, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@local, @ipv4={[0x0, 0x0, 0x8], [], @empty}, @remote={0xfe, 0x80, [0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb]}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20c301e2, r3})
sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0)

09:44:27 executing program 5:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @local, 0xa}, 0x1c, &(0x7f0000000040)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}], 0x1, 0x0)

09:44:27 executing program 2:
r0 = semget$private(0x0, 0x2, 0x0)
semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000002240)=""/4108)
getuid()
semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000000))
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x28c40, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
socket(0x1d, 0x2, 0x0)
openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0)

[ 2555.405908][   T28] audit: type=1804 audit(1599558267.391:1825): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2555.519967][T15771] can: request_module (can-proto-0) failed.
[ 2555.538503][T15771] can: request_module (can-proto-0) failed.
09:44:28 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f", 0x17}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:28 executing program 1:
perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x0, 0x3aef}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_dev$audion(&(0x7f0000004740)='/dev/audio#\x00', 0x1f, 0x4100)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000004840)={&(0x7f0000000100)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000180)="b3b49a5fe6485e6fc83045692aa959ff4731984363d1c24ad3b34881b689ebe1f95f1ca490bfe02c09d44f8dbe4bd5b2ef6566a57c8799db404fd7f92a8bbd6724501547654178964834", 0x4a}, {&(0x7f0000000280)}, {&(0x7f0000000340)}, {0x0}, {&(0x7f0000000480)="1b116c79c96f0c5f0a79db3b67d71ec611b7848a64f1e82156c4d4043ee423ed5507975c3ccfb21787e14ec7fef892cc80eb3725fab80e0e065ca51a6c399765f45532166ecbc87a49770df267174adf245ec8ca8b99c95faab63d6c88e611be186eee51cc", 0x65}, {&(0x7f0000000500)}], 0x6, &(0x7f0000004880)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYBLOB="000000001c0000000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0xf8, 0x4000000}, 0x4000880)

09:44:28 executing program 2:
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0xfffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8cffffff00000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)

09:44:28 executing program 3:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan1\x00')
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000017c0), 0x3da, 0x0, 0x0)

09:44:28 executing program 0:
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ff4000/0x2000)=nil, 0x2000}, 0x3})

09:44:28 executing program 1:
syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000003a00)={0xfffffffc, 0x0, 0x2, {0xc, @vbi={0x80000000, 0x20, 0x543, 0x34363248, [0x700e, 0xdc04], [0xfffffffa, 0x1], 0x1}}})
set_mempolicy(0x1, &(0x7f0000000400)=0xfffffffffffffffb, 0x3)
request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='syz', 0x0)

09:44:28 executing program 1:
syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000003a00)={0xfffffffc, 0x0, 0x2, {0xc, @vbi={0x80000000, 0x20, 0x543, 0x34363248, [0x700e, 0xdc04], [0xfffffffa, 0x1], 0x1}}})
set_mempolicy(0x1, &(0x7f0000000400)=0xfffffffffffffffb, 0x3)
request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='syz', 0x0)

09:44:28 executing program 5:
kexec_load(0x0, 0x1, &(0x7f00000011c0)=[{0x0}], 0x1)

09:44:28 executing program 1:
perf_event_open(&(0x7f0000000bc0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000940)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00')
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, 0x0, 0x44)

09:44:28 executing program 2:
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000840)=[{&(0x7f0000000680)="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", 0xffffff32}], 0x1, 0x0)
close(r1)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x0, 0x0, @private0}}, 0x0, 0x0, 0x4e, 0x0, "79365517136fb2b2078584963528836ff20ca9ebdd3b91d72296e832ba6a8bfea1953c83623e661e132038aa6e6238ad5b68c06d85d8c0b07e229dd53dd337506959bb24fa66b0aeb0f68f63cbb6d82b"}, 0xd8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x355)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x303}, "2554a485db0c30f2", "4291a39c868e90a375e7e2507c31147d", "5140ff97", "eb9242ecb4755be6"}, 0x28)
splice(r0, 0x0, r1, 0x0, 0x80000fffffffc, 0x0)
close(r2)

09:44:28 executing program 0:
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00')
read$hidraw(r0, &(0x7f0000000180)=""/233, 0xe9)

09:44:28 executing program 1:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

09:44:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac1414", 0x23}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:29 executing program 1:
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040000002b24ec10064b6fb14bccedfb718aef932f3889d1fdda5b9134015a860f5878c37ffe36e1165d14d435be5b317c6c8189767d2f97879f07a715bb7c169f46933d9338f4ab0483696f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x10b8}, 0x0)

09:44:29 executing program 5:
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x20)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x20)

09:44:29 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000280)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}, {{&(0x7f0000000380)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}}], 0x2, 0x0)

09:44:29 executing program 3:
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={[0x2]}, 0x8)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000180)=""/170})
clock_gettime(0x0, &(0x7f0000000280)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0xffff, 0x1, 0x4, 0x40, 0x2, {r1, r2/1000+10000}, {0x4, 0x2, 0x0, 0x9, 0x0, 0x2, "5988fd57"}, 0x2, 0x0, @offset=0x8, 0x4})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x6000006, 0x1, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "415685d8"}, 0x0, 0x1, @fd})

09:44:29 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x26e1, 0x0)
clone3(&(0x7f00000014c0)={0x100000000, &(0x7f00000011c0), &(0x7f0000001200), &(0x7f0000001240), {0x31}, &(0x7f0000001280)=""/124, 0x7c, &(0x7f0000001300)=""/199, &(0x7f0000001400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, r1, 0x0)
fcntl$getown(r0, 0x9)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ftruncate(r0, 0x40000)
write$qrtrtun(r0, &(0x7f00000016c0)="845c1a592db2b5c3411c5154ebd1c63f7b6527192fa756d986cdbf786c9ab0831368d79802e6e4cdbecb44431cb170e298f633aba0a98342531064dec6f556571e2210c77f2877594000", 0xffffffd6)

09:44:29 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x2, 0x1, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x2, 0x9, 0x201, 0x0, 0x0, {0xc, 0x0, 0x2}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000)

09:44:29 executing program 5:
r0 = socket(0x15, 0x5, 0x0)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x20)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @loopback}}, 0x20)

09:44:29 executing program 0:
setreuid(0xffffffffffffffff, 0xee01)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6e, 0xa}, [@ldst={0x2, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

09:44:29 executing program 2:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x1, 0xff, 0x6})
dup2(r0, r1)

09:44:29 executing program 5:
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0)
ioctl$HIDIOCGFIELDINFO(r0, 0x40046103, 0x0)

09:44:29 executing program 0:
syz_mount_image$hfs(&(0x7f0000000000)='hfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000480), 0x1081000, &(0x7f00000005c0))

09:44:29 executing program 2:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00')

09:44:29 executing program 3:
epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={[0x2]}, 0x8)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000240)={0x0, &(0x7f0000000180)=""/170})
clock_gettime(0x0, &(0x7f0000000280)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)={0xffff, 0x1, 0x4, 0x40, 0x2, {r1, r2/1000+10000}, {0x4, 0x2, 0x0, 0x9, 0x0, 0x2, "5988fd57"}, 0x2, 0x0, @offset=0x8, 0x4})
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x6000006, 0x1, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "415685d8"}, 0x0, 0x1, @fd})

09:44:29 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac1414", 0x23}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:29 executing program 0:
r0 = socket$inet6(0xa, 0x3, 0x39)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = dup3(r1, r0, 0x0)
sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=';', 0x1}, 0x0)

09:44:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:29 executing program 1:
r0 = socket(0xa, 0x5, 0x0)
ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, 0x0)

09:44:29 executing program 1:
r0 = gettid()
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000006000), 0x8, 0x0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000200))
poll(&(0x7f0000000000)=[{r2}], 0x1, 0xfffffffffffffff8)
tkill(r0, 0x14)

09:44:29 executing program 0:
r0 = socket(0x2, 0x1, 0x84)
sendmsg$rds(r0, &(0x7f0000006000)={&(0x7f0000000180)={0x2, 0x0, @local}, 0x10, &(0x7f0000001600)=[{&(0x7f00000001c0)=""/225, 0xe1}], 0x1}, 0x0)

09:44:29 executing program 2:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000500)='cpuset.sched_load_balance\x00', 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000200), 0x400c00)

09:44:29 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:29 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
write$nbd(r0, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40305839, 0x400008)

09:44:30 executing program 0:
syz_mount_image$tmpfs(0x0, 0x0, 0x0, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="ab", 0x1}, {&(0x7f0000000100)="cd", 0x1, 0x5bd2}, {&(0x7f00000001c0)="c4", 0x1}], 0x0, 0x0)

09:44:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:30 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x2468825185d9173d}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

09:44:30 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac1414", 0x23}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:30 executing program 2:
mmap$snddsp_status(&(0x7f0000de3000/0x3000)=nil, 0x1fffff, 0x0, 0x13031, 0xffffffffffffffff, 0x82002000)
mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000, 0x0, &(0x7f000083d000/0x2000)=nil)

09:44:30 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:30 executing program 0:
syz_mount_image$reiserfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000001400)='bpf\x00', 0x0, 0x0)
syz_mount_image$reiserfs(&(0x7f0000001240)='reiserfs\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x3, &(0x7f0000001280)=[{&(0x7f00000001c0)="d6da6c75b2d6fa6dc0cc341954b1bbe09d5ac7102099c92be97795251bcd48ae42bd28fc3dd6cf3ce4df8ee453e80c06d690b38c771ddbff282eb318145ff9868839ecef55202ed57c40be9839708eaacc00f272b860d23ba1ac327764111fd1e7e1bdd6d16c2a1c0b3011f33e1e4d4c5b6be501cfa707e7c3a185de34bd2e4f5bdc47f436c689f16291aec9a6df5521c24855a80f2b584d2336aede875b1f6e563854eba491cb8297d7c749594c129f93a9c8dbc5ff4343e0bda16d0f7a476bb39df803f1c6cc9dd2fce439fca13d0cfc46f202c0056e601f5da40a55f27f66ed173e7199e62afa735aa8e67a2e265dc8efceb360a8c21b18ee16161c09ccb07d279d398a45440d9669f9aa5dda1ea9d363019998b3407538ecb93c6170e977c26ed784980476a5f80f50e8dccba49eb5847a7cb75070504d3a44ca68463b4e7b0c271dec7d35ee91f874c6aec6f8684f1e52200a5d8c05ccdf56a7af34f35c5414e06aabf09831112027d882c990af7c5583489ba8aa8791c1280952dfc26cc27849287ca7078e9193b1625c178321d5df9b7873590fb5ec04878452a92ce8fb14e511db11c073b30a2cdb18d739d361fff8df2f4c9795ad16deed6acd8b2c5f64e7a03e3ffdb7dd2e4cb84778004d5c06d6c4b90f0cffc26299360f25557baa55aa32fb532b4fdf80ae5b2927ca87d2fa955e20e2c024065366cd67ba0372222e8256a3763e990c6e1134ffc4e69f811d9bebb57921c3c9874f13eaa8764e5e2814b2ede3a215e8f382d4a29fb3fedcac4984dbb806ec07c4d32be3e19a166593ec50ed39264327fb5b74766c24dbf0f87ff96ef7f9a7f9364243851936ce43bb9305f704cb4dd201f9ab596a1591b61c240004741b81a9a64642a6cb77d36da552c01e6be58e671fa67bf25ee599fc7604c14657a730bd44acc5c2559e0b5bc1cef099a22e8cf5aa9cc0f5e053f8e8ee879d71ad4d621fe58191ed38a920b51ed6c94c5969a2c5be091c0cb719e6984566b6484527c158620c817576c85b29a4fb0d8b42006e91712b3f15644617c3fffdb95e54a14e868e5e36b7499620bf26e63aefec6457fccd9dc01a7a59961beb0a4855e7b91e56addb20ae4730993d79208db28116f4bfadc04cb527b47394512bd5b85c43c2728dfed8c62106a0161b1de36b06b37947b0aa4d590a3f630633474cf9af553e313e11777d421da1028d310a3eb2059010f3e09f1ea3c20a3244552cb8377a04398b3d5a1b42e2d7008ea0bc047a1a1491f98f220d4a6a2c57e82109108fbb33c9abea0fc12dac61a62493f03e7b463828310b5a8bbabeee2aaee2d94e25a7fb6c4b524bf5e93ca80cc859328d09df5f8347be045a7ee7267638677272f6e1fa64edc85cfcce24db5ee26ee25e50d3b85409c56999f9989d3bc41d6f669af8ed7318f67de9414d422ca911d9cb1fc85459b26a770df01df720b80615878681116edabb078da5a6b9fa028c4888539e964da3652299af948da0143eda9cbe81d85759e3d0710ba25ec93f832728e3ab234321e928ff91a8d89bac793dc52b2bb9cdad7e12085c7c6191888aeac3374861ac4373113b64e29ebe9e79e7836076ce176006ca4795f1213247f7420f5b4c63f8bc60dfface41bf8349127c750a6722d864247304a860cfc044380f4236d2e32e2420607ce6099c5a261d02e83822406f6b759074c28901aabeb3d9de1a7279fc65f6acb60a7af3c530c95da6a98b8806c98965cfd25254cbc8f886dd5884481a0b69bbbae168205263a3b43a058090fc01cf87bf3704f35f0ab5b6119527ed9710d9eb5d3d3a3630b34682871881e83adb4357afb611d216f681526ff02947d077f7c7bfa68c3fff60b9d48daf14f7f95a25db98610bbd319b22c91c9c2d124a8299f934b822665ec7f8e17bca3231b1a157a07296b168ff82e6692a298327876b6d988c61f2974d9bd1dfd27d569f0e886421586cfd2018df2b2b689955367cd8acbcf2fc0986725e1caf9e521ebff0f7942601006f58daa02c7e822984aed283b17e7d430b6603089131be98750422409b9ea399880c2a8c305cb5edc833334f0a943336cdbb46ffea6c11581fac053ac012ee99e17b8165edced8c0be1d8295ec97b039ffaa3dedd20915998b4df3041a2be867420f44e653e12f813da9c2075b5b427e252fa241e304dcb9909339ea5cced59ae546ff89e5d48c6677042ff8df9ed697dc880b7d69f44850ea8d3599d4f396e382eb216d43182461676900bfc4bed430fe46824f0b8964148aa02a4000823b82fa4e0f6fa0c400431e8be31b196591908dd22006986df0ab3bf1024372fa3e331bed9ad9e359337014a44374aafdd1edf99e3456bac7eae972ac8f60a81ec7945ad2c5f6854593497661e1d92094b7aad90a0454def1aaaee2515c5096b9dbf9a49def8df2546907f922489551d702853747aaa473b3bd2bbce0933a1a5229255800033d42f9c75ebb18686519bae0305865c494e263d93fe29781a708f0401009bfef75fc1540e87db97114649611f2049c3562e83c1952c1ac143898cf1dcb7fcfed551bc21f4e328df9309612d8508dab77c9e78c7e18ef7dceb95eaf7029eca8510403464ccd9904989e548ed5ff04d44ec4227e1da5f1646ad04684f5d9245e5138051d1e8b0222b0032c5ebf75b82a0256f228dc812b58672773c91ba363a4c9a258075d19f30b69fa0a32a1ca721a4e54ad700948670dfe684f425edcaa2b39571fd76417fcbc2f2859ddd6eafbb99abed8000fc67b2802397a922a6912d88deabd081b2dd56abdcae9231bce91f138c16dc4d1c0a607aaacb7aa4300a64f27d6d0dc4d126139b83ff60d4e32abcb5e1fece14ce51dac0ffd8c1bbb4f883306f112658c5deeb51b332586344b770cc781a7bbadb6ec9ff90db207309afe2f2865be9d2ae185f4fc1fcccb06ea87c5cfd7c12c1a3efa37c8b94285abbacb0e106597bf4c3c357213bb500ee86fd42996230d18e0d81a8d09b3ca3cf6170e48baa2a652ff5b4eb46cc62b88021b08c69f353ce1d6af1f3b0c0cd101f8a5bbb8b4e72a7e8e54865a5146c54a60f82b6e213296a15848a628a43deda11623b69488926cd2d171b268ccc32623735d232d7a45e084ebeeb826fc2faa945fd0390a293a82d8432d525e431c9e0b23b83c32de2558aeb4571fd7ad30c5275737bb2ccb1c1ba135e564ea7b54a988973d9edba6e19dbac5bfbff099605ebea2a90571c1e364802bc346ff862f9144c5945a8c87e5e3bc136faf4b05b1ed0080d8e8679abad510c2a7d835354be5b48d67e1a8d39c197cc8e6c1182e1772f5f05feb8a0311d1898ad656639de27422b5042090a2f3c871ff2fd3b6191cac901ff12fc39f93394e005d928ca16d49db2ffab443aaa2dfbfa4c10863ec0496495481eaf51cbbf75b30093d186ca21faa52865033819b73a8977ed25413aff536744da07c722578e36ff14d3fc7f9ccc3a01af70459aa108977c3d51d3913471cfd97bb74658062fe0fee10692a298d6a0a18fb3b601b635f5a6f86b986b7e5baaf865c05d5372db6c7a86389d1b86266f1ca520a80788c24ea9df36352cb9708644269d832c6b802d1c27bee18f33e34a89d629f2f99e37446a6eb493800c2bcaed76de77745eeffeae9d96c16eed509cf11ca2128077fa7d169ae82e1ecf528b434b7097ea378668f2a207a582525c0289c2a49a9f0f21d6ea882666029fd30723e372681b55855ceeee4eee93ea2e0dc96fef744464ee704edfd8b9a537579762d29dda9694009a12ab50482b8cf9d34db47bacddee7119a2b4005d2ae27cb651d956198195ac0e5ccf0e50f64bedea5487737a0803d59bb8a7e56f29136c2dbaf62b2a7fffc0fe5c67841e4649c4937055e5ba9a26239ad2f2a1d76fc2b860fc5d1af238b9af2b3e1c9d8ff4c0146b3daf47e376bd985fe6ed007c7bf59788aa75edb9cec4b5e959c06c02679ef0b65886fe31d124aa4f18ae8781dc3889d05e1a88cdab27227a298042e65d70ce574ea0a4c0dcff3a25609c1869cdc152c408b3e953d43a8b48d35542ad78b748d66520f5dea1c5d3e254e1bbadab6e3c76a2d0dec2c0e701de0b5a80995f26ec2c5cccabf0b64716bc47e3aeaa0d73f22b8c5fe98b11a57118edc2232d77f0703e158d6fc79c2e509f06343e41cf4aec0fc1f664acb9e6772e8f18edde747d1ddd085ad3854618a5aefb8830901bbf5ddcfd50c16cadace3eb74d171fc33c6d65bc8ff20d5586bea1d0ed2964467badf0cb22fb7a16a0fe9242eb4896bf95a77d0c60f9524b973431708635dd87f5827593545767a3b04f48774bad98009482fa9381acb785ac76c2226aba3fd36d96eca321fcd56480115a9202f313a1ab2d92b6001d09a73d12cd9628518be54a92bb6cd1f0df843a85ba4bb993933eff4307f69395be0eca6792528198a6f66f93d9cfcf2a4124a31f2f00a13c33ad18eb8c64cdcc3d860f82b7c3cbfee00958ae1c9a32b44205f9645b549deb50d875e00f3483e7269f31c2287b3d5f041fcda8bc37996155a0f229753310dd9b0a41b5d65c27680f3abebcd61b6b57ee07e577431b08ac2fedadb65948d4a66d48a49bd174cdcc515d19c1d32cb5d9b17239b6e392e66d9c77959060cb86f2ac1d1618e2cc13dcc958feb299bd83f01a45e7610c9aa2c1916ba65819fe616b454146d327bd0b8bf8e8e1090ad3f6a2a02936565ea9f63354b782bc5b899aac9ea46fb7cef2017ca678c7babf89bd1f690fcc313c5887b04194422fc5ae600051d7e7914596604f274b5ec084291cc15b529878cdaf556e31ab5a29fd2f5841bf20e57bf9613fb348546e4810b9e91a5af736b6f06e0c59a6f0f937254fc8fa64b8153e2207a57fc111f89cba651523882ceea1209a7219246a48e6505ecf68378f935a0e0e46f64c71fe304fc34ecab852ee081f046a14941eabdc9d8bc374ece075a83c10e6c7b7945e187ad882be464488c6549772667d6cb52b50b04fe8b1307a3c983c68e3e75f5d9e80c30e6b0fa1cbd61501325da867bf709a8a4c60d86216c5319248da16f2f60048d1826b6d003623a3fcca2155d2b71fc158ea1566dd969c13ee9c0389db76238d49b3fff319525f83f0ed7b92477759fcaad153dfffb6493e9c51dafcd8c973a04be43d8847595c2599edc8f2d79aa737cfd6b4c2efd5930b4f5c0df3de221d4b68e998142db6d21e1a5d1418c866c8db13adfcbc0525c86df18b1600e402c7cd4da154e0af4ad0aaf4f78504fc97b3e873f8a8628870f698b32f3128efd2db38d1f7765ea7226c29de39881af0912d31f1008278d13e7a6decd0a89aa4a1629f698aa47d458f92426fc528ccb1f8ba6d17c3d397bc2497fbd87f9905af2edea68d1053077ed93673319dbd83da88d2d290a1aa755056a2333d6942986624968b06e13b68bdd95ae0393e77c7c3a94f491c78efb4119c089871c91b7f6f948a4c76329b889f937a2ef95b397a1e6bd6ee143b5f1c0932342b96cdb6d491f910177f9bec98c761c3e4e05ee346a230e27201b7297fcf1b811a3025e6b0d3e1a57a2d7177def945333c0183b1c4769b7ea6e615883c84e584c41f97048ddf8325529833160c88376220f4a1ccaa4213c8762d4ef22bc74090660a431ed062bc1bdc043453fbfa003da6ed2261dd8218cf0a9113b69744221ccd699181dc8938a2e71a0b5b7aae882ee87a45779894dbc6b16863ee5c9383b199e8ef863ac54eb21f833b4c00865e45326df2a304", 0x1000, 0x5}, {&(0x7f00000011c0)="e39ad8e745b928ea2f810ad896205b59fc635976a69e51fe604342c1214f7ace1cdd66166ac601f60c26dc2327ccdabf343dd8f0a00bd74787349ae43a9b5fe3cc03db2cb697dd", 0x47, 0x522}, {&(0x7f0000001240), 0x4000000}], 0x100000, &(0x7f0000001300)={[{@balloc_test4='block-allocator=test4'}], [{@fowner_lt={'fowner<'}}, {@context={'context', 0x3d, 'root'}}, {@obj_type={'obj_type', 0x3d, '+%'}}, {@pcr={'pcr'}}, {@euid_gt={'euid>', 0xee00}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_gt={'euid>'}}, {@pcr={'pcr'}}, {@appraise_type='appraise_type=imasig'}]})

[ 2558.807810][   T28] kauditd_printk_skb: 16 callbacks suppressed
[ 2558.807819][   T28] audit: type=1804 audit(1599558270.791:1842): pid=15888 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2558.889344][   T28] audit: type=1804 audit(1599558270.871:1843): pid=15892 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2558.937530][   T28] audit: type=1804 audit(1599558270.921:1844): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:32 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
unshare(0x40000400)

09:44:32 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x2468825185d9173d}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

09:44:32 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0xd, 0x0, &(0x7f00000002c0))
writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d98cf41bda1552b0aacbb972e5de176ab366e6d905a4ca3e394940e79667f5109013edc5b7b5cb109e6fcffec67dd59a612a213e55d5244df3ce63307e677eaed5eb921179ec3754e11be1be802d76bdcec87ba8460bcfa1830062bf2613d7f7dd47901644193dbc7b3e712add6d7b308eabc4192c2a92b6caaef9ce218cb2953330f1bb2232d35bc44763", 0xaa}], 0x1)

09:44:32 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:32 executing program 0:
add_key(&(0x7f00000002c0)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)

09:44:32 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a906", 0x29}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:33 executing program 2:
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x101, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x18}}, 0x0)

09:44:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket(0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r2, 0x2468825185d9173d}, 0x14}}, 0x0)
sendmsg$NL80211_CMD_GET_INTERFACE(r0, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0)

09:44:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r2 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)={0x66fc2}, 0x18)
write$nbd(r2, &(0x7f0000000200)=ANY=[], 0x3fbe00)
syz_genetlink_get_family_id$l2tp(0x0)
openat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)={0xe4280}, 0x18)

09:44:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$inet6(0xa, 0x3, 0x8)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x7, 0x0, &(0x7f0000000100)=0xa4ffffff)

09:44:33 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

[ 2561.041828][   T28] audit: type=1804 audit(1599558273.021:1845): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2561.067554][T15907] IPVS: ftp: loaded support on port[0] = 21
[ 2561.099592][   T28] audit: type=1800 audit(1599558273.071:1846): pid=15916 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16267 res=0 errno=0
[ 2561.133317][   T28] audit: type=1804 audit(1599558273.111:1847): pid=15916 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16267 res=1 errno=0
[ 2561.137133][T15907] vxcan1 speed is unknown, defaulting to 1000
[ 2561.195654][   T28] audit: type=1800 audit(1599558273.111:1848): pid=15916 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16267 res=0 errno=0
[ 2561.222738][   T28] audit: type=1800 audit(1599558273.151:1849): pid=15927 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16267 res=0 errno=0
[ 2561.244265][   T28] audit: type=1804 audit(1599558273.171:1850): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2561.320268][T15907] lo speed is unknown, defaulting to 1000
09:44:33 executing program 1:
request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)='1j:)\x92\xdd`\x83ver\x00M\xf9\xabK\xc0\x81o\xc3\xe1`@l\xec\xb7[k\x82\xe5\x82\xdd\xdea\x1e\xa8z\x13 #re\xed\a\xd0\x91\x8a\xfb\n\x17\x80\xd4R2\x04>\xb79q\x80$\xe9\xcc\xd8\aZc\x90\xcdP\xd9\x9bA\x92\xacF6!\xd8_\xe3\x0e<\xee\x9e\x06\xd3\xc5\b\x8b', 0x0)

09:44:33 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB])
dup(0xffffffffffffffff)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='environ\x00')
preadv(r0, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0x0, 0x0)

09:44:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
socket(0xf, 0x80003, 0x2)

09:44:33 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:33 executing program 2:
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000002c0))
read$usbmon(0xffffffffffffffff, &(0x7f00000005c0)=""/4096, 0x1000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x26841, 0x0)
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000640)='\"', 0x1}], 0x1)

[ 2561.362681][T26280] tipc: TX() has been purged, node left!
[ 2561.440937][   T28] audit: type=1804 audit(1599558273.421:1851): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:33 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a906", 0x29}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:33 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)=@null)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0xb0, 0x0, &(0x7f0000000380)=[@clear_death, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@flat=@weak_binder={0x77622a85, 0xe, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x7}, @fda}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2f}, @fd, @fd}, &(0x7f00000002c0)={0x0, 0x28, 0x40}}}, @acquire, @release, @release], 0xfbb, 0x0, &(0x7f0000000440)="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"})
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4)

09:44:33 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x5)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="ae88bff824f400005a90f57f07703aeff0f64ebbee07962c22772e11b44e69d90cf41bdd2ac8bb8c4fb460e46292", 0x2e}, {&(0x7f0000000040)="53000000fcffffff77040000000020000010400000000000000040000000000000000000", 0xffffffe5}], 0x2)

09:44:33 executing program 1:
request_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x2}, &(0x7f00000003c0)='1j:)\x92\xdd`\x83ver\x00M\xf9\xabK\xc0\x81o\xc3\xe1`@l\xec\xb7[k\x82\xe5\x82\xdd\xdea\x1e\xa8z\x13 #re\xed\a\xd0\x91\x8a\xfb\n\x17\x80\xd4R2\x04>\xb79q\x80$\xe9\xcc\xd8\aZc\x90\xcdP\xd9\x9bA\x92\xacF6!\xd8_\xe3\x0e<\xee\x9e\x06\xd3\xc5\b\x8b', 0x0)

09:44:33 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:33 executing program 3:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, &(0x7f0000000180))
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20)
syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x0)
ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000240)={0x1, @vbi={0x7fff, 0x0, 0x0, 0x0, [0x44ce, 0x7fffffff], [0x0, 0x5], 0x2}})
syz_read_part_table(0x0, 0xffffff1f, &(0x7f0000000400)=[{0x0, 0x0, 0x800000002}])

09:44:33 executing program 2:
msgctl$MSG_STAT_ANY(0x0, 0xc, &(0x7f0000000bc0)=""/4096)

09:44:33 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xf)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000000)=0x1)
ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000440)=0x5)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0)
ioctl$SNAPSHOT_FREE(r1, 0x3305)
perf_event_open(0x0, 0x0, 0xe, r0, 0x1)
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x2)

09:44:33 executing program 5:
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:33 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff010200000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000ffffffff", 0x58}], 0x1)

09:44:33 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x2000020, 0x0, 0x0, 0x4cd]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x204100, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:44:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:34 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a906", 0x29}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:34 executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
socket$inet(0x2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x8922, 0x0)

09:44:34 executing program 0:
r0 = syz_open_dev$vcsu(&(0x7f0000000040)='/dev/vcsu#\x00', 0x0, 0x81001)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0xf4)

09:44:34 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff010200000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000ffffffff", 0x58}], 0x1)

09:44:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:34 executing program 3:
socket$nl_generic(0xa, 0x3, 0x10)

09:44:34 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0)

09:44:34 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:34 executing program 3:
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvfrom$packet(r0, &(0x7f0000000140)=""/206, 0xce, 0x0, 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10)
sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="ee", 0x1}], 0x1}}], 0x92, 0x0)

09:44:34 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000d0000000d0000000030000000c00000000000008040000000e00000000000007000000000f00000000000009040000000f00000004000004000200000a00000004000080020000000900000003000000000000800f00000003000000010000000900000003000000800000000e0000000000000b0000008006000000040000040b0000000a00000002000000ce0200000d00000002000000070000000a00000003000000090000000c000000050000000ce977fbb9232e9e8342137660355a00090000000d0000000000000c030000000300000000000002030000000a"], &(0x7f0000000240)=""/143, 0xeb, 0x8f, 0x1}, 0x20)

09:44:34 executing program 2:
r0 = socket(0x2, 0x6, 0x0)
setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000000)=0x3, 0x4)

09:44:34 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:35 executing program 0:
r0 = socket(0xa, 0x3, 0x7)
connect$nfc_llcp(r0, &(0x7f0000001880)={0xa, 0x0, 0x80fe, 0x0, 0x0, 0x0, "0980f840e9af070000006b38b7a73352f44d34a68664e95c0dbf8e452481cfdbfd125eaafcc8b3eee96f748c2ce191f13314d94c79337add1821fee8157caa"}, 0x60)

09:44:35 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000000), 0x4)

09:44:35 executing program 2:
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="e00000001a003303000000000000000063636d2863616d656c6c"], 0xe0}}, 0x0)

09:44:35 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:35 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a906001500", 0x2c}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:35 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14}, 0x14}, 0x10}, 0x0)

09:44:35 executing program 1:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x107})
ioctl$TUNSETFILTEREBPF(r0, 0x400454d4, 0x0)

09:44:35 executing program 2:
r0 = socket(0xa, 0x3, 0x7)
sendmmsg$sock(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x200000000000000}}, 0x80, 0x0}}], 0x1, 0x0)

09:44:35 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:35 executing program 0:
r0 = socket(0x2, 0x6, 0x0)
setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x3c, &(0x7f0000000500), 0x4)

09:44:35 executing program 3:
r0 = socket(0x22, 0x2, 0x2)
sendmsg$NET_DM_CMD_STOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)

09:44:35 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0)

09:44:35 executing program 0:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x2000000, 0xa0080)
ioctl$LOOP_GET_STATUS(r0, 0x4c00, 0x0)

09:44:35 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]})

09:44:35 executing program 3:
syz_mount_image$jfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)='bpf\x00', 0x0, &(0x7f00000007c0)={[{@mode={'mode'}}]})
syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0x100838, &(0x7f00000001c0)='{-$-\x00')

09:44:35 executing program 1:
syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000940)=ANY=[])
syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', 0x0, 0x0, 0x0, &(0x7f00000004c0), 0x0, &(0x7f0000000580)={[{@session={'session'}}]})

09:44:36 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a906001500", 0x2c}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0)

09:44:36 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0xa, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0)

09:44:36 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4)

09:44:36 executing program 3:
perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
connect$rxrpc(r0, &(0x7f00000000c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x24)

09:44:36 executing program 1:
syz_mount_image$nfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='configfs\x00', 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x18)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x18)
r2 = fanotify_init(0x0, 0x0)
fanotify_mark(r2, 0x15, 0x1000, r1, 0x0)
fchmodat(r1, &(0x7f0000000140)='./file0\x00', 0x60)
r3 = getuid()
syz_mount_image$ntfs(&(0x7f0000000180)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x5, 0x2, &(0x7f0000000400)=[{&(0x7f0000000200)="78fe96a0e0a0137d3f5002bfec003796b4de419313422f055d296ec1278bf40433f7e64e1b6c21c229f35e2d003971db628829e9e98937dc5ff6c120511df80fab61b704da3da99bf827904d0e953b54229ce77b949f61db025c460df39199350ea7321c77d69401992f26cf1960781543cbdbd1783c938574e9fa03d4a405eb7b36fc63089bd3fdd8a67a35476c5767e352f311dbd907ea2dc6154072765b12ef8e6bb8c4bce8010da1940d13973daec4673f1bdf9cab5fcdc45874a6ded9418a16150f64e5bd39d51a6338844ee4f5d215d8db4034f6ebe2f178a5bb7d04b0219d7ad5e6bee955e754ba97b8f900d69bc1a5a2db81", 0xf6, 0xfff}, {&(0x7f0000000300)="aaec2ff71edeef8807fe53b34733629e2d2ed26bdba38ae719149d4dbbe5c09bc5eb9a03611ab9a8bb3f3ab7fe434f2829616c3ab00f7ec5993e4b2d25316cc1427252e30a8b0083d3417b6be773e3e8dbbbee34b09ad2b8e42cde8dcaea91847a5d322e7093da54508a44ae22ff3002fa503b926ad44ba5303ef6a25eb4b89eb734d8d8b0ede4384a30bff89fb23a6482384490498510c25e307a548886594ae81330328da9b6be367728af788b8b1d0623756c9541384652d0a942d60a19c3bb7d469fdb260bae67", 0xc9, 0x4}], 0x8a, &(0x7f00000005c0)=ANY=[@ANYBLOB='disable_sparse=yes,uid=', @ANYRESHEX, @ANYBLOB=',case_sensitive=yes,umask=00000000000000000107616,errors=remount-ro,errors=recover,case_sensitive=no,show_sys_files=no,uid>', @ANYRESDEC=r3, @ANYBLOB="2e00942b9542f1038c88f88ff5e7e604b89f9fee691df7275329828e87038c0de70c97eea1e67d04699b5abb36e8cd112be6030000000bae4ff8352e9d7acb212738599fc642b2c3e0b17af805d6adf33435f13789add70600ce249d23"])
fchownat(r0, &(0x7f00000000c0)='./file0\x00', 0x0, 0xee01, 0x0)

09:44:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, 0x0, 0x0)

09:44:36 executing program 3:
r0 = io_uring_setup(0x1486, &(0x7f0000000200))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x60000000000000)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

[ 2564.338332][T16066] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
09:44:36 executing program 0:
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$IPVS_CMD_DEL_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x74, 0x0, 0x0, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DEST={0x54, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x74}}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0424fc60100002400a000200051a82c137153e670402018003001700d1bd", 0x33fe0}], 0x1}, 0x0)

[ 2564.407911][   T28] kauditd_printk_skb: 8 callbacks suppressed
[ 2564.407922][   T28] audit: type=1804 audit(1599558276.391:1860): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2564.447038][T16083] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2564.455643][T16083] netlink: 250 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2564.472023][T16083] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2564.481499][   T28] audit: type=1326 audit(1599558276.461:1861): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=16055 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0
09:44:36 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001740)=ANY=[@ANYBLOB="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"/732], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25}, 0x10)

09:44:36 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x68}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)

09:44:36 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

[ 2564.482386][T16091] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2564.510417][T16091] netlink: 250 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2564.529517][T16091] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[ 2564.573645][   T28] audit: type=1804 audit(1599558276.551:1862): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:37 executing program 0:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast2}, 0x4}, 0x20)

09:44:37 executing program 2:
set_mempolicy(0x2, &(0x7f00000005c0)=0x1, 0x3)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000380)={0x18, 0x0, {0x3, @dev, 'erspan0\x00'}}, 0x1e)

09:44:37 executing program 3:
perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)

09:44:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

09:44:37 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a906001500", 0x2c}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:37 executing program 1:
socket$kcm(0x10, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='batadv0\x00', 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)

09:44:37 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000300)=[@in={0x2, 0x4e24, @private=0xa010101}, @in={0x2, 0x4e24, @multicast1}], 0x20)

09:44:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

09:44:37 executing program 0:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x14, 0x1, 0x0, 0x0, {0x21}}, 0x14}}, 0x0)

09:44:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, &(0x7f00000001c0)=[@cr4={0x1, 0x22164}], 0x1)

[ 2565.231660][   T28] audit: type=1804 audit(1599558277.211:1863): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:37 executing program 2:
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
write$cgroup_int(r0, &(0x7f00000000c0), 0x12)

09:44:37 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

[ 2565.339623][   T28] audit: type=1804 audit(1599558277.321:1864): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a90600150000", 0x2d}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:38 executing program 0:
perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1, 0x11, r0, 0x0)

09:44:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

09:44:38 executing program 3:
r0 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000080)='/dev/capi20\x00', 0x0, 0x0)
ioctl$CAPI_GET_SERIAL(r0, 0xc0044308, &(0x7f0000000000)=0x10000)

09:44:38 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @remote, 0x12}], 0x1c)

09:44:38 executing program 1:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000006e00)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast1}, 0x80, &(0x7f0000001400)=[{0x0}, {0x0}, {&(0x7f0000000040)="f8", 0x1}], 0x3}}], 0x1, 0x0)

09:44:38 executing program 1:
add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)

09:44:38 executing program 3:
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{}, 0x0, 0x0, 0x0})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/packet\x00')
read$FUSE(r1, &(0x7f0000004140)={0x2020}, 0x2020)

09:44:38 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
memfd_create(&(0x7f0000000000)='\x00', 0x0)

09:44:38 executing program 1:
mount$fuseblk(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0)
creat(&(0x7f00000001c0)='./file0\x00', 0x0)

09:44:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0)

09:44:38 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
semctl$SETVAL(0x0, 0x0, 0x10, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)

[ 2566.091118][   T28] audit: type=1804 audit(1599558278.071:1865): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2566.169489][   T28] audit: type=1804 audit(1599558278.151:1866): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:38 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a90600150000", 0x2d}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:38 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4)
setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x2}, 0xd8)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000440)="d309f3faed3d6de6c53cb0cebff0a32250bed2f56cf2cef4bfd7edcb40eb1dd771b3bd56b3fc254e3cbf44f2a358d38a2b0fc9e887e870f694a3edacfea4e7da89ca5c4051cacbabf838abab0723be1e89323d895dfc0465df0530c67cda4745095d", &(0x7f0000000900)}, 0x20)
bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4)
recvmsg(r1, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x13c)
write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd)
getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x2}, &(0x7f0000000340)=0x8)
stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
lstat(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
write$P9_RGETATTR(r0, &(0x7f0000000280)={0xa0, 0x19, 0x2, {0x88, {0x20, 0x1, 0x4}, 0x10, r2, r3, 0x80000000, 0x3ff, 0x8d64, 0x3f, 0x798, 0x7, 0x81, 0xfffffffffffff801, 0x8, 0x7, 0x101, 0xffffffff, 0x6, 0x0, 0xcce1}}, 0xa0)

09:44:38 executing program 0:
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000000)={0x6, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), &(0x7f0000000100), 0x3}, 0x20)

09:44:38 executing program 1:
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/118, 0x7ffff000}], 0x1}}], 0x1, 0x10100, 0x0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0xe09430}, 0x8}, 0x0)
syz_io_uring_setup(0x2714, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x3aa}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000480), &(0x7f00000004c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8916, &(0x7f0000000180)={'batadv_slave_0\x00'})

09:44:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:38 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000d6c0)=[{&(0x7f00000001c0)={0x14, 0x1a, 0x1, 0x0, 0x0, "", [@generic="e7"]}, 0x14}], 0x1}, 0x0)

09:44:38 executing program 2:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100), 0x4)

09:44:38 executing program 0:
r0 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r0)
r1 = getpid()
prctl$PR_SET_PTRACER(0x59616d61, r1)

09:44:38 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:38 executing program 2:
r0 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0x0)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f00004b2000/0x3000)=nil, 0x2)

[ 2566.913489][   T28] audit: type=1804 audit(1599558278.891:1867): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:38 executing program 0:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/seq\x00', 0x44301)

09:44:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, 0x0, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

[ 2566.983092][   T28] audit: type=1804 audit(1599558278.961:1868): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2567.067401][   T28] audit: type=1804 audit(1599558279.051:1869): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:39 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a90600150000", 0x2d}], 0x1}, 0x0)
read(r0, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x0, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:39 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, 0x0, 0x0)
mremap(&(0x7f00005db000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f00006fa000/0x3000)=nil)
mlock(&(0x7f00006f9000/0x3000)=nil, 0x3000)
clone(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1f, 0x2)
write$evdev(r2, &(0x7f0000057fa0)=[{{}, 0x11, 0xf}], 0x18)
ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000000)=""/126)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb, 0x1, 'geneve\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL={0x5}]}}}, @IFLA_MASTER={0x8}]}, 0x44}}, 0x0)

09:44:39 executing program 0:
bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xa, 0x8, 0x4, 0xffffffff, 0x2, 0xffffffffffffffff, 0x0, [0x5f, 0x0, 0x0, 0x0, 0x2000000]}, 0x40)

09:44:39 executing program 3:
r0 = socket(0x29, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000008d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001300)='d', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x24008084)

09:44:39 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010100}], 0x10)

09:44:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x0, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:39 executing program 3:
epoll_create1(0x0)
r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000140), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0)

09:44:39 executing program 0:
r0 = socket(0xa, 0x5, 0x0)
sendmsg$sock(r0, &(0x7f0000000580)={&(0x7f0000000140)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)="e8", 0x1}], 0x1}, 0x0)

09:44:39 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x30, r1, 0x0, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x30}}, 0x0)

09:44:39 executing program 2:
getsockopt$IP_VS_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x481, 0x0, &(0x7f0000000080))
time(0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x11)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={[], [], @empty}}, 0x1c)

09:44:39 executing program 3:
syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xe58, 0x0)
ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(0xffffffffffffffff, 0xc0305710, 0x0)
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x0, 0x60642)

09:44:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}}, 0x0)

09:44:40 executing program 2:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58)
accept$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@remote, @null, @null, @default, @default, @default, @remote, @default]}, 0x0)

09:44:40 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000240)={0x0, 0x70, 0x0, 0x2, 0x80, 0x6, 0x0, 0x7, 0x4501, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0xe13}, 0x0, 0x1, 0x0, 0x0, 0x5ca, 0x1}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x9fffffd, 0x7, 0x0, <r1=>0xffffffffffffffff})
ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000380)=0x1)

09:44:40 executing program 1:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010100}], 0x10)

09:44:40 executing program 2:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300), 0x0})
ioctl$sock_SIOCBRDELBR(r0, 0x890b, &(0x7f0000000040)='batadv0\x00')

09:44:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}}, 0x0)

09:44:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, &(0x7f00000001c0)=""/116, 0x74)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:40 executing program 0:
mq_unlink(&(0x7f0000000040)='/dev/video#\x00')

09:44:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x28}}, 0x0)

09:44:40 executing program 2:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r2 = pkey_alloc(0x0, 0x0)
pkey_mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x6, r2)
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4)

09:44:40 executing program 0:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x8, 'vlan0\x00'})

09:44:40 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x28, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_WDEV={0xc}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x28}}, 0x0)

09:44:40 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:40 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@ipv4_newnexthop={0x1c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0)

09:44:40 executing program 3:
r0 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @ipv4={[], [], @empty}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x38}}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000800)='J', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000002bc0)="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", 0x100}], 0x1}}, {{0x0, 0x0, &(0x7f0000004300)=[{&(0x7f0000003d00)="cdf645c223b5909ac72ea7bb73b34c67eb2624eeec86dbb1ef64bd9e513816c91884d004bee558072dfb42af7c002abdd1906f7b073d6875de10c74545a9b6454a8e3294ac3c5722d8fe23ec10bbe4c778b6ade3bfa92b4a5804403731800b142794398684b224864092e283bb8aed7b325c4c43825bd061170d39663e32af94658dc8a66eaeb33b7a8526a259b0976012678012f77350bcfd5cc4da2d8a211e26c4decccf19ba2473233720", 0xac}, {&(0x7f0000003dc0)="6a319448a3b10a802de88a55df92198ac22d38c12300173f3d4fa60132d2171ff09ea4bdc736da695c84d463d582692c714abb0b684fbc53", 0x38}, {&(0x7f0000003e00)="d76863de07c31fac23960f9a16f360e0bdb6ecacbe78f79f0e850e799b4eafdba7490dc3601a563cccbbff29c2f87ceb93e2b7aaddcb00fba9f5c416dffd66e8a295893f5fbf7a776c1a4ef4b482bb371b8a4ec38d071ce8c1ea0e712f3669b7839e6af6df50028775befbd01db852687076b0851918d5f3127c0b88b59a989238a0d3f7809374be6084262acde4587a419668260d3181c571c43e039c391af1952367d9e175c625818664227690420aca89dcf0fb85e5eab20756a70e1a890a9a328c9373b1b66aee26b97a11f8f6b668685bfaf5b0eb6a43fbaac4aadc623903aa2b05", 0xe4}, {&(0x7f0000003f00)="3b722b862133579fed260d836ad79ee08fb08a3748ad9ec79d46b9c7319248de8a5f80ace4d1496384431984ed1611f95dda9a4ee77d96a3c0cb7648f68565bb6e26b8786035d2628df8a16ba75870abd0697046c38ea1f1f1a5d390a8066e6a28ccfeb6e479d9c34cfa32e38184736d92d79182d433235f1462470a46b7ec5d5815a4bc307fb9bca27a6230f2a3ad46474999748b6ae5e6fa23e42afded043ef9e1fe02e73aa5ff55308ad9eac1981744c21e697f31fae09b2abd9693e3dfc1f1417901a7797b4ae136dbcd1d1f2b03f8b92dc2bc444f8e65f7da44c0b7743b93cd71", 0xe3}, {&(0x7f0000004000)="661fca41cbb397a89b45eff173d8dd01518ad93a23f34875270c37adc6577b25c1ea9b9f42ddda9a1391ace1e1da3a5caeddc5907fbe1acaea0560a2a8fd8805abfa8b777343e94fb80cbd572f996709456c9ba4d529bc5848a641008ba5cf156620f8a05e8fd2b8b29e7c9227cfb89e847964bfcab88a98f61468979f4aaf20137654c6273cbd19502a75911bbb0afc18bd9ab55e10ea45a31f9029e72b98c793031cca4ef4c8beae8b6cde241e587f2f9563eb8826900cfaea130349c23684e7d07adcdb8e07c8ed00e7efa614e2e5a08ea2ebb9ca38a93b10835e11121e01ec32fb257981249a00c783dc4fea30dee332", 0xf2}, {&(0x7f0000004100)="d2ac6d21b279b7b5fddf7497b7fedca7605ed88d674e0fd9fa671c8bf8576a14c2342b1c5aa673189da6c25acccc6fa2490179f7ed7dfbeccaf4b540b27fbe071cbe5061381232460351ca9fb8a74f6d70b99fb0d4b767f9500ca38fb595be0407b79a0523fae310a9aa5ffffbd50300cf1e6d43b3ea3cab504fac779f24a3cb643dd69ced10a8194803103d72a071423490287886c5f3cfe8f84ee8b0bd0e8e59", 0xa1}, {&(0x7f00000041c0)="db89f63d008c53609c01b33a4c27fc3e01fa2b77cea92e6a53ce921345792e791db1245684532ae1bc8d0456307e01b7ca5383490c51d876d9764d6d8394763216cce5a58a8ebca8ed89d4ce3b4eac16cee715e1e546416000954330bf3910f859dc27987f6ae99a85ad30b093755ab469fc122b4168c45b92dbe207a44e621786494c12c0340d1ce028e143fe84cc42601dc5dd97cfa1a2f5f68906352ce03be92ef6fd944470ff22e95b8b243bea5459f240f40248a15905af82932d282edb43a228197b4272c259f760729caf53e0f4146ebceeaafcead835f8f74845467a7b60b19427751096133f6680a6fe516848cff18354a5b2ed", 0xf8}, {&(0x7f00000042c0)="2f5dff7b2dd8286ef157eea3497328305277a88711b532b990a50ad1c0fb41d7", 0x20}], 0x8}}, {{&(0x7f0000004580)={0xa, 0x4e24, 0x7f, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7fff}, 0x1c, &(0x7f0000005740)=[{&(0x7f00000045c0)="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", 0x1000}, {&(0x7f00000055c0)="f5f29184e3b0dbb223813a6921e1ad1591247d14c22781cceab9eb581f30d6d5fa40e7fbc7d6ab55e6e59e2abb134d970aed7555ebc7e6cb97cfdb71423c7fc58ebb30a1ba7f980a121239460a6f3c5fa01e0f40e2651ddecf6594260098dc945ed655545d2d63ba50f0142fca3733cdcbf4b0102b5da1fad5e803c19ad5507dd43b302d7ab1", 0x86}, {&(0x7f0000005680)="c03c39e76f951098ca24f10a73e55f56760c06f37ff6bcefd08eca4d1387855960ff34334046f77896ceb20599fd6b54ae268e2515220d66e5520a8acded88289a2f279bd46c0f47af5c3a98e27c9d5b3fdcbc4e5bfd08660a31941354d0636f16a3e9fca38d5fab30697d70522cb98367d7299bdc1fdaaa7f2b7699d9961ce8816e56acde8ad52b63e4b253e992237763e2565cf944ce", 0x97}], 0x3, &(0x7f0000005780)=[@pktinfo={{0x24, 0x29, 0x32, {@private0}}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x3c, 0x2, [], [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x6c, 0x14, 0x2, 0x81, 0x0, [@empty, @remote, @private2, @mcast2, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @loopback, @local, @mcast1, @dev={0xfe, 0x80, [], 0x1e}, @private2]}}}, @hoplimit_2292={{0x14}}, @rthdrdstopts={{0x80, 0x29, 0x37, {0x3b, 0xc, [], [@enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x1, [0x0]}, @ra, @generic={0x7f, 0x58, "acb646fd6f8ca580af30c7a326fda2f46f002edff33ea67bcc53c1aa9d6a8f4cc146a902fd30292b27c117aec9d02823b05ba99edc1b5ae8e4f26d10183f487b967af3fe63911fdeb4415ecee92cdc9f3256538311e89a7f"}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x1, [], [@generic={0x1f, 0x6, "8ff5e44c208e"}]}}}, @dstopts={{0x50, 0x29, 0x37, {0x2e, 0x6, [], [@jumbo, @calipso={0x7, 0x18, {0x2, 0x4, 0x3f, 0x1, [0x7, 0x7]}}, @jumbo={0xc2, 0x4, 0x9}, @ra={0x5, 0x2, 0x3ff}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x1}]}}}, @hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, [], [@pad1]}}}, @hopopts={{0x20, 0x29, 0x36, {0x62, 0x0, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @hopopts_2292={{0x58, 0x29, 0x36, {0x84, 0x7, [], [@jumbo={0xc2, 0x4, 0x3}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @empty}]}}}], 0x2b0}}], 0x4, 0x41)

09:44:41 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000480)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

09:44:41 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000240)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000140)={0x6752a8c2103ce2fc, 0x0, 0x0})

09:44:41 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x2ae357af0d338d83, 0x0, 0x0, {0x2}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0)

09:44:41 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8922, &(0x7f0000000040)={'wg0\x00'})

09:44:41 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000080)={0xa, {0x10001, 0x3ff, 0x0, 0x5}})
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:41 executing program 0:
r0 = gettid()
clock_gettime(0x0, &(0x7f0000000340))
perf_event_open(&(0x7f000025c000)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3b, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r1)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r3, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r3, 0x408c5333, &(0x7f0000000000)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(0xffffffffffffffff, &(0x7f00000002c0)=[{0xff, 0x0, 0xff, 0x7, @tick, {0x0, 0x5}, {0xff, 0x2}, @quote={{0x2, 0x3}, 0x4}}, {0x3f, 0x3, 0x8, 0x0, @tick, {}, {0x1, 0x81}, @raw8={"ac1a495d70db7accaa33be6b"}}, {0x9, 0x80, 0x2, 0x7f, @tick, {0x77}, {0x3f, 0x8}, @quote={{0x0, 0x95}, 0x9, &(0x7f0000000280)={0x1f, 0x5, 0x0, 0xf5, @tick=0x8, {0xc4}, {0x8a, 0x2}, @result={0x0, 0x5}}}}], 0x54)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0)
write$cgroup_type(r2, &(0x7f0000000080)='threaded\x00', 0xfffffc61)

09:44:41 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:41 executing program 2:
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8922, &(0x7f0000000040)={'wg0\x00'})

09:44:41 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/timer_list\x00', 0x0, 0x0)
read$dsp(r0, &(0x7f0000000180)=""/4096, 0x1000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/seq/clients\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000000)={0x5, 0x70, 0xc3, 0x1, 0x1f, 0x0, 0x0, 0x6, 0x82480, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x9fa3, 0x0, @perf_config_ext={0xa7, 0x7ff}, 0x500, 0x101, 0xcb, 0x5, 0x1f, 0x3ff, 0xfff}, 0x0, 0xc, r1, 0x1)

[ 2569.593279][   T28] kauditd_printk_skb: 4 callbacks suppressed
[ 2569.593288][   T28] audit: type=1804 audit(1599558281.571:1874): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:41 executing program 1:
syz_mount_image$reiserfs(0x0, &(0x7f0000000980)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@v2, 0x9, 0x0)

09:44:41 executing program 1:
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r0=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000180)={'gre0\x00', r0, 0x7800, 0x10, 0x0, 0x4, {{0x17, 0x4, 0x0, 0x6, 0x5c, 0x65, 0x0, 0x4, 0x2f, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x44, 0x97, 0x3, 0x3, [{@loopback, 0x4}, {@local, 0xfffffc01}, {@local, 0xfff}, {@multicast1, 0x2}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@empty, 0x1f}]}, @end]}}}}})
r1 = socket(0x1, 0x1, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
add_key(&(0x7f0000000000)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r2 = socket(0xa, 0x6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
ioctl$sock_ifreq(r2, 0x8922, &(0x7f0000000200)={'veth1_to_team\x00', @ifru_map={0x80, 0x9, 0x6, 0x81, 0x0, 0x2}})
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r3, 0x894a, &(0x7f0000000240)={'ip6gretap0\x00', @ifru_flags=0x4000})
add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)

09:44:41 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r0, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="1ccc7a1080f42d2ab031f336f7e6c90ab56010467ad0200ffe3513edd3ab1fb93ab9f50793acd163c9830cb5272e2f0469dc9905b5e186b9c269fd54c51a850d5ef244bf4700ef03ff32164cf0b70f529fae710a0648f18d1f1c6087f614b1854aa47cf2711fa9cec8fba121f7347aedd7b6f950c5296ee7e1dddf13a79b0e6832200c730a17a0b82b182b3a1c5fd27f7f4ab149f31b4c3abf82d3ecf28867cbb34251f430da9432d7b01dbee071f1f02d9095b06a851fa6f786", 0xba}, {&(0x7f0000000200)="5e973380545a518a20bbc9f6b507c0769a67740746e7b4ab9a904c0476172b1d7cb9de20bae05c12cdd4ebad0541400385535de81f68b8c1d4b111f97ff255aa67510f3cec313961c5f8dfa7c2b1b1f32e89281b7f504ff04f2f1005bd372933c9b1c3399416ef8d8bd51780640082a99474bdf225d4741fa3d80d3531634a3d4ed0ac0a66e528e510ddaa2ab024ecef4c95206c790d227b78372c9705d694638a36655673f4169ca3644de532087dfe720cd317cf91b563c0d065b02920acca85fcbfe4bf69ca9d778aa0ed8d5e6362e69074baeafa6055cc5e1926ca1b66fb23e4f84c7082f0fe80", 0xe9}, {&(0x7f0000000300)}, {&(0x7f00000000c0)="170c1d0b7684a7bd7a8839ef0d59a05e466b92f033fadf6d6b7273618f49c9b2c3ab94168ba063a967ea2c3cd597ab63e65ce7b737318f341353", 0x3a}], 0x4, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x9f8430afdec5ac29}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x45, "d3a97b52dc44a262c7955ec7866138dcd1db5734b0b8dfe975d9f9cac215de743d8b05f3a10c65c694a0f0f41da55ccd10ffc6b04a2db4fafcf2161185ec994a7ec8518e80"}, @op={0x18}], 0xa8, 0x8000}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="725050c209400621036aaee7fb44e862c0435cf7814a39d5cdc4e640cd2ec285ccd922313d3779dd47b9a8a595b46f982bf1ce80dc5646fabcd433c8", 0x3c}, {&(0x7f0000002f00)="709ddb1d6d6281f6c83a4259cc4c061c96aba594cc81a6ab2f88ce5afe2ed7d27013086069742126ba9771676322d17a975470cdf79bd4172c9e3df38ba9db45de9fc44bc97023cf3244c73f72e95f8d3090d57060cc730461b7dcc2240ac64843782bf11c899468208756eb1261432d0b94e129b92625d703bec9d167f0cf1af3519eb80e5f1c3e22b9aae37d0a944c57a79625f01ecd91039342c15eba3f4adb6534bc3f3906bab178fac2f69200618c7e548082a57b7d858242fcb8a3a77b3cd17ba2065b7a8bc9", 0xc9}, {0x0}], 0x3, &(0x7f00000007c0)=[@assoc={0x18, 0x117, 0x4, 0x914}, @iv={0xd8, 0x117, 0x2, 0xc1, "e62d4fc2f394d11aa8f6ed031484d89f583998d10711ec858c1e5848c5f9a406b5a94f0f24bb4bdbfe0504a4130cf33a01cf7215ee494803d366f1765df5cfe7b93953a7c7425c6ab1aa9b4ef7ea8c59a02e03b24d85bbadb64d61d2a1e35686442b92801fda342cc08b2a93ae1eafda9b7dbb743986cbe06c117e056ac9c79d0d835eb2f31eb787d34d9ca0419c93f2cd6d996286d8fe69912353d437201cb21a0ec7e65990f4e5597f25221666f943c9368c6723c1858a094e2acaaa4b0d085f"}, @assoc={0x18, 0x117, 0x4, 0xfd}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0xe0, 0x117, 0x2, 0xc5, "3f9fc6d87b825f8c6a70701781a1ba04ed6b00cd7513c5b158ca6f3b2be15510cf7e0332cee2bdcc0663ade7da6193f8b34377be7e9c23f567830f6188afe1c5cf999e5b171d2fe0c40a4abce30cec4ae7b6444c33f6e084c02e7620ba00c6f14f99105743e820cbb783ce4e59b216ecc88f3056a2afaa41cdb26185fdb7914855262fbd9008c1f379187a689d9af089fb10458e085cb47ab4ce3afc3dd8f55a410b80ba01e7fae1ee0a156a926f85144620f22a80557d2d0bfc18855ffe3ac0e457c39604"}], 0x218, 0xc0c4}, {0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000b00)="381591ae62275777ae52436919eb9266d84b5502a34a7cbfc1e0fea39617280c8dbf7da1d4b3016a7cfed4ce69211baf9e7fa6b1b0661c7de1e19843f703029d185590e5c58e05f9b0a12b660e2ade7b392cf1", 0x53}], 0x2, 0x0, 0x0, 0x4048800}, {0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000bc0)="16baddc4d9812485e01940c3ca0bd231a52d8079a2363892351f06183e7ed4cf476c6b00ee20bcf1c4b4", 0x2a}, {&(0x7f0000000c00)="ce1fdd9b885cf75d95543744375336baef2902105566f4d5b3a8e6d921e50056b95daf893f6b8adca526099ed3502281137340ca6bc7ec49f118dc2c07ab206438c732cca2778b8a6baa3fb46cf985689be671ae713a6ca95a0e15cbf7", 0x5d}, {&(0x7f0000000c80)="c143a258db2f426c85fb8f9689d85f5834ca1e151de24072452817f69173eb2a39c45bf71220da3250e49254922a545084b8dd381b360e14fbcedfaf19efdcfc0f8e4d78df45a2e3d73b657a2473c132fc38f4b5d30333379862081097b0ef2769dac5278e54815c013932df431ec8c3b1f03b9a17235f75b9b4384c58b74883", 0x80}, {&(0x7f0000000d40)="d6bef7682007498421a695504d5b239c731354fe3c8c42491c7c88587f79701620ac7b8aabb78b28e7355989cd", 0x2d}, {&(0x7f0000000d80)="7d6d36557b98ea046bd8d7c0db0487b643144766fe44cb1f0b3fb633b0f67be6e3f0428eba8a68cfbe1a696b45c431c2aa83d177a80cece43a98ea3104d18c91312a22f4a87ee5034c861b72f8f960e4c951f09bccaceb6ac5db694e3b6711d11e63266b474e01f534905f553be94cbe2c181a99de1e5e17a0c9752ca7422b903d94aa4e2f380fc9637bfad83666c2f33fc69ae212403d4716e41fd748423abf2a430aaafa564bd53be2b7025502", 0xae}, {&(0x7f0000000e40)="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", 0x7df}], 0x6, &(0x7f0000001ec0)=[@op={0x18}], 0x18, 0x4008000}], 0x4, 0x10)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0x4})
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, 0x0, 0x109, 0x7ff, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0)

09:44:41 executing program 5:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@mpls_getnetconf={0x14, 0x52, 0x125}, 0x14}}, 0x0)
recvmmsg(r0, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0xa}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0)

09:44:41 executing program 2:
r0 = socket$inet6(0xa, 0x802, 0x73)
sendmmsg$inet6(r0, &(0x7f0000003400)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}, {{&(0x7f0000000240)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x2, 0x40008000)

09:44:41 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:41 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f00000000c0)=[{0x26, 0x0, 0x0, 0x0, @tick, {}, {}, @connect}], 0xfddf)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, 0x0)

09:44:41 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae60, 0x0)
ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040))

09:44:42 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=@newsa={0x140, 0x10, 0x713, 0x0, 0x0, {{@in6=@dev, @in6=@loopback}, {@in=@remote, 0x0, 0x33}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth={0x48, 0x1, {{'rmd160\x00'}}}, @extra_flags={0x8, 0x18, 0x1f6ab241}]}, 0x140}}, 0x0)

09:44:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:42 executing program 5:
r0 = open$dir(&(0x7f0000000300)='./file0\x00', 0x840, 0x0)
fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000000c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x0)
lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b40)='security.ima\x00', &(0x7f0000000080), 0x1, 0x0)
lsetxattr$security_ima(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.ima\x00', &(0x7f00000001c0)=@v1={0x2, '\a'}, 0x2, 0x0)

09:44:42 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3)
ioctl$TCFLSH(r0, 0x80047437, 0x2070e000)

09:44:42 executing program 2:
ioperm(0x8, 0x2, 0x7fff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x3938700}, 0x0)

09:44:42 executing program 3:
r0 = socket(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$alg(r0, &(0x7f0000002940)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="1ccc7a1080f42d2ab031f336f7e6c90ab56010467ad0200ffe3513edd3ab1fb93ab9f50793acd163c9830cb5272e2f0469dc9905b5e186b9c269fd54c51a850d5ef244bf4700ef03ff32164cf0b70f529fae710a0648f18d1f1c6087f614b1854aa47cf2711fa9cec8fba121f7347aedd7b6f950c5296ee7e1dddf13a79b0e6832200c730a17a0b82b182b3a1c5fd27f7f4ab149f31b4c3abf82d3ecf28867cbb34251f430da9432d7b01dbee071f1f02d9095b06a851fa6f786", 0xba}, {&(0x7f0000000200)="5e973380545a518a20bbc9f6b507c0769a67740746e7b4ab9a904c0476172b1d7cb9de20bae05c12cdd4ebad0541400385535de81f68b8c1d4b111f97ff255aa67510f3cec313961c5f8dfa7c2b1b1f32e89281b7f504ff04f2f1005bd372933c9b1c3399416ef8d8bd51780640082a99474bdf225d4741fa3d80d3531634a3d4ed0ac0a66e528e510ddaa2ab024ecef4c95206c790d227b78372c9705d694638a36655673f4169ca3644de532087dfe720cd317cf91b563c0d065b02920acca85fcbfe4bf69ca9d778aa0ed8d5e6362e69074baeafa6055cc5e1926ca1b66fb23e4f84c7082f0fe80", 0xe9}, {&(0x7f0000000300)}, {&(0x7f00000000c0)="170c1d0b7684a7bd7a8839ef0d59a05e466b92f033fadf6d6b7273618f49c9b2c3ab94168ba063a967ea2c3cd597ab63e65ce7b737318f341353", 0x3a}], 0x4, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x9f8430afdec5ac29}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x60, 0x117, 0x2, 0x45, "d3a97b52dc44a262c7955ec7866138dcd1db5734b0b8dfe975d9f9cac215de743d8b05f3a10c65c694a0f0f41da55ccd10ffc6b04a2db4fafcf2161185ec994a7ec8518e80"}, @op={0x18}], 0xa8, 0x8000}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)="725050c209400621036aaee7fb44e862c0435cf7814a39d5cdc4e640cd2ec285ccd922313d3779dd47b9a8a595b46f982bf1ce80dc5646fabcd433c8", 0x3c}, {&(0x7f0000002f00)="709ddb1d6d6281f6c83a4259cc4c061c96aba594cc81a6ab2f88ce5afe2ed7d27013086069742126ba9771676322d17a975470cdf79bd4172c9e3df38ba9db45de9fc44bc97023cf3244c73f72e95f8d3090d57060cc730461b7dcc2240ac64843782bf11c899468208756eb1261432d0b94e129b92625d703bec9d167f0cf1af3519eb80e5f1c3e22b9aae37d0a944c57a79625f01ecd91039342c15eba3f4adb6534bc3f3906bab178fac2f69200618c7e548082a57b7d858242fcb8a3a77b3cd17ba2065b7a8bc9", 0xc9}, {0x0}], 0x3, &(0x7f00000007c0)=[@assoc={0x18, 0x117, 0x4, 0x914}, @iv={0xd8, 0x117, 0x2, 0xc1, "e62d4fc2f394d11aa8f6ed031484d89f583998d10711ec858c1e5848c5f9a406b5a94f0f24bb4bdbfe0504a4130cf33a01cf7215ee494803d366f1765df5cfe7b93953a7c7425c6ab1aa9b4ef7ea8c59a02e03b24d85bbadb64d61d2a1e35686442b92801fda342cc08b2a93ae1eafda9b7dbb743986cbe06c117e056ac9c79d0d835eb2f31eb787d34d9ca0419c93f2cd6d996286d8fe69912353d437201cb21a0ec7e65990f4e5597f25221666f943c9368c6723c1858a094e2acaaa4b0d085f"}, @assoc={0x18, 0x117, 0x4, 0xfd}, @assoc={0x18, 0x117, 0x4, 0x8}, @op={0x18}, @iv={0xe0, 0x117, 0x2, 0xc5, "3f9fc6d87b825f8c6a70701781a1ba04ed6b00cd7513c5b158ca6f3b2be15510cf7e0332cee2bdcc0663ade7da6193f8b34377be7e9c23f567830f6188afe1c5cf999e5b171d2fe0c40a4abce30cec4ae7b6444c33f6e084c02e7620ba00c6f14f99105743e820cbb783ce4e59b216ecc88f3056a2afaa41cdb26185fdb7914855262fbd9008c1f379187a689d9af089fb10458e085cb47ab4ce3afc3dd8f55a410b80ba01e7fae1ee0a156a926f85144620f22a80557d2d0bfc18855ffe3ac0e457c39604"}], 0x218, 0xc0c4}, {0x0, 0x0, &(0x7f0000000b80)=[{0x0}, {&(0x7f0000000b00)="381591ae62275777ae52436919eb9266d84b5502a34a7cbfc1e0fea39617280c8dbf7da1d4b3016a7cfed4ce69211baf9e7fa6b1b0661c7de1e19843f703029d185590e5c58e05f9b0a12b660e2ade7b392cf1", 0x53}], 0x2, 0x0, 0x0, 0x4048800}, {0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000000bc0)="16baddc4d9812485e01940c3ca0bd231a52d8079a2363892351f06183e7ed4cf476c6b00ee20bcf1c4b4", 0x2a}, {&(0x7f0000000c00)="ce1fdd9b885cf75d95543744375336baef2902105566f4d5b3a8e6d921e50056b95daf893f6b8adca526099ed3502281137340ca6bc7ec49f118dc2c07ab206438c732cca2778b8a6baa3fb46cf985689be671ae713a6ca95a0e15cbf7", 0x5d}, {&(0x7f0000000c80)="c143a258db2f426c85fb8f9689d85f5834ca1e151de24072452817f69173eb2a39c45bf71220da3250e49254922a545084b8dd381b360e14fbcedfaf19efdcfc0f8e4d78df45a2e3d73b657a2473c132fc38f4b5d30333379862081097b0ef2769dac5278e54815c013932df431ec8c3b1f03b9a17235f75b9b4384c58b74883", 0x80}, {&(0x7f0000000d40)="d6bef7682007498421a695504d5b239c731354fe3c8c42491c7c88587f79701620ac7b8aabb78b28e7355989cd", 0x2d}, {&(0x7f0000000d80)="7d6d36557b98ea046bd8d7c0db0487b643144766fe44cb1f0b3fb633b0f67be6e3f0428eba8a68cfbe1a696b45c431c2aa83d177a80cece43a98ea3104d18c91312a22f4a87ee5034c861b72f8f960e4c951f09bccaceb6ac5db694e3b6711d11e63266b474e01f534905f553be94cbe2c181a99de1e5e17a0c9752ca7422b903d94aa4e2f380fc9637bfad83666c2f33fc69ae212403d4716e41fd748423abf2a430aaafa564bd53be2b7025502", 0xae}, {&(0x7f0000000e40)="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", 0x7df}], 0x6, &(0x7f0000001ec0)=[@op={0x18}], 0x18, 0x4008000}], 0x4, 0x10)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x0, 0x0, 0x4})
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000002d00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x28, 0x0, 0x109, 0x7ff, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syz_tun\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40050}, 0x0)

09:44:42 executing program 1:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0xc000}, 0xc)

09:44:42 executing program 5:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket$inet6(0xa, 0x6, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
dup2(r1, r2)
setsockopt(r2, 0x10d, 0x800000000e, &(0x7f00001c9fff)="03", 0x1)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c)
listen(r1, 0x5)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @empty=0x1700000000000000}, 0x10)

09:44:42 executing program 3:
perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x2, 0x3, 0x2f8, 0x160, 0x0, 0x160, 0x160, 0x62020000, 0x260, 0x260, 0x260, 0x260, 0x260, 0x3, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'vlan0\x00', 'bridge_slave_0\x00'}, 0xb003, 0x130, 0x160, 0x8, {}, [@common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'kmp\x00', "bdc74c01d6369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa2acab6b1d2cc05060feb70b5bc8c2d4ba3a94a2d2393e3182f64695d7d05fb478c8f56627a5cf905d564eeeb83ff0150ca0f3c44f7fda4d20a55050342ea9685ecc8838e049f1f2e2d081ddda375bb7008adc297a5ece1bb2df53d17bef26bb6f8", 0x5a, 0x2}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00'}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28, 'ttl\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x358)
socket$unix(0x1, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080)='iso9660\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=ANY=[])
r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x103000, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={0x0}}, 0x2004c000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x6ac691b121febe7e}, 0xc, &(0x7f0000000100)={&(0x7f0000000640)={0x7c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xa00}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6fc}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x7c}}, 0x4010)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000580)='/dev/btrfs-control\x00', 0x208000, 0x0)
bind$rxrpc(r3, &(0x7f00000005c0)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @private0, 0x1}}, 0x24)
r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x103000, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, 0x0, 0x2004c000)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4)

09:44:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

[ 2570.164676][   T28] audit: type=1804 audit(1599558282.151:1875): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2570.172084][T16345] xt_CT: You must specify a L4 protocol and not use inversions on it
09:44:42 executing program 2:
r0 = syz_open_dev$video4linux(&(0x7f0000000240)='/dev/v4l-subdev#\x00', 0xffff, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r0, 0x4020565a, &(0x7f0000000700)={0x0, 0x0, 0xfffffffffffffe91, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "bef20ddb"}, 0x0, 0x0, @userptr})

09:44:42 executing program 3:
r0 = socket(0xa, 0x2, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000180)=@in6={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}}, 0x1c, 0x0}, 0x4048800)

09:44:42 executing program 0:
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8009)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

09:44:42 executing program 1:
setresuid(0x0, 0xee00, 0x0)

[ 2570.220801][T16346] xt_CT: You must specify a L4 protocol and not use inversions on it
09:44:42 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

[ 2570.268338][   T28] audit: type=1804 audit(1599558282.251:1876): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2570.292513][T16362] batman_adv: Cannot find parent device
[ 2570.306538][T16362] batman_adv: batadv0: Adding interface: gretap1
09:44:42 executing program 0:
r0 = socket(0x2b, 0x1, 0x0)
recvfrom$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

09:44:42 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:42 executing program 3:
r0 = socket(0x10, 0x80002, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
recvmsg$can_j1939(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)=""/28, 0x1c}, 0x0)

[ 2570.317796][T16362] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2570.343387][   T28] audit: type=1804 audit(1599558282.321:1877): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:42 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x4020032, 0xffffffffffffffff, 0x8000000)
r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000cd7000/0x2000)=nil, 0x2000, 0x2, 0x4020032, 0xffffffffffffffff, 0x8000000)
mmap$IORING_OFF_SQES(&(0x7f0000d36000/0x2000)=nil, 0x1fffff, 0xfeffffff, 0x82031, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(r1, 0x0, 0x0, 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000400000/0xc00000)=nil, 0x7fffdfbff000, 0x0, 0x4020032, 0xffffffffffffffff, 0x8000000)

[ 2570.434434][T16362] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 2570.448921][   T28] audit: type=1804 audit(1599558282.431:1878): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:43 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
link(0x0, 0x0)

09:44:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:43 executing program 0:
syz_mount_image$cifs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
chown(&(0x7f0000000080)='./file0\x00', 0xee00, 0x0)
r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)

09:44:43 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x80002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb, 0x1, 'gretap\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0)

09:44:43 executing program 3:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f00000004c0)='lo\x00\x96o8\x14d\xa1\xe3\xd7]b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\x1b\xe7\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x00\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2aj\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x16\x7fT\x11\xd3\r7\xe6\"f\xcf\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xf8s2\x9cVF\xd5\x18\xfe\x0e\x8f \x01\x00\x00y.\xfc*\x82\xa5\xa1p5\xc8{\'m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'l\x1b\xe0o\xdb\xc8\x91%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x03\x93\xe1\xcc\xe7m\x80\'\xf0\xa5\xed(\r\xa8\x0f&\xb1\xf3\xff0\f\x82%_\x92\x8bD\xb9\xd9\xe7\xf2\xe4\xc1i#\xdc\x87A\xb9\xc7\r\x92\xfa\x11\x11\xb5\x1f\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\"\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1')
accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14, 0x80800)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000040)='lo\x00\x96o\xd6Q\xb9Y\xa9\xc8J,\x00\xd2\x97\x04\x03\xdc\r')
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f00000003c0)={0x4, 0x0})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, @rand_addr=' \x01\x00', @private1={0xfc, 0x1, [], 0x1}, 0x0, 0x700, 0x1, 0x6403}})
read$sequencer(0xffffffffffffffff, &(0x7f00000001c0)=""/92, 0x5c)

09:44:43 executing program 1:
r0 = socket(0x1, 0x80001, 0x0)
listen(r0, 0x0)

09:44:43 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r1, &(0x7f0000000040)=""/254, 0x1ffffe2f)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r2, &(0x7f0000000040)=""/254, 0x1ffffe2f)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x7b5, 0x3, 0x4, 0x100000, 0x4995, {}, {0x0, 0x8, 0x8, 0x80, 0x0, 0x0, "9067ae5f"}, 0x0, 0x1, @fd=r2, 0x6})
recvmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1}, 0x40012000)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00')

09:44:43 executing program 1:
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000540)='/dev/udmabuf\x00', 0x2)
r1 = memfd_create(&(0x7f0000000000)='/dev/udmabuf\x00', 0x0)
ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000340)={0x0, 0x1, [{r1}]})

[ 2571.088003][T16396] batman_adv: Cannot find parent device
09:44:43 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0x0)
r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82)
sendto$l2tp(0xffffffffffffffff, &(0x7f0000000200)="b1c34a21b903500aeeb4900f3340698fee0f8e85ad0aae19ae03ef0f5332371ba1859d6cd6ebb25e01ce06307ffcdc2342cd24ce533930eb0998025d19751b1e04b6d5327e5f427f3b4caf53cdc67e218b70d41a496f823b559c3881953b67", 0x5f, 0x40000, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000001600)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2)

[ 2571.140889][T16396] batman_adv: batadv0: Adding interface: gretap2
[ 2571.149757][T16396] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2571.178358][T16396] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active
09:44:43 executing program 1:
r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x3, 0x80142)
r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x0, 0x0)
mmap$usbmon(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x12, r1, 0x0)
write$snddsp(r0, &(0x7f00000001c0)='f', 0xfff000)

[ 2571.189948][   T28] audit: type=1804 audit(1599558283.171:1879): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2571.190583][T16408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
09:44:43 executing program 2:
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r3, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531101})
socket$packet(0x11, 0x3, 0x300)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x6558, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14)

09:44:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:43 executing program 0:
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2)
r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x2, 0x1, 0x0, 0x8, 0x0, 0x81}, r1, 0x0, r0, 0x5)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x8000, 0x7fff}, 0x406, 0x2, 0x1, 0x2, 0x0, 0x0, 0x81}, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x46200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2)
openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240)='fou\x00')
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00', @ANYRES16=r2, @ANYBLOB="00042cbd7000fedbdf2502000000", @ANYRES32=0x0, @ANYBLOB="080b00000bd72fc9933e49037cd301ea25a437f79b0d0f70a6f6800b3c8652ee27520807f1645b493ba2e9f5c47ac123e697ae84dc357d4338181e57fcedcb2590cf6c2a37d2ee8253b45f76ce87c78a8379117f2ec8d3a90163e4723ff35d397261ff837787310c17bda92367e2973d2dfca54cf5ae78f53f24de4cc0835ab6006e9716b71d380bfb5098c28b7a5c6b6a0c358a4b553c0167c2", @ANYRES32=0x0], 0x64}, 0x1, 0x0, 0x0, 0xc1}, 0x80)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x26e1, 0x0)
ioctl$SOUND_MIXER_INFO(r3, 0x805c4d65, 0x0)
r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r4, 0x4c80, 0x0)
ioctl$TIOCOUTQ(r3, 0x5411, &(0x7f0000000000))

[ 2571.357221][   T28] audit: type=1804 audit(1599558283.341:1880): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:43 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:43 executing program 1:
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/timer\x00', 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0xf37c5b5d5950c4c9}})

09:44:43 executing program 1:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

[ 2571.529330][T16410] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
09:44:43 executing program 3:
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[], 0xb8}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3}}, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x80, 0x1f, 0x0, 0x3, 0x0, 0x3, 0x41608, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f00000002c0), 0x3}, 0x4162, 0x0, 0xbb79, 0x0, 0x2, 0x0, 0x92fa}, 0x0, 0x10, r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r1, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x8}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305839, &(0x7f0000000040))
r3 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$sndseq(r3, 0x0, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
sendmsg$ETHTOOL_MSG_WOL_GET(r2, 0x0, 0x4000)

09:44:43 executing program 2:
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100})
setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0xd, 0x0, 0x0)

[ 2571.618346][   T28] audit: type=1804 audit(1599558283.601:1881): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:44 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r1, &(0x7f0000000040)=""/254, 0x1ffffe2f)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r2, &(0x7f0000000040)=""/254, 0x1ffffe2f)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x7b5, 0x3, 0x4, 0x100000, 0x4995, {}, {0x0, 0x8, 0x8, 0x80, 0x0, 0x0, "9067ae5f"}, 0x0, 0x1, @fd=r2, 0x6})
recvmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1}, 0x40012000)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00')

09:44:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:44 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs(0x0, 0x0)
clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000140)=""/66, 0x42, 0x0, 0x0}, 0x58)
syz_io_uring_setup(0x0, &(0x7f0000000080)={0x0, 0x5cf5}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000480)='/dev/fuse\x00', 0x2, 0x0)
perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x36, 0x0, 0x0, 0x9, 0x0, 0x3, 0x81042, 0xd, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2455, 0x8b}, 0x2181, 0x2, 0x9, 0x4, 0x0, 0x7fffffff, 0xffff}, 0x0, 0x8, r0, 0x13)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x3, 0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x0, 0x1}, {0x0, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x0, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1, 0x1}}, {{0x2, 0x1, 0x1}, {0x4, 0x0, 0x1}}, {{0x4, 0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x1}}, {{0x2, 0x0, 0x1, 0x1}, {0x0, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}], 0x58)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x20010, 0xffffffffffffffff, 0x0)

09:44:44 executing program 0:
mbind(&(0x7f0000f6d000/0x4000)=nil, 0x4000, 0x8001, 0x0, 0x0, 0x0)

09:44:44 executing program 2:
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'nat\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)

09:44:44 executing program 3:
r0 = socket(0x2, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'})

09:44:44 executing program 0:
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r1, &(0x7f0000000040)=""/254, 0x1ffffe2f)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r2, &(0x7f0000000040)=""/254, 0x1ffffe2f)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x7b5, 0x3, 0x4, 0x100000, 0x4995, {}, {0x0, 0x8, 0x8, 0x80, 0x0, 0x0, "9067ae5f"}, 0x0, 0x1, @fd=r2, 0x6})
recvmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1}, 0x40012000)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00')

09:44:44 executing program 3:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$packet_tx_ring(r0, 0x29, 0x1d, 0x0, 0x300)

09:44:44 executing program 2:
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0)

[ 2572.085396][   T28] audit: type=1804 audit(1599558284.071:1882): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:44 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
pipe(&(0x7f0000000000))
close(0xffffffffffffffff)
ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x1d00002e)

09:44:44 executing program 3:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

09:44:44 executing program 5:
r0 = socket(0x1d, 0x3, 0x1)
setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x4)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r1, &(0x7f0000000040)=""/254, 0x1ffffe2f)
r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
read$midi(r2, &(0x7f0000000040)=""/254, 0x1ffffe2f)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000200)={0x7b5, 0x3, 0x4, 0x100000, 0x4995, {}, {0x0, 0x8, 0x8, 0x80, 0x0, 0x0, "9067ae5f"}, 0x0, 0x1, @fd=r2, 0x6})
recvmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/232, 0xe8}], 0x1}, 0x40012000)
syz_open_dev$usbfs(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000140)='gtp\x00')

09:44:44 executing program 2:
r0 = syz_open_dev$vim2m(&(0x7f0000000000)='/dev/video#\x00', 0x7, 0x2)
ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc008561c, &(0x7f0000000d00)={0x980915, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "00000108"}, 0x0, 0x0, @fd})

09:44:44 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:44 executing program 3:
bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x40)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0)
perf_event_open$cgroup(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x0, 0x7fff}, 0x406, 0x2, 0x1, 0x0, 0x8}, r2, 0xd, r1, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x7a}, 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0)

09:44:44 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
pipe(&(0x7f0000000000))
close(0xffffffffffffffff)
ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x1d00002e)

09:44:44 executing program 2:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0)

09:44:45 executing program 3:
r0 = socket$inet(0x2, 0x5, 0x0)
ioctl$sock_SIOCADDRT(r0, 0x890c, &(0x7f0000007840)={0x0, @in={0x2, 0x0, @local}, @phonet, @xdp, 0x4})

09:44:45 executing program 2:
r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x40081, 0x0)
ioctl$RTC_EPOCH_SET(r0, 0x40186f40, 0x531000)
pipe(&(0x7f0000000040))
getdents64(0xffffffffffffffff, &(0x7f0000000080)=""/5, 0x5)
execveat(0xffffffffffffffff, 0x0, &(0x7f0000001680)=[0x0, 0x0], 0x0, 0x0)

09:44:45 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
pipe(&(0x7f0000000000))
close(0xffffffffffffffff)
ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x1d00002e)

09:44:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
r1 = socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, 0x0, 0x0)

09:44:45 executing program 0:
creat(&(0x7f0000007e40)='./file0\x00', 0x0)
rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file1\x00')

[ 2573.048701][   T28] audit: type=1804 audit(1599558285.031:1883): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:45 executing program 3:
perf_event_open(&(0x7f00000001c0)={0x2, 0x70, 0x75, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
shmat(0x0, &(0x7f0000000000/0x1000)=nil, 0x5000)

09:44:45 executing program 5:
r0 = socket(0xa, 0x3, 0x7)
perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0x0, 0x0)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={@null, @default, 0x0, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default]})

09:44:45 executing program 0:
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x6c00, &(0x7f0000000080)=[{&(0x7f0000000040)="2300000025000511d25a80648c63940d0424fc60040018000a001100022f000037153e", 0x23}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000000c0)=0x1, 0x4)

09:44:45 executing program 3:
r0 = socket$inet6(0xa, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000200)="ce", 0x1}], 0x1}, 0x80fe)

09:44:45 executing program 2:
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200)={0x0, 0x3938700}, 0x0)

09:44:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)

09:44:45 executing program 1:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
pipe(&(0x7f0000000000))
close(0xffffffffffffffff)
ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, 0x0)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x141042, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x20)
ftruncate(r2, 0x200004)
sendfile(r0, r2, 0x0, 0x1d00002e)

09:44:45 executing program 3:
socketpair(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/242, 0xf2}], 0x1}, 0x0)
sendmsg$netlink(r0, &(0x7f0000003340)={0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f00000004c0)={0x10}, 0x10}], 0x1}, 0x0)

09:44:45 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01"], 0x20}}, 0x0)

09:44:45 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)

[ 2573.820534][T16526] debugfs: Directory '!' with parent 'ieee80211' already present!
09:44:45 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000580)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4001}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2573.889818][T16533] IPVS: ftp: loaded support on port[0] = 21
09:44:45 executing program 2:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)

09:44:45 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400300, 0x0)

[ 2574.007727][T16533] vxcan1 speed is unknown, defaulting to 1000
[ 2574.020923][T16559] netlink: 41103 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2574.189923][T16533] lo speed is unknown, defaulting to 1000
09:44:46 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x103382)
memfd_create(0x0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
sendfile(r0, r0, 0x0, 0x24002da8)

09:44:46 executing program 4:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)='cgroup.subtree_control\x00', 0x2, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x1000000, &(0x7f0000000080)=[{&(0x7f0000000180)="2e0000001d008103e00f80ecdb4cb9d90163190405000f00000000fb12000100ac14141840d819a9060015000000", 0x2e}], 0x1}, 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, 0x0)
socket$inet(0x2b, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)

09:44:46 executing program 1:
r0 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x4d, 0x0, 0x0)

09:44:46 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300)='/dev/zero\x00', 0x0, 0x0)
mmap$snddsp(&(0x7f0000631000/0x400000)=nil, 0x400000, 0x100000d, 0x2c013, r0, 0x0)

09:44:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400300, 0x0)

[ 2574.231891][T26269] tipc: TX() has been purged, node left!
09:44:46 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440)='devlink\x00')
sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)={0x44, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6}}]}, 0x44}}, 0x0)

09:44:46 executing program 1:
syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x40981)

09:44:46 executing program 4:
syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0xffffffffffffffff, 0x40)

09:44:46 executing program 5:
pipe2$9p(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, 't^dro'}}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@fscache='fscache'}]}})

[ 2574.298543][T16590] netlink: 41103 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400300, 0x0)

[ 2574.391413][T16602] 9p: Unknown uid 18446744073709551615
[ 2574.417486][T16604] netlink: 41103 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:46 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0)
ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000180)="0fae0dd0ee0f005a850f91d4360f0ff3b63ef0fe4e00660fe30a66b891d7e4700f23c00f21f8663503000a000f23f82e0f1c570f0f30", 0x36}], 0x1, 0x1c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x0, 0x2, 0xfffffffd}}, 0x2e)

09:44:46 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

09:44:46 executing program 0:
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

09:44:46 executing program 5:
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000740)={0x4, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000080)="0fd9240f350f07baa000b018ee65f080a9db0080b80e008ee80f18f1815c050900c4e32d443f09c1df00", 0x2a}], 0x1, 0xa4, 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000480)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:44:46 executing program 1:
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x4e22, @private}, 0x10, 0x0, 0x0, &(0x7f0000000980)=[@ip_retopts={{0x10}}, @ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp_addr={0x44, 0x4}]}}}], 0x38}, 0x0)

09:44:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)
openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/capi/capi20ncci\x00', 0x400300, 0x0)

09:44:46 executing program 1:
socket$kcm(0x2, 0xa, 0x2)
r0 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', @link_local})

09:44:46 executing program 2:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_targets\x00')
pread64(r0, 0x0, 0x0, 0x7)

09:44:46 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

[ 2574.881578][T16616] netlink: 41103 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:46 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

09:44:46 executing program 2:
syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0x109482)

09:44:46 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:47 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

[ 2574.972651][T16628] device veth1_macvtap entered promiscuous mode
[ 2574.999109][T16628] device macsec0 left promiscuous mode
09:44:47 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

[ 2575.042548][T16634] netlink: 41103 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:47 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0x60, 0x30, 0x17b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_bpf={0x48, 0x1, 0x0, 0x0, {{0x8, 0x1, 'bpf\x00'}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0x7}, {0x6}]}]}, {0x4}}}]}]}, 0x60}}, 0x0)

09:44:47 executing program 5:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

09:44:47 executing program 2:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)='\x00@\x00\x00', 0x4)

09:44:47 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
write$P9_RCREATE(r1, 0x0, 0x0)

09:44:47 executing program 0:
r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ocfs2_control\x00', 0x0, 0x0)
read$midi(r0, &(0x7f0000000200)=""/181, 0xb5)

09:44:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

[ 2575.380930][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 2575.380975][   T28] audit: type=1804 audit(1599558287.361:1893): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:47 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
pipe2$9p(&(0x7f0000000580), 0x4000)

09:44:47 executing program 1:
syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f0000001700)=[{0x0, 0x0, 0xa479}], 0x0, &(0x7f0000000380))

09:44:47 executing program 2:
r0 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000540)="05", 0x1, 0xfffffffffffffffe)
add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000400)="585ccbe4ed83b836c1a6474914dc55e7220629036895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550c1ffffff35c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5ece0637ce003d661ff5ff70e48884ca000018cea71fcfacf40d327ff4f6321390e3ee5de4b58a8d2725591f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539a209ed288de5d6", 0xc0, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f00000001c0)={r1, r0, r0}, &(0x7f0000000240)=""/171, 0xab, &(0x7f0000000140)={&(0x7f0000000080)={'streebog512\x00'}})

09:44:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:47 executing program 5:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e03000023000535d25a80648c63940d0324fc60100002400a000200051a82c137153e670402018003001700d1bd", 0x33fe0}], 0x1}, 0x0)
recvmmsg(r0, &(0x7f0000000f00)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=""/201, 0xc9}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)=""/12, 0xc}, {&(0x7f0000000b80)=""/78, 0x4e}], 0x2}, 0xffe}], 0x3, 0x40, 0x0)
bind$ax25(0xffffffffffffffff, 0x0, 0x0)

09:44:47 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x581, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x10}]}}}]}, 0x38}}, 0x0)

09:44:47 executing program 2:
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
preadv(r0, &(0x7f00000017c0), 0x34e, 0x0, 0x0)

[ 2575.511595][   T28] audit: type=1804 audit(1599558287.491:1894): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2575.529649][T16661] netlink: 'syz-executor.5': attribute type 1 has an invalid length.
09:44:47 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x4, 0x0, 0x0)

09:44:47 executing program 2:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000100)=0x6, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe83, 0x11, 0x0, 0x27)
r2 = socket$inet6(0xa, 0x0, 0x0)
bind$inet6(r2, 0x0, 0x0)
socket(0x0, 0x803, 0x0)
mmap$perf(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x4000010, r0, 0x80000000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000011000d04000000000000000010000000", @ANYRES32=0x0, @ANYBLOB="0000000000800000"], 0x20}}, 0x0)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@local})
r4 = open(&(0x7f00000005c0)='./file0\x00', 0x200c2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000640)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90)
sendfile(r4, r4, &(0x7f0000000080)=0x2, 0xa198)
setsockopt$inet_sctp_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x7, 0x4)
getsockopt$bt_hci(r2, 0x84, 0x0, 0x0, 0x0)

[ 2575.562637][T16661] netlink: 262 bytes leftover after parsing attributes in process `syz-executor.5'.
[ 2575.580267][T16661] netlink: 'syz-executor.5': attribute type 2 has an invalid length.
09:44:47 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)

09:44:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:47 executing program 0:
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x141040, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setxattr$system_posix_acl(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='system.posix_acl_default\x00', &(0x7f0000000680)=ANY=[@ANYBLOB="0200000001000300000000000200", @ANYRES32, @ANYBLOB="0200", @ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x54, 0x2)

09:44:47 executing program 5:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff)
openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp1\x00', 0x64000, 0x0)

[ 2575.656330][   T28] audit: type=1804 audit(1599558287.641:1895): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:47 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r1, 0xafff086a67587c6d, 0x0, 0x0, {0x1, 0xa}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x1c}}, 0x0)

09:44:47 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)

09:44:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:47 executing program 1:
socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$msdos(0x0, &(0x7f00000002c0)='./file1\x00', 0x9e, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000240)='./file0\x00', 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file1\x00')

09:44:47 executing program 5:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_ifreq(r0, 0x8914, &(0x7f0000000080)={'ipvlan1\x00', @ifru_addrs=@phonet})

09:44:47 executing program 2:
perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0)

09:44:47 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, 0x0, 0x0)
perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5)
openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000200)='freezer.state\x00', 0x2, 0x0)
r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
write$vhost_msg_v2(r0, &(0x7f00000002c0)={0x2, 0x50, {0x0, 0x0, 0x0}}, 0x1fffffb7)

09:44:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

[ 2575.805573][   T28] audit: type=1804 audit(1599558287.781:1896): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:47 executing program 5:
bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x17, 0x0, 0x40002, 0x2, 0x0, 0x1}, 0x2c)
bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3}, 0x2c)

09:44:47 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2575.849382][T16699] device ipvlan1 left promiscuous mode
09:44:47 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:47 executing program 1:
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000140)='trusted.overlay.redirect\x00', &(0x7f0000000200)='./file0\x00', 0x8, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="baa000ec3e3e3e0f2b75ee65f30f008f7e00a6aff4660f3a62227d0f20e06635000040000f22e0260f0350000f01cf", 0x2f}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000680)={0x1, 0x0, @pic={0x0, 0x0, 0x0, 0x1}})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x0, 0x0, 0x0, 0x200000201, 0x0, 0x4ca]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/hwrng\x00'}, 0x30)
ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0xc, 0x8001})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:44:48 executing program 5:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
statx(0xffffffffffffff9c, &(0x7f0000002780)='./file0\x00', 0x2000, 0x0, 0x0)

09:44:48 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:48 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:48 executing program 1:
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio1\x00', 0x0, 0x0)
syz_open_dev$vim2m(&(0x7f0000000040)='/dev/video#\x00', 0x0, 0x2)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0xc0045002, &(0x7f0000000040))

09:44:48 executing program 5:
shmat(0x0, &(0x7f0000000000/0x13000)=nil, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000800), 0x10)
clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
pipe(&(0x7f0000000140)={<r1=>0xffffffffffffffff})
sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x24000050)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000540))
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0xa00}], 0x1, 0x0)
dup3(r0, 0xffffffffffffffff, 0x0)

[ 2576.481772][   T28] audit: type=1804 audit(1599558288.461:1897): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:48 executing program 2:
r0 = socket$inet(0x2, 0xa, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="000028ffc214b1f49f", @ANYBLOB="0000000000000000000000004500001400000000002f907800000000ac"]})

09:44:48 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00')
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="016b0523a904e0429f1438"], 0x3c}}, 0x0)

09:44:48 executing program 5:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0))

09:44:48 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:48 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="010000000000689c729b1b"], 0x18}}, 0x0)

09:44:48 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:48 executing program 5:
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0xd, 0x0, 0x0, 0x1, [@generic="2e101ac197888a44ce"]}]}, 0x20}], 0x1}, 0x0)

[ 2576.799319][T16736] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 2576.810845][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 2576.829328][T16741] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
09:44:48 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:48 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x1, [<r2=>0x0]}, &(0x7f0000000140)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x7a, &(0x7f0000000240)={r2, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x100)

09:44:48 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x3, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000380)="eb0cd159f84436d356a8", 0xa, 0x9d4}, {0x0}], 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='disable_sparse=yes,umask=00000000000000000007332,uid=', @ANYRESHEX=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYBLOB])

[ 2576.856189][T16743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
09:44:48 executing program 0:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140)='tls\x00', 0x4)
setsockopt$inet_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@ccm_128={{0x303}, "8217b11126ce3f92", "68e25ae34b0c5b734645ef2256dd2c83", "476dc2e5", "484e9c9b6bf58121"}, 0x28)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x2, 0x141001)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={0x0, <r3=>0x0})
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000000)={0x1ff}, &(0x7f0000001240)={0x0, r3+30000000}, 0x0)

09:44:48 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:48 executing program 5:
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000300), 0x18)
ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086607, 0x0)

09:44:48 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)={[{0x0, 'cpu'}, {0x0, 'memory'}, {0x0, 'pids'}, {0x0, 'rdma'}]}, 0x19)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, 0x0, 0x35f000)

[ 2576.928964][   T28] audit: type=1804 audit(1599558288.911:1898): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:49 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/igmp\x00')
read$snddsp(r0, 0x0, 0x0)

09:44:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

[ 2576.992905][   T28] audit: type=1804 audit(1599558288.971:1899): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:49 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = io_uring_setup(0xa4, &(0x7f0000000080))
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='fuse\x00', 0x0, &(0x7f0000000240)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(0xffffffffffffffff, 0xc040564b, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)=""/32, 0x20}, {&(0x7f0000000280)=""/13, 0xd}, {0x0}], 0x3)

09:44:49 executing program 1:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
syz_io_uring_setup(0x3c91, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0xa}, 0x69, &(0x7f0000000100)={0x0}}, 0x0)

09:44:49 executing program 5:
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000006180)=0x1)
ioctl$VT_ACTIVATE(r0, 0x89f3, 0x531000)

09:44:49 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2577.068069][   T28] audit: type=1804 audit(1599558289.051:1900): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2577.290546][   T28] audit: type=1804 audit(1599558289.271:1901): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:49 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
connect$l2tp6(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, @private2}, 0x20)

09:44:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:49 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:49 executing program 5:
r0 = syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000000)='./file0\x00', 0xffc00007, 0x0, 0x0, 0x0, &(0x7f0000000100))
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000140)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000000000)="0400000900000000666174000404090a0200027400f801", 0x17}, {0x0, 0x0, 0x80000001}], 0x0, &(0x7f0000000240)=ANY=[])
mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x200)
getdents(0xffffffffffffffff, &(0x7f0000000500)=""/4096, 0x1000)

09:44:49 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="61128c000000000061134c0000000000bf2000000000000025000f0005ffffffbd0301000000000095002000000000006916000000000000bf6700000000000017060000b964b0fd4506feff00200000540600000ee60000bf150000000000000f6500000000000065070000020000002c030000000000001f75000000000000bf540000000000000700000004000000ad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c27dfef618ecf264e0f84f9f17d3c30e3c7bdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd399703d6c4f633a9a4f16d0a3e127bee45a0100000fe9de56c9d8a814261bdb94a05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5af65727546e7c955ccefa1f6ab689fde4de4e63ede202fa4e0a2127b8b83c71a51445dc8da39e5b0ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb735fd552bdc268694aeb0743e326c819b6cf5c8ac86f8a297dff0445b13d0045fb3cda32a673a6bb55d8c85f21dce431e56723888fb126a163f16fb2ad9bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3738270b315d362ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154bcb4000000000000000000000000000000bc3af2b170ad3e2b268f4ddc211bc3ebf0bd9d42ca019dd5d03fcf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7eab04871bc47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd56a57fa82b82f639601ae899a53f6715a0a62a29ab028acfc1cb26a0f6a5480a55d638a0c544ba0dc828c22fe30000008000000000000000000000000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac693a27051f2ab759b8dbe8439db2a0426c7e7c0032028c95b29b6ddb551176693a921c76beceff7e4fbfea5011af0a99fa077ffe70cac8b9e44023a1749eb1d0d572b77d6e0d0fcd74035c7a1eb6eb4e1c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d9174138c820cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c716d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647eebd4d7a93a17bcbb6bae5ff876375d4f18ca372104772a3a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec9f9f3262cb13f4a2575fbe943a6c400"/1107], &(0x7f0000000100)='GPL\x00'}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)

09:44:49 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24)

09:44:49 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:49 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:49 executing program 5:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000002, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000100)="660af8c5f5b4f35a8d0afc53070000caebca1d020900b3e06ddb029addb9a884d58e899c9052bda062b90cf7ec93cf0e40d395a82bcc38fd04104adbac8caf5022a19b000f434484fbbb07cfb1169d210fe041fd03d2a744c7975f94594e7cf774196781960fb71d9dea02cbd68bfdc2761980ca9efb63cd898fadd4e67a1c79560dcdc17049865041916c5ad5e4dd94b93b2336328a9f5b9d5b15593d5b23f4000000008ac9fee4d8b8397dc5471144742a96aacb1bd51516a0c8ef5479e20d6498e3c757a3a39af56d4fa7ca850c36325b0b6492e107e4c1f23400000000000000", 0xe2}], 0x4, 0x1)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x37)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x37)

09:44:49 executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = syz_io_uring_setup(0x87, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x2, 0x0, 0xd4, 0x0, 0x0}, 0x0)
io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0)

09:44:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:49 executing program 4:
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:49 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:50 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580)='nl80211\x00')
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="81f3080000000000000015"], 0x1c}}, 0x0)

09:44:50 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:50 executing program 0:
ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x0)
r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
r4 = getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, r4, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, r4, 0xc, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x700, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}]}, 0x3c}}, 0x0)
socketpair(0x0, 0x0, 0x0, &(0x7f0000000000))
socketpair(0x0, 0x1, 0x0, 0x0)
getpid()
perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x70, 0x9, 0x0, 0xbd, 0x7f, 0x0, 0x0, 0x900, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x67, 0x1, @perf_bp={&(0x7f0000000280), 0x1}, 0x208, 0x300000000, 0x4, 0x6, 0x80000000, 0x4e77, 0x7eec}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x9)

09:44:50 executing program 2:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDGETLED(r0, 0x5437, 0x0)

09:44:50 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:50 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000680)='./bus\x00', 0x0)
ftruncate(r0, 0x800)
open(0x0, 0x0, 0x0)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0)
lseek(r1, 0x0, 0x4)

[ 2578.079766][   T28] audit: type=1804 audit(1599558290.061:1902): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:50 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:52 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:52 executing program 5:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x40000, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x31000, &(0x7f00000013c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}})
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000001300)=""/132, 0x84, 0x0, 0x0, 0x3}}, 0x120)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xdc8, 0x7400, 0x2, 0x0, 0x200, 0x101, "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"}}, 0xee0)

09:44:52 executing program 2:
r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x0)
ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f00000001c0))

09:44:52 executing program 1:
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0)
read$hiddev(r0, &(0x7f0000000040)=""/17, 0x11)

09:44:52 executing program 0:
r0 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224-avx2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="eadb0cb131757a669cc629d50e5976d1123f442a60423b238a2e15d2fa94fabfae58af94e062d67d5ab1dacab4f071a5916dd6d7916563b9e902d288d8b82ffc24", 0x41)

09:44:52 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:53 executing program 2:
r0 = socket(0x2, 0x5, 0x0)
ioctl$sock_ifreq(r0, 0x89a1, &(0x7f0000000140)={'bridge0\x00', @ifru_data=0x0})

09:44:53 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = dup(r0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)

[ 2580.976541][T16872] __nla_validate_parse: 6 callbacks suppressed
[ 2580.976550][T16872] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:53 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:53 executing program 5:
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000041c0)='/dev/fuse\x00', 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040)='fuse\x00', &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x40000, 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x31000, &(0x7f00000013c0)={{'fd'}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@max_read={'max_read'}}], [{@context={'context', 0x3d, 'root'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}})
write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000001300)=""/132, 0x84, 0x0, 0x0, 0x3}}, 0x120)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000080), 0x4)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xdc8, 0x7400, 0x2, 0x0, 0x200, 0x101, "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"}}, 0xee0)

09:44:53 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
r1 = socket(0x1, 0x2, 0x0)
bind(r1, &(0x7f0000000040)=@ethernet={0x1, @random="2e97a29f0a58"}, 0x4)

09:44:53 executing program 2:
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x40284504, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getpid()
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x1400a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x2}, 0x0, 0x3, 0x0, 0x1, 0x0, 0x9, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x4c0800, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0)

09:44:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:53 executing program 0:
socket$kcm(0xa, 0x2, 0x73)

[ 2581.101362][   T28] kauditd_printk_skb: 3 callbacks suppressed
[ 2581.101372][   T28] audit: type=1804 audit(1599558293.081:1906): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:53 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
write$cgroup_int(r1, &(0x7f0000000200)=0x16f, 0x806000)

[ 2581.149365][   T28] audit: type=1804 audit(1599558293.121:1907): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:53 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2581.190170][T16903] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:53 executing program 4:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:53 executing program 2:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil)
fstat(0xffffffffffffffff, 0x0)
ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0/file0\x00', 0xe, 0x0)
r0 = open(&(0x7f0000000040)='./file0\x00', 0x40c2, 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2c000, 0x0)
write(r0, &(0x7f0000001400)="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", 0xe00)
sendfile(r0, r1, 0x0, 0x14007)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x2, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xe1b0dfa1c92bb523}, 0x800)

09:44:53 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
inotify_init()

09:44:53 executing program 0:
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="737461636b20b3245c3000"], 0xb)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_buf(r1, 0x84, 0x0, &(0x7f0000000040)=""/188, &(0x7f0000000100)=0xbc)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0xa, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @loopback=0xac14140e}, 0x10)

09:44:53 executing program 5:
r0 = mmap$IORING_OFF_CQ_RING(&(0x7f00009c3000/0x2000)=nil, 0x2000, 0x0, 0x20032, 0xffffffffffffffff, 0x8000000)
syz_io_uring_submit(r0, 0x0, 0x0, 0x0)

[ 2581.272023][   T28] audit: type=1804 audit(1599558293.251:1908): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:53 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:53 executing program 5:
ioperm(0x0, 0x3, 0x4)
syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0))

[ 2581.341315][   T28] audit: type=1800 audit(1599558293.321:1909): pid=16917 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16346 res=0 errno=0
[ 2581.399426][   T28] audit: type=1804 audit(1599558293.351:1910): pid=16917 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="file0" dev="sda1" ino=16346 res=1 errno=0
09:44:53 executing program 5:
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x60}, [@ldst={0x7, 0x2}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

09:44:53 executing program 2:
socket(0x0, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c00, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, "5674db81428bded9ee8dbf840fa14a6de9c00ce582668f645f076400e81b9c3659b4ad949e01b2745027a05b69a2aa102c1078f0eba32f3e91177200d01a0735", "04ffacdb46d793c9449f8d8913f073694a6e94fa12c8e56c8249cd97a128b1033d0f8f072bcf18d41248dfa36766006da6e1dfe63768c365c3f38e3639887780", "607c8c72c3709bafea7f0d4101667136d3e180300ce2b037e680ed9f55c73578", [0x40]})

09:44:53 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc0045006, &(0x7f0000000080))

09:44:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2581.479830][   T28] audit: type=1800 audit(1599558293.351:1911): pid=16917 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16346 res=0 errno=0
09:44:53 executing program 2:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000000))

09:44:53 executing program 4:
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:53 executing program 5:
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x300f0000, 0x1000}, 0x20)

[ 2581.579172][   T28] audit: type=1800 audit(1599558293.411:1912): pid=16929 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=16346 res=0 errno=0
[ 2581.592630][T16948] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:53 executing program 0:
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="737461636b20b3245c3000"], 0xb)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_buf(r1, 0x84, 0x0, &(0x7f0000000040)=""/188, &(0x7f0000000100)=0xbc)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0xa, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @loopback=0xac14140e}, 0x10)

09:44:53 executing program 1:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6, @private, 0x0, 0x0, 'lblc\x00', 0x0, 0x1f, 0x6f}, 0x2c)

[ 2581.685440][   T28] audit: type=1804 audit(1599558293.671:1913): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2581.759624][   T28] audit: type=1804 audit(1599558293.741:1914): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:54 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:54 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

09:44:54 executing program 5:
syz_usb_connect$uac1(0x0, 0x76, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x64, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@selector_unit={0x5, 0x24, 0x5, 0x0, 0x6}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0)

09:44:54 executing program 1:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000000))

09:44:54 executing program 0:
accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000040)=0x1c)
openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/attr/exec\x00', 0x2, 0x0)
r0 = openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/attr/exec\x00', 0x2, 0x0)
write$apparmor_exec(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="737461636b20b3245c3000"], 0xb)
r1 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_buf(r1, 0x84, 0x0, &(0x7f0000000040)=""/188, &(0x7f0000000100)=0xbc)
socket$inet6(0xa, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$rds(0xa, 0x5, 0x0)
bind$rds(r2, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10)
connect$rds(r2, &(0x7f00000000c0)={0x2, 0x4e24, @loopback=0xac14140e}, 0x10)

09:44:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:54 executing program 1:
ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, &(0x7f0000000140)=""/243)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC, @ANYRESHEX], 0x24}}, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ppp\x00', 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r1, 0xc004743e, &(0x7f0000000340))

09:44:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:54 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = clone3(&(0x7f0000000900)={0x400a0100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000000300)=""/173, 0x0}, 0x58)
r1 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x94, 0x0, 0x52, 0x64, 0x0, 0x9c, 0x100, 0x4, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040)}, 0x40, 0xfffffffffffffffc, 0xffffffff, 0x4, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8)
r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x103102)
write$char_usb(r2, 0x0, 0x0)
clone3(&(0x7f0000000640)={0x1e78fb1ca4f36aac, &(0x7f00000003c0), 0x0, &(0x7f0000000440)=<r3=>0x0, {}, &(0x7f0000000480)=""/186, 0xba, &(0x7f0000000540)=""/173, &(0x7f0000000600)=[r0, r0, 0xffffffffffffffff, r0, 0x0], 0x5, {r1}}, 0x58)
clone3(&(0x7f0000000700)={0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0, {0x39}, &(0x7f00000001c0)=""/127, 0x7f, &(0x7f0000000240)=""/167, &(0x7f00000006c0)=[r3, 0x0], 0x2}, 0x58)

09:44:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2582.415979][T16993] IPVS: ftp: loaded support on port[0] = 21
09:44:54 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2582.459053][T16993] vxcan1 speed is unknown, defaulting to 1000
[ 2582.477662][T17005] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2582.552973][   T28] audit: type=1804 audit(1599558294.531:1915): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2582.753203][T16993] lo speed is unknown, defaulting to 1000
[ 2582.812794][T12162] tipc: TX() has been purged, node left!
09:44:55 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:55 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

09:44:55 executing program 0:
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5502, 0x0)
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001880)={r0, 0x0, 0x0}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)

09:44:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:55 executing program 1:
r0 = socket(0xa, 0x3, 0x84)
r1 = socket(0x1, 0x3, 0x0)
ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
setsockopt$MISDN_TIME_STAMP(r0, 0x29, 0x6, 0x0, 0x300)

09:44:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000001300)={0x7, [[0x200, 0x1000, 0x4, 0x4, 0xfff, 0x400, 0x101, 0x4], [0x2, 0x4, 0x3, 0x6, 0x4, 0x1000, 0x8, 0x2], [0xfffe, 0x1ff, 0x0, 0x6, 0x8001, 0x10000, 0xffffff99, 0x31]], [], [{0x1ff, 0xfbf, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x31, 0x0, 0x0, 0x0, 0x1}, {0x16, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x8001, 0x1, 0x1, 0x1}, {0x92, 0x9, 0x0, 0x1, 0x1}, {0x824, 0x1, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x4, 0x4e29, 0x1, 0x1}, {0xffffffff, 0x4}, {0x1f, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x7, 0x1, 0x1}], [], 0x7})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
dup2(r1, r1)
r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/231)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101800, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, 0x0)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4})
socket(0x400020000000010, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)

09:44:55 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400), 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001000011800"/20, @ANYRES32=0x0, @ANYBLOB="00000000feffffff08000d00", @ANYRES32=r2, @ANYBLOB="08001b000000"], 0x30}}, 0x0)
syz_open_dev$video(&(0x7f0000000000)='/dev/video#\x00', 0x45, 0x20000)

09:44:55 executing program 0:
r0 = socket(0xa, 0x5, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x29, 0x10, 0x0, 0x0)

09:44:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:55 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

09:44:55 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000001300)={0x7, [[0x200, 0x1000, 0x4, 0x4, 0xfff, 0x400, 0x101, 0x4], [0x2, 0x4, 0x3, 0x6, 0x4, 0x1000, 0x8, 0x2], [0xfffe, 0x1ff, 0x0, 0x6, 0x8001, 0x10000, 0xffffff99, 0x31]], [], [{0x1ff, 0xfbf, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x31, 0x0, 0x0, 0x0, 0x1}, {0x16, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x8001, 0x1, 0x1, 0x1}, {0x92, 0x9, 0x0, 0x1, 0x1}, {0x824, 0x1, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x4, 0x4e29, 0x1, 0x1}, {0xffffffff, 0x4}, {0x1f, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x7, 0x1, 0x1}], [], 0x7})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
dup2(r1, r1)
r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/231)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101800, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, 0x0)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4})
socket(0x400020000000010, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)

[ 2583.270216][T17061] device lo left promiscuous mode
09:44:55 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2583.306819][T17061] device tunl0 left promiscuous mode
[ 2583.356003][T17061] device gre0 left promiscuous mode
[ 2583.409951][T17061] device ip_vti0 left promiscuous mode
[ 2583.417928][T17061] device ip6_vti0 left promiscuous mode
[ 2583.426087][T17061] device sit0 left promiscuous mode
[ 2583.433175][T17061] device ip6tnl0 left promiscuous mode
[ 2583.441559][T17061] device ip6gre0 left promiscuous mode
[ 2583.449370][T17061] device syz_tun left promiscuous mode
[ 2583.458123][T17061] device ip6gretap0 left promiscuous mode
[ 2583.466073][T17061] device bridge0 left promiscuous mode
[ 2583.473365][T17061] device vcan0 left promiscuous mode
[ 2583.479563][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2583.488529][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[ 2583.497625][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.509739][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.521989][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.534136][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.546247][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.558357][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.570624][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.582967][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.595225][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.607391][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2583.623355][T17061] device bond0 left promiscuous mode
[ 2583.628704][T17061] device bond_slave_0 left promiscuous mode
[ 2583.635504][T17061] device bond_slave_1 left promiscuous mode
[ 2583.645407][T17061] device team0 left promiscuous mode
[ 2583.650799][T17061] device team_slave_0 left promiscuous mode
[ 2583.659043][T17061] device team_slave_1 left promiscuous mode
[ 2583.684732][T17061] device dummy0 left promiscuous mode
[ 2583.702757][T17061] device nlmon0 left promiscuous mode
[ 2583.725107][T17061] device caif0 left promiscuous mode
[ 2583.750541][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2583.765995][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 2583.780114][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2583.796814][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 2584.035171][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2584.058911][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 2584.198022][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0.116: link becomes ready
[ 2584.216997][T17061] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0.116: link becomes ready
[ 2584.254803][T17061] device bridge7 left promiscuous mode
[ 2584.272062][T17061] device macsec1 left promiscuous mode
[ 2584.294025][T17061] device  left promiscuous mode
[ 2584.322407][T17061] device bond2 left promiscuous mode
[ 2584.339241][T17071] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:56 executing program 0:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0x7b, &(0x7f0000000300)=@assoc_value, 0x8)

09:44:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:56 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='rpc_pipefs\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/4096, 0x1000)
r0 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000001300)={0x7, [[0x200, 0x1000, 0x4, 0x4, 0xfff, 0x400, 0x101, 0x4], [0x2, 0x4, 0x3, 0x6, 0x4, 0x1000, 0x8, 0x2], [0xfffe, 0x1ff, 0x0, 0x6, 0x8001, 0x10000, 0xffffff99, 0x31]], [], [{0x1ff, 0xfbf, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x9, 0x1, 0x0, 0x0, 0x1}, {0x3, 0x31, 0x0, 0x0, 0x0, 0x1}, {0x16, 0x1, 0x1, 0x0, 0x1}, {0x3, 0x8001, 0x1, 0x1, 0x1}, {0x92, 0x9, 0x0, 0x1, 0x1}, {0x824, 0x1, 0x1, 0x1}, {0x8, 0x7, 0x0, 0x0, 0x1}, {0x4, 0x4e29, 0x1, 0x1}, {0xffffffff, 0x4}, {0x1f, 0x1, 0x0, 0x1, 0x1}, {0x0, 0x7, 0x1, 0x1}], [], 0x7})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0)
dup2(r1, r1)
r2 = open(&(0x7f0000000440)='./file0\x00', 0x0, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000340)='cgroup.procs\x00', 0x2, 0x0)
ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f0000000000)=""/231)
r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x101800, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001580)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@private2}, 0x0, @in6=@dev}}, 0x0)
ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000240)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r4})
socket(0x400020000000010, 0x2, 0x0)
socket$inet6(0xa, 0x2, 0x0)

09:44:56 executing program 1:
r0 = perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0xffffffffffffffe2)

[ 2584.491368][T17094] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:56 executing program 1:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x8001)

09:44:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fc72f0f20c035080000000f22c00f239b67c168fb0066ba4000ed66b8b7000f00d80f01b10070000036660f1020b9800000c00f3235000400000f30b9ee0900000f32", 0x43}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae80, 0x0)

[ 2584.689365][T17106] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:56 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0)

09:44:56 executing program 1:
r0 = perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
unshare(0x400)
ioctl$CAPI_MANUFACTURER_CMD(r0, 0x2405, 0x0)

09:44:56 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:44:56 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000002c0)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r0 = pkey_alloc(0x0, 0x0)
pkey_free(r0)

09:44:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:56 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:56 executing program 1:
r0 = socket(0x2b, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

09:44:56 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:56 executing program 0:
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
pwritev2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[ 2584.999862][T17127] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:57 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:57 executing program 1:
r0 = socket(0x2b, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

[ 2585.212185][T17141] netlink: 41103 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0)

09:44:57 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'tunl0\x00', @ifru_mtu=0x531101})
pipe2(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
read$FUSE(r1, &(0x7f0000001340)={0x2020}, 0x2020)
write$FUSE_INTERRUPT(r2, &(0x7f0000000240)={0x10}, 0x10)

09:44:57 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:44:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:57 executing program 3:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:57 executing program 1:
r0 = socket(0x2b, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

09:44:57 executing program 0:
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
close(r0)
r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
read$midi(r1, &(0x7f0000000280)=""/4089, 0xff9)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x143042, 0x0)
r3 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
ftruncate(r3, 0x48280)
sendfile(r0, r2, 0x0, 0x200fff)

09:44:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0)

09:44:57 executing program 1:
r0 = socket(0x2b, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

[ 2585.817610][T17164] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:57 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:57 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d}, 0x20}}, 0x0)

09:44:57 executing program 3:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:57 executing program 1:
accept$netrom(0xffffffffffffffff, 0x0, 0x0)

09:44:58 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 2586.020759][T17183] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2586.217337][   T28] kauditd_printk_skb: 7 callbacks suppressed
[ 2586.217348][   T28] audit: type=1804 audit(1599558298.201:1923): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:58 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:44:58 executing program 1:
accept$netrom(0xffffffffffffffff, 0x0, 0x0)

09:44:58 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:58 executing program 3:
r0 = socket$inet6(0x10, 0x0, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:58 executing program 0:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001040)='loginuid\x00')
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
read$proc_mixer(r0, 0x0, 0x0)

09:44:58 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 2586.698157][T17202] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:58 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

[ 2586.729927][   T28] audit: type=1326 audit(1599558298.711:1924): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0
09:44:58 executing program 1:
accept$netrom(0xffffffffffffffff, 0x0, 0x0)

09:44:58 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:58 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:44:58 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x7, 0x0, [], [0x3]})

09:44:58 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

[ 2587.029970][T17233] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:44:59 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:44:59 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

09:44:59 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, 0x0)

09:44:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 2587.514298][   T28] audit: type=1326 audit(1599558299.501:1925): auid=0 uid=0 gid=0 ses=4 subj==unconfined pid=17201 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x4603fa code=0x0
09:44:59 executing program 0:
r0 = syz_io_uring_setup(0x15a3, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
io_uring_enter(0xffffffffffffffff, 0x0, 0x9c46, 0x0, &(0x7f00000001c0)={[0x80000000]}, 0x8)
mq_open(&(0x7f0000000240)='$\\:]-^,\xde%\'#::\x00', 0x40, 0x1, 0x0)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd4)
close(0xffffffffffffffff)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x4}, 0x0)
keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0)

09:44:59 executing program 1:
r0 = socket(0x0, 0x1, 0x0)
accept$netrom(r0, 0x0, 0x0)

09:44:59 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, 0x0)

[ 2587.600572][   T28] audit: type=1804 audit(1599558299.581:1926): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:44:59 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:44:59 executing program 1:
r0 = socket(0x2b, 0x0, 0x0)
accept$netrom(r0, 0x0, 0x0)

09:44:59 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:44:59 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, 0x0)

09:44:59 executing program 1:
r0 = socket(0x2b, 0x0, 0x0)
accept$netrom(r0, 0x0, 0x0)

[ 2587.896478][T17285] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2588.191869][   T28] audit: type=1804 audit(1599558300.171:1927): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:00 executing program 1:
r0 = socket(0x2b, 0x0, 0x0)
accept$netrom(r0, 0x0, 0x0)

09:45:00 executing program 5:
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:00 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x0, 0x0, [], [0x3]})

09:45:00 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r4, 0x0, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:00 executing program 0:
write(0xffffffffffffffff, &(0x7f0000000040)="0f42", 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000001400), 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
rt_sigsuspend(&(0x7f0000000000)={[0x8]}, 0x8)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfb], 0x10000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000088961fbab8b0fb5713bf7c0e8141292111ffd4"], 0x34}}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

09:45:00 executing program 5:
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

[ 2588.433561][T17296] ALSA: seq fatal error: cannot create timer (-22)
09:45:00 executing program 1:
socket(0x2b, 0x1, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, 0x0)

[ 2588.504092][    C0] net_ratelimit: 20075 callbacks suppressed
[ 2588.504111][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2588.513187][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2588.522321][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2588.534482][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2588.546170][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2588.558231][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2588.569991][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2588.582270][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2588.593949][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2588.605992][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
09:45:00 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:00 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x0, 0x0, [], [0x3]})

09:45:00 executing program 1:
socket(0x2b, 0x1, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, 0x0)

09:45:00 executing program 5:
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:00 executing program 5:
r0 = socket(0x0, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:00 executing program 1:
socket(0x2b, 0x1, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, 0x0)

09:45:00 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[ 2588.742559][T17317] ALSA: seq fatal error: cannot create timer (-22)
09:45:00 executing program 4:
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x0, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40605346, &(0x7f0000000140)={{}, {}, 0x0, 0x0, 0x0, [], [0x3]})

09:45:00 executing program 5:
r0 = socket(0x0, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

[ 2588.861678][T17329] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2588.904837][T17336] ALSA: seq fatal error: cannot create timer (-22)
09:45:01 executing program 0:
r0 = socket(0x2, 0x2, 0x0)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4)

09:45:01 executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000080)='/dev/video#\x00', 0x0, 0x2)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x6000006, 0x1, 0x1, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003e40)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000140)}, {0x0}, {&(0x7f0000000300)="2849dd6bc17521b2b81a2dfa677b573cbba995cf5fdb6d719e0cb16a586e50cbd5898f5589e3ce248a524acaf61b7e6feb173ac47cd2f87474c8859947257430ea246cabf15862748cc02574cc912cec19170c0df05f45e797734d0aa977042e225bfb43", 0x64}, {0x0}, {&(0x7f0000000540)="b7", 0x1}, {&(0x7f0000000580)}, {0x0}, {&(0x7f00000016c0)}], 0x8, &(0x7f0000001840)=[@rthdr={{0x48, 0x29, 0x39, {0x5c, 0x6, 0x0, 0x0, 0x0, [@mcast1, @empty, @private2={0xfc, 0x2, [], 0x1}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x2c, 0x2, [], [@padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x0, 0xd, "287fc81af3468bfffa65993f8b"}, @pad1]}}}, @dontfrag={{0x14}}, @tclass={{0x14, 0x29, 0x43, 0xffff742c}}, @flowinfo={{0x14}}], 0xc0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002dc0)}}, {{0x0, 0x0, &(0x7f0000002f40), 0x0, &(0x7f0000003040)=[@rthdr_2292={{0x38, 0x29, 0x39, {0x6e, 0x4, 0x0, 0x7, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0xd4684e2597b04bdb, 0x0, [], [@generic={0x80}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x80}}, {{0x0, 0x0, &(0x7f0000003b80)}}], 0x4, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$ethtool(0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000001800)=@req3={0x6, 0x9, 0xd3c0, 0x32, 0xffffff01, 0xff}, 0x1c)
ioctl$vim2m_VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000000c0)={0x6000006, 0x1, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c87400"}, 0x0, 0x0, @fd})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x8, @remote, 0x2}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="4158c539029958b66e6842418adbed9ce8aea4a79d118dfbbac9367f5cae0fd86224318fc018fffba0296c5cc281b43a9653712e75ed00c0b7116f69cc073f3b3dc08ed0434647f05eb1f4059e9ae36b07457096e46b829ec64c76", 0x5b}, {&(0x7f00000001c0)="22399e9df7547afe8a9ac3f735cd0bbefeb6d706309450159f79e883030dbf89cc9e57676a927835a1003964252d1b90f5a98df3963fccc687831ca120d913321eb75cbda795f57c137fc8d5a29a67617b5fad7df3be4c8e3d77417da15d1905a2eea083d4bac21b7c8aadecce0e4d13ab0032592bfff2a300cdbd1a8a486c", 0x7f}], 0x2}}, {{&(0x7f00000003c0)={0xa, 0x4e24, 0x9, @empty, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000001940)="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", 0xf80}, {&(0x7f0000003f40)="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", 0xfff}, {&(0x7f0000000400)="301e8fe43310c5bb5b7a316c395562ed98a36eb5bf457fd69dfbedca962938c61581ab9669ad4ac51cb6f531844ab2663d4539424a62da5b05e9adc1301aaa39976f53205d3c42c338517bb8e860f08c7d89c75a891e0e23c39377531ec6c3dc5ef5b92d0859f25702580e0530ad3cc032dc679d4c367b9ed25d", 0x7a}, {&(0x7f0000004f40)="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", 0x1000}, {0x0}, {&(0x7f0000001200)="975ed39b790a97f051c90156efe9c2923786bf060a4411b1a46d418fc71daa1d8e6860c369674725a4bc1f2f3e2172c20ed4e7dcf55a9fc4ea5d73d1aa212a2631fa005c49fdd0fb8839262f67b7fe9da597bd908df5b286fad7ee9fea97ed7142462229a1302142a863548e51c7ec4e", 0x70}, {&(0x7f0000005f40)}], 0x7, &(0x7f0000001300)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @rthdr={{0x38, 0x29, 0x39, {0x8, 0x4, 0x2, 0x0, 0x0, [@ipv4={[], [], @empty}, @private0={0xfc, 0x0, [], 0x1}]}}}], 0x50}}, {{&(0x7f0000001400)={0xa, 0x4e23, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x20}, 0x1c, &(0x7f00000014c0)=[{&(0x7f0000006f40)="1406a3fc4f641583523a9d33cb58783c3ca3a9b2b45c033691310d2c60c4548ce2d105684dac4d4e0b67548825e76bb39899c91d8dbd1c63b28998ce574b5e12371922d5ae1e932f183eb5ad4d3f1c767cf9792a4bad8fc992f1f0d185847c8f54c1e4637831468cbf255bcbb91d42e79242f47bfd2e2b9fe0cbd1560be8f94678627b7cb35e25029046b68e6bad1bced942e3c12fc11b7e52594f444b1d59c3e8aec43b696eb14207d992e97bb57515476917b1642df53deb36d47a7a4ddaec11135a4f71d4b0bbe960290c9391f183e7eaec52ed6fb3f3a23ad63599d4b771ac6bda0316f3550fbf0ee7c182a869fabe05b885b240d6f06fd96aac40c3f496050de15232b3a168f289c58e572b2e72d7c212ced3accd4da99ec87dff9122f93f1b63c5f3ecf8d2bd998f61369a84ae4a273c997f6f89e1e5bdcd51814aaff91589d611dab741c52d2edc0910c6a2202b0f39bc10382672288af6aaad4f22817dc59d85e4688c810118659d1784593fcb6a94d8ee5702d937fc9b558f94f8d675e6969ca617d03fcc5ceaaedccce368c3f91ed6663d26ef5d6e16b0434b5f256bc09b5ec44df52aafee735711d9028955632117a51d7fefa0873ae9224f1bbc1fb64f3a0b2aed584873545ca94de2137ad7b0077ff7ab1d19eea79e807c70ed5d886b019a6b269c7e0d0e01b98ba4650cbe11667f8aa18c886426d57d7fb85771c204821ac8a577c54260dda4360be4e44a7a9b04db344a96f9441d14ec1f63f1037a665c77640e0dddc79ba33382e22ce5406374603cd6b7e4c5f4f78a8f475ab9ca93f1b52f81a3f70ba4408326f7216dfa5089bd3d8b545279d2042288b626ce0c892025bc79adc5bdc102258c5e25277751e2e79e1db30f44c5616b113c11d0d3e2843ca50e408c85c03dfa4790703f04235ac27a83c9642a42fa3bde1b81e6ceccf4fa6d3e2d131b64f060c1db1fe4ebe70c5416871ba0bff8dc8e69564a39c69948eba93f14fb52f3066537aeff14324c6836c9ce241aca6044a2945a76f6536366a4fa3c64d07d124b9c4b4930414a9ac3b5e978f5ce52591e134f8c13d1fa7bd530cda9651b4ea18bf39500c1887369af0f0591ad9abdda2a7f231df73e99eb6fb4961eaabf05d8af056f074dde5668d5106a0649e41260705aa42e4e07e85656c970fce59ea5479d60854d4d133e7dd4c8a59f5b0da44c6735192c0403c02c032b25301419e0d1fe32956079399ddf35ed7365177543bc52251fcb7a88ec6a3ddaba5bb742707b60e6195c644e6a53520e1e8bcc0dde060aecf45c1a4650dfdb9b88a8b1a56d3b089c5b0a2bbba2df051b6c95c823bdc8b312e23fa0bc6acf4f99d618a0803dd67d36ce35c0df11b5f14bc4e13caf51e187fe3bac9495b0d8633975962a0fc9a62d280a575394ccb9a18c9357aa7a80c05daac2b60acc9f0fe7b8e0996669256332219ca5ef35e89f98551f6d309f0470f1a6afb5b710c37e939d684e0402f666280d929df4a74619e31bd1b00c515d865420f3cc8fb8e0f0d3fbace81357e5ccec14c0b1ed5f6d67e1f755f8610b7323c755b7f60f519559457a406be2bbeb49827319fe767f9ec4083875bc295937f4bd1e958763f3a0f95699fc8143de10e6f0d4074bb0baec60cb7ab171407d376805ef2e74152fe25c088290c182d8b21f8931e315ca1497d99d1927dcfa2b78725e905382d83744c304c194195b86e5c0ee3f710767170d4cb7eeb78928e5469f428e73df0593c196f19759046ec16f8edccf8fabec99b90b9bdebd3efb5551c3e20c438c3d2261c1b30ecbc16bc6df70201f86e19bf5b3ac64fe40fc39256202f29c77e7dfb6cf318a4294346982930ad52855afc9e95c2bb55d6b8d68ce633b09bc670993470aacbddd5835808964a923a069230dda53a3a6bc73a2b665b004df3ca0d383e7db4398aea0ba14afadff165c56787f83ba44684b0bed05a09616c8a690103c106a0e789f561f7b2f31e6fa2c25e365b95b7609c0a04565563f8041940355539910422a3b76960fe6c5d4c88a3c7b8753acb625ae21ebcf27241954a35de8188a419a04c2493cf6dbfc77a4f3f1ccbc75167ab17827ab8f9e4337e60d0beb9053824b27714a6fcc9960a6865cead72e70e713a40f2326124cc87a7bd12ba9f23c7895a623866ee469915a5f3e166e47e00166dc20a494e5298f9283035f269e05c502463a16e17d76fcdf39c0d138c6f16bc07c4f24d1e3ba641b0911d5e9447ac1bf652bf4969c327590631414bb9d6001ab38513502b00049c254e55674efadea3a5c8756da0cdcc9e3257be190096b867398b81cd15a18209ea5c6110d8942024ee2d19910effc07be235b4384b882294e2a4a4f6271d9b68606edf9b59c46aa2f71b6a9b39d4b222b950146f0b5c001f13a7f34d7a183098c2980814ccd1cadf231651a04a6bb70a78d6da1d467b74f49d37a7e73952dd0ba953a7a54bf5c6f6c14adf96b8a9f85330ced59bba57cb44ec5d9e38aec03016695b4d0000710ccef9534d1a5fec46b52ab5fe7f6bd891615afce00819a5ddbefebb3c0eea68ca30628703aff1acaea7ed2f40ac63eac527cf1fdc33ec6c3153e6eaca0d7cb88875d58d6549293534941ea98bcc183fe855c9d2269efeceef5589ca7a051ddfe21b4ba0312a0c98f716ae1dac7f169a25a4e389d838fff6edfbc809d62c146d89d11b62dec8553ed22f6c6fa75daf6e56eb7ac4e5e02df5337107b8a64d7ccc32fe72b8280cfecd582da2770100790efe951ece5585f194d50016835d5c9d7900499a0db3a48874e821fe87ff900d08761153d3c521fa43cd1384d1d7edde5d2c6c7e82999faa3c714cae7bb1ee00e1bd2782db4f35fc1c920c6c81043ac54b6bede893c6ff270b1d7c9f0d22f5854b3c7f19eb720a1cc22debff509470081fe241bd8f80af65c96d47fe3dc7f7d64bc07547e501cc99d5e02d08bdddf9a1ac0f77aee3b6d8fd7276a9c9b5983ce47b39b2c6d7bfc67de5bcdc5131641aefefc942c8024914e587d485596b316e831df65fdd55e98f8ca5822f56e410165f72fa5a0884e7e0105fb4d187c51d528b2b1991a60dafed040b8082b079ce4ba55b8a5d3e2a0e5fa3455e39b258f450237cd6f6739618530d03698d7bf7ee500b57a2a46d842bf643ce331767c4ac6de355e049c52bdac9460a7ed28e6fa8d8242d2d643e6d64d421bacfbf59391a137600e20f012378c0bd3594e1bb8e070ba26b94a442ed66891aae3f5b5c80e00f96d55a8f95ebe131176793e0149711ffc7401a6f856b8bcc65c3dca6b2d96ddafb7d048f795576ca0242d516aba5e313edad3291b0277bba66922910fbee5988516ce0ebd53d2c65993d88d00506c598bde13a231613e21fb2b49ad7924fa0cff38141243fa80a52bab336c330857a2bc75d5e58d6e0f5db2c2b4d6f4e978073f1149ac979e4c8d45c41b3abcc41c29a1b03a0ef1f0b56c912389f9f3c3c45d68b9da1443f64c90d1e82aad8042c6e023015881296b4b024ec042a179b187704ea30fc862e35bd1bfd31c9fb113df0b0cb7d270bac93e420082839db3235cd48368b189829244d92c9553bc767ff8686dfa8ff64c73920778e15633758cc9e800aa100a362a873682dffae45deb9ed8d88a71ef49d499079b60f99926814272ef84d616e335a9d761032e751789ab74c2827d9730202f520f6839f83825d83e3f5aad4c57d0f6d67c7089e9591f0191ed3cd5ad98f9c2c5360b6ba27ed280c4ad3fa50540e981e0ee1d0a09a2826cfa8dfe5c2fea3c057702c280b34f0f88d406797c2964dd8ad9fb10c58462d2c912220009c39bd20bdc656c2eb7d61548ea70544c677b6ced1c4bedf14e0c0905735b644d069567879be94e3180433358ae1202665657880344cca6e3370fbbb3ec677d49b050b1625cd7ba21341c03e808bebe50ecd095c80f82b88baea54f08162a3b0d856c23773f0e8178eee206c5faa03a6af72fadf8c3d7ae792df3f371c99d7ad457e278eaec7365107061a7b17d0d378e0d4106812e68424d217f210ec5b5c15a19fdba82ebf30dfe2309a82ae3d5d1a26eaa68ac3a2568b754b019969365f9a4f17a2d3887815f653fb2681ffbff43e5ce0c570dd43bb0496decf0f27c39aee59e5bf9a6483d2be8763639601cb25d4653c542a8a69c2f13ea6ead40c6aedaa2972cdc9931421ea2d442476a4e29f10fc6176d99656f3efa2e08426ed3c884f77ec9ba8de847959a6b73071605ab70769101160cb2461cbb64899ad51523e7e8f4c466e6b606817dd72087c3f2feb12ae04f9d3ea721f3f5ddf9382c89b9f9cd41dd85025a320cb27e7269ad70cf0450517bb9b34928392ef930a8e6e9fcf9bc93637bb04684194ff3df7a63c06cad43373a3e4aa9bf8f05c28440b2be34e0a749d7804981b0ece00145dbf5922d664bddac4293ae8047ca75a3011198dd65c8efe13c6f241b7c9c2de17901963e7603db1c0263bb667c44c22b5040f88570322ea3a55fa834344970ee2f62e1010fc4c8d304d1074b6ba0ffffe2ae239e30f57774f494b70ed5274c0f46ec80215c26f96823b315a1cc07fbf344d9588bfe9ea8bfda32cf70dbe0780188071b126e8938684a9b7b06529e3deddf02a40308a061ce068e0e75c7d00b74116fdc8ea0114dd24f3fe1c7cc05dfa9e99ae5f30774c5b35a79a41450aacbf341239cde056049aecba14d47245bbf8778dc09d51d0be6b802549d9859b9722d8957f9ec624f141c67bf7ced67505eae9267cb3eb55e94e89c9b2164e0c421c56c49717c85cd78dea08fcb3a3b9b85514df21fce3bebb8012381a12ff935ac7b68fcb2d3475df89cd90046d394aa8f2152429f1112cde65306eed72177eda56addcd4e2f137e743425d3c7ea8156c991fdf418a35b29c28255f0c4154a8faaa82ac584f5419ea0df212eba20c52ad765a5da5279c54da127a1ab3475070bba64133fd89c70cdabffccae6d7fba48cd68f30440caf70ce5310e93d8a6eec9d5774efbb4014a5b65a377ac2a3e88b13eb9b5d81eb7", 0xe00}], 0x1}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)="884ab35c2d89e7c2d51585d302aee17435adfb002e8e505b99029b1f906ce043a2d132", 0x23}], 0x1}}, {{&(0x7f0000001600)={0xa, 0x4e20, 0x4, @local, 0x80000000}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000008f40)}, {0x0}], 0x2}}], 0x5, 0xd0)
r1 = socket(0x2a, 0x2, 0x0)
accept$packet(r1, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002ac0)='nl80211\x00')
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000002c00)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002b80)={0x1c, r2, 0x0, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x44)

09:45:01 executing program 5:
r0 = socket(0x0, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

[ 2589.307429][   T28] audit: type=1804 audit(1599558301.281:1928): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2589.414018][   T28] audit: type=1804 audit(1599558301.391:1929): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:01 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:01 executing program 4:
r0 = socket(0x2, 0x2, 0x0)
getsockopt$inet_dccp_int(r0, 0x88, 0x0, 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000080)={0x5, 0x2, 0x1f})
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000000))

09:45:01 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:01 executing program 0:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x53b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'vlan\x00'}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

09:45:01 executing program 5:
r0 = socket(0xa, 0x0, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:01 executing program 1:
recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_cache\x00')
preadv(r0, &(0x7f00000017c0), 0x1a5, 0x3f74, 0x0)

09:45:01 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:01 executing program 1:
syz_io_uring_setup(0x3372, &(0x7f0000000080), &(0x7f0000818000/0x1000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), 0x0)
pkey_mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff)
pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0xffffffffffffffff)

09:45:01 executing program 0:
r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0)

09:45:01 executing program 5:
r0 = socket(0xa, 0x0, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

[ 2589.666759][   T28] audit: type=1804 audit(1599558301.651:1930): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:01 executing program 0:
perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000140)={<r0=>0xffffffffffffffff}, 0x0)
setns(r0, 0x0)

[ 2589.752257][   T28] audit: type=1804 audit(1599558301.731:1931): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:01 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2589.797803][T17405] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2589.931827][   T28] audit: type=1804 audit(1599558301.911:1932): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:02 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:02 executing program 5:
r0 = socket(0xa, 0x0, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:02 executing program 0:
r0 = syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x2, 0x2)
ioctl$VIDIOC_G_PARM(r0, 0x80805659, 0x0)

09:45:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:02 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:02 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:02 executing program 5:
socket(0xa, 0x5, 0x0)
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2590.661528][T17466] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:02 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:02 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:02 executing program 5:
socket(0xa, 0x5, 0x0)
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:03 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})

09:45:03 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:03 executing program 5:
socket(0xa, 0x5, 0x0)
sendto$l2tp6(0xffffffffffffffff, &(0x7f0000000000)="f8", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:03 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:03 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:03 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2591.495147][   T28] kauditd_printk_skb: 1 callbacks suppressed
[ 2591.495157][   T28] audit: type=1804 audit(1599558303.471:1934): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:03 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001800dd8dff00000000000000020010002000fe020000000008000400", @ANYRES32=r3, @ANYBLOB], 0x24}}, 0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 2591.588996][T17525] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:03 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:03 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:03 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:04 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})

09:45:04 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:04 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:04 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

09:45:04 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20)

09:45:04 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

[ 2592.378966][   T28] audit: type=1804 audit(1599558304.361:1935): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:04 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, 0x0, 0x0)

09:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0)

[ 2592.458764][T17587] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:04 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, 0x0, 0x0)

09:45:04 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:05 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})

09:45:05 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:05 executing program 5:
r0 = socket(0xa, 0x5, 0x0)
sendto$l2tp6(r0, &(0x7f0000000000)="f8", 0x1, 0x0, 0x0, 0x0)

09:45:05 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)

09:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:05 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:05 executing program 5:
fanotify_init(0x2, 0x0)

[ 2593.324523][   T28] audit: type=1804 audit(1599558305.301:1936): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2593.357925][T17628] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:05 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)='\n', 0x1)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
recvmmsg(r2, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/82, 0x52}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=<r3=>0x0)
timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

[ 2593.514449][    C0] net_ratelimit: 24605 callbacks suppressed
[ 2593.514461][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2593.515407][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2593.520630][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2593.532809][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2593.544566][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2593.556875][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2593.568386][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2593.580519][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2593.592338][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2593.604615][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
09:45:05 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)

09:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:05 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:06 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:06 executing program 4:
r0 = socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r2=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r1}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r2, 0x0, 0x0], 0x3, {r1}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r3 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r1}}, 0x58)
sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2}, 0x2000000c, &(0x7f0000000080)={0x0}}, 0xa00)

09:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:06 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2594.239238][   T28] audit: type=1804 audit(1599558306.221:1937): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2594.255668][T17696] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:06 executing program 5:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89a1, &(0x7f00000000c0)={'syztnl1\x00', 0x0})

09:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
iopl(0x9)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:06 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x2, 0x0, 0x0)
r0 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

09:45:06 executing program 5:
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat(r0, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0/file0\x00')
unlinkat(r0, &(0x7f00000000c0)='./file0\x00', 0x200)

09:45:06 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:06 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:06 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:06 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:06 executing program 5:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080)='devlink\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/net\x00')
sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x16e}, 0x0)

09:45:07 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:07 executing program 5:
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00')
r0 = getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x8}, 0x0, 0xbf8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/user\x00')
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvme-fabrics\x00', 0x222500, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c80, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)

09:45:07 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[ 2595.112219][   T28] audit: type=1804 audit(1599558307.091:1938): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2595.150734][T17766] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:07 executing program 5:
write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)

09:45:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:07 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:07 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:07 executing program 5:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000))
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400019)
write$cgroup_subtree(r0, &(0x7f00000005c0)={[{0x0, 'memory', 0xff}]}, 0xfdef)

09:45:07 executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:07 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r0=>0x0, <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r0, r1+60000000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:07 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:08 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r0=>0x0, <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r0, r1+60000000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:08 executing program 5:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0x125e, 0x531000)

[ 2596.029984][   T28] audit: type=1804 audit(1599558308.011:1939): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:08 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xc)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x2, 0x0, {0x4, 0x7ff}}, 0x28)

[ 2596.079530][T17818] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:08 executing program 1:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r0=>0x0, <r1=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r0, r1+60000000})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:08 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049", 0xe, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:08 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:08 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:08 executing program 5:
r0 = socket(0x22, 0x80002, 0x2)
accept$alg(r0, 0x0, 0x0)

09:45:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, 0x0)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:08 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:08 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

09:45:08 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, 0x0)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2596.950273][T17875] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2596.967270][   T28] audit: type=1804 audit(1599558308.951:1940): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:09 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

09:45:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:09 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:09 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, 0x0)
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2597.138582][   T28] audit: type=1804 audit(1599558309.121:1941): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2597.315909][   T28] audit: type=1804 audit(1599558309.301:1942): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:09 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:09 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

09:45:09 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:09 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:09 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:09 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x0, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:09 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:09 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

09:45:09 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2597.727207][   T28] audit: type=1804 audit(1599558309.711:1943): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:09 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)

09:45:09 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:09 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{&(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2597.857426][   T28] audit: type=1804 audit(1599558309.841:1944): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2597.937670][T17940] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2598.014822][   T28] audit: type=1804 audit(1599558310.001:1945): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:10 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:10 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:10 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

09:45:10 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:10 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
socket$qrtr(0x2a, 0x2, 0x0)

[ 2598.528089][    C0] net_ratelimit: 23214 callbacks suppressed
[ 2598.528101][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2598.532773][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2598.534271][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2598.546524][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2598.558190][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2598.570392][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2598.582091][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2598.594401][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2598.605914][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2598.618094][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
09:45:10 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2598.682824][   T28] audit: type=1804 audit(1599558310.661:1946): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:10 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)

09:45:10 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:10 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2598.834666][   T28] audit: type=1804 audit(1599558310.821:1947): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:10 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r1, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000480)='0', 0x1)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

[ 2598.875725][T17985] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 2598.973020][   T28] audit: type=1804 audit(1599558310.951:1948): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:11 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a0008", 0x15, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}], 0x1, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:11 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:11 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r1, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

09:45:11 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:11 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:11 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:11 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

09:45:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}], 0x1, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

[ 2599.628521][   T28] audit: type=1804 audit(1599558311.611:1949): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2599.753478][T18035] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:11 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:11 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}], 0x1, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:11 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

09:45:12 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x0, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:12 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

09:45:12 executing program 0:
bind$alg(0xffffffffffffffff, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{0x0, 0x0, &(0x7f0000001700)=[{0x0}], 0x1}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:12 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:12 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

09:45:12 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:12 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{0x0, 0x0, 0x0}, 0x401}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:12 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:12 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r0=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r0, 0x4)

[ 2600.638363][T18082] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:12 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:13 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{&(0x7f0000000280)=@phonet, 0x80, &(0x7f0000000200)}, 0x1000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:13 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0), 0x4)

09:45:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:13 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:13 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:13 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:13 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0), 0x4)

09:45:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:13 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2601.511471][T18130] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:13 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0), 0x4)

09:45:13 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:13 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:13 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0), 0x4)

09:45:13 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:13 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:14 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000", 0x19, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:14 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:14 executing program 5:
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

09:45:14 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:14 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:14 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f0000000200)}, 0x1000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:14 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

[ 2602.322955][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 2602.322966][   T28] audit: type=1804 audit(1599558314.301:1959): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:14 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2602.453789][   T28] audit: type=1804 audit(1599558314.431:1960): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2602.479012][T18208] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:14 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

[ 2602.581895][   T28] audit: type=1804 audit(1599558314.561:1961): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:15 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:15 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:15 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

09:45:15 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:15 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x0, 0x0)

09:45:15 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:15 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840)={<r1=>0x0, <r2=>0x0})
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, &(0x7f0000002880)={r1, r2+60000000})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:15 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2603.307463][   T28] audit: type=1804 audit(1599558315.291:1962): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:15 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0xd0, 0x1d, 0x0, 0x0, 0x0, 0x4100, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x7, 0x3ff}, 0x0, 0x3, 0xffffffffffffffff, 0x0)

[ 2603.398736][T18253] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:15 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2603.468699][   T28] audit: type=1804 audit(1599558315.451:1963): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2603.533999][    C0] net_ratelimit: 22690 callbacks suppressed
[ 2603.534011][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2603.534173][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2603.540096][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2603.552326][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2603.564310][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2603.576624][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2603.599018][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2603.600345][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2603.612075][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2603.624289][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2603.751690][   T28] audit: type=1804 audit(1599558315.731:1964): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:16 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:16 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:16 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

09:45:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:16 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480)={0x0, <r1=>0x0}, 0x8)
r2 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r2, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000014c0)=r1, 0x4)

[ 2604.130157][   T28] audit: type=1804 audit(1599558316.111:1965): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:16 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:16 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r1, 0x0, 0x0)
write$6lowpan_enable(r1, &(0x7f0000000480)='0', 0x1)
perf_event_open(&(0x7f00000005c0)={0x3, 0x70, 0x1f, 0x20, 0x7, 0x6, 0x0, 0xae, 0xdd020, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000580), 0xe}, 0x800, 0x80, 0x7fffffff, 0x6, 0x2, 0xffffff1e, 0x2}, 0xffffffffffffffff, 0xc, r0, 0x5)

[ 2604.258732][T18301] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080), 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2604.328183][   T28] audit: type=1804 audit(1599558316.311:1966): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2604.469961][   T28] audit: type=1804 audit(1599558316.451:1967): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:16 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c0000000", 0x1b, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:16 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r0, 0x0, 0x0)
write$6lowpan_enable(r0, &(0x7f0000000480)='0', 0x1)

09:45:16 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:16 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:16 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:17 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})
write$6lowpan_enable(r0, 0x0, 0x0)

09:45:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

[ 2605.098344][   T28] audit: type=1804 audit(1599558317.081:1968): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:17 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:17 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000004c0)={0xa0, 0x320, 0x800, 0x480, 0x8, 0x0, 0x10, 0x0, {0x3f, 0x3}, {0x8000000}, {0x8, 0x40}, {0x2, 0x1f}, 0x3, 0x100, 0x21, 0x8000, 0x0, 0x9593, 0x4, 0x0, 0x0, 0x0, 0xfffffffa, 0xffff0001, 0x2, 0x4, 0x0, 0x7})

[ 2605.141334][T18341] netlink: 44371 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32", 0x8)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:17 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80})

09:45:17 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:17 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:17 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
r1 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:17 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x0, 0x0)

09:45:17 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:17 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)

[ 2605.896750][T18376] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e007f394b51fcf433f766b0b846c9374c74f46d3c"], 0x1c}}, 0x0)

09:45:18 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400", 0xc)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:18 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x1, 0x0, 0x0, 0x0, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)

09:45:18 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

[ 2606.124982][T18399] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:18 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)

09:45:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2606.277783][T18417] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:18 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
r1 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:18 executing program 5:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)

09:45:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, 0x0, &(0x7f00000002c0))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:18 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

[ 2606.491703][T18425] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:18 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

09:45:18 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:18 executing program 5:
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001480), 0x8)

09:45:18 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:18 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:18 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0), &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
syz_io_uring_setup(0x1b46, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000000))
r1 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:19 executing program 5:
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)

09:45:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2606.974319][T18450] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:19 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:19 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, r0}, 0x40)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x8916, &(0x7f0000000000))

09:45:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2607.175472][T18477] netlink: 41455 bytes leftover after parsing attributes in process `syz-executor.3'.
09:45:19 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, r0}, 0x40)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x8916, &(0x7f0000000000))

09:45:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:19 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:19 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200)
r5 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0)

09:45:19 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:19 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

09:45:19 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d0400000028", 0xf)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2607.887649][   T28] kauditd_printk_skb: 9 callbacks suppressed
[ 2607.887660][   T28] audit: type=1804 audit(1599558319.871:1978): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:19 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, r0}, 0x40)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x8916, &(0x7f0000000000))

09:45:19 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:20 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:20 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

[ 2608.094630][   T28] audit: type=1804 audit(1599558320.081:1979): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:20 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x2, 0x4, 0x3, 0x21f}, 0x40)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0x100, 0x0, 0x0, r0}, 0x40)
r1 = socket(0xa, 0x2, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r1, 0x8916, &(0x7f0000000000))

09:45:20 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:20 executing program 5:
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self\x00', 0x0, 0x0)
pidfd_send_signal(r0, 0x0, &(0x7f0000000040)={0x11, 0x0, 0x6}, 0x0)

[ 2608.253631][   T28] audit: type=1804 audit(1599558320.231:1980): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:20 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

[ 2608.389080][   T28] audit: type=1804 audit(1599558320.371:1981): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2608.544169][    C0] net_ratelimit: 24215 callbacks suppressed
[ 2608.544182][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2608.544222][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2608.550289][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2608.562454][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2608.574191][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2608.586522][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2608.598060][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[ 2608.610123][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
[ 2608.621825][    C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:4e:80:33:19:29:d7, vlan:0)
[ 2608.634175][    C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)
09:45:20 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)

09:45:20 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:20 executing program 2:
socket$netlink(0x10, 0x3, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r0, &(0x7f0000000380)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a9, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r1, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32=0x0, @ANYBLOB="000001868000d6fa92343eb2198f8c027ccefbef5b5180b70e160e86513a29408a38e7d7159835389e4b6cf004f1e278517a1b49a141f517d4bb8a7b29e317a7e37beb7a35c9e027223275c376cfeddc05000000000000"], 0x48}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:20 executing program 5:
r0 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000040)={'ip6_vti0\x00', @ifru_mtu=0x531100})
r1 = socket$inet6(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x200008ec, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)

09:45:20 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:20 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:20 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x6, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

[ 2608.787638][   T28] audit: type=1804 audit(1599558320.771:1982): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:20 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:20 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:20 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
perf_event_open(&(0x7f0000001200)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:21 executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
clock_gettime(0x0, &(0x7f0000002840))
recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

09:45:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$inet(0x2, 0x6, 0x0)
r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
r1 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3)
r4 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0)
r6 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82)
ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6)
r7 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r8 = ioctl$LOOP_CTL_GET_FREE(r7, 0x4c82)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r8)
ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0x0)

09:45:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:21 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:21 executing program 4:
socket(0x2, 0x3, 0x5)
syz_io_uring_setup(0x6e55, &(0x7f0000001300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000001380), 0x0)
syz_io_uring_setup(0x0, &(0x7f0000001400), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, &(0x7f00000014c0))
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
getpid()
clone3(&(0x7f0000001800)={0x0, 0x0, &(0x7f00000016c0)=<r1=>0x0, &(0x7f0000001700), {0x17}, &(0x7f00000018c0)=""/46, 0x2e, &(0x7f0000001900)=""/66, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x6, {r0}}, 0x58)
clone3(&(0x7f0000001640)={0x0, &(0x7f00000013c0), &(0x7f0000001480), &(0x7f0000001500), {0x7}, &(0x7f0000001540)=""/75, 0x4b, &(0x7f00000015c0)=""/60, &(0x7f0000001600)=[r1, 0x0, 0x0], 0x3, {r0}}, 0x58)
r2 = syz_io_uring_setup(0x6b52, &(0x7f0000000640), &(0x7f0000000000/0x11000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000400)=[0xffffffffffffffff], 0x1)
clone3(&(0x7f0000001280)={0x80000300, &(0x7f0000000040), &(0x7f0000000100), &(0x7f0000000140), {0x21}, &(0x7f0000000180)=""/105, 0x69, &(0x7f0000000200)=""/4096, &(0x7f0000001200)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3, {r0}}, 0x58)
socket$qrtr(0x2a, 0x2, 0x0)

09:45:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

09:45:21 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

[ 2609.691673][   T28] audit: type=1804 audit(1599558321.671:1983): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
09:45:21 executing program 5:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0)

09:45:21 executing program 3:
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffbf)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000010", 0x5, 0x0, 0x0, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a2a, 0x600, 0x0, 0x6f765f6f191b9a4)

09:45:21 executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)
getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
r4 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x20}}, 0x0)

09:45:21 executing program 0:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000b40)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0xfec8)
recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0xa, &(0x7f0000000500)=[{&(0x7f0000001bc0)=""/102392, 0x18ff8}], 0x1}}], 0x1, 0x0, 0x0)

[ 2609.888868][   T28] audit: type=1804 audit(1599558321.871:1984): pid=24533 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="loop0" dev="sda1" ino=16378 res=1 errno=0
[ 2610.210875][    C1] ==================================================================
[ 2610.218982][    C1] BUG: KCSAN: data-race in br_handle_frame_finish / br_handle_frame_finish
[ 2610.227560][    C1] 
[ 2610.229883][    C1] write to 0xffff888098d0e148 of 8 bytes by interrupt on cpu 0:
[ 2610.237505][    C1]  br_handle_frame_finish+0x942/0xa10
[ 2610.242942][    C1]  br_nf_hook_thresh+0x184/0x1c0
[ 2610.247876][    C1]  br_nf_pre_routing_finish_ipv6+0x4ab/0x4c0
[ 2610.253846][    C1]  br_nf_pre_routing_ipv6+0x1ed/0x280
[ 2610.259206][    C1]  br_nf_pre_routing+0x4d6/0xb40
[ 2610.264129][    C1]  br_handle_frame+0x413/0xb10
[ 2610.268894][    C1]  __netif_receive_skb_core+0xea9/0x1da0
[ 2610.274540][    C1]  __netif_receive_skb+0x52/0x1b0
[ 2610.279556][    C1]  process_backlog+0x29f/0x4a0
[ 2610.284305][    C1]  napi_poll+0x178/0x4f0
[ 2610.288538][    C1]  net_rx_action+0x1ba/0x530
[ 2610.293212][    C1]  __do_softirq+0x198/0x360
[ 2610.297720][    C1]  run_ksoftirqd+0x2f/0x60
[ 2610.302123][    C1]  smpboot_thread_fn+0x347/0x530
[ 2610.307048][    C1]  kthread+0x20d/0x230
[ 2610.311108][    C1]  ret_from_fork+0x1f/0x30
[ 2610.315504][    C1] 
[ 2610.317839][    C1] read to 0xffff888098d0e148 of 8 bytes by interrupt on cpu 1:
[ 2610.325370][    C1]  br_handle_frame_finish+0x930/0xa10
[ 2610.330746][    C1]  br_nf_hook_thresh+0x184/0x1c0
[ 2610.335670][    C1]  br_nf_pre_routing_finish_ipv6+0x4ab/0x4c0
[ 2610.341644][    C1]  br_nf_pre_routing_ipv6+0x1ed/0x280
[ 2610.347002][    C1]  br_nf_pre_routing+0x4d6/0xb40
[ 2610.351924][    C1]  br_handle_frame+0x413/0xb10
[ 2610.356673][    C1]  __netif_receive_skb_core+0xea9/0x1da0
[ 2610.362290][    C1]  __netif_receive_skb+0x52/0x1b0
[ 2610.367300][    C1]  process_backlog+0x29f/0x4a0
[ 2610.372055][    C1]  napi_poll+0x178/0x4f0
[ 2610.376313][    C1]  net_rx_action+0x1ba/0x530
[ 2610.380909][    C1]  __do_softirq+0x198/0x360
[ 2610.385398][    C1]  run_ksoftirqd+0x2f/0x60
[ 2610.389800][    C1]  smpboot_thread_fn+0x347/0x530
[ 2610.394727][    C1]  kthread+0x20d/0x230
[ 2610.398784][    C1]  ret_from_fork+0x1f/0x30
[ 2610.403179][    C1] 
[ 2610.405490][    C1] Reported by Kernel Concurrency Sanitizer on:
[ 2610.411630][    C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.9.0-rc4-syzkaller #0
[ 2610.419781][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2610.429827][    C1] ==================================================================
[ 2610.437894][    C1] Kernel panic - not syncing: panic_on_warn set ...
[ 2610.444467][    C1] CPU: 1 PID: 16 Comm: ksoftirqd/1 Not tainted 5.9.0-rc4-syzkaller #0
[ 2610.452597][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 2610.462636][    C1] Call Trace:
[ 2610.465937][    C1]  dump_stack+0x10f/0x19d
[ 2610.470265][    C1]  panic+0x207/0x64a
[ 2610.474162][    C1]  ? vprintk_emit+0x44a/0x4f0
[ 2610.478831][    C1]  kcsan_report+0x684/0x690
[ 2610.483330][    C1]  ? kcsan_setup_watchpoint+0x41e/0x4a0
[ 2610.488864][    C1]  ? br_handle_frame_finish+0x930/0xa10
[ 2610.494431][    C1]  ? br_nf_hook_thresh+0x184/0x1c0
[ 2610.499526][    C1]  ? br_nf_pre_routing_finish_ipv6+0x4ab/0x4c0
[ 2610.505845][    C1]  ? br_nf_pre_routing_ipv6+0x1ed/0x280
[ 2610.511381][    C1]  ? br_nf_pre_routing+0x4d6/0xb40
[ 2610.516479][    C1]  ? br_handle_frame+0x413/0xb10
[ 2610.521406][    C1]  ? __netif_receive_skb_core+0xea9/0x1da0
[ 2610.527224][    C1]  ? __netif_receive_skb+0x52/0x1b0
[ 2610.532427][    C1]  ? process_backlog+0x29f/0x4a0
[ 2610.537349][    C1]  ? napi_poll+0x178/0x4f0
[ 2610.541753][    C1]  ? net_rx_action+0x1ba/0x530
[ 2610.546503][    C1]  ? __do_softirq+0x198/0x360
[ 2610.551170][    C1]  ? run_ksoftirqd+0x2f/0x60
[ 2610.555748][    C1]  ? smpboot_thread_fn+0x347/0x530
[ 2610.560848][    C1]  ? kthread+0x20d/0x230
[ 2610.565083][    C1]  ? ret_from_fork+0x1f/0x30
[ 2610.569689][    C1]  kcsan_setup_watchpoint+0x41e/0x4a0
[ 2610.575074][    C1]  br_handle_frame_finish+0x930/0xa10
[ 2610.580517][    C1]  ? nf_hook_slow+0xfd/0x170
[ 2610.585101][    C1]  ? tsan.module_ctor+0x10/0x10
[ 2610.589951][    C1]  br_nf_hook_thresh+0x184/0x1c0
[ 2610.594882][    C1]  ? tsan.module_ctor+0x10/0x10
[ 2610.599728][    C1]  br_nf_pre_routing_finish_ipv6+0x4ab/0x4c0
[ 2610.605694][    C1]  ? tsan.module_ctor+0x10/0x10
[ 2610.610541][    C1]  br_nf_pre_routing_ipv6+0x1ed/0x280
[ 2610.615899][    C1]  ? br_nf_pre_routing_ipv6+0x280/0x280
[ 2610.621468][    C1]  br_nf_pre_routing+0x4d6/0xb40
[ 2610.626489][    C1]  ? brnf_device_event+0x1a0/0x1a0
[ 2610.631598][    C1]  br_handle_frame+0x413/0xb10
[ 2610.636420][    C1]  ? packet_rcv+0x3e2/0xa70
[ 2610.640918][    C1]  ? tsan.module_ctor+0x10/0x10
[ 2610.645764][    C1]  ? packet_sock_destruct+0xc0/0xc0
[ 2610.650954][    C1]  ? br_handle_frame_dummy+0x10/0x10
[ 2610.656229][    C1]  __netif_receive_skb_core+0xea9/0x1da0
[ 2610.661912][    C1]  ? ipv6_rcv+0x88/0x140
[ 2610.666149][    C1]  __netif_receive_skb+0x52/0x1b0
[ 2610.671163][    C1]  process_backlog+0x29f/0x4a0
[ 2610.675916][    C1]  napi_poll+0x178/0x4f0
[ 2610.680147][    C1]  net_rx_action+0x1ba/0x530
[ 2610.684755][    C1]  __do_softirq+0x198/0x360
[ 2610.689257][    C1]  ? ksoftirqd_should_run+0x20/0x20
[ 2610.694465][    C1]  run_ksoftirqd+0x2f/0x60
[ 2610.698871][    C1]  smpboot_thread_fn+0x347/0x530
[ 2610.703796][    C1]  ? cpu_report_death+0x80/0x80
[ 2610.708638][    C1]  kthread+0x20d/0x230
[ 2610.712695][    C1]  ? cpu_report_death+0x80/0x80
[ 2610.717541][    C1]  ? kthread_blkcg+0x80/0x80
[ 2610.722118][    C1]  ret_from_fork+0x1f/0x30
[ 2610.727760][    C1] Kernel Offset: disabled
[ 2610.732092][    C1] Rebooting in 86400 seconds..